Edit tour

Windows Analysis Report
https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

Overview

General Information

Sample URL:	https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
Analysis ID:	1544169
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Uses bcdedit to modify the Windows boot settings

Binary contains a suspicious time stamp

Checks if the current process is being debugged

Contains functionality to call native functions

Contains functionality to dynamically determine API calls

Creates Visual Basic Runtime Dlls

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Drops files with a non-matching file extension (content does not match file extension)

Enables debug privileges

Found dropped PE file which has not been started or loaded

May sleep (evasive loops) to hinder dynamic analysis

PE file contains executable resources (Code or Archives)

PE file contains sections with non-standard names

PE file does not import any functions

PE file overlay found

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Stores files to the Windows start menu directory

Uses taskkill to terminate processes

Yara detected Keylogger Generic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 3432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1936,i,14282950788006197663,4562122908551355024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6664 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3140 --field-trial-handle=1936,i,14282950788006197663,4562122908551355024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

rundll32.exe (PID: 7556 cmdline: C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding MD5: EF3179D498793BF4234F708D3BE28633)

NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe (PID: 7664 cmdline: "C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe" MD5: 29043DC66D7FBA46B72777D0608BDF71)

NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe (PID: 7712 cmdline: "C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe" MD5: 29043DC66D7FBA46B72777D0608BDF71)

bcdedit.exe (PID: 7820 cmdline: "bcdedit" /set {current} bootstatuspolicy ignoreallfailures MD5: 74F7B84B0A547592CA63A00A8C4AD583)

conhost.exe (PID: 7828 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7868 cmdline: TaskKill /IM Watchdog.exe /F MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7880 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7964 cmdline: TaskKill /IM RestartApp.exe /F MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7972 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8036 cmdline: TaskKill /IM NTAS 3000X /F MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8044 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8096 cmdline: TaskKill /IM ReadWeight.exe /F MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8104 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

LogonUI.exe (PID: 4888 cmdline: "LogonUI.exe" /flags:0x4 /state0:0xa3ff7055 /state1:0x41c64e6d MD5: 893144FE49AA16124B5BD3034E79BBC6)

LockApp.exe (PID: 3568 cmdline: "C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca MD5: DD4966999D7DB48046CE6D12AF1F70F3)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\nsq53E3.tmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security

Sigma Signatures

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: "C:\Windows\system32\NSIS.Library.RegTool.v3.{760CC695-7C3A-465F-9E6C-D3931A64AC97}.exe" /S, EventID: 13, EventType: SetValue, Image: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe, ProcessId: 7712, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\NSIS.Library.RegTool.v3

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\Program Files (x86)\NIR Technology Analysis Software\Watchdog.exe

Avira: detection malicious, Label: TR/Spy.Gen

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49710 version: TLS 1.2

Source:	Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: api-ms-win-crt-locale-l1-1-0.dll.17.dr
Source:	Binary string: C:\SoftwareLocalPC\CereaDll\CereaDllOriginal2022 - CheckHundFile\Release\Cerea.pdbC source: Cerea.dll.17.dr
Source:	Binary string: api-ms-win-core-handle-l1-1-0.pdb source: api-ms-win-core-handle-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-sysinfo-l1-1-0.pdbGCTL source: api-ms-win-core-sysinfo-l1-1-0.dll.17.dr
Source:	Binary string: ucrtbase.pdb source: ucrtbase.dll.17.dr
Source:	Binary string: api-ms-win-core-synch-l1-2-0.pdb source: api-ms-win-core-synch-l1-2-0.dll.17.dr
Source:	Binary string: C:\SoftwareLocalPC\CereaDll\CereaDllOriginal2022 - CheckHundFile\Release\Cerea.pdb source: Cerea.dll.17.dr
Source:	Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: api-ms-win-core-sysinfo-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-profile-l1-1-0.pdbGCTL source: api-ms-win-core-profile-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: api-ms-win-core-datetime-l1-1-0.dll.17.dr
Source:	Binary string: D:\_w\1\b\bin\amd64\_queue.pdb source: _queue.pyd.17.dr
Source:	Binary string: D:\_w\1\b\bin\amd64\_hashlib.pdb source: _hashlib.pyd.17.dr
Source:	Binary string: api-ms-win-crt-string-l1-1-0.pdbGCTL source: api-ms-win-crt-string-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-locale-l1-1-0.pdbGCTL source: api-ms-win-crt-locale-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-libraryloader-l1-1-0.pdbGCTL source: api-ms-win-core-libraryloader-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: api-ms-win-crt-environment-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: api-ms-win-crt-utility-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-handle-l1-1-0.pdbGCTL source: api-ms-win-core-handle-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: api-ms-win-core-timezone-l1-1-0.dll.17.dr
Source:	Binary string: D:\_w\1\b\bin\amd64\_ctypes.pdb source: _ctypes.pyd.17.dr
Source:	Binary string: api-ms-win-core-console-l1-1-0.pdbGCTL source: api-ms-win-core-console-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-console-l1-1-0.pdb source: api-ms-win-core-console-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-process-l1-1-0.pdb source: api-ms-win-crt-process-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-file-l1-1-0.pdb source: api-ms-win-core-file-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: api-ms-win-core-libraryloader-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-utility-l1-1-0.pdbGCTL source: api-ms-win-crt-utility-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-timezone-l1-1-0.pdbGCTL source: api-ms-win-core-timezone-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-synch-l1-2-0.pdbGCTL source: api-ms-win-core-synch-l1-2-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-process-l1-1-0.pdbGCTL source: api-ms-win-crt-process-l1-1-0.dll.17.dr
Source:	Binary string: hhctrl.pdb source: NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe, 00000011.00000002.1594508121.0000000002A14000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\_w\1\b\bin\amd64\_socket.pdb source: _socket.pyd.17.dr
Source:	Binary string: api-ms-win-core-datetime-l1-1-0.pdbGCTL source: api-ms-win-core-datetime-l1-1-0.dll.17.dr
Source:	Binary string: ucrtbase.pdbUGP source: ucrtbase.dll.17.dr
Source:	Binary string: api-ms-win-core-profile-l1-1-0.pdb source: api-ms-win-core-profile-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-file-l1-1-0.pdbGCTL source: api-ms-win-core-file-l1-1-0.dll.17.dr
Source:	Binary string: Can't Read Text FileCan't Open Text File.pdb.mdb%f.mdtAn Error OccurreduserbrationFile Method: SaveToBinFileSaving userbration to File...wbCan't Open Binary FileCan't Write Binary FileNo ErroruserbrationFile Method: ReadFromBinFileReading userbraiton From File...rbCan't Read Binary FileuserbrationFile Method: GetAverageAndStDeviationGetting Average and Standard Deviation Data...Do First DerivativeConstituentConstituent Name: %s source: Cerea.dll.17.dr
Source:	Binary string: api-ms-win-crt-environment-l1-1-0.pdbGCTL source: api-ms-win-crt-environment-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-string-l1-1-0.pdb source: api-ms-win-crt-string-l1-1-0.dll.17.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe HTTP/1.1Host: on-combine-data.s3.us-west-2.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KZdzvYaHPw644zO&MD=zyh75GoL HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KZdzvYaHPw644zO&MD=zyh75GoL HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: on-combine-data.s3.us-west-2.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: libffi-7.dll.17.dr, _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: libffi-7.dll.17.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: libffi-7.dll.17.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: libffi-7.dll.17.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: libffi-7.dll.17.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: libffi-7.dll.17.dr, _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: libffi-7.dll.17.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: LogonUI.exe, 0000001D.00000003.2203071590.0000020C2F38F000.00000004.00000020.00020000.00000000.sdmp, LogonUI.exe, 0000001D.00000002.2428817500.0000020C2F38F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.a.0/sTy
Source: LogonUI.exe, 0000001D.00000003.2203071590.0000020C2F38F000.00000004.00000020.00020000.00000000.sdmp, LogonUI.exe, 0000001D.00000002.2428817500.0000020C2F38F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.adobe.hotosh
Source: NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe, 0000000E.00000000.1416626041.000000000040A000.00000008.00000001.01000000.00000006.sdmp, NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe, 00000011.00000002.1593006457.000000000040A000.00000004.00000001.01000000.00000006.sdmp, chromecache_171.1.dr, uninstall.exe.17.dr	String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: libffi-7.dll.17.dr, _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: libffi-7.dll.17.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://ocsp.digicert.com0O
Source: libffi-7.dll.17.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: libffi-7.dll.17.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: libffi-7.dll.17.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: libffi-7.dll.17.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: libffi-7.dll.17.dr, _queue.pyd.17.dr, _socket.pyd.17.dr, _hashlib.pyd.17.dr, _ctypes.pyd.17.dr	String found in binary or memory: https://www.digicert.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49710 version: TLS 1.2

Source: Yara match

File source: C:\Users\user\AppData\Local\Temp\nsq53E3.tmp, type: DROPPED

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

Code function: 17_2_100010A5 GetVersionExA,LoadLibraryA,GetProcAddress,LocalAlloc,LocalAlloc,NtQuerySystemInformation,LocalFree,LocalAlloc,FreeLibrary,WideCharToMultiByte,lstrcmpiA,OpenProcess,TerminateProcess,CloseHandle,LocalFree,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,CloseHandle,lstrlenA,lstrcmpiA,OpenProcess,TerminateProcess,CloseHandle,CloseHandle,FreeLibrary,

17_2_100010A5

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSWINSCK.ocx			Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\SYSINFO.ocx			Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\Cerea.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\NSIS.Library.RegTool.v3.{760CC695-7C3A-465F-9E6C-D3931A64AC97}.exe	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\Mahalanobis.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\PLSObj.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\msstdfmt.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\VB6STKIT.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\TrendGraph.tlb	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMCT232.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMCT332.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMCTL32.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMDLG32.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\DBGRID32.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCHRT20.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCOMCT2.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCOMCTL.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCOMM32.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSDATGRD.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSFLXGRD.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSHFLXGD.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSWINSCK.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\SYSINFO.ocx	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\vbGraph.ocx	Jump to behavior

Source: unicodedata.pyd.17.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: _overlapped.pyd.17.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS

Source: api-ms-win-core-string-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-utility-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-runtime-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-time-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-processthreads-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-processenvironment-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-environment-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-interlocked-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-conio-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-libraryloader-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-math-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l1-2-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: 06dc3f2a-0d04-4237-8c43-2058ccd60562.tmp.0.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-debug-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-rtlsupport-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-heap-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l2-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-synch-l1-2-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-louserzation-l1-2-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-sysinfo-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-filesystem-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-namedpipe-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-stdio-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-util-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-timezone-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-datetime-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-convert-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-locale-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-synch-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-console-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-process-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-handle-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-heap-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-profile-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-string-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-errorhandling-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-memory-l1-1-0.dll.17.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-processthreads-l1-1-1.dll.17.dr	Static PE information: No import functions for PE file found

Source: 06dc3f2a-0d04-4237-8c43-2058ccd60562.tmp.0.dr

Static PE information: Data appended to the last section found

Source: 06dc3f2a-0d04-4237-8c43-2058ccd60562.tmp.0.dr

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe, 00000011.00000002.1594508121.0000000002F81000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: *\AC:\Joel\OdourScan\UI\Alternative MSChart\vbGraph.vbp$

Source: classification engine

Classification label: mal52.win@40/120@4/4

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

File created: C:\Program Files (x86)\NIR Technology Analysis Software

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\06dc3f2a-0d04-4237-8c43-2058ccd60562.tmp

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7972:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7880:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8104:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7828:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8044:120:WilError_03

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

File created: C:\Users\user\AppData\Local\Temp\nsq5394.tmp

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "Watchdog.exe")
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "RestartApp.exe")
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "ReadWeight.exe")

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\rundll32.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Source: NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe, 00000011.00000002.1594508121.0000000002CAF000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Selects the chart legend.W9Returns/sets the number of data columns in the data grid.WMReturns/sets the number of levels of labels on data columns in the data grid.WJReturns/sets the number of levels of labels on data rows in the data grid.6Returns/sets the number of data rows in the data grid.GDeletes columns of data and their associated labels from the data grid.WWW/Adds one or more data columns to the data grid.WWW>Deletes levels of labels from the data columns in a data grid.GAdds one or more levels of labels to the data columns in the data grid.WWWDDeletes rows of data and their associated labels from the data grid.WW,Adds one or more data rows to the data grid.WW;Deletes levels of labels from the data rows in a data grid.WWWDAdds one or more levels of labels to the data rows in the data grid.WW1Fills the data grid with randomly generated data.W4Sets the number and levels of data columns and rows.WWNAssigns each label in the first level of data grid labels a unique identifier.HFills one or more columns of the data grid with randomly generated data.WWEFills one or more rows of the data grid with randomly generated data.W(Moves a block of cells on the data grid.WW#Gets the value of a data grid cell.WWW#Sets the value of a data grid cell.WWW9Returns/sets the label on a data column in the data grid.WHReturns the multi-level label that identifies a column in the data grid.WWEReturns the multi-level label that identifies a row in the data grid.W6Returns/sets the label on a data row in the data grid.EReturns/sets the strength of the light coming from the light source.WCReturns/sets the X coordinate for the location of the LightSource.WWWCReturns/sets the Y coordinate for the location of the LightSource.WWWCReturns/sets the Z coordinate for the location of the LightSource.WWW]Sets the X,Y,Z coordinates for the LightSource location and the intensity of the LightSource.W

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1936,i,14282950788006197663,4562122908551355024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3140 --field-trial-handle=1936,i,14282950788006197663,4562122908551355024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Source: unknown	Process created: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe "C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe"
Source: unknown	Process created: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe "C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe"
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\System32\bcdedit.exe "bcdedit" /set {current} bootstatuspolicy ignoreallfailures
Source: C:\Windows\System32\bcdedit.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM Watchdog.exe /F
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM RestartApp.exe /F
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM NTAS 3000X /F
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM ReadWeight.exe /F
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\System32\LogonUI.exe "LogonUI.exe" /flags:0x4 /state0:0xa3ff7055 /state1:0x41c64e6d
Source: unknown	Process created: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe "C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1936,i,14282950788006197663,4562122908551355024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3140 --field-trial-handle=1936,i,14282950788006197663,4562122908551355024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\System32\bcdedit.exe "bcdedit" /set {current} bootstatuspolicy ignoreallfailures	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM Watchdog.exe /F	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM RestartApp.exe /F	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM NTAS 3000X /F	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM ReadWeight.exe /F	Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: cerea.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: mahalanobis.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: plsobj.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\bcdedit.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: logoncontroller.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: dsreg.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.ui.logon.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: wincorlib.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.ui.xamlhost.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: languageoverlayutil.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.ui.blockedshutdown.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: wuceffects.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.applicationmodel.lockscreen.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: lockcontroller.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: credprovdatamodel.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: networkicon.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: networkuxbroker.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: ethernetmediamanager.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: credprovhost.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: credprovs.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: credprovslegacy.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: facecredentialprovider.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: smartcardcredentialprovider.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.devices.enumeration.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: biocredprov.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: ngckeyenum.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: structuredquery.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: cxcredprov.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: ngccredprov.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: wlidcredprov.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: rasplap.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: credprov2fahelper.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: credprovhelper.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: shacct.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: icu.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: mswb7.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: idstore.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: devdispitemprovider.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: windows.media.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: winbio.dll	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: wincorlib.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: languageoverlayutil.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: lockappbroker.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: contentdeliverymanager.utilities.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: cdp.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: dsreg.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.internal.shell.broker.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: actxprxy.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.applicationmodel.lockscreen.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: lockcontroller.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.services.targetedcontent.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: networkicon.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: networkuxbroker.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Section loaded: logoncli.dll	Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: NTAS MS3000X.lnk.17.dr	LNK file: ..\..\..\..\..\..\Program Files (x86)\NIR Technology Analysis Software\NTAS MS3000X.exe
Source: Uninstall.lnk.17.dr	LNK file: ..\..\..\..\..\..\Program Files (x86)\NIR Technology Analysis Software\uninstall.exe
Source: NTAS Help.lnk.17.dr	LNK file: ..\..\..\..\..\..\Program Files (x86)\NIR Technology Analysis Software\NTAS Help.chm
Source: NTAS MS3000X.lnk0.17.dr	LNK file: ..\..\..\..\..\..\..\Program Files (x86)\NIR Technology Analysis Software\NTAS MS3000X.exe
Source: NTAS MS3000X.lnk1.17.dr	LNK file: ..\..\..\Program Files (x86)\NIR Technology Analysis Software\NTAS MS3000X.exe

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

File written: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\ioSpecial.ini

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: api-ms-win-crt-locale-l1-1-0.dll.17.dr
Source:	Binary string: C:\SoftwareLocalPC\CereaDll\CereaDllOriginal2022 - CheckHundFile\Release\Cerea.pdbC source: Cerea.dll.17.dr
Source:	Binary string: api-ms-win-core-handle-l1-1-0.pdb source: api-ms-win-core-handle-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-sysinfo-l1-1-0.pdbGCTL source: api-ms-win-core-sysinfo-l1-1-0.dll.17.dr
Source:	Binary string: ucrtbase.pdb source: ucrtbase.dll.17.dr
Source:	Binary string: api-ms-win-core-synch-l1-2-0.pdb source: api-ms-win-core-synch-l1-2-0.dll.17.dr
Source:	Binary string: C:\SoftwareLocalPC\CereaDll\CereaDllOriginal2022 - CheckHundFile\Release\Cerea.pdb source: Cerea.dll.17.dr
Source:	Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: api-ms-win-core-sysinfo-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-profile-l1-1-0.pdbGCTL source: api-ms-win-core-profile-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: api-ms-win-core-datetime-l1-1-0.dll.17.dr
Source:	Binary string: D:\_w\1\b\bin\amd64\_queue.pdb source: _queue.pyd.17.dr
Source:	Binary string: D:\_w\1\b\bin\amd64\_hashlib.pdb source: _hashlib.pyd.17.dr
Source:	Binary string: api-ms-win-crt-string-l1-1-0.pdbGCTL source: api-ms-win-crt-string-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-locale-l1-1-0.pdbGCTL source: api-ms-win-crt-locale-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-libraryloader-l1-1-0.pdbGCTL source: api-ms-win-core-libraryloader-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: api-ms-win-crt-environment-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: api-ms-win-crt-utility-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-handle-l1-1-0.pdbGCTL source: api-ms-win-core-handle-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: api-ms-win-core-timezone-l1-1-0.dll.17.dr
Source:	Binary string: D:\_w\1\b\bin\amd64\_ctypes.pdb source: _ctypes.pyd.17.dr
Source:	Binary string: api-ms-win-core-console-l1-1-0.pdbGCTL source: api-ms-win-core-console-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-console-l1-1-0.pdb source: api-ms-win-core-console-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-process-l1-1-0.pdb source: api-ms-win-crt-process-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-file-l1-1-0.pdb source: api-ms-win-core-file-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: api-ms-win-core-libraryloader-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-utility-l1-1-0.pdbGCTL source: api-ms-win-crt-utility-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-timezone-l1-1-0.pdbGCTL source: api-ms-win-core-timezone-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-synch-l1-2-0.pdbGCTL source: api-ms-win-core-synch-l1-2-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-process-l1-1-0.pdbGCTL source: api-ms-win-crt-process-l1-1-0.dll.17.dr
Source:	Binary string: hhctrl.pdb source: NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe, 00000011.00000002.1594508121.0000000002A14000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\_w\1\b\bin\amd64\_socket.pdb source: _socket.pyd.17.dr
Source:	Binary string: api-ms-win-core-datetime-l1-1-0.pdbGCTL source: api-ms-win-core-datetime-l1-1-0.dll.17.dr
Source:	Binary string: ucrtbase.pdbUGP source: ucrtbase.dll.17.dr
Source:	Binary string: api-ms-win-core-profile-l1-1-0.pdb source: api-ms-win-core-profile-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-core-file-l1-1-0.pdbGCTL source: api-ms-win-core-file-l1-1-0.dll.17.dr
Source:	Binary string: Can't Read Text FileCan't Open Text File.pdb.mdb%f.mdtAn Error OccurreduserbrationFile Method: SaveToBinFileSaving userbration to File...wbCan't Open Binary FileCan't Write Binary FileNo ErroruserbrationFile Method: ReadFromBinFileReading userbraiton From File...rbCan't Read Binary FileuserbrationFile Method: GetAverageAndStDeviationGetting Average and Standard Deviation Data...Do First DerivativeConstituentConstituent Name: %s source: Cerea.dll.17.dr
Source:	Binary string: api-ms-win-crt-environment-l1-1-0.pdbGCTL source: api-ms-win-crt-environment-l1-1-0.dll.17.dr
Source:	Binary string: api-ms-win-crt-string-l1-1-0.pdb source: api-ms-win-crt-string-l1-1-0.dll.17.dr

Source: api-ms-win-crt-process-l1-1-0.dll.17.dr

Static PE information: 0xFB3E7718 [Sun Jul 29 17:55:36 2103 UTC]

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

17_2_100010A5

Source: libcrypto-1_1.dll.17.dr	Static PE information: section name: .00cfg
Source: libssl-1_1.dll.17.dr	Static PE information: section name: .00cfg
Source: python310.dll.17.dr	Static PE information: section name: PyRuntim
Source: socketcropscan.exe.17.dr	Static PE information: section name: _RDATA
Source: Cerea.dll.17.dr	Static PE information: section name: _RDATA
Source: RestartApp.exe.17.dr	Static PE information: section name: _RDATA
Source: VCRUNTIME140.dll.17.dr	Static PE information: section name: _RDATA

Persistence and Installation Behavior

Uses bcdedit to modify the Windows boot settings

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\System32\bcdedit.exe "bcdedit" /set {current} bootstatuspolicy ignoreallfailures
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\System32\bcdedit.exe "bcdedit" /set {current} bootstatuspolicy ignoreallfailures			Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-time-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSWINSCK.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\libffi-7.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-namedpipe-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-string-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-runtime-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-environment-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-util-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-process-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\libcrypto-1_1.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-processenvironment-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\NSIS.Library.RegTool.v3.{760CC695-7C3A-465F-9E6C-D3931A64AC97}.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\nsExec.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-file-l2-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-timezone-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Program Files (x86)\NIR Technology Analysis Software\uninstall.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-synch-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_asyncio.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-stdio-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-errorhandling-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-locale-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-processthreads-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\socketcropscan\socketcropscan.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-handle-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSFLXGRD.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Program Files (x86)\NIR Technology Analysis Software\Watchdog.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-convert-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCOMM32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-rtlsupport-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCOMCTL.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-file-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 171	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-louserzation-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMCT332.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\RestartApp.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-conio-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-interlocked-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe (copy)	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\libssl-1_1.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-libraryloader-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\nsProcess.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\select.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\ucrtbase.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\VCRUNTIME140.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\PLSObj.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\vbGraph.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMCT232.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\InstallOptions.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-file-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-profile-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\DBGRID32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCOMCT2.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-string-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\psutil\_psutil_windows.cp310-win_amd64.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-memory-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\SYSINFO.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSHFLXGD.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\msstdfmt.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-sysinfo-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\UserInfo.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-debug-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMCTL32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSDATGRD.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\Cerea.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 279108.crdownload	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCHRT20.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-datetime-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-console-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-synch-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMDLG32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-filesystem-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-core-processthreads-l1-1-1.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-math-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\VB6STKIT.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\api-ms-win-crt-utility-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Program Files (x86)\NIR Technology Analysis Software\NTAS MS3000X.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\Mahalanobis.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_curses.cp310-win_amd64.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\_decimal.pyd	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\06dc3f2a-0d04-4237-8c43-2058ccd60562.tmp	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\wga\Scripts\RestartApp\python310.dll	Jump to dropped file

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\SYSINFO.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCHRT20.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\NSIS.Library.RegTool.v3.{760CC695-7C3A-465F-9E6C-D3931A64AC97}.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\msstdfmt.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSHFLXGD.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSWINSCK.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\Mahalanobis.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\PLSObj.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMCTL32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMDLG32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCOMCTL.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\vbGraph.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSDATGRD.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\Cerea.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMCT232.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\COMCT332.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSFLXGRD.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\DBGRID32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCOMCT2.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\VB6STKIT.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File created: C:\Windows\SysWOW64\MSCOMM32.ocx	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 171
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 171			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce NSIS.Library.RegTool.v3	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce NSIS.Library.RegTool.v3	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce NSIS.Library.RegTool.v3	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce NSIS.Library.RegTool.v3	Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\nsProcess.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-time-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\select.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\MSWINSCK.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\VCRUNTIME140.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\libffi-7.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-namedpipe-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\vbGraph.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-string-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\COMCT232.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-file-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\InstallOptions.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-profile-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\DBGRID32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\MSCOMCT2.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-runtime-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-string-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-environment-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\psutil\_psutil_windows.cp310-win_amd64.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-util-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-memory-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-process-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\SYSINFO.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\libcrypto-1_1.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-processenvironment-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\MSHFLXGD.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\msstdfmt.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\NSIS.Library.RegTool.v3.{760CC695-7C3A-465F-9E6C-D3931A64AC97}.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\nsExec.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-file-l2-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-sysinfo-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-timezone-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsl5413.tmp\UserInfo.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-synch-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Program Files (x86)\NIR Technology Analysis Software\uninstall.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-debug-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\COMCTL32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_asyncio.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\MSDATGRD.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-errorhandling-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-stdio-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-locale-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\MSCHRT20.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-processthreads-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-datetime-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-synch-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-console-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\COMDLG32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\socketcropscan\socketcropscan.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-handle-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-filesystem-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\MSFLXGRD.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-processthreads-l1-1-1.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Program Files (x86)\NIR Technology Analysis Software\Watchdog.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-math-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\VB6STKIT.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-convert-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\MSCOMM32.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-utility-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Program Files (x86)\NIR Technology Analysis Software\NTAS MS3000X.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-rtlsupport-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\MSCOMCTL.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-file-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-louserzation-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_curses.cp310-win_amd64.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\COMCT332.ocx	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\RestartApp.exe	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-crt-conio-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-interlocked-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\libssl-1_1.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\api-ms-win-core-libraryloader-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Dropped PE file which has not been started: C:\wga\Scripts\RestartApp\python310.dll	Jump to dropped file

Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe TID: 4636

Thread sleep count: 49 > 30

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File Volume queried: C:\Program Files (x86) FullSizeInformation			Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	File Volume queried: C:\Program Files (x86) FullSizeInformation			Jump to behavior

Source: LogonUI.exe, 0000001D.00000002.2420450600.0000020C2AC10000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: NXTVMWare
Source: bcdedit.exe, 00000012.00000002.1482266588.000001B7FAF38000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: pEFI VMware Virtual SATA CDROM Drive (0.0)

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\LogonUI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

17_2_100010A5

Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug	Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM Watchdog.exe /F	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM RestartApp.exe /F	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM NTAS 3000X /F	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM ReadWeight.exe /F	Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM Watchdog.exe /F	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM RestartApp.exe /F	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM NTAS 3000X /F	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Process created: C:\Windows\SysWOW64\taskkill.exe TaskKill /IM ReadWeight.exe /F	Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\LogonUI.exe	Queries volume information: C:\Windows\Web\Screen\img103.png VolumeInformation	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe	Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation	Jump to behavior

Source: C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

17_2_100010A5

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	11 Registry Run Keys / Startup Folder	11 Process Injection	32 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Inhibit System Recovery
Credentials	Domains	Default Accounts	1 Native API	1 DLL Side-Loading	11 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	2 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	2 Virtualization/Sandbox Evasion	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	2 File and Directory Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Rundll32	LSA Secrets	14 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Software Packing	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Timestomp	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
C:\Program Files (x86)\NIR Technology Analysis Software\Watchdog.exe	100%	Avira	TR/Spy.Gen
C:\Users\user\AppData\Local\Temp\nsl5413.tmp\InstallOptions.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsl5413.tmp\System.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsl5413.tmp\UserInfo.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsl5413.tmp\nsExec.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsl5413.tmp\nsProcess.dll	0%	ReversingLabs
C:\Windows\SysWOW64\COMCT232.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\COMCT332.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\COMCTL32.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\COMDLG32.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\DBGRID32.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\MSCHRT20.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\MSCOMCT2.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\MSCOMCTL.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\MSCOMM32.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\MSDATGRD.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\MSFLXGRD.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\MSHFLXGD.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\MSWINSCK.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\Mahalanobis.dll	2%	ReversingLabs
C:\Windows\SysWOW64\NSIS.Library.RegTool.v3.{760CC695-7C3A-465F-9E6C-D3931A64AC97}.exe	2%	ReversingLabs
C:\Windows\SysWOW64\PLSObj.dll	2%	ReversingLabs
C:\Windows\SysWOW64\SYSINFO.ocx	0%	ReversingLabs
C:\Windows\SysWOW64\VB6STKIT.dll	0%	ReversingLabs
C:\Windows\SysWOW64\msstdfmt.dll	0%	ReversingLabs
C:\Windows\SysWOW64\vbGraph.ocx	0%	ReversingLabs
C:\wga\Scripts\RestartApp\VCRUNTIME140.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_asyncio.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_bz2.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_ctypes.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_curses.cp310-win_amd64.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_decimal.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_elementtree.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_hashlib.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_lzma.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_multiprocessing.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_overlapped.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_queue.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_socket.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\_ssl.pyd	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-console-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-datetime-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-debug-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-errorhandling-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-file-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-file-l1-2-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-file-l2-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-handle-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-heap-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-interlocked-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-libraryloader-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-louserzation-l1-2-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-memory-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-namedpipe-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-processenvironment-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-processthreads-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-processthreads-l1-1-1.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-profile-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-rtlsupport-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-string-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-synch-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-synch-l1-2-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-sysinfo-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-timezone-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-core-util-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-crt-conio-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-crt-convert-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-crt-environment-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-crt-filesystem-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-crt-heap-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-crt-locale-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-crt-math-l1-1-0.dll	0%	ReversingLabs
C:\wga\Scripts\RestartApp\api-ms-win-crt-process-l1-1-0.dll	0%	ReversingLabs

Source	Detection	Scanner	Label
http://nsis.sf.net/NSIS_ErrorError	0%	URL Reputation	safe
http://crl.thawte.com/ThawteTimestampingCA.crl0	0%	URL Reputation	safe
http://ocsp.thawte.com0	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3-r-w.us-west-2.amazonaws.com	52.218.247.225	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
on-combine-data.s3.us-west-2.amazonaws.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://ns.adobe.hotosh	LogonUI.exe, 0000001D.00000003.2203071590.0000020C2F38F000.00000004.00000020.00020000.00000000.sdmp, LogonUI.exe, 0000001D.00000002.2428817500.0000020C2F38F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://nsis.sf.net/NSIS_ErrorError	NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe, 0000000E.00000000.1416626041.000000000040A000.00000008.00000001.01000000.00000006.sdmp, NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe, 00000011.00000002.1593006457.000000000040A000.00000004.00000001.01000000.00000006.sdmp, chromecache_171.1.dr, uninstall.exe.17.dr	false	URL Reputation: safe	unknown
http://crl.thawte.com/ThawteTimestampingCA.crl0	libffi-7.dll.17.dr	false	URL Reputation: safe	unknown
http://ns.a.0/sTy	LogonUI.exe, 0000001D.00000003.2203071590.0000020C2F38F000.00000004.00000020.00020000.00000000.sdmp, LogonUI.exe, 0000001D.00000002.2428817500.0000020C2F38F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ocsp.thawte.com0	libffi-7.dll.17.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
52.218.247.225	s3-r-w.us-west-2.amazonaws.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544169
Start date and time:	2024-10-28 23:40:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	34
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	1
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@40/120@4/4
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 2 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, consent.exe, RuntimeBroker.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.185.174, 64.233.167.84, 34.104.35.123, 93.184.221.240, 142.250.184.227, 142.250.186.142
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	MS Windows HtmlHelp Data
Category:	dropped
Size (bytes):	1844627
Entropy (8bit):	7.9975706409636445
Encrypted:	true
SSDEEP:	49152:YQbMBqcJ/ZfnTO+2rOJFymxJsoZq/28ABmWkMpeEw:wVxfTOZdmx6dsQipen
MD5:	8AF365642CBBEC2A0C9F3C7E36AE033E
SHA1:	A65F1843484D789C4164F2646C0B586A27C83D70
SHA-256:	304F09AE25B78F2ED694D1495EDD29351AC07D5943811B2FAA6D6EE3A86C1DE5
SHA-512:	E652CA687D4E768C93F7A6EBD9C067652321EB2F080A29733EA79B535D40E80D4E786DC3BC20F561A1F9B3CDBA0E9CF10401E4828B9DC079EECD0D86AAA85633
Malicious:	false
Reputation:	low
Preview:	ITSF....`........kH-.......\|.{.......".....\|.{......."..`...............x.......T........................%..............ITSP....T...........................................j..].!......."..T...............PMGL................./..../#IDXHDR......../#ITBITS..../#IVB......L./#STRINGS....s.k./#SYSTEM..F.A./#TOPICS......0./#URLSTR....~.u./#URLTBL....:.D./#WINDOWS....M.L./$FIftiMain........./$OBJINST....m.../$WWAssociativeLinks/..../$WWAssociativeLinks/Property....i../$WWKeywordLinks/..../$WWKeywordLinks/Property....e."/advanced_file_transfer_dialog.htm...r.z./analysis.htm...".`./blebul1a.gif...A.../blebul2a.gif...z.4./blegtext.gif...Z.../Browse Button.jpg..<.L./Browse2.jpg......j./userbration_creation.htm...z.5./userbration_management.htm.../..../userbration_mode.htm.....s./connection_dialog.htm.....x./DA_Run.gif......{./DAFileMenu.jpg...{.w./DAOptionsMenu.jpg...r.{./DAScanningMenu.jpg...m.4./dataconversion_tab.htm.....8./directories_tab.htm...:.t./discriminant_analysis.htm......+./edit_mod

C:\Program Files (x86)\NIR Technology Analysis Software\NTAS MS3000X.exe

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	13479936
Entropy (8bit):	7.096471985399271
Encrypted:	false
SSDEEP:	393216:snSE4e5bt5GSE4e5bt5qD5/IAiLdouPQ72/gmKyl:oZ4ot5GZ4ot5qD5/IzLdouPS2/gmKyl
MD5:	03D65D7DD9147970005D6EDDD766C2A4
SHA1:	1EBFDABAE1415923149A9F5E52B3D94F64C2F7C4
SHA-256:	720322C0282CDB600FA9817F322E979FC34DC652ACF24E4D7DB8C5ED8B6BE147
SHA-512:	5A9C54C670A141AD6315AEC9DEB115F7882CB3FE81655C74DA47AD448D42046485294F6E78C5052156ECC49D180EDF3F4E57468A312EE1882ACDD60F93A7FAC1
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........6..W..W..W..K..W..u..W..q..W.Rich.W.........................PE..L...y..g.....................0....................@..........................................................................r..(...........................................................................8... .......,............................text...$s.......................... ..`.data...............................@....rsrc...............................@..@..^............MSVBVM60.DLL....................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\NIR Technology Analysis Software\Watchdog.exe

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	53248
Entropy (8bit):	4.594934607524279
Encrypted:	false
SSDEEP:	768:od5wkpcgcw0IHzKbhryIUXgg2zYJwsf7:oTwkdcw0UzK1vUwg2zYlf
MD5:	CFF283F89A189185272CE263776FBF43
SHA1:	F82DACC9C380BDB894B208302120CE7B0ACF14CC
SHA-256:	F088EEDC3253D914D0CD4EBDE3A0367C21AE63F6FA5447E293B3DCE7219D28D3
SHA-512:	BF33D4F74B76E82CF8179A7926FC76D288FFE87F127192DBC160B2AEDE1F78375A9D8C056743F8EF99054524BB41CD0C166EB9A1E021217DE2D2A9BC3E042822
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......7b..s...s...s.......r...<!..v...E%..r...Richs...........................PE..L....\v`..................... ....................@.................................8.......................................d...(.......j...................................................................8... ....................................text............................... ..`.data...d...........................@....rsrc...j...........................@..@..^............MSVBVM60.DLL....................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\NIR Technology Analysis Software\uninstall.exe

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	59896
Entropy (8bit):	6.978058566353755
Encrypted:	false
SSDEEP:	768:nXWsAYF0UQj0TU9a+IWNu9B1MxlthhMLWI027zpiUGtuZeg7zrkEZ16XJqxmnt4M:nmsAYBdTU9fEAIS2PEtuP7HkU1qq6OM
MD5:	223CE1F51022CCBC93E5A98B5E22A883
SHA1:	510B75667EA0EEE4A2F6C7C845FD759FB6700F02
SHA-256:	F5C91E7515998639758B9F4F2F02568FC52F59016639229CA1CB5BDED2EBBDAC
SHA-512:	88792DCEB2137150A03AE1ACE855BF683D0BC98465126FDE41F64AE2D696A5E75012F9255B39CE507E6F7206EBF296C6257189D47C108E04D9F82B911A79B43D
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....Oa.................h...*......@6............@.......................................@..........................................................................................................................................................text...vf.......h.................. ..`.rdata...............l..............@..@.data...x...........................@....ndata...@...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NIR Technology Analysis Software\NTAS Help.lnk

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Mon Feb 24 22:42:50 2003, mtime=Mon Oct 28 21:41:18 2024, atime=Mon Feb 24 22:42:50 2003, length=1844627, window=hide
Category:	dropped
Size (bytes):	1199
Entropy (8bit):	4.674107011638121
Encrypted:	false
SSDEEP:	24:8mQY/ZxeEfdOEUIr+EQHiAqrdfr+EO8+sUUvBo7Yqygm:8mR/ZxRfdOIr7QHBqrdfr7O86ryg
MD5:	227024A6FCC7561FEA8F8E1528F3E6D7
SHA1:	40FEB82BE55DA2541AB3264A1729CED7AC56223C
SHA-256:	C3D5FEB2E4120CC6CBCC51813555711ED129770FF84ABADD8CEAF3A63FE2D17D
SHA-512:	E91885D4D5BD206CAFBD126DA02D1939E2CA88B7297859A4932C78C8C8FCBA339D72A29E10A229B1969BDEDB1074AD495EFBBF9FE7011656A918ED2BECD9CA9F
Malicious:	false
Reputation:	low
Preview:	L..................F.... ......p^...,...).....p^....%...........................P.O. .:i.....+00.../C:\.....................1.....\Y)...PROGRA~2.........O.I\Y).....................V......Qn.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.......1.....\Y+...NIRTEC~1..r......\Y).\Y,......Z....................1q..N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.....h.2..%..X.Y. .NTASHE~1.CHM..L......X.Y.\Y.....(Z........................N.T.A.S. .H.e.l.p...c.h.m.......t...............-.......s..............e.....C:\Program Files (x86)\NIR Technology Analysis Software\NTAS Help.chm..T.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.\.N.T.A.S. .H.e.l.p...c.h.m...C.:.\.W.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.........................@Z\|...K.J.........`.......X.......103386...........hT..CrF.f4... ....}.........%..hT..CrF.f4... ....}.........%.............1SP

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NIR Technology Analysis Software\NTAS MS3000X.lnk

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Mon Oct 28 02:48:08 2024, mtime=Mon Oct 28 21:41:17 2024, atime=Mon Oct 28 02:48:08 2024, length=13479936, window=hide
Category:	dropped
Size (bytes):	2148
Entropy (8bit):	3.600480443502118
Encrypted:	false
SSDEEP:	48:8AZxRfdO62r7QFYR9r6dfr7vSdfr77xfr7fbyg:8I2r+YzArTYrfZr7by
MD5:	F9C9C647A9CF4DC695BE1D7AD4A759B0
SHA1:	40039D4127C5774F5626FDA999AA4C90C378E5EF
SHA-256:	CD0A13D8C42767ECE3E9D46C5CDAB2917CBBC8B1CA5E4D2E2CFA5A1A383B610E
SHA-512:	51FC8F6CB50B16FB5D999361BA6DBE662F772FFA362E1765528F600203E3F208337F13A6A898F6BA3E257FC963B407E9273526924A5C94279EC4F6DD1E18DC29
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ......3.(.......).....3.(...............................P.O. .:i.....+00.../C:\.....................1.....\Y)...PROGRA~2.........O.I\Y).....................V......Qn.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.......1.....\Y)...NIRTEC~1..r......\Y).\Y)......Z........................N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.....n.2.....\Y.. .NTASMS~1.EXE..R......\Y..\Y)......Z........................N.T.A.S. .M.S.3.0.0.0.X...e.x.e.......w...............-.......v..............e.....C:\Program Files (x86)\NIR Technology Analysis Software\NTAS MS3000X.exe..W.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.\.N.T.A.S. .M.S.3.0.0.0.X...e.x.e...C.:.\.W.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.H.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.\.N.T.A.S. .M.S.3.0.0.0.X...

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NIR Technology Analysis Software\Uninstall.lnk

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Mon Oct 28 21:41:21 2024, mtime=Mon Oct 28 21:41:21 2024, atime=Mon Oct 28 21:41:21 2024, length=59896, window=hide
Category:	dropped
Size (bytes):	2129
Entropy (8bit):	3.612988197920817
Encrypted:	false
SSDEEP:	48:8Def/ZxRfdOIr7Q1UAqWdfr7js8dfr7/zfr7rhAiyg:8D4ryUur/s2rrLrfhAiy
MD5:	82906B8DE50D0D8B9BB5406976E8EE70
SHA1:	02388F184F9C6399E5B4D455F46B3C226E2315BE
SHA-256:	6389ECAA9F40168F13A6B3FFAAB46BB687C44201FC9A15171BB0D31AEA24E5A4
SHA-512:	2729969C5C91E9B32901759DC98A375E25662FAB292C208928FC5DE788FA857F2F49166127310AD577027B10970BE72C0A309F04BDB198938C7CFAC782954FEC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ....#...)...."..)...."..)...............................P.O. .:i.....+00.../C:\.....................1.....\Y)...PROGRA~2.........O.I\Y).....................V......Qn.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.......1.....\Y+...NIRTEC~1..r......\Y).\Y,......Z....................1q..N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.....h.2.....\Y+. .UNINST~1.EXE..L......\Y+.\Y+.....j.....................q...u.n.i.n.s.t.a.l.l...e.x.e.......t...............-.......s..............e.....C:\Program Files (x86)\NIR Technology Analysis Software\uninstall.exe..T.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.\.u.n.i.n.s.t.a.l.l...e.x.e...C.:.\.W.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.F.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.\.N.T.A.S. .3.0.0.0.B...e.x.e.........%Prog

C:\ProgramData\Microsoft\Windows\SystemData\S-1-5-21-2246122658-3693405117-2476756634-1003\ReadOnly\LockScreen_W\LockScreen___1280_1024_notdimmed.jpg (copy)

Download File

Process:	C:\Windows\System32\LogonUI.exe
File Type:	PNG image data, 1280 x 1024, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2175931
Entropy (8bit):	7.981618359937815
Encrypted:	false
SSDEEP:	49152:sj5P/88Yv16GCy6Cl5QiH4rXsfvJsUW90d/O7I6au5fv4K:sd88YgUpYg3DdTu5fwK
MD5:	DE125188BE0FF22F2B65FAADA559FE90
SHA1:	762DE209F33AACAFE9B1EA5F3D5BC76A9D39EB04
SHA-256:	B66A4D0D197ED06FFE17CAC1A0711A0FC5FC23D03D31BAB9FB310AEDA33FA5C6
SHA-512:	6D8C1729917932C8B68245976E92E222246AC078617F33CBCA5B6472754C06CF9F04FE397A27309BA0793044800B3E0F0FE43E3304008AAE53AC06D9ADA56EB1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................C....sRGB.........gAMA......a.....pHYs.................IDATx^..i.dKr..Y...y..v.P..F...!....Q..(C.....d.P...it..P@....s..<\|......OxxD..P...LMUMm.cn...o...7.}X.....g/...Y9<8.;{..1(.R....[...'.\|T.z...]....7.)..V.\........[e.....W..i.^l....?+..o......_..7.....v.yvV...r\|z\...2......\|.{?(._<-...q....Iy.\|R.6/..n.......ln.....tJW.o.K.y).......lom....3...........X>.~.l...y.H...Ly.Y.ac#\....-.!y..F.{q.R..0....).......\|?.RO>..I..v....S....#<.6bE.#d.....j..B?g..:%.nn:.h.d......jzJ.t..\|.3.....Ge.l.l..P.\|DlD~a.LW...b........f......-.....rq..a.....?.............@.... /..#wg.i}./......X(I.....l:...._).Zt..z^..k.....T....(...j.!y....6.}.n.K.....veg........<..\g..3).iB.<i....0......\..5.7.....o.V;\.........u:....Gt..r..{....n.m.M.o.s.}./.].S..Z.../../>.:\|..p+....._rYW....^....t..\|..6.x...i..q......}wQ.......s1.....,..J..E...H.{....p.c..,.............Q..i..!~.U@..i[......Mg".Yk.8......t.[..P...Ec.$..4...

C:\ProgramData\Microsoft\Windows\SystemData\S-1-5-21-2246122658-3693405117-2476756634-1003\ReadOnly\LockScreen_W\~ockScreen___1280_1024_notdimmed.tmp

Download File

Process:	C:\Windows\System32\LogonUI.exe
File Type:	PNG image data, 1280 x 1024, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2175931
Entropy (8bit):	7.981618359937815
Encrypted:	false
SSDEEP:	49152:sj5P/88Yv16GCy6Cl5QiH4rXsfvJsUW90d/O7I6au5fv4K:sd88YgUpYg3DdTu5fwK
MD5:	DE125188BE0FF22F2B65FAADA559FE90
SHA1:	762DE209F33AACAFE9B1EA5F3D5BC76A9D39EB04
SHA-256:	B66A4D0D197ED06FFE17CAC1A0711A0FC5FC23D03D31BAB9FB310AEDA33FA5C6
SHA-512:	6D8C1729917932C8B68245976E92E222246AC078617F33CBCA5B6472754C06CF9F04FE397A27309BA0793044800B3E0F0FE43E3304008AAE53AC06D9ADA56EB1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................C....sRGB.........gAMA......a.....pHYs.................IDATx^..i.dKr..Y...y..v.P..F...!....Q..(C.....d.P...it..P@....s..<\|......OxxD..P...LMUMm.cn...o...7.}X.....g/...Y9<8.;{..1(.R....[...'.\|T.z...]....7.)..V.\........[e.....W..i.^l....?+..o......_..7.....v.yvV...r\|z\...2......\|.{?(._<-...q....Iy.\|R.6/..n.......ln.....tJW.o.K.y).......lom....3...........X>.~.l...y.H...Ly.Y.ac#\....-.!y..F.{q.R..0....).......\|?.RO>..I..v....S....#<.6bE.#d.....j..B?g..:%.nn:.h.d......jzJ.t..\|.3.....Ge.l.l..P.\|DlD~a.LW...b........f......-.....rq..a.....?.............@.... /..#wg.i}./......X(I.....l:...._).Zt..z^..k.....T....(...j.!y....6.}.n.K.....veg........<..\g..3).iB.<i....0......\..5.7.....o.V;\.........u:....Gt..r..{....n.m.M.o.s.}./.].S..Z.../../>.:\|..p+....._rYW....^....t..\|..6.x...i..q......}wQ.......s1.....,..J..E...H.{....p.c..,.............Q..i..!~.U@..i[......Mg".Yk.8......t.[..P...Ec.$..4...

C:\Users\Public\Desktop\NTAS MS3000X.lnk

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Mon Oct 28 02:48:08 2024, mtime=Mon Oct 28 21:41:22 2024, atime=Mon Oct 28 02:48:08 2024, length=13479936, window=hide
Category:	dropped
Size (bytes):	2130
Entropy (8bit):	3.600606938179625
Encrypted:	false
SSDEEP:	48:8OZxRfdOIr7QFYR97dfr7vSdfr77xfr7fbyg:8gr+YxrTYrfZr7by
MD5:	7301A278E5103A4146EB0CF195CEE350
SHA1:	7840F6DA9699DECDE363481797B414987FA59743
SHA-256:	1073562A193E55D3D8949BF784FB2625B8A728F3A64BAD27E26C08A7377F08DE
SHA-512:	9C7828145F4BBF9B51240393D57292A630868AAF5F2725CCEE8FF221469E50A59DBBA92B32C2C86D877E5A7E8AE20FEC528B85A7577587BDA8496547C5169F8B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ......3.(..P.2..).....3.(...............................P.O. .:i.....+00.../C:\.....................1.....\Y)...PROGRA~2.........O.I\Y).....................V......Qn.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.......1.....\Y+...NIRTEC~1..r......\Y).\Y,......Z....................1q..N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.....n.2.....\Y.. .NTASMS~1.EXE..R......\Y..\Y)......Z........................N.T.A.S. .M.S.3.0.0.0.X...e.x.e.......w...............-.......v..............e.....C:\Program Files (x86)\NIR Technology Analysis Software\NTAS MS3000X.exe..N.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.\.N.T.A.S. .M.S.3.0.0.0.X...e.x.e...C.:.\.W.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.H.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.\.N.T.A.S. .M.S.3.0.0.0.X...e.x.e.........%Pro

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\InstallOptions.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	15872
Entropy (8bit):	5.471852540236525
Encrypted:	false
SSDEEP:	384:EXsC43tPegZ3eBaRwCPOYY7nNYXC06/Yosa:EXJTgZ3eBTCmrnNA5p
MD5:	ECE25721125D55AA26CDFE019C871476
SHA1:	B87685AE482553823BF95E73E790DE48DC0C11BA
SHA-256:	C7FEF6457989D97FECC0616A69947927DA9D8C493F7905DC8475C748F044F3CF
SHA-512:	4E384735D03C943F5EB3396BB3A9CB42C9D8A5479FE2871DE5B8BC18DB4BBD6E2C5F8FD71B6840512A7249E12A1C63E0E760417E4BAA3DC30F51375588410480
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......N.px.q.+.q.+.q.+.q.+[q.+.~C+.q.+^R.+.q.+^R/+.q.+.w.+.q.+.Q.+.q.+Rich.q.+........PE..L....Oa...........!.........`.......+.......0............................................@..........................8......X1..................................X....................................................0..X............................text............................... ..`.rdata..G....0......."..............@..@.data...DL...@.......,..............@....rsrc................6..............@..@.reloc..x............8..............@..B........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\System.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	5.814115788739565
Encrypted:	false
SSDEEP:	192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5:	CFF85C549D536F651D4FB8387F1976F2
SHA1:	D41CE3A5FF609DF9CF5C7E207D3B59BF8A48530E
SHA-256:	8DC562CDA7217A3A52DB898243DE3E2ED68B80E62DDCB8619545ED0B4E7F65A8
SHA-512:	531D6328DAF3B86D85556016D299798FA06FEFC81604185108A342D000E203094C8C12226A12BD6E1F89B0DB501FB66F827B610D460B933BD4AB936AC2FD8A88
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......qr.5.D.5.D.5.D...J.2.D.5.E.!.D.....2.D.a0t.1.D.V1n.4.D..3@.4.D.Rich5.D.........PE..L.....Oa...........!....."..................@...............................p............@..........................B.......@..P............................`.......................................................@..X............................text.... .......".................. ..`.rdata..c....@.......&..............@..@.data...x....P.......*..............@....reloc.......`.......,..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\UserInfo.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	3.3422620069068625
Encrypted:	false
SSDEEP:	48:qKDBQE7F4aBr1wH8l9QIXTZShMmj3jkCTbGr7X:5WkFZruHSXTH6jkCnGr7X
MD5:	2F69AFA9D17A5245EC9B5BB03D56F63C
SHA1:	E0A133222136B3D4783E965513A690C23826AEC9
SHA-256:	E54989D2B83E7282D0BEC56B098635146AAB5D5A283F1F89486816851EF885A0
SHA-512:	BFD4AF50E41EBC56E30355C722C2A55540A5BBDDB68F1522EF7AABFE4F5F2A20E87FA9677EE3CDB3C0BF5BD3988B89D1224D32C9F23342A16E46C542D8DC0926
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......K..................[.........Rich..........................PE..L...!.Oa...........!................~........ ...............................P............@.........................@"......l ..<............................@..p.................................................... ..L............................text............................... ..`.rdata....... ......................@..@.data...h....0......................@....reloc.......@......................@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\ioSpecial.ini

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (301), with CRLF line terminators
Category:	dropped
Size (bytes):	1512
Entropy (8bit):	3.6690851500958734
Encrypted:	false
SSDEEP:	24:Q+sxv5SADyqWCs7y6xaT9nspTO6OezCxGspsC96jK+iSjLPEUg/kvECvyMspW:rsxwA+qQTaETYe+/J+iSjLPEUg2OJW
MD5:	EC35AC3EA65E440A0EEC4F0907E6EED3
SHA1:	2A7D397BBECDEC2AE0EA638C4B807F6DF39C59B1
SHA-256:	BFD08889803C508373847F64C6C6A05DAA6A044B18E73F3A01A7D0C666F98927
SHA-512:	ADC0F71B925C4F05563CA5A32E2843A6441295C42674BCB05D0AE69AFC92A9AE40D8DDCC0FF8D2000CADCBA8C444A6A2C57DC429C02EF740CA231A4F22281DCB
Malicious:	false
Reputation:	low
Preview:	..[.S.e.t.t.i.n.g.s.].....R.e.c.t.=.1.0.4.4.....N.u.m.F.i.e.l.d.s.=.3.....R.T.L.=.0.....N.e.x.t.B.u.t.t.o.n.T.e.x.t.=.....C.a.n.c.e.l.E.n.a.b.l.e.d.=.....S.t.a.t.e.=.0.....[.F.i.e.l.d. .1.].....T.y.p.e.=.b.i.t.m.a.p.....L.e.f.t.=.0.....R.i.g.h.t.=.1.0.9.....T.o.p.=.0.....B.o.t.t.o.m.=.1.9.3.....F.l.a.g.s.=.R.E.S.I.Z.E.T.O.F.I.T.....T.e.x.t.=.C.:.\.U.s.e.r.s.\.c.a.l.i.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.n.s.l.5.4.1.3...t.m.p.\.m.o.d.e.r.n.-.w.i.z.a.r.d...b.m.p.....H.W.N.D.=.6.6.5.6.8.....[.F.i.e.l.d. .2.].....T.y.p.e.=.l.a.b.e.l.....L.e.f.t.=.1.2.0.....R.i.g.h.t.=.3.1.5.....T.o.p.=.1.0.....T.e.x.t.=.W.e.l.c.o.m.e. .t.o. .N.T.A.S. .M.S.3.0.0.0.X. .v.2...8...2.5. .I.n.s.t.a.l.l.e.r. .S.e.t.u.p.....B.o.t.t.o.m.=.3.8.....H.W.N.D.=.6.6.5.7.0.....[.F.i.e.l.d. .3.].....T.y.p.e.=.l.a.b.e.l.....L.e.f.t.=.1.2.0.....R.i.g.h.t.=.3.1.5.....T.o.p.=.4.5.....B.o.t.t.o.m.=.1.8.5.....T.e.x.t.=.S.e.t.u.p. .w.i.l.l. .g.u.i.d.e. .y.o.u. .t.h.r.o.u.g.h. .t.h.e. .i.n.s.t.a.l.l.a.t.i.o.n. .o.f. .N.T.A.S. .

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\modern-wizard.bmp

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PC bitmap, Windows 3.x format, 164 x 314 x 4, image size 26376, resolution 2834 x 2834 px/m, cbSize 26494, bits offset 118
Category:	dropped
Size (bytes):	26494
Entropy (8bit):	1.9568109962493656
Encrypted:	false
SSDEEP:	24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5:	CBE40FD2B1EC96DAEDC65DA172D90022
SHA1:	366C216220AA4329DFF6C485FD0E9B0F4F0A7944
SHA-256:	3AD2DC318056D0A2024AF1804EA741146CFC18CC404649A44610CBF8B2056CF2
SHA-512:	62990CB16E37B6B4EFF6AB03571C3A82DCAA21A1D393C3CB01D81F62287777FB0B4B27F8852B5FA71BC975FEAB5BAA486D33F2C58660210E115DE7E2BD34EA63
Malicious:	false
Reputation:	low
Preview:	BM~g......v...(.......:............g..................................................................................DDD@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDD@@@@@@..DDD....DDDDDD........................................DDDDDDDDDD....DDDDDDDDD........DD@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDD@@@@DDDDDDDDDD@@@@@@D..DD....DDDDDDD......................................DDDDDDDDDD....DDDDDDDDDD......D..D@@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDDD@@@@@DDD..D.....DDDDDD......................................DDDDDDDDD.....DDDDDDDDD......DDD..@@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDDD@@@@@@DDDD.......DDDDDD.....................................DDDDDDDDDD....DDDDDDDDDD.....DDDDD..@@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDD@@@@@@DDDDDD.......DDDDDD....................................DDDDDDDDD....DDDDDDDDDD......DDDDDD..@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\nsExec.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	7168
Entropy (8bit):	5.298362543684714
Encrypted:	false
SSDEEP:	96:J9zdzBzMDByZtr/HDQIUIq9m6v6vBckzu9wSBpLEgvElHlernNQaSGYuH2DQ:JykDr/HA5v6G2IElFernNQZGdHW
MD5:	675C4948E1EFC929EDCABFE67148EDDD
SHA1:	F5BDD2C4329ED2732ECFE3423C3CC482606EB28E
SHA-256:	1076CA39C449ED1A968021B76EF31F22A5692DFAFEEA29460E8D970A63C59906
SHA-512:	61737021F86F54279D0A4E35DB0D0808E9A55D89784A31D597F2E4B65B7BBEEC99AA6C79D65258259130EEDA2E5B2820F4F1247777A3010F2DC53E30C612A683
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........................,.................Rich...........................PE..L.....Oa...........!......................... ...............................P............@..........................$..l.... ..P............................@....................................................... ...............................text............................... ..`.rdata..<.... ......................@..@.data........0......................@....reloc.......@......................@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\nsProcess.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	3.9482021331339556
Encrypted:	false
SSDEEP:	48:SKgfJzwtr95f5wiXnfkm4ZixVWmWDYWWDYvt6ENGAa4GW6ENcuHdtjq6vo:hZ9Htnfd/xVJ3W3V6aQ4GW6azdtj
MD5:	05450FACE243B3A7472407B999B03A72
SHA1:	FFD88AF2E338AE606C444390F7EAAF5F4AEF2CD9
SHA-256:	95FE9D92512FF2318CC2520311EF9145B2CEE01209AB0E1B6E45C7CE1D4D0E89
SHA-512:	F4CBE30166AFF20A226A7150D93A876873BA699D80D7E9F46F32A9B4753FA7966C3113A3124340B39CA67A13205463A413E740E541E742903E3F89AF5A53AD3B
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........^W.a.W.a.W.a...<.T.a.W.`.X.a.R.>.V.a.R.=.V.a.R.;.V.a.RichW.a.........................PE..L.....D...........!......................... ...............................P......................................."..v.... ..(............................@..`.................................................... ..@............................text...}........................... ..`.rdata....... ......................@..@.data........0......................@....reloc.......@......................@..B........................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsq53E3.tmp

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	data
Category:	dropped
Size (bytes):	51903663
Entropy (8bit):	7.190613352911228
Encrypted:	false
SSDEEP:	1572864:5ZwZMD5/IzLdouPS2/gmKylK/eF3cHiIv6v:zKXa2rQv6v
MD5:	DA6260F50BC060E4633B5462E710C042
SHA1:	7387485E2C4AEFEC98F48B5D0B3D57E3371712FE
SHA-256:	294E9735E6F3FA15566142FCC3A380107EEEFCC3CAEF67F4199CDE83EDD488D3
SHA-512:	B2DB15C6D0DB0490D1AC498CCFF88EA9EFE50A657C94DCAF6DEE2A703593FB61BF9E29B1CA40405044C3274895DC28D3866EB1345A0DA19033FB9DC843E98169
Malicious:	false
Yara Hits:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: C:\Users\user\AppData\Local\Temp\nsq53E3.tmp, Author: Joe Security
Reputation:	low
Preview:	J.......,................C......h...........................................k...y.......................z...................%...............................................................................................................................................................G...J............*..................C...............................................f.......D...I...M.......a.......................c...............h.......N...S...^.......a.......................................g......._...d...e.......a.......................................j.......f...k...l.......a...............................................................................................................x...............a...............................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\NTAS MS3000X.lnk

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Mon Oct 28 02:48:08 2024, mtime=Mon Oct 28 21:41:22 2024, atime=Mon Oct 28 02:48:08 2024, length=13479936, window=hide
Category:	dropped
Size (bytes):	2154
Entropy (8bit):	3.602419448281886
Encrypted:	false
SSDEEP:	48:8IZxRfdOIr7QFYR9Pdfr7vSdfr77xfr7fbyg:8mr+YlrTYrfZr7by
MD5:	2960E7FAE796DF54D00DAAED7E23AC06
SHA1:	FC958D442D70C33F0D1A2696624098F6951C9497
SHA-256:	3FBA7F7DA78E3E89C2BE98758E88ADF4B8B91B6AC40BAEB0CBB36C35D5D5EF4F
SHA-512:	7EF5222694433C9A4F3A11F34175A0C4A7E4CC4894F0A3CA4478B482652CD5AFDA691FF7BCC1E31171194E017C557E9305E695903EE2108369EF12A4DDD52263
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ......3.(....)..).....3.(...............................P.O. .:i.....+00.../C:\.....................1.....\Y)...PROGRA~2.........O.I\Y).....................V......Qn.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.......1.....\Y+...NIRTEC~1..r......\Y).\Y,......Z....................1q..N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.....n.2.....\Y.. .NTASMS~1.EXE..R......\Y..\Y)......Z........................N.T.A.S. .M.S.3.0.0.0.X...e.x.e.......w...............-.......v..............e.....C:\Program Files (x86)\NIR Technology Analysis Software\NTAS MS3000X.exe..Z.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.\.N.T.A.S. .M.S.3.0.0.0.X...e.x.e...C.:.\.W.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.H.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.N.I.R. .T.e.c.h.n.o.l.o.g.y. .A.n.a.l.y.s.i.s. .S.o.f.t.w.a.r.e.\.N.T.A.S. .M.S.3.0.0.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 21:40:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9773149514684416
Encrypted:	false
SSDEEP:	48:8E+FdlTttRH0idAKZdA1FehwiZUklqehSy+3:8f/o1y
MD5:	C78F57C36A20CE2354AFCBA02FD72CBD
SHA1:	97C7D8FB2AA516FC06CFA780F7470AE4F8387658
SHA-256:	A389C5EB4AEF5657BE718EC8A122310EB104C9FB119651D290B3C17891B6B4F0
SHA-512:	8FDA0F38E0B6ED765722E4A8295A1D85B13CBDC8B6C0A5109C52330477DF69EA05D5FB2844A31332B2A23FBC9C8EC3A033D56C6B318F9416622A925C2C110482
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....3..m.)..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 21:40:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9927576915723337
Encrypted:	false
SSDEEP:	48:8sjFdlTttRH0idAKZdA1seh/iZUkAQkqehly+2:8sZ/e9Q0y
MD5:	EB062A909A7CA1D9C4C01016287CD510
SHA1:	C6F2D5F164C7506BAADB03B24AD0C2DBC1C28BF3
SHA-256:	0060EF58B5984BA1F3BFBF237E6A628CC942A55B388ABE58BBC0D836746C67F6
SHA-512:	B87A75FEFF87C12C374FB537F11A83642ED59A5D3B220A5F6CE39D6195FDF08AD2C74BA835FB8DAD491BFB75ED2620EA5B5D1C9D800DC8E285DDE2F04FED4D3C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....=..m.)..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.002953495262023
Encrypted:	false
SSDEEP:	48:86FdlTttAH0idAKZdA14meh7sFiZUkmgqeh7svy+BX:8Q/Vnhy
MD5:	E28DF332AD5FD8AF945A85C9F355218F
SHA1:	65DF6A612FD11D2CBDA875A7FAF9BE08DC45BFD3
SHA-256:	17BFCCCCAA90281E1BCEB955DC162875B3E507E077FDC470E085B8832ECB01B4
SHA-512:	80F14001A5DB2313FF11D5160394F80D51EE317328522F718395583B41E8CDF6D1EBAEA843301ABC61B61A9649CB6548173B5419F429C89D61B46E49FA3A625A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 21:40:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9916229216291614
Encrypted:	false
SSDEEP:	48:8nFdlTttRH0idAKZdA1TehDiZUkwqehZy+R:8N/Vny
MD5:	EF31E3330130D8246B89D7177A91C8A9
SHA1:	9A05F40D14A9EE9B211AD6452FD68AC25C5FDFFD
SHA-256:	A9DCF34043B120F89B6B9CBC83D07973B66703615BF671FC01ACD5BCFB9AB40B
SHA-512:	7A4285FED9D3C7BBDAF339F8CC817E7414683BF4DD8CEB85DC3FFDC16F0B284717EA9CFCFAC0BEA665B5D4FBD4A38C6D32391B798800FA078A256335DBC4301F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......m.)..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 21:40:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9795025302849614
Encrypted:	false
SSDEEP:	48:84FdlTttRH0idAKZdA1dehBiZUk1W1qehry+C:8C/l9Ly
MD5:	BEC410170BDC37BBC096DA248D711AEE
SHA1:	A3D44E0E0C1E3B6AEBF5AF9DFD98986128D1582B
SHA-256:	4777E421E05C8216F986325C53C4068E9FD9EC0299739456A41409E9965AE71D
SHA-512:	32CDE0D5613A7652846C08C26133073D083F5AB2EB28EBC524172F04D9E36AE2BE476E027ED6A4BB05B105A334FF789144C8120563C704AF405CB66EF0EF16FF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....?.m.)..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 28 21:40:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.98868970995249
Encrypted:	false
SSDEEP:	48:81FdlTttRH0idAKZdA1duTeehOuTbbiZUk5OjqehOuTbhy+yT+:8n/NTfTbxWOvTbhy7T
MD5:	819B052D85CAECEED6A847C2086A20F2
SHA1:	9D17526569B6570146965201CFCEC1E25E5AF730
SHA-256:	D3F56E99EC83528AC3B1E9F319EB596E72D4E89FB5A7B4014B30345B1A28318C
SHA-512:	72417E441D032106AC252A648E4F781CE99A710C7C2C8AEC44104B7F8292EB12B7F1D5CC797D69B58A5C41C34110CDD364722FACFD9CDF86CE09F85E979EBBE6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......m.)..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Downloads\06dc3f2a-0d04-4237-8c43-2058ccd60562.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	8474
Entropy (8bit):	6.071735975484069
Encrypted:	false
SSDEEP:	192:nXWgjhZSMTrcsd6ZNYTgNHuOpY6v7amZG2FSF:nXWso46ZPHuPUG0SF
MD5:	7C50BF8CB3D34F5EF33CB6159F0B5E40
SHA1:	02796F4FFC077E3A642EF50EA2F3D52952AC2575
SHA-256:	8D6FDD023DE798332FA6A6AC4852F381ECDB924F76C8BCF28A197AA0AE1A3AAC
SHA-512:	1E4D963DA1160FCC6AFAA22DE413EDB20D8B43F19F8521612EB61971E9A7DE4244F28530F8F68C76A2D49E8FBA57E6DCEBE5929CDE152743D0FBD908AC68DEFF
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....Oa.................h...*......@6............@.......................................@..........................................................................................................................................................text...vf.......h.................. ..`.rdata...............l..............@..@.data...x...........................@....ndata...@...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	23300125
Entropy (8bit):	7.9999555114811765
Encrypted:	true
SSDEEP:	393216:ROqbVlqkYwRMD3v5RaWt4SBDDEOAp9en8a5tsLvf+xJhQPAyGdoJnf4EP:ROMX43XaWaSBD69a5EihQ++rP
MD5:	29043DC66D7FBA46B72777D0608BDF71
SHA1:	9D38A7A1BB85AA6A58B267C2F5AACEF515F7FB9F
SHA-256:	505E38486D4796E8D4436289B4094755B479BF329A675CDD562CC5BBFB662E81
SHA-512:	720AB16A8A4B36752C2D9CD388916E9E3FA61852624A2C4229AB48169250AE88D59A8C114DE5028364082730207F7CE6D7BE124F1787C3893DB0D9FCC17D4198
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....Oa.................h...*......@6............@.......................................@..........................................................................................................................................................text...vf.......h.................. ..`.rdata...............l..............@..@.data...x...........................@....ndata...@...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\Unconfirmed 279108.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	23300125
Entropy (8bit):	7.9999555114811765
Encrypted:	true
SSDEEP:	393216:ROqbVlqkYwRMD3v5RaWt4SBDDEOAp9en8a5tsLvf+xJhQPAyGdoJnf4EP:ROMX43XaWaSBD69a5EihQ++rP
MD5:	29043DC66D7FBA46B72777D0608BDF71
SHA1:	9D38A7A1BB85AA6A58B267C2F5AACEF515F7FB9F
SHA-256:	505E38486D4796E8D4436289B4094755B479BF329A675CDD562CC5BBFB662E81
SHA-512:	720AB16A8A4B36752C2D9CD388916E9E3FA61852624A2C4229AB48169250AE88D59A8C114DE5028364082730207F7CE6D7BE124F1787C3893DB0D9FCC17D4198
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....Oa.................h...*......@6............@.......................................@..........................................................................................................................................................text...vf.......h.................. ..`.rdata...............l..............@..@.data...x...........................@....ndata...@...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\COMCT232.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	164144
Entropy (8bit):	6.310435365612135
Encrypted:	false
SSDEEP:	3072:2KmE5E7DPN3MEf9T+cREG9izz30yW3Wm9ybs3MOkxZkrfI/UmL/qMtnfrod:+Q/ILkxiMM
MD5:	1B63AF252CFEFF520871F0AE37C80C5E
SHA1:	D52D32B1E1C0136803846049F5919484A64D0A85
SHA-256:	45AF0570AC918A57A0E4F868CC4198CBAC02957C6BE35EC131987101683A9F97
SHA-512:	34B0E3B0F7F160CFF89C369218AF9E761050EE235B926FB2204B29776C748BB5198C0CA82CDF19C4D96AAD0FC3591D921E38B9223C83DD8585C5656441B2353E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...[..4...........#............................... ................................. .....................................^........................m.. ....p..`...P...................................................P............................text....................... l...... ..`.data...H...........................@....rsrc...............................@....reloc.......p.......N..............@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\COMCT332.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	415176
Entropy (8bit):	5.974954032052747
Encrypted:	false
SSDEEP:	6144:dLIXG/SBt0iiVoY/pWEKDzPJxPPUIK1qDqNw:gG/vCY/M5hM8q6
MD5:	821AB1F1CF9904CB9026C686F13F0F05
SHA1:	398F64C00B026D1C6D94A6EFD180F20C010F5EE9
SHA-256:	332E6A1CB4BF722092F9E774ECC14ACDDBF95A9655BEA021681B11AAC37AC716
SHA-512:	D63C0FACD14ADFCA4E7E1E6D99D1FD1C2BE89C2C03E9835C506418A6A3FACB745888062BDF97CDAB0AD67CC8BCCB385AE10955F58150D9C4AC4A7C61E5C1E559
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......r...6..6..6.....7..y..&..2..7.....7..Rich6..........................PE..L....D.9...........!.....`...........L.......p.....(.........................p......................................pn.......c..(.......Xg...........@....... ..\|C..........................................h... .......X............................text...._.......`.................. ..`.data....7...p.......p..............@....rsrc...Xg.......p..................@..@.reloc..4L... ...P..................@..B.A.9............MSVBVM60.DLL....................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\COMCTL32.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	609824
Entropy (8bit):	6.086251427308084
Encrypted:	false
SSDEEP:	12288:Wkec4KwGf99MSOeMkeXrnhIcVthDGn2mwCyP9tDCcrcJIVulr:Wk6nTSXJI4lr
MD5:	E2BED335446B7321FF38A138B3962E8A
SHA1:	F183EAEB7E4AF955AAD1D894DC46801B715F3AD9
SHA-256:	A071A89CA5F35FF51A5631B7EA7AA882EEE1E8787640AB2E0C1F192F677EC443
SHA-512:	61BC1923E03DAA74C0061E6534E5014375EFF3728AB16DCA68830BCD687991C640DB4A6C76836CB0B92179E90159BD1F202FDB71B57DE7AD760CC677FA3636B2
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....Y.8....N&.....#.....,...........B.......@....+ .........................P...................................... $.......%..:....`...............3..........t_...%..................................................d............................text....*.......,.................. ..`.data...8....@.......2..............@....rsrc........`.......P..............@....reloc..t_.......`..................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\COMDLG32.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	152848
Entropy (8bit):	5.88912905338292
Encrypted:	false
SSDEEP:	3072:VCslb9HnH/GrQ/qCFyn7dWXSQeRDBIY/OR5JrNo2CocrJbNN6N2TRqEydc:VCsB9Hu9nweRD4JZoDxtRHj
MD5:	AB412429F1E5FB9708A8CDEA07479099
SHA1:	EB49323BE4384A0E7E36053F186B305636E82887
SHA-256:	E32D8BBE8E6985726742B496520FA47827F3B428648FA1BC34ECFFDD9BDAC240
SHA-512:	F3348DBC3B05D14482250D7C399C00533598973F8E9168B4082EE5CBB81089DFAEFCFDA5A6A3C9F05B4445D655051B7A5170C57EE32D7A783DC35A75FEE41AA9
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....:@...........#......................... ....z!.........................0......(I...............................q...............@...............:...............................................................................................text...L........ .................. ..`.data........0.......0..............@....rsrc........@.......@..............@....reloc........... ..................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\Cerea.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	923136
Entropy (8bit):	6.7543858478250725
Encrypted:	false
SSDEEP:	24576:dJPuD2nuLkS6ZqhgZ7BFU59Uwpt6w9Gbi3f1O:DMX6ZqhgZ7BFA9p9CiE
MD5:	16232706D70DFAC32CCBAD339FB987EB
SHA1:	217A14B725ABC583FD833A0CDDCAD5F0F56FCD6F
SHA-256:	58C96EB6668BA9A09A4022DD245D9E198D606613C63CC8EBD92044E9E1BDEF65
SHA-512:	7E107496DB3DBC3D9B46563EA0FA2D58FA9DC6BEFAB39539DF514DAB6AA8E48445B03EA775D39F35F1535BFA544583244B837DCE52527F3C5F24A09F37112EF0
Malicious:	true
Reputation:	low
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......b..F&..&..&......>.............>...pD.$...p..?...p..6...p..`......-..&.....2w..0..2w..'..2wF.'..&...'..2w..'..Rich&..........................PE..L...T..f...........!...(.....@......O........................................ ............@.........................0o......$...x.......@........................q..H...T...............................@...............\|............................text............................... ..`.rdata..............................@..@.data...l........"...x..............@..._RDATA..0...........................@..@.rsrc...@...........................@..@.reloc...q.......r..................@..B................................................................................................................................................................................................................................

C:\Windows\SysWOW64\DBGRID32.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	525352
Entropy (8bit):	6.30951453580689
Encrypted:	false
SSDEEP:	6144:1RMh9f2cQ02j1bNHu/v/4jk0+zlOMKSHLO7GcrxXkbFmjKUUFoQ/8qY93lsrbB20:vwts08bNHd8lOMKSHLBSxXupY3sPB20
MD5:	EC2F4FCE368DADE257D89A1BDE1DE380
SHA1:	7026E068EAAA6C46A29D1CBF50B057A1744D67CE
SHA-256:	6CC3E18193118E5D5E0D9A3C765FF2E649A99641B55A79ABF1463ED5D46928DB
SHA-512:	CDF1D5E4D7270A7A582EDAF16DFDA3253D31DF48B3AF6E333C716B1459FCE3B62C14F8B002E77DAA07C5A075B05EFD3BA3B7073C45B830D0A86D20F7D22F1F52
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...i.35...........!..............................#.........................`....... ..................................................0Q..............(........E.....................................................8............................text............................... ..`.rdata...l.......n..................@..@.data...`Z... ...,..................@....idata...............0..............@....rsrc...0Q.......R...J..............@..@.reloc...R.......T..................@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\MSCHRT20.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1009336
Entropy (8bit):	6.46634380726448
Encrypted:	false
SSDEEP:	24576:hlXNkkmkDgQPnYVGEDc9u3WiZZRUKTX44gDk:LXNBmkDgmnYVBDcoZ4a
MD5:	C80389E4872A0885CBB14FD3641166AB
SHA1:	B0B125C77E62FF50EE34896D4F11B3EB6E798D84
SHA-256:	A281C15CBDE263D4D0DA4A78FD29F861473B68464051E591E57DD693E2E68DD4
SHA-512:	9C4AF367AD39ED7D9E630367C0BDC163C61F0E1410645E0EF63198CE4AC5357EA28399C05B8489FD2E852AADA414BD883AFB2ABF859B79F2E6A802CE183E5A6A
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...qy.8.....\|.....#.....B................... ....I(........................................................................@........ ..............Q..........X...@1...............................................................................text...p@.......B.................. ..`.rdata.. ....`.......H..............@..@.data...l....@......................@....idata..............................@....rsrc....... ......................@....reloc..X...........................@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\MSCOMCT2.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	658432
Entropy (8bit):	6.4402676872286815
Encrypted:	false
SSDEEP:	12288:xcr8dgIu2/qSLebTwffmND/GUlvfVHobOjCfUg00mjI1lUKTb4pSkSN/+Ia8:xblDxuUE/GWvfVHjCfU/0mjk6KTb4/UV
MD5:	27EC2B0AEBEA97AA3F343DEA1501EC3A
SHA1:	C44B40BAA25F257D874FEE1C7B4EF9137F2CED51
SHA-256:	589E26A16D9171CE22B9A5EB95064CC96C866B1F08AB634D714231B35C2812A8
SHA-512:	25AC2951CB890A7747FAB37AC1997E842800E71325C510122599DADE0CF5BBB2CC490D87596BF8F5E9A16ADC40CE1F2E19FFB0A5671597AF6CB9E07EC7DF9B96
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....HOH...........#.....D...................`....{'................................6u...............................R.......3..........$................$......<_..p...................................................d............................text....C.......P.......... .....B. ..`.data....i...`...P...`..............@....rsrc...$...........................@....reloc...g.......p...p..............@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\MSCOMCTL.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	1070232
Entropy (8bit):	6.293384766671137
Encrypted:	false
SSDEEP:	24576:nymZqStzGz6UD2O3jo1XObi9EJtiIVMR2fc/CVjb/4cz:nRKOUDt3j4uftLMR2fOCVjb/
MD5:	766F501B61C22723536AF696A74133D4
SHA1:	B82B79C981DA0750566CDBCCCD8C7C6183E75D1B
SHA-256:	793FCA37E1848495AFFB9BFBAD543609D19E6549181E735CEB6F97B8E58FAA26
SHA-512:	84A10CB82F1E52FBC74D074CF9D8BF761425D69FE893851D490CBF466AE647FA0CD3849EA81356A3FF1C91B67C0834FF59A6F67EDDC3267C68F88667EF42FB83
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...!.R...........#..............................X'.........................@......u.....@.................................rv....... ..pf...........:...............................................................................................text...S................... .....!. ..`.data...,~.......p..................@....rsrc...pf... ...p..................@....reloc.............................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\MSCOMM32.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	103744
Entropy (8bit):	6.239678853041193
Encrypted:	false
SSDEEP:	3072:zsQgdI5Hh8p28XMehRYSdB/TYDY44UGyGfDnfra:zdgdI598jhRJpYDY4fefna
MD5:	2C6119DA3993F410E74B15112F840CB0
SHA1:	9D7AAFFC0BCF955CC75D4ECC228B1CEDA8A1856C
SHA-256:	51A1D6812E445C26C71465E2709E6D1AD587F8513002D662CD160F424F48B37C
SHA-512:	053ECE4EB2DDBA51C0D683A7AFD439ED88605AB83619DE738F7AD2495BFE9E9F16FC3B829C7FC9C779B50F039B9FAD66D16AED520A5ADFD1522A711073F78208
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....R.5....t......#...............................!................................E<..............................@m......@...........<k..............0.......H...@................................................................................text...~........................... ..`.data...............................@....rsrc....k.......l..................@....reloc..H............l..............@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\MSDATGRD.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	262328
Entropy (8bit):	6.352701591732695
Encrypted:	false
SSDEEP:	6144:XPOhgYQpryZpe2QHOvSiSb820F9PTdrn/P9ixKukk+Ld:2hgYQp1HOv7Sb820vTdbZ
MD5:	E58C03482F4848AF5F67AA9ED1D53336
SHA1:	1786F88CA101DED4C1EB661F429E38C5855D2576
SHA-256:	14FA7347DD22330206E6FE939B3BFB07DAFB84033A6CB4EB4631A544F3B59B7A
SHA-512:	69C40ADA48D10A89C320391F61E74104DBB54078EA8F6E08ED5C5EF544E3AB20C34202A46961CDDF7A47F5AB4BA391058A18F30A8AFE1BF40E05CEEF459CBB12
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...J..9...........#.........J......G..............$.................................[..........................................................................#...................................................................................text...C................... ......0 ..`.data...4...........................@....rsrc...............................@....reloc...&.......(..................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\MSFLXGRD.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	5.905604681959602
Encrypted:	false
SSDEEP:	6144:2JqZt/lyRAibp7Sc9VQY4rtb00SwXlktCfh1kKtTygD:2weAib5ScfQY4JVlkQiKtTygD
MD5:	DE120647B2C90E647B23AF40E03B86C1
SHA1:	9D0FFA23D952722BFB1028D5157B3196F362CC70
SHA-256:	1CDD4CCD9218CD6A5F82D80832343C8DF6732CF1C827C4FB4CC95D64FAB6BAB3
SHA-512:	8BD239A10EAD700E7EAEBFEECA02599D8230D841B89B7CDEDD7C2B0271A732B6D0A6F29AAA52CBCFD4A4C90CFA20553C5D0C74CB470AFA7CCFA2B4F862E47D65
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...6.(H...........#................0........ ..... ................................=............................... .......(........`..4@...............$......h....................................................................................text....................... .....}% ..`.data....6... ...0... ..............@....rsrc...4@...`...P...P..............@....reloc..^".......0..................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\MSHFLXGD.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	407104
Entropy (8bit):	6.255639633099319
Encrypted:	false
SSDEEP:	6144:a4QRB8l+Eozjop45VqmoqdvNkb8bdY1+1/FtZIx5IGbCBOMVnO6+wTfiqgJit:a4+I45MaW8bdYkZIx5IODJit
MD5:	72745B74C375324367B4809B991037CD
SHA1:	7B8F0C072958CF491B38E5E16F02E6AF05FBA4FF
SHA-256:	D42C5A2877F38F542C11D8E6352B10F2FA17FD7A06ADF62F3D132BBC5271F810
SHA-512:	3775DA84E10BD6434F8E0B2ED1B895B8D97C8541DC1E362985A033412705F2FE16D6D7250AD1B3AA7A8394427A8693CE1B1C2B4B8F60D3360672A22B1A1C8890
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........'~S.F...F...F...F...D...@...F...Z...F..Rich.F..........................PE..L...1tx5...........!.....n...................................................p.......U......................................@........................"..@.... ...>......................................................x............................text....l.......n.................. ..`.rdata..U............r..............@..@.data...`z.......T..................@....rsrc................J..............@....reloc..nI... ...J..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\MSWINSCK.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	108336
Entropy (8bit):	6.346110503261555
Encrypted:	false
SSDEEP:	3072:R7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfrb:RNkVsuaRaU6mHGb
MD5:	9484C04258830AA3C2F2A70EB041414C
SHA1:	B242A4FB0E9DCF14CB51DC36027BAFF9A79CB823
SHA-256:	BF7E47C16D7E1C0E88534F4EF95E09D0FD821ED1A06B0D95A389B35364B63FF5
SHA-512:	9D0E9F0D88594746BA41EA4A61A53498619EDA596E12D8EC37D01CFE8CEB08BE13E3727C83D630A6D9E6D03066F62444BB94EA5A0D2ED9D21A270E612DB532A0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...%S.5...........#................D........ .....".................................~...............................h...............0...f.............. .......l....................................................................................text............................... ..`.data...8.... ......................@....rsrc....f...0...h..................@....reloc..l............~..............@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\Mahalanobis.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	5.925540521816839
Encrypted:	false
SSDEEP:	1536:VvMIoInDk2QqHiI8rZRiPJTVCNb8A/Se4TVIozRPG:VTJngqHiI8r6ul8vVIozRO
MD5:	98E27B77E9B7D4EC41343EB5E966D447
SHA1:	24274F787BE664CB4F33C58B341725B4802045CF
SHA-256:	443F66DF2D9ADD17DC46C943B86F75AF6EA471DE82D90E736425C5D008A4070D
SHA-512:	DEBDCEC7CC3329264F6DB2A1065A1ED08E2EAC081E2C7EBA5ADF4815E35F2F710D89D30978E6187DB652D66161AA9F2CC8730223B76C19CDDEDC7E9EAE188721
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 2%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......(C&.l"H.l"H.l"H..>F.t"H..=B.."H..=[.i"H.l"I.6"H..=C.x"H..$N.m"H..=L.m"H.Richl"H.........PE..L...V..T...........!................8........ ............................... ......................................P@.......9..<.................................................................................... ..8............................text...:........................... ..`.rdata..."... ...0... ..............@..@.data...,....P... ...P..............@....rsrc................p..............@..@.reloc..F........ ..................@..B................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\NSIS.Library.RegTool.v3.{760CC695-7C3A-465F-9E6C-D3931A64AC97}.exe

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5120
Entropy (8bit):	4.4938295135295085
Encrypted:	false
SSDEEP:	96:GS4YFDrMrQiRdJh4Wf36qOspqME3zpHC5:JDrkQiRXhVqq/sMsC5
MD5:	33FD38910C831F54C2F6603E4E0311AC
SHA1:	E7C3F41D63C4DC98F890B896B1628F0DE70C9D40
SHA-256:	FB65E9696CD624C4708597F0192C466E9A2EB285C9163B34F559E3AA1E08F88C
SHA-512:	C56F75AB83BA9921255D0B9602ADD4CABA7C9F1E35C06C3657D2CDD470727303A31403B3813CB690EC27CA6EC622ADAF5C0A9255EC18F2D8B07F433167428D3E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 2%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........A!./r./r./r..r./r..rr../r...r./rRich./r........................PE..L...#.Oa..................................... ....@..........................@............................................... ..x.................................................................................... ...............................text............................... ..`.rdata....... ......................@..@.data........0......................@...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\PLSObj.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	180224
Entropy (8bit):	6.140833756987601
Encrypted:	false
SSDEEP:	3072:cHyI0mx9+IdL6RRQwjkfkBxocH5SYoCe7gT1i:KJdL6RRAkBxocZSmsgT1
MD5:	70242E936430C32CCB59AEEBF6E7C12F
SHA1:	7F8D5FEBB9BF374CE9CB80E10C42192A37ED6B94
SHA-256:	FC1579B46FF55EED1DF8F9C8D637C679FB4FF4A82009658D658861CF3FF72EA4
SHA-512:	6D49B52F6B7F95DB66EB930A0B29AE06137FE8675153ACA27F08725252EEDABF860314E8D1CD5D0308E1ECD4A96F0FFC6B12CF9F2C164B96BE23731037D2FCE5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 2%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........................t............................t....$....t....Rich...................PE..L....?.T...........!......... ..................................................................................................x....@..Pi......................\|....................................................................................text...b........................... ..`.rdata..s6.......@..................@..@.data...,3....... ..................@....rsrc...Pi...@...p... ..............@..@.reloc..:".......0..................@..B................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\SYSINFO.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	67376
Entropy (8bit):	6.315262485052633
Encrypted:	false
SSDEEP:	768:cY8A1SfHWfFRFndKnT8D04I6kOpWYyfR1qh+tYwn/0CP2wjU5ip+IDr0hGparYf/:c5tHW8Is6kOl6R1qhAYC/fO/hKkYfr7
MD5:	0DB04D84B06F760BE7A852A8CFC20DF2
SHA1:	FC5CD0599A43FAEBF9E7E9179DEFB79999215286
SHA-256:	6BD71E7D01B763380809DDD74A78C83E490D71779269CE78BCAC19929803BFC2
SHA-512:	4278974188035C0610255D09DFA99F34CCF49F5172B027238525357B16C91450245125C375FD41715579CA2B39E2C67DA14ADEEA8D8E13FE523F9CDABCA36C3F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....S.5...........#.........X.....................!......................... .......!...............................H...................B.............. ............................................................................................text............................... ..`.data...............................@....rsrc....B.......D..................@....reloc..............................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\TrendGraph.tlb

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	data
Category:	dropped
Size (bytes):	2309
Entropy (8bit):	4.014207078025358
Encrypted:	false
SSDEEP:	48:q5DJEyKO6iyTMoYmWq8ivpztZJGLBaVt+x1Y:q5nnG8mW2hzH4LBaV
MD5:	6B7952F89F6EAEF14BE98934F43F36C5
SHA1:	2F32F1F090E1F92B9670ADE10CD183CC4F7B7096
SHA-256:	EDB3C3F169207A9DA8525520203F10641B23FE5FED7D10E572614141BEC91E64
SHA-512:	A0D3A9B6CD79F16DE34FD7259FF0A09D5FE15F64F01CAB57879049E15CAB41E087D5D5A697F7F8271B0448353DEE39438D6B7BF300925D09EE5BD29B682EB8F6
Malicious:	false
Reputation:	low
Preview:	SLTG....#..................FD................................CompObj.dir.FAAAAAAAAA.EAAAAAAAAA............".............................................................................................................@..........\R228#4..........J............@..........4.2.........,.......E...W.....b.h.........J.4...............................\|...........x.................................................$.....!.../...=...M.......\.................w.........b.\|.......4..............................................................."..........................................................................................................@..@..........\Rffff#0..........J............@...................................................................Q............................B...G....)..........................................................................EAAAAAAAAA..CAAAAAAAAA..............E...G....)..........FAAAAAAAAA..DAAAAAAAAA..$...........F...G....)...........................

C:\Windows\SysWOW64\VB6STKIT.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	101888
Entropy (8bit):	6.117592080507365
Encrypted:	false
SSDEEP:	3072:c6v5KkE3OEc4dUN5KgzIED1LAOWOa+dSogCh:csKkE+Ec4dU/KXEDunOaC
MD5:	CFF867572B44212B01B711C1FA009537
SHA1:	3978C9F7A3D77C0BDFF4353949E2143757EEBC79
SHA-256:	DF6E2F111773ADEC3B33DCB0B31E2A4D21EF7D51740706335F411E2C999C0E6B
SHA-512:	1B77EF24B1EFB4939E4625DEB1F8EBCCC3C2EDBB49B412DADB8A3C293A265C77EA84D8EB725D3AF5BB84D9C040A91DEBE5890F57ED8750147E91F30C1A0630C4
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$................................E......Rich...........PE..L......6...........!......................... .......................................................................<.......2..................................H.................................................... ...............................text............................... ..`.rdata....... ... ..................@..@.data...x....@...<...4..............@....rsrc................p..............@..@.reloc...............x..............@..B................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\msstdfmt.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	130712
Entropy (8bit):	6.17151486290204
Encrypted:	false
SSDEEP:	3072:ylHF5hkARr++ALWQaRt4QrVbIIki/oWethP8i:ylHV9Rr++AypVbIT
MD5:	1E27A0F62EBE8277C61B89C3747CC45D
SHA1:	2418D725F55E885FED3248B39E7084F0DE8A4DEC
SHA-256:	74EF23860B9ED15587EAE06670E83ABAC1928B502DAD244875713D127D83A1DF
SHA-512:	C174D7FEEF36C1E9150952169891AB368D60ECBD0780906B1EB671B96BCEECA44F91688BA19705964E3AFEC002DFECFC664E196D4B58CFD320D28B927210AADB
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...I.R...........#.....*...................@.....$................................R.....@..........................V.......p...........4......................L....@...............................................r..p............................text....).......0.......... ....... ..`.rdata..U....@... ...@..............@..@.data........`.......`..............@....idata.......p.......p..............@....rsrc....4.......@..................@....reloc........... ..................@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\vbGraph.ocx

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	90112
Entropy (8bit):	5.278237180190825
Encrypted:	false
SSDEEP:	1536:wS1zq0RXprjZ8echFWHte/ck1IiaphD58rB:vzqqXZjZ8DFWHg1IBhNyB
MD5:	C0D5F9FE696A3D3917829CFFFBA475B9
SHA1:	2C4557CB2420971AE9F38C691E04987C5773F89D
SHA-256:	F456700DF77ECF380FC329E5847F68469531E0BBAC80CF8F64D14FBC4802DB90
SHA-512:	13769B13033F486D35817CA6C5083537AC995F80787F6707723A67292D2ED6DC1F97DBEC128FF0487F08264AF2B5E7DEE52B66997A775DD2DFD88B6BF46687CE
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$................J.......... .....!....Rich..................PE..L...A9nP...........!.........p...............................................p......v...........................................(.... ...(...................P..<...........................................`... ....................................text............................... ..`.data...............................@....rsrc....(... ...0..................@..@.reloc.......P... ...@..............@..B..:@............MSVBVM60.DLL............................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\BatteryStatus.bat

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	75
Entropy (8bit):	4.523749972540528
Encrypted:	false
SSDEEP:	3:om46KEjjYZ2Ddyhmf5SCXRRAXjQT:sGMwf73yI
MD5:	3A2F8CA846444E96D4EB11D79D703A54
SHA1:	715CEC938747C64949ED6B1464C28E53F1BC4F94
SHA-256:	948B0029A2B932CE94B51D03BAC26B2EB4D50F5A824172FD37AD0F2C57C0841A
SHA-512:	F6DC8540210760530C2798E89E9EBBC99F596EBDB122AD37018540205D876D9A27321290DA1F1134C6BA7F5F437A4C370DAD40973D64D77F1AFEAF5768D3C25C
Malicious:	false
Reputation:	low
Preview:	WMIC PATH Win32_Battery Get BAtteryStatus /all >> C:\wga\BatteryStatus.txt

C:\wga\Scripts\DisableAutomaticUpdates.bat

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	401
Entropy (8bit):	5.296362107336356
Encrypted:	false
SSDEEP:	12:MBs6wCp2luyVLMVjGaufiL96V5uV+EVT8ogTmpQNEKmpI:C+vVIVVuawVc9dgKpQApI
MD5:	D2BC5B56B3F082D3370016C548818B5C
SHA1:	46110F22BE20747553343F29AAE5AC7410402987
SHA-256:	5A8DDD5B8EFA1DD345D19DAC94F3788E6A52959693AA60DE5FDC898DBFBD4ABA
SHA-512:	AE04D54DFE25F8097FF70BFF6DF4A569F307720BB521BD3F01A108D6A89F139C659D7BF812BC2595D58197F290DAEF61F9C2EACE07F42409108DE8984450BD4B
Malicious:	false
Reputation:	low
Preview:	@echo off....if not "%1"=="am_admin" (powershell start -verb runas '%0' am_admin & exit /b)....net stop wuauserv....net stop UsoSvc ....reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t REG_DWORD /d 1 /f....RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters....sc config wuauserv start= disabled....sc config UsoSvc start= disabled....

C:\wga\Scripts\RestartApp\RestartApp.exe

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2265262
Entropy (8bit):	7.938167263006417
Encrypted:	false
SSDEEP:	49152:HXzXTv8nG5NaTf7/X2CTUelJDGkA+5SQwysJ0hNDuuk5BTGo+yhO1T:338Gk/bZDKkANQw5J0hdHk5BTjC
MD5:	5785C2A72B2EEA90C7EE2A70C3B5F5E7
SHA1:	AB952740927BF515CD9049EE53C98FA2B716DF9E
SHA-256:	2584069472523AE993DE342C10DE1BEA49E410BF00B3430A7FC6D7F27B79F442
SHA-512:	3F1246200559D2CA0AC01C482A8155CE7CFD7C8685530FEC2108848B937924E4CF8A4B20583E883592C9C9014F04FEE35C8F17F1D5D7A1FC91440B2DC6F41596
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......0.&t..ut..ut..u...ts..u...t..u...t~..u...uw..u&..tS..u&..te..u&..t}..u...tq..ut..u...u...t`..u...tu..uRicht..u........................PE..d.....b.........."..........H......p..........@............................. ......xz#...`.....................................................<................ ..............`......................................8...............P............................text............................... ..`.rdata..............................@..@.data...............................@....pdata... ......."..................@..@_RDATA..............................@..@.rsrc...............................@..@.reloc..`...........................@..B................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\VCRUNTIME140.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	97168
Entropy (8bit):	6.424686954579329
Encrypted:	false
SSDEEP:	1536:yKHLG4SsAzAvadZw+1Hcx8uIYNUzU6Ha4aecbK/zJZ0/b:yKrfZ+jPYNz6Ha4aecbK/FZK
MD5:	A87575E7CF8967E481241F13940EE4F7
SHA1:	879098B8A353A39E16C79E6479195D43CE98629E
SHA-256:	DED5ADAA94341E6C62AEA03845762591666381DCA30EB7C17261DD154121B83E
SHA-512:	E112F267AE4C9A592D0DD2A19B50187EB13E25F23DED74C2E6CCDE458BCDAEE99F4E3E0A00BAF0E3362167AE7B7FE4F96ECBCD265CC584C1C3A4D1AC316E92F0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......*..qn.."n.."n.."...#l.."g.."e.."n.."B.."<..#c.."<..#~.."<..#q.."<..#o.."<.g"o.."<..#o.."Richn.."................PE..d...Y.-a.........." .........`......p.....................................................`A.........................................B..4....J...............p..X....X...#..........h,..T............................,..8............................................text............................... ..`.rdata...@.......B..................@..@.data...@....`.......@..............@....pdata..X....p.......D..............@..@_RDATA...............P..............@..@.rsrc................R..............@..@.reloc...............V..............@..B........................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_asyncio.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	61392
Entropy (8bit):	6.0218157703663335
Encrypted:	false
SSDEEP:	1536:SWbvivBeDp/9rflsqHEY85IM5nxd7SyGb:SWbvaBePrflsqHEP5IM5njW
MD5:	483BFC095EB82F33F46AEFBB21D97012
SHA1:	DEF348A201C9D1434514CA9F5FC7385CA0BD2184
SHA-256:	5E25E2823ED0571CFDBAE0B1D1347AE035293F2B0AC454FB8B0388F3600FD4B6
SHA-512:	FE38B3585FBFAF7465B31FBC124420CFBD1B719EA72A9AE9F24103D056C8FA9AE21C2A7DD3073810222405457BEFF89BBB688DAECED3219351A30992A6721705
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........B...B...B...K...@......@......I......J......A......A.....@...B.........C......C.....p.C......C...RichB...........................PE..d...F.;b.........." .....R..........`.....................................................`............................................P... ...d................................... v..T............................v..8............p...............................text....Q.......R.................. ..`.rdata...I...p...J...V..............@..@.data...8...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_bz2.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	79824
Entropy (8bit):	6.491046686623371
Encrypted:	false
SSDEEP:	1536:szXz7Bgrj7FUHfuwttm8ebvwyBIMtVk7SyNU:oXzVMFOfuIRebvwyBIMtVk8
MD5:	A1FBCFBD82DE566A6C99D1A7AB2D8A69
SHA1:	3E8BA4C925C07F17C7DFFAB8FBB7B8B8863CAD76
SHA-256:	0897E209676F5835F62E5985D7793C884FD91B0CFDFAFF893FC05176F2F82095
SHA-512:	55679427C041B2311CFF4E97672102962F9D831E84F06F05600ECDC3826F6BE5046AA541955F57F06E82EE72A4EE36F086DA1F664F493FBE4CC0806E925AFA04
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......+..>o.mo.mo.mf.=me.m=..lm.m..Sml.m=..lc.m=..lg.m=..lk.m..ll.m...lm.mo.m0.m..lg.m..ln.m.Qmn.m..ln.mRicho.m................PE..d...k.;b.........." .........\..............................................P......L?....`......................................... ...H...h........0....... ..,............@......`...T...............................8............................................text.............................. ..`.rdata...=.......>..................@..@.data...............................@....pdata..,.... ......................@..@.rsrc........0......................@..@.reloc.......@......................@..B................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_ctypes.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	119760
Entropy (8bit):	5.969565883567079
Encrypted:	false
SSDEEP:	3072:zW66GKh4hqyIVQoavMSut/SfrS34ep9x3FIMQPwnJC:C6QKtkSuZSfrSlFLJC
MD5:	92276F41FF9C856F4DBFA6508614E96C
SHA1:	5BC8C3555E3407A3C78385FF2657DE3DEC55988E
SHA-256:	9AB1F8CBB50DB3D9A00F74447A2275A89EC52D1139FC0A93010E59C412C2C850
SHA-512:	9DF63EF04EA890DD0D38A26AC64A92392CF0A8D0AD77929727238E9E456450518404C1B6BB40844522FCA27761C4E864550AACB96E825C4E4B367A59892A09E7
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........S..2c..2c..2c..J...2c..Gb..2c..Gf..2c..Gg..2c..G`..2c..Gb..2c.y@g..2c.y@b..2c.0[b..2c..2b.B2c..Gn..2c..Gc..2c..G...2c..Ga..2c.Rich.2c.........PE..d...\.;b.........." ................ [.............................................._.....`..........................................Q.......Q..........................................T........................... ...8...............@............................text............................... ..`.rdata...k.......l..................@..@.data...T>...p...8...\..............@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_curses.cp310-win_amd64.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	166400
Entropy (8bit):	6.224299780700963
Encrypted:	false
SSDEEP:	3072:RtkT1QXc2X6zzSa77IIq6/iuQPwXiHj2AR/LZ7k+Ht/4/PrIscQZJFAa5ufpsrCU:RtdXc2X6zzSa77IIq6/iuQPwXiHj2ARV
MD5:	1358FCAFFC39DDCC9869DDC968FBDDDE
SHA1:	A739AD362A2E2E4FC474C4300A94C3275420A977
SHA-256:	D2399D5350686B9EE9DB3432272B34E3648F769B5696322036678B9A3AC02C3B
SHA-512:	029C0D987CE823EB3BA91A5EBF36764018CBAF8F3BE4B10985FF186A781D28AB1F0E5A6C45EFEBEE165052292FB55B0DA5A9DDA261CAD75CD5D4EF704DE06270
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........[...[...[...R.m.W.......Y.......Z.......P.......S......._.......Y...O...\...[..........q.......Y.......Z.......Z.......Z...Rich[...........PE..d....E.a.........." .....\...b............................................................`.............................................`...........................................`...................................8............p...............................text....[.......\.................. ..`.rdata.......p.......`..............@..@.data........ ...\..................@....pdata...............h..............@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_decimal.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	248272
Entropy (8bit):	6.520017293014889
Encrypted:	false
SSDEEP:	6144:mqdhOW8XTMJQ3cWvod/fCVJya9qWMa3pLW1A1/h84nHvX:nOW8wJN9R0QgznPX
MD5:	09BE0CAF0E2BD7BEA37A27527CB13C2E
SHA1:	E543B614B3D008514979697A458B6D075B62E037
SHA-256:	2673B0EC0769C2513CFB63D72CBFADD3DD43963D30DDC368C6232DAB1F607EE1
SHA-512:	5B98FB115E40A03B67A24CB18B2C2549EFE8E15E7C1674D00307453EC0550D340CF4EA5BC4EEE856ACFA53BFD0F138D5CAE771399DB444091F3B8D2EEA6C4CFB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......$.:.`.T.`.T.`.T.i..n.T.2.U.b.T.2.Q.l.T.2.P.h.T.2.W.d.T..U.c.T...U.b.T.`.U...T..W.a.T..Y.o.T..T.a.T....a.T..V.a.T.Rich`.T.........PE..d...O.;b.........." .....r...:......................................................aM....`..........................................T..P...@U...................'..............<... ...T...............................8............................................text....q.......r.................. ..`.rdata...............v..............@..@.data....)...p...$...N..............@....pdata...'.......(...r..............@..@.rsrc...............................@..@.reloc..<...........................@..B........................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_elementtree.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	124368
Entropy (8bit):	6.323194685073362
Encrypted:	false
SSDEEP:	3072:jd58ohq7BSOEpSHOIS+CgSenCODxr9MJ8MJTMJ4MJZnH750kYEuxIM1f/+:jo7BSOAjIS+yEVD997IDkb50Ou6
MD5:	74141475205188B2B2E0E0366BFD7245
SHA1:	2B1221EBF629565769239596D1266DBE9794DF77
SHA-256:	5C5037F6896F83E0F4CA55EFB8557227C02A1097BB4338BC579785609FEF7FE3
SHA-512:	801530A7F4A9977111E8F482883B9B8374D6B6D16972B42870ADD02331BF8D8E26C5734D578CC81A17BE77223D2D871B09818943DD8E507A349FE27C296A54DC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.............j...j...j......j.k...j.o...j.n...j.i...j.E.k...j.+.k...j...k.^.j.E.g...j.E.j...j.E.....j.E.h...j.Rich..j.................PE..d...L.;b.........." ................y....................................................`.............................................X......x...............................P....I..T............................J..8............@...............................text...i(......................... ..`.rdata..bg...@...h..................@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..P...........................@..B........................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_hashlib.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	60880
Entropy (8bit):	6.063310063277386
Encrypted:	false
SSDEEP:	768:8nvx+iVPY7S+NbM2S2uoU1lyZjWv4so5IM5IkzrYiSyvchym:FWPYW+Nbs2uP1UZjWv1o5IM5I4r7Syrm
MD5:	AD6E31DBA413BE7E082FAB3DBAFB3ECC
SHA1:	F26886C841D1C61FB0DA14E20E57E7202EEFBACC
SHA-256:	2E30544D07F1C55D741B03992EA57D1AA519EDAAA121E889F301A5B8B6557FE4
SHA-512:	6401664E5C942D98C6FA955CC2424DFA0C973BD0AC1E515F7640C975BBA366AF1B3E403EA50E753F837DCD82A04AF2CE043E22B15FA9976AF7CBB30B3AC80452
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........SQ..2?.2?.2?.J..2?..G>.2?..G:.2?..G;.2?..G<.2?..G>.2?.i@>.2?.:K>.2?.2>.<2?..G2.2?..G?.2?..G..2?..G=.2?.Rich.2?.................PE..d...g.;b.........." .....P...........<..............................................Z.....`.............................................P...`...................................T....k..T............................k..8............`.. ............................text....N.......P.................. ..`.rdata..dP...`...R...T..............@..@.data...H...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..T...........................@..B................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_lzma.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	154064
Entropy (8bit):	6.806339070341912
Encrypted:	false
SSDEEP:	3072:rD6xBrqs+vs0H0q8bnpbVZbXsAI0znfo9mNoJ5vSpxpBIMe19cc:rD63rcRLCV+qwYOJ50Pk
MD5:	A6BEE109071BBCF24E4D82498D376F82
SHA1:	1BABACDFAA60E39E21602908047219D111ED8657
SHA-256:	CE72D59A0E96077C9EA3F1FD7B011287248DC8D80FD3C16916A1D9040A9A941F
SHA-512:	8CB2DAFD19F212E71FA32CB74DAD303AF68EAA77A63CCF6D3A6AE82E09AC988F71FE82F8F2858A9C616B06DC42023203FA9F7511FAC32023BE0BC8392272C336
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......N.l....................X.......X.......X.......X..........................o......0........................Rich....................PE..d...x.;b.........." .....^...........2..............................................!.....`.............................................L...,...x....`.......@.......:.......p..D...H{..T............................{..8............p...............................text....].......^.................. ..`.rdata.......p.......b..............@..@.data........0......................@....pdata.......@......................@..@.rsrc........`......................@..@.reloc..D....p.......8..............@..B........................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_multiprocessing.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	30672
Entropy (8bit):	6.134621063551815
Encrypted:	false
SSDEEP:	768:J2ZtYyJmJxGp9Ao5dUpIMRtIFYiSyvQ/hkGJ:8LYzJsp6o5dUpIMRtIF7SyaJ
MD5:	429673C64CCFEFDFB3F3C9E0FB4402AB
SHA1:	D96B83D6A76397D56AD3EC09E8B3C10D7932C309
SHA-256:	2C1BC1C4827F61BC4282C2C60BB5C921EB91F6E487422E662CB54F5D1510BAA6
SHA-512:	DB19034FE1B133C79E7DB5B568CCB0328BB0E2D3A1DDE5443BF5DFFA19A1EDDCE4A0D647810804312DAA0F02E3206F8D5AF5F40F551037A58B8343D45569E88A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........s... ... ... .d ... ...!... ...!... ...!... ...!... Y..!... ... ... 7..!... Y..!... Y..!... Y.. ... Y..!... Rich... ........................PE..d...I.;b.........." .........<......0.....................................................`.........................................0D..`....D..x....p.......`.......X..............`3..T............................3..8............0...............................text............................... ..`.rdata..\|....0... ..."..............@..@.data........P.......B..............@....pdata.......`.......H..............@..@.rsrc........p.......L..............@..@.reloc...............V..............@..B................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_overlapped.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	46032
Entropy (8bit):	6.175344600987053
Encrypted:	false
SSDEEP:	768:JAM30iXUtee0Vb47XTTClsXFOPRcqdc5U9IMst0YiSyvrVhVI:JAM3hRxcqd19IMst07SyTFI
MD5:	BF3E86152B52D3F0E73D0767CDE63F9F
SHA1:	3863C480A2D9A24288D63F83FA2586664EC813A2
SHA-256:	20C94846417EE3CA43DAA5FAE61595AD7E52645657FDA5EFFE64800FE335FF0D
SHA-512:	8643F94ECE38246769FF9BA87A249B8AFDE137CF193FF4D452937197CE576816C1CE044C4AD2951BC5535CC3ACF1B27E9F2BE043B8175C5A2CA2190B05DC0235
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........J...$...$...$.......$..%...$..!...$.. ...$..'...$.).%...$...%...$.G.%...$.G. ...$.).)...$.).$...$.).....$.).&...$.Rich..$.................PE..d...N.;b.........." .....>...X...... .....................................................`.........................................0w..X....w......................................`U..T............................U..8............P...............................text...~<.......>.................. ..`.rdata..F4...P...6...B..............@..@.data................x..............@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_queue.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	27600
Entropy (8bit):	6.257072196493869
Encrypted:	false
SSDEEP:	384:vfqkQfdUCUFYS9F6Xg6rEGSSVYptTDbFIM7UoIYiSy1pCQW3hL8:sdUC+F6rEGSSVYTFIM7UxYiSyvQho
MD5:	8DD33FE76645636520C5D976B8A2B6FC
SHA1:	12988DDD52CBB0CE0F3B96CE19A1827B237ED5F7
SHA-256:	8E7E758150EA066299A956F268C3EB04BC800E9F3395402CD407C486844A9595
SHA-512:	E7B4B5662EBD8EFB2E4B6F47EB2021AFACD52B100DB2DF66331CA79A4FB2149CAC621D5F18AB8AB9CFADBD677274DB798EBAD9B1D3E46E29F4C92828FD88C187
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........a.B...B...B...K..@.......@.......I.......J.......A.......A......@...B...........C.......C.......C.......C...RichB...........PE..d...P.;b.........." .........6.......................................................x....`.........................................@C..L....C..d....p.......`.......L...............3..T...........................p3..8............0.. ............................text...*........................... ..`.rdata.......0......................@..@.data........P.......8..............@....pdata.......`.......<..............@..@.rsrc........p.......@..............@..@.reloc...............J..............@..B................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_socket.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	75216
Entropy (8bit):	6.144161991303721
Encrypted:	false
SSDEEP:	1536:0mtvsZWgzruIAl9/s+S+pByXc/+lvFIMQwY7Sy3:z5IJzrAl9/sT+pB8c/SvFIMQwYJ
MD5:	C5378BAC8C03D7EF46305EE8394560F5
SHA1:	2AA7BC90C0EC4D21113B8AA6709569D59FADD329
SHA-256:	130DE3506471878031AECC4C9D38355A4719EDD3786F27262A724EFC287A47B9
SHA-512:	1ECB88C62A9DAAD93EC85F137440E782DCC40D7F1598B5809AB41BF86A5C97224E2361C0E738C1387C6376F2F24D284583FD001C4E1324D72D6989D0B84BF856
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........w...............nk......c.......c.......c.......c......[c..........P...5d......[c......[c......[c......[c......Rich............................PE..d...c.;b.........." .....l...........%.......................................P......Q.....`.............................................P............0....... ..<............@..........T..............................8............................................text...Vj.......l.................. ..`.rdata..Ts.......t...p..............@..@.data...............................@....pdata..<.... ......................@..@.rsrc........0......................@..@.reloc.......@......................@..B................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\_ssl.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	156624
Entropy (8bit):	5.946961436538374
Encrypted:	false
SSDEEP:	3072:l9Y1GpXg28PqCBWZxVkc85nu9ekFc8j8V+AOXLkdWXxZIIkjIIBIMt7LU:l9Y0BgdqCETavu9L6V+RrIo
MD5:	9D810454BC451FF440EC95DE36088909
SHA1:	8C890B934A2D84C548A09461CA1E783810F075BE
SHA-256:	5A4C78ADEDF0BCB5FC422FAAC619B4C7B57E3D7BA4F2D47A98C1FB81A503B6B7
SHA-512:	0800666F848FAEC976366DBFD2C65E7B7E1D8375D5D9E7D019BF364A1F480216C271C3BCF994DBAB19290D336CF691CD8235E636F3DBC4D2A77F4760871C19ED
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......d.D. .. .. ..)..&..r.+."..r./.,..r...(..r.).#....+."....+.$.. .+......+.'....'.".....!......!....(.!..Rich ..........................PE..d...n.;b.........." ................l*............................................... ....`.............................................d............`.......P.......D.......p..8.......T...............................8............................................text.............................. ..`.rdata..............................@..@.data....j.......f..................@....pdata.......P....... ..............@..@.rsrc........`.......,..............@..@.reloc..8....p.......6..............@..B........................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-console-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.458359560533944
Encrypted:	false
SSDEEP:	192:/OQWvhW/WYnO/VWQ4SWc0UsxZAqnajT9CAo:/jWvhWvUsUs/Al39Fo
MD5:	91349F1933351A23775579B3A2FEFD45
SHA1:	FF40F191016BFB0A158C3031D4EC7817FD1853BE
SHA-256:	F90C8863B729004F2A92553A1A0E35F7F492EEE2476390294E00EAEBEC8AEA4B
SHA-512:	95F14264C0B894ADD409E387BFE050425B99EDEDF4B4BA9283912F8615D3CE354063AF8D0F0D86A0C036F9B994E09BB73947940AAE66E0136BA4CD38963EF6DC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...B4............" .........0...............................................@.......2....`A........................................p...,............0...............0...!..............p............................................................................rdata..t...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-datetime-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.307593849772893
Encrypted:	false
SSDEEP:	192:RWvhWYWYnO/VWQ4mWxmLH2vArqnajKsbTYf:RWvhWGUfLH24rlGsbTYf
MD5:	C74823AD8AFB1E4D25E76EAE3AD272B3
SHA1:	E2889B4D9E786C4F8DFB9B8F778842683F0A0D3C
SHA-256:	644863DA8C3AA79C98391C88F0A5E395AC4EF81A72B42CF438CFFBCF8C594011
SHA-512:	E5C9CE8C1A8593FF02BB6D34D349B090AB4EFF1F8EE50672E961057C96271BA241DD5AAAA50EA93A79ECC26D6DEABB777BB7D9F5AF291AE7869E25FE295BF09C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...FBe..........." .........0...............................................@......._....`A........................................p................0...............0...!..............p............................................................................rdata..X...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-debug-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.31254895256882
Encrypted:	false
SSDEEP:	192:fWvhWiWYnO/VWQ4mWAyTIl10Qj21EhqnajKsxOgr:fWvhWYUQI/0QqslGsxV
MD5:	116CE207ACBD1BBCC89C86A354CDB68B
SHA1:	2020376A881F6D7DEF34E34328826A90D8DC833B
SHA-256:	3C504DE5FB49F7135C1147275A34B961962158E8DB0C6F6BE9C35C1E03C7A1E5
SHA-512:	0F44C451EF1ACE4949A9EB692C6791C60E4CCC826EE2118E75F3DA56910EE12FBB674B09F3CFA5A5F2E5B79026964A8B46FEA49920FA98ADAF714645F89B7B11
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...@4............" .........0...............................................@............`A........................................p................0...............0...!..............p............................................................................rdata..d...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-errorhandling-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20936
Entropy (8bit):	4.3616846540147876
Encrypted:	false
SSDEEP:	192:9S7xeiImxD3exWvhWgWWYnO/VWQ4uWACz8sxZAqnajT9CUT6:9S7xeiIFxWvhWpUts/Al39d2
MD5:	CE00F7B670F1ED07778F52CBE9F56C40
SHA1:	2A0D325DEE766F339B40D98D0A9F29B38283635A
SHA-256:	D398DE63A123C7F1DE08F9C5078CDB4EE21FD9919E17A4AE0C1D722A43822A4A
SHA-512:	655D63A583829871B5A9ED21FFA064A89591FB7F272ED923B40C59C9F9EB7C658AEB59A3F55E36A451B132A6B9C883F538DA595C52A975A834ACDCDB87738898
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d......v.........." .........0...............................................@.......b....`A........................................p................0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-file-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	25040
Entropy (8bit):	4.626117408671028
Encrypted:	false
SSDEEP:	192:1VtaNYPvVX8rFTsvWvhWFWYnO/VWQ4mW97XEKup3JdqnajKszt/6:zPvVXhWvhW1U0X7aJdlGsztS
MD5:	473E443B9F5F6475EA52CF3B2884FD55
SHA1:	77371B3534D6060D80B13C96573C23607BE7A59B
SHA-256:	C64E668CC3257CC874757034D71FB88FED1090F80EB9029E0D2D1893E72528F8
SHA-512:	D09C2B1878D2879174169DE60C2D59E6228A41865D525F241BCE8BD41A758A96426A57EB68B4637DFF8972AD902E0926F87FFDE1E39A24692F89AB7D73D672BA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...!..e.........." .........@...............................................P......CR....`A........................................p................@...............@...!..............p............................................................................rdata..L........ ..................@..@.data........0......................@....rsrc........@.......0..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-file-l1-2-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.326465648493341
Encrypted:	false
SSDEEP:	192:DQIEWvhW8QWYnO/VWQ4+WletLsxZAqnajT9Co2Z:DJEWvhW8+UpLs/Al391u
MD5:	95FC810F959D96C61F6F9253127BFF71
SHA1:	8FC9C9734C403B0B84BC179959981AA091C17099
SHA-256:	5FB473086E44333037E8D1CAF6B8D28DE65456DD857AE5B8B4E19C8ADE503805
SHA-512:	349CF1ABE86CF719E3133DFEAAC49653178C06749745263BB166EE05B3D68011D673027976869A5D6B2982F789E826867DD5436965A95D0A5165BEA151DB28A6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d................" .........0...............................................@............`A........................................p...L............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-file-l2-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	18696
Entropy (8bit):	7.054510010549814
Encrypted:	false
SSDEEP:	384:eVrW1hWbvm0GftpBjzH4m3S9gTlUK3dsl:eVuAViaB/6sl
MD5:	BFFFA7117FD9B1622C66D949BAC3F1D7
SHA1:	402B7B8F8DCFD321B1D12FC85A1EE5137A5569B2
SHA-256:	1EA267A2E6284F17DD548C6F2285E19F7EDB15D6E737A55391140CE5CB95225E
SHA-512:	B319CC7B436B1BE165CDF6FFCAB8A87FE29DE78F7E0B14C8F562BE160481FB5483289BD5956FDC1D8660DA7A3F86D8EEDE35C6CC2B7C3D4C852DECF4B2DCDB7F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......3A..w e.w e.w e..De.v e..Da.u e..D..v e..Dg.v e.Richw e.........PE..d...4.F>.........." .........................................................0............`.........................................`................ ...................=..............T............................................................................rdata..............................@..@.rsrc........ ......................@..@................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-handle-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.329835028404457
Encrypted:	false
SSDEEP:	192:GUfWvhWPWYnO/VWQ4SWR7me4qhsxZAqnajT9CtGhZX:GUfWvhW/UNe3s/Al39UGhZX
MD5:	DDD31AB6399024FD61041E824D397C13
SHA1:	43A0C3525C29F4679E31466340298A245A605694
SHA-256:	03B5BD989F0E9C447A264B44AD6F93FBD80DC9823ADA5F375E5D98ED6BDDD13B
SHA-512:	C1D968B41371A2ACEBAFBBF08845DDD7708193A85A4FB87D28738C7B2A86032DDBF3F4EF4E85EF166D0E51AE637383875D2DA3D0D544FCEF976C68F82043688A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d......0.........." .........0...............................................@...... C....`A........................................p...`............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-heap-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.445941612036242
Encrypted:	false
SSDEEP:	192:axlAWvhWeEWYnO/VWQ4mWArSHj21EhqnajKsx0DeQ:axlAWvhWeyUPSHqslGsx0l
MD5:	47CCA62042D7ED37C5C8D8A1041F43EC
SHA1:	9AF85D4C516EAC366E6FBE1FFB5DA393EC301532
SHA-256:	25CC0F44125DCEA82D720EC7A80708249D46729977381D0D67EE37E12F94C849
SHA-512:	ACB0D53AE8D649CBDACE30F9A315346C22746B00A8AC0FF98D3111561A6048B6A7179BB79608341A9A2EC54A2ECF2AD709320354F73F0971802C87CBA474A874
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...)\Ix.........." .........0...............................................@......?U....`A........................................p................0...............0...!..............p............................................................................rdata..L...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-interlocked-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.366921454631929
Encrypted:	false
SSDEEP:	192:fDWvhWJWYnO/VWQ4mWbAKj21EhqnajKsxX:fDWvhWJUrKqslGsxX
MD5:	84E5FC648C387F20584EFA78016C3EA7
SHA1:	B043FEC81226B4030565E148590311FD598D4A6D
SHA-256:	A0F20ED9AB9E6578834D2AC3DDF75087AD93819DAA4410143FAA3A662C1DC26F
SHA-512:	8AC10DCCCC20271B15F62B05F37CFE8EB11D220D8B5F5DDD8327198D3BD7571D8CEB0DF9FFB7456E0FF6CF93AD23B54E5B918E303AA178A14B50217B9F3C2413
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d......d.........." .........0...............................................@.......8....`A........................................p................0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-libraryloader-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20952
Entropy (8bit):	4.604549269908708
Encrypted:	false
SSDEEP:	192:jTvuBL3BBLxWvhWiWYnO/VWQ4SW7iOk9qnajNAxTma:jTvuBL3BXWvhWYUxhlxAxTma
MD5:	50A8D5145CE9E8EFEE56711EB313AA02
SHA1:	137421B39D58A0217FB29CE6FA10D27F33D9DF5D
SHA-256:	73B41B25E9A369AACAC41AFA657506605864383DBE68A7C15D1AECA820108B52
SHA-512:	3CEA7B2A4730B1BC0DB71F7B0FEEFF93A92C25474F08AB0C609EC1D2768035DB6F2091090741991A7736DFFA9B2E10AD8241EB0A0D999CD009238787D961722F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...P.1..........." .........0...............................................@............`A........................................p................0...............0...!..............p............................................................................rdata..`...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-louserzation-l1-2-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20960
Entropy (8bit):	5.121413335282895
Encrypted:	false
SSDEEP:	384:zPnaOMw3zdp3bwjGzue9/0jCRrndbDWvhWfUCBes9lRy:GOMwBprwjGzue9/0jCRrndbwIJQX
MD5:	03A206ACD8506A98E0739CE47E01B953
SHA1:	E31AADF5311EDB2EC94A1ED6626530E113DFAE4F
SHA-256:	17C5B3BAA666E84EE40672322BD7D7E358D245E1654BD002C4A3E69B6506D9F6
SHA-512:	AFFFFE086058FFEA5BFE7B4CF6ACA351EC85E314B3E8BE5D47E3B9CA59C3460561A0C9CCBA0F1464DC4586D6C9EB6595FB7515CA7B3347283162D9E8206688DF
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d.....3..........." .........0...............................................@.......;....`A........................................p................0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-memory-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.477589000416838
Encrypted:	false
SSDEEP:	192:bqfWvhWoWYnO/VWQ4mWKNeGj21EhqnajKsxf:bGWvhWWUnqslGsxf
MD5:	CB2E52B235A4883402FAF85A0B6EB923
SHA1:	03257349C507EEF2E20A85EC4A950AFED3C0E8D0
SHA-256:	7871EAEEC7F71C11CC51A2CC85700CFF018888720DAFC69195A2D54837B6DDED
SHA-512:	20DC9D43496389EC1A5600F46EFC6D029C5ACB8D0AD225DB34491DB707EE6A73163FA804F7043938C7A4204E66B402B94ADBB2BC0A45FDF43AC29BB0A75F9306
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...dIx..........." .........0...............................................@......L_....`A........................................p...l............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-namedpipe-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20960
Entropy (8bit):	4.419479197826125
Encrypted:	false
SSDEEP:	96:mMGEWvhWwihDEs3fDHDsQYQ6gLgmVeDD0ADEs3TDL2L4m2grMWaLN5DEs3KwpZWm:5WvhW0WYnO/VWQ4SWKeE+ZtCqqnaj+Re
MD5:	5130C6E55478B6573B563550A6725D01
SHA1:	9A086DB9C281770CF09C871E2BE89E57B2120BD0
SHA-256:	4F9F6EEE3E1D8D83690AE393F22582D8CF46E30F601E714F2E695D90AA13A5D1
SHA-512:	0579DA770FFE94F6719FE59BBD1A788C8DB386BC8B1C8EC3CA8F47D69E4865D568D99BF29705EA01D106B341B2FB691B6AE15BFA3ABB63ABEFA82CEC0E1DE449
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d....2............" .........0...............................................@.......R....`A........................................p................0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-processenvironment-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.615344186707344
Encrypted:	false
SSDEEP:	192:wF3qWvhWrWYnO/VWQ4mWL7Jbj21EhqnajKsxu:wF6WvhWLUcNqslGsxu
MD5:	3D598F26DE38185AF412C82E82659D90
SHA1:	187B708E3B8BB80BA868B4B5EE45B110E9C38F20
SHA-256:	935C9CA00F314645A10DAB40E8E79AB543CF9380194EAEBE0EA7E74E4C356D9E
SHA-512:	B37A9442C9471EDAB5CB418D6EDDA68A94799FE4CD44A8B4F65FDFA841A2FBA03BC557EA6FAEDADF24C1B9D5D281919FDF3EC3547DE1CC8C420F890FF9B36611
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d................" .........0...............................................@.......x....`A........................................p...H............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-processthreads-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.979932113777858
Encrypted:	false
SSDEEP:	384:pck1JzNcKSIGqAWvhWTUpMX7aJdlGsztD7:1cKSswKG7aJGy
MD5:	A123275F08D1212D06451B2E84BD6CC9
SHA1:	1C58BB01CB7359A3912BC232D2A35ECF8E7FA9D0
SHA-256:	1D6432128AF78BC8FBC697E1429225D5E9377C916ADC2FBD42C89E01AB3F0336
SHA-512:	4D2E2038CABEF028AA9B43E9768F29F3B3E77E4376BEA8BCB47BD110D6CC6B24713FBA7F10D54DE75BA095C4E03C17030F25ACB199B63F8FFD56E2D5138F5E28
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d......Y.........." .........0...............................................@......37....`A........................................p................0...............0...!..............p............................................................................rdata..4...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-processthreads-l1-1-1.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.51763636627732
Encrypted:	false
SSDEEP:	192:uwQpUwzDfIeOWvhWgWYnO/VWQ4WWWXtpPH2vArqnajKsbTYWWG:uZDfIeOWvhWOUFbPH24rlGsbTYWj
MD5:	B27EEB752278D9B29BCB85B9E21DFFCE
SHA1:	CD4E423DB7965AF1977CCD9AF15C6C57875FAB7C
SHA-256:	1A9353D63287FCCEA1C4C25477E53B0E7AB3486A041126889394095E72DE2CFC
SHA-512:	91C0EDF007F28A62C291174BF8C8D16DB8F9E250976994CA608186AEC668D4FEBE9DCCB5FD8CFECDAF6323EEBB20652696223AB6E458938A9A26533585A3E4A8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...%p_W.........." .........0...............................................@............`A........................................p................0...............0...!..............p............................................................................rdata..,...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-profile-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.292487225045068
Encrypted:	false
SSDEEP:	192:nWvhW/WYnO/VWQ4SWYujPDsxZAqnajT9CnI:nWvhWvUgLs/Al39SI
MD5:	343819577A5993AD875B77EB6D3C1FDD
SHA1:	28C4CFA6DBA05D92A480665C3EFEF1EFFEAAE83C
SHA-256:	C8FA4643052A8366133A95E4933E90F1EFE0A239CE044B3C3EF98614A07BB8AA
SHA-512:	7583F397A2EB53A93E0B92579D63955EB1BD74EBF334D0816CD888A183062BA98B2CF8BAC7C82EC4F93928639D9136981526EB7CB77FD76FA2E4A0484EDF2472
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d................" .........0...............................................@.......)....`A........................................p................0...............0...!..............p............................................................................rdata.. ...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-rtlsupport-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.469285906991824
Encrypted:	false
SSDEEP:	192:fGeVTg6WvhWxWYnO/VWQ4mWu3nj21EhqnajKsxu+:fGeVTg6WvhWxUVnqslGsxl
MD5:	0D4649239AC2BAD2FAB0D7BB3AB28083
SHA1:	EF7CD7D5EDD93565A00FC1D0BD318A99F2EE0413
SHA-256:	5CECA4D76C7BEB8A056B82009BF9AE91DE3CEDD1667E647D78439B3216752D1C
SHA-512:	7FCCD116692AA8281A7441EEB264E78180B968E50A45E4DA70625D13687BBF13AD09779ED45EF03DDD8E94465A38D91922F0F5389055E0440249569416930316
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d.....C}.........." .........0...............................................@............`A........................................p...<............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-string-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20960
Entropy (8bit):	4.37714284317044
Encrypted:	false
SSDEEP:	192:B0yyMvJWvhW4WYnO/VWQ4SWQwwL80Hy5qnajsBkc/0:pyMvJWvhWmUAGslEp/0
MD5:	AB0BF832B73EA4106FA3C910B16A84AB
SHA1:	BCE59D04EE56A16ABD82DDE1369E5BE338130DD6
SHA-256:	28C7747E3B151BAA5F7B32D25F035EEC043B16C48F2FAF218D4E4FB26786AEF4
SHA-512:	B73149822A7D9D7AC35E8362A62D8E18AA100A615F13195DEB44F59A9DB3EF05A54D46A0689375C64FCADCC34C5C509FCC11DCA549A5C1EBB53FD894DA7EFA5E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d....%fN.........." .........0...............................................@............`A........................................p................0...............0...!..............p............................................................................rdata..<...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-synch-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20960
Entropy (8bit):	4.887552818348622
Encrypted:	false
SSDEEP:	384:3cwidv3V0dfpkXc0vVaLnWvhW2UrHIrlS7Za:sHdv3VqpkXc0vVagxeRa
MD5:	DD1B354CC7D62ABB74F6BEF0F7379F78
SHA1:	974B9BBA01F46D2DC18310D82E3A5F7FBB5CB308
SHA-256:	B94BE080A8D59016F9AFBE5E62A4DFA1393B5A14238B5219FF73F5E05ADF3EAF
SHA-512:	7F588CF2D483BF2F9C3A1012AA087C3E894D0B54A4AD4C0CEFA5F0A6AD9413158C047DCBFCBE41396B24C4F9E881510535975030CB0D20615146B7C1458DF110
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d....>F..........." .........0...............................................@...........`A........................................p...X............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-synch-l1-2-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20952
Entropy (8bit):	4.562872367259201
Encrypted:	false
SSDEEP:	192:BtZ3ZtIWvhWENWYnO/VWQ4SWnddOk9qnajNA+3t:BtZ3wWvhWEdUwhlxA+3t
MD5:	7BDAA7E5F327ADB68DE7E4C7FDFFAA40
SHA1:	34034384A9C8E27487FEC7E47D03F7C49BF476B1
SHA-256:	643BDE63E6B7A66D123DB682F84F42D663E02144B4C9BDD64C26C67273D838D3
SHA-512:	5F9351BC769E883960C6BF2ACDF7B35A8B685BF77DA7461F7E8F4CED04CBF23FB85420775AD6DAFF04675BCDCCA1366528E87DFFA8D29DB39DE07B1CB4A6DE75
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d................" .........0...............................................@............`A........................................p...x............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-sysinfo-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.613600540424647
Encrypted:	false
SSDEEP:	192:egdKIMFemVWvhWuWYnO/VWQ4SWY1tcU0sxZAqnajT9CdB2:LH0WvhWUUL0s/Al39AB2
MD5:	2AEEB6DBEBEA1177D2DD7623D2730139
SHA1:	3F935BA983AB696F056766C3800DB62C0EC6E7FE
SHA-256:	45C859C5FBA6D90A1CA024F28DB505E300FC3A434CF31415E60E5A60E36F1888
SHA-512:	7D798C0950D1EB3833DCCB5AF4E54AB923C4D6F20D028ABBEDA8CD2FA34DBCA48699AF6A358923F16C5528BB3320CF3091400740A247D6229CFE017630488002
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d......d.........." .........0...............................................@......].....`A........................................p...H............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-timezone-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20952
Entropy (8bit):	4.549155804699673
Encrypted:	false
SSDEEP:	96:Um9eVqqSK4GEWvhWw7ADEs3fDHDsQYQ6gLgmVeDD0ADEs3TDL2L4m2grMWaLNpDd:McWvhWaWYnO/VWQ4SWRzOk9qnajNA+G+
MD5:	F1C33921470337EDA023DEE2BBA77806
SHA1:	F5141609BE944E521631CB9C8C81F809E6F0942A
SHA-256:	7821BEADEAB01BB8AB3712B896B092786D85E7A220EF35149092DB431895871B
SHA-512:	D3131B9A011083B469CE05A3B4241E7B366CED42240EA429FBBE3770EE9073C532AEE2FA8C206E6B579D26DBB838EFD5AB84D4DFA8B4ED106BC9B42DC05C35E3
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d................" .........0...............................................@............`A........................................p...H............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-core-util-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.317570781379114
Encrypted:	false
SSDEEP:	192:BPWvhWeWYnO/VWQ4mWiuj21EhqnajKsxEqgx:xWvhWEU0qslGsxEnx
MD5:	3E0953A9808E311550A1CF87671CA47F
SHA1:	36D062CF7E3782F1D50DF471B007B92A43904841
SHA-256:	3A7DEA9B37332B3A53418F35D26FF68A792ABE33B115779163EEB7A243D5E60D
SHA-512:	B7B91301D852547A9F132D9B96C285C06F8520C2FB168F145EF218B722191074C2266FCE1ED091E61E4E948EFF7EB382B367E8374392862A073164D850C7461B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d......#.........." .........0...............................................@............`A........................................p...<............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-conio-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.644612400492228
Encrypted:	false
SSDEEP:	192:o0WvhW3WYnO/VWQ4mW8igj21EhqnajKsx1VE:HWvhWnU3qslGsx1K
MD5:	1457E688256F800B81DDEC93CC1395BD
SHA1:	2C0C0223135E7DF64AD2BA0140E0E35381241ED4
SHA-256:	96704FFC2462B40B89C5A4E8C0BF12CB51D6F5A2D2032D348B205E72F86B9967
SHA-512:	935A637B34CA530CEBE1AB4EE54586797B7FFD93283DEEAAEBDADCE14E910DF4ECCCFC1D10873F17495C4A42D7DF72BBC1DF56A7CDE5644C6FC111C5C831BA24
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...8.?;.........." .........0...............................................@.......a....`A........................................P................0...............0...!..............p............................................................................rdata..@...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-convert-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	25040
Entropy (8bit):	4.646836162625819
Encrypted:	false
SSDEEP:	192:1jQ/w8u4cy1WvhW69WYnO/VWQ4mWANsAeTXEKup3JdqnajKszt5g:Ny1WvhWgURsTX7aJdlGszt5g
MD5:	864D71816EB5CCA38E63403EDDE397C4
SHA1:	DAE1EE2DA6C8244294C42CC2D744729F6C1E08F7
SHA-256:	8318F97EFE79EE68C235D0B29F5C0A4460F163579A7A035324EEDA2FAEC8A9AB
SHA-512:	7F04BCC768BE8614E4ECCC246D19E5C576E6D00E0190AC47B0C0F23D7F85EA9A12298E660D6FA43613CC72521437E39B82C526F0D84C12CFAEE3B8D2312E06BC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d....A............" .........@...............................................P............`A........................................P................@...............@...!..............p............................................................................rdata..>........ ..................@..@.data........0......................@....rsrc........@.......0..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-environment-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.455589856342262
Encrypted:	false
SSDEEP:	192:/LGju+OXWvhWReWYnO/VWQ4WWPilQH2vArqnajKsbTYjZ:/LGjuJWvhW+UD2H24rlGsbTYF
MD5:	65DCBCF130B75D7F7B8D61D2A7CADB8C
SHA1:	C7F2465F4F903BE63FC27FF0A6F0AA8CF70E41CE
SHA-256:	1D1BD8458B3607E42C805CE0A87AEAC53AB818AA4656A257D3FB4B1F74F307B7
SHA-512:	E8DCBAAF5AF5ACF7CB9A973D5404C348D1EC478B2A7B8ADAE5BD4BEFC8BBC12A55DD34795E8D7A810F59C9DC716DF892C4DF2894685A8DB6F4D055AFF36FA305
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d................." .........0...............................................@......X.....`A........................................P..."............0...............0...!..............p............................................................................rdata..r...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-filesystem-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20960
Entropy (8bit):	4.948585356785261
Encrypted:	false
SSDEEP:	192:jSnWlC0i5CtWvhWJKWYnO/VWQ4SWuMV6uUgxfzfqnajmgYjB:jSnWm5CtWvhWWUyoIrlS/jB
MD5:	338F281C22F203F51C3C102ED5D70DEE
SHA1:	06711C8269781348469C3E5F0BC742095D6D9143
SHA-256:	CC40976B256A0DE12DB33F3B8D3877778F8F6D3074CF1178703C9E331A2793CB
SHA-512:	DD2680A9E847FE7398844E2419D7DC31A4EB69A21A45CBBC083B03EFC48F71A02FC67D7EABD6456F8FF39F592885FC7706BBB6BC3556BC5269C28B0C805F8776
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d......0.........." .........0...............................................@......}.....`A........................................P................0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-heap-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.588995999404637
Encrypted:	false
SSDEEP:	192:PJFY17aFBRIWvhWrWYnO/VWQ4mWCeH2vArqnajKsbTY3VA:RQ1WvhWLUUH24rlGsbTYlA
MD5:	3C136F64FE405ED46D6C1033E9619411
SHA1:	B088633BF160A6D3774F22E03DD4AE6EDAC9FEE2
SHA-256:	8905E2C2E21F1912C488844BE9678DE3BE30B958973CEEF23305D7D4F79A3F7F
SHA-512:	2981167DE4F03096FB2237C2FA69B0DC702B87004B1092681F0C1590F1D08DCE73A5CE5DBFDFD6E214CF8CA88CFDF6D01B3CDD1ACBC958D7D5AB3B84D795DAD1
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...G..d.........." .........0...............................................@.......g....`A........................................P................0...............0...!..............p............................................................................rdata..f...........................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-locale-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.543457266689795
Encrypted:	false
SSDEEP:	192:a8yWvhWVWYnO/VWQ4mWWewXEKup3JdqnajKsztb:atWvhWFUtnX7aJdlGsztb
MD5:	D740DF64E14E8C534FAAD4EA5B03245C
SHA1:	4E95B50392A60B8E3F9D3C8050E194769CD138D6
SHA-256:	5D1C2A62F78A37014AD1DA57E72BCF2E0811BCC090A1DB1A42574D8D77DCBF22
SHA-512:	61EB4925DC8EC916FD96BB144D830432E8AA58FADE539228E619B8D6C503D57872ECF004059879BFE0C3A35A0ADFF0BB39EED3D1D74C23963F6567391E9E7B4B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d....h\..........." .........0...............................................@............`A........................................P...e............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-math-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	29136
Entropy (8bit):	4.9432383635879145
Encrypted:	false
SSDEEP:	384:PQM4Oe59Ckb1hgmLJWvhWXUR8HFs/Al39/zU:4Mq59Bb1jesDO/kg
MD5:	63770930925DCE98744256CDB5BAC235
SHA1:	D30CA931E40154AC362A97F6C00E8A91689C74E0
SHA-256:	2B4D055B15FB5E945F0FA6E31BFA83FED68C2753F6B52BD4E2C5D74D944BD780
SHA-512:	CD55BD82D09CE5C02F77128F45860C0B7A646A6C03655879DED104D89E3857499A1B000059311FE89A3A34B3D5704E7D28361AB4D9873E48C0442D89D393936F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...J..R.........." .........P...............................................`......F\....`A........................................P....%...........P...............P...!..............p............................................................................rdata...&.......0..................@..@.data........@......................@....rsrc........P.......@..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-process-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.609560979277497
Encrypted:	false
SSDEEP:	192:Iadyqjd7VWvhWpWYnO/VWQ4mWB89XEKup3JdqnajKszt4x:IaQ0WvhWpU9X7aJdlGsztS
MD5:	BF211B13E14270C595588D2977AADF77
SHA1:	3E0A14482C19192EFF777C3ED07262E5BBBA844A
SHA-256:	EDC6DBD6E0F3C486EC5A7657D373D0CBC5FD923699251A9FD3D40D1F9AF59F54
SHA-512:	13AF70C56C6A16609F74627E1F2E508D4E5325F844B71DA824D4EC3DAC0D4A5D2359E1C7F71F0932BD10D6012F28A0A4F10EC217810076B7483373EA670A1D62
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d....w>..........." .........0...............................................@.......x....`A........................................P...x............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-runtime-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	25056
Entropy (8bit):	4.791648695106493
Encrypted:	false
SSDEEP:	192:iHUW9MPrpJhhf4AN5/KiZWvhW3WYnO/VWQ4SWLz8Yn8qqnaj+tX:iHUZr7PWvhWnUylitX
MD5:	833AFDB36BDB82B902BDF549E11F3659
SHA1:	0D9F6B6C24D225EB9638304737CC5A647FC8F908
SHA-256:	71D469DFE48394C88C3409A17EB4D8BF73DAC6D8D516E5D9209362210295944C
SHA-512:	869702BF8A7533DA9CF1A57D7EEC6FC74C5DDC896C7DCB3619EA5148EF793FF6E79404112A4C4CCB7DC5D8398E9D843456E1F3AA2D6DB46AAF0EDA4A11FCAD5E
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...4{.+.........." .........@...............................................P......P.....`A........................................P...4............@...............@...!..............p............................................................................rdata........... ..................@..@.data........0......................@....rsrc........@.......0..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-stdio-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	25040
Entropy (8bit):	5.080903698633584
Encrypted:	false
SSDEEP:	192:2A2uWYFxEpahrWvhWUnWYnO/VWQ4SWSmRqhsxZAqnajT9CkSE7:2IFVhrWvhWOUwRYs/Al399SE7
MD5:	E91F0D056131BE37C9239AC1E8EAEFD7
SHA1:	09E3F5C0F26A542A6B45ED6FCB984E6D0C95BB60
SHA-256:	020D585C01DBEDBD989170172A0A25009822ACFAF6C8451B4F7A5265413FF755
SHA-512:	4DFA50ADC5538645B606DA5EA09DC509C8911FAFD4D82958EA55D01B40DD27691CDD8F6BF55DFDFDD32D94D140CAC11B5B937372200F379AEC0CA28166F4F0A6
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...+b............" .........@...............................................P......q.....`A........................................P...a............@...............@...!..............p............................................................................rdata........... ..................@..@.data........0......................@....rsrc........@.......0..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-string-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	25056
Entropy (8bit):	5.075238220340062
Encrypted:	false
SSDEEP:	384:8ozmVx0C5yguNvZ5VQgx3SbwA7yMVIkFGl3WvhWkUsMs9lR+j:8ozmT5yguNvZ5VQgx3SbwA71IkFPvzMl
MD5:	2CB41FCE51A93573F389A1955AE66ABC
SHA1:	FE4F62731B82BC47D10FBB0E5EC1DE7EB31678EC
SHA-256:	4438861E448BBF1EABE89EFD356FD5E7CBC455F0C2BD08C140BAA34F095DBB57
SHA-512:	4AF08D659D8059B801C7DAB74BB9A6AFB33F0D8583616C9F5267539C99CCA0C7F8497C5D1EA205B0A686713C7AE67F8F6CD7AEC7B9B2D50FDAF76BBDD26E71B7
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d....w.e.........." .........@...............................................P......>.....`A........................................P................@...............@...!..............p............................................................................rdata../........ ..................@..@.data........0......................@....rsrc........@.......0..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-time-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.999705478347049
Encrypted:	false
SSDEEP:	192:FNDKWvhW/WYnO/VWQ4mWVx2Rlj21EhqnajKsx9i4n+:KWvhWvUexqlqslGsx9F+
MD5:	CEF9E6AD9FBE35890FA957AD5492B56C
SHA1:	4783977A0041A129813D14F9BEBCCD67C28325E6
SHA-256:	325EC6B56C272DC3D08490077CC9040FE629BDD176968CA10AE6738686332FAF
SHA-512:	49FF991A6BCEE2F6FDB1CC012A057841764FCCA1A6301437435E1194DFC2D94E692AA26A715884472EAC7D86A666C6A494E12789D8AF4662F5B64EFE6D885C0F
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d.....p..........." .........0...............................................@......Q.....`A........................................P................0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\api-ms-win-crt-utility-l1-1-0.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	20944
Entropy (8bit):	4.532210317961846
Encrypted:	false
SSDEEP:	192:7PjfHQduHWvhWjWYnO/VWQ4mWEwX5H2vArqnajKsbTY24:vfxWvhWjUoX5H24rlGsbTY24
MD5:	EA87F1D1629CE0D0CD79AD4F94516476
SHA1:	3A0FF5DF9A0552E248F697AF5D22A7FDECB1FDA7
SHA-256:	03873A89AD7E12ACEEF027352E3C1696789F8299B9A36A7581B552082BC0B8CB
SHA-512:	3A7FA75DCD48BE4EA6E92A053C819AFFF40157D284A2A15915930957AB0938F4ADB11D9530A30373F89D94DB49F0424EB95FED3A97746A05D0277B67742CD16D
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.....v...v...v...~...v...v...v...r...v.....v...t...v.Rich..v.................PE..d...w............." .........0...............................................@............`A........................................P...^............0...............0...!..............p............................................................................rdata..............................@..@.data........ ......................@....rsrc........0....... ..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\base_library.zip

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	831584
Entropy (8bit):	5.700236187618045
Encrypted:	false
SSDEEP:	12288:4EHYKPY+WygVqFcIWrA4a2YCddVw9lfJEawKxSRMNwj:4EHYMVgDLa2XVw9lfJEawKIMNwj
MD5:	A928BECDFAC91F1D4407812A6057E55D
SHA1:	C0FE8327B62290DAE4D26E7C9A68C92790337616
SHA-256:	8D62379941335D3B87F9EB3D8D9A83E7E84630C305DEE477AED9B3A78CA444E9
SHA-512:	600210E0BD4162E2122BC2499D803D7972582504578EA6D7B9ABFBD8D8B377563F3F7B3B73701ACF6E411CC4D838726A0C4805415D192B7EFF6365D39A468D4C
Malicious:	false
Reputation:	low
Preview:	PK..........!................_collections_abc.pyco........k..u.s{.....................@.......d.Z.d.d.l.m.Z.m.Z...d.d.l.Z.e.e.e.....Z.e.d...Z.d.d...Z.e.e...Z.[.g.d...Z.d.Z.e.e.d.....Z.e.e.e.......Z.e.e.i.........Z.e.e.i.........Z.e.e.i.........Z.e.e.g.....Z.e.e.e.g.......Z.e.e.e.d.......Z.e.e.e.d.d.>.......Z.e.e.e.......Z.e.e.d.....Z e.e.d.....Z!e.e.e"......Z#e.i.......Z$e.i.......Z%e.i.......Z&e.e.j'..Z(e.d.d.......Z)d.d...Ze..Ze.e..Z+e.,....[d.d...Z-e-..Z-e.e-..Z.[-d.d...Z/G.d.d...d.e.d...Z0G.d.d...d.e.d...Z1G.d.d...d.e1..Z2e2.3e+....G.d.d...d.e.d...Z4G.d.d ..d e4..Z5G.d!d"..d"e5..Z6e6.3e.....G.d#d$..d$e.d...Z7G.d%d&..d&e7..Z8e8.3e.....e8.3e.....e8.3e.....e8.3e.....e8.3e.....e8.3e.....e8.3e.....e8.3e.....e8.3e.....e8.3e.....e8.3e ....e8.3e!....e8.3e#....G.d'd(..d(e7..Z9G.d)d..de8..Z:e:.3e)....G.d+d,..d,e.d...Z;G.d-d...d.e.d...Z<G.d/d0..d0e;e7e<..Z=G.d1d2..d2e...Z>d3d4..Z?d5d6..Z@d7d8..ZAG.d9d:..d:e.d...ZBG.d;d<..d<e=..ZCeC.3eD....G.d=d>..d>eC..ZEeE.3e.....G.d?d@..d@e=..ZFeF

C:\wga\Scripts\RestartApp\libcrypto-1_1.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	3439512
Entropy (8bit):	6.096012359425593
Encrypted:	false
SSDEEP:	98304:kw+jlHDGV+EafwAlViBksm1CPwDv3uFfJ1:1slHDG2fwAriXm1CPwDv3uFfJ1
MD5:	AB01C808BED8164133E5279595437D3D
SHA1:	0F512756A8DB22576EC2E20CF0CAFEC7786FB12B
SHA-256:	9C0A0A11629CCED6A064932E95A0158EE936739D75A56338702FED97CB0BAD55
SHA-512:	4043CDA02F6950ABDC47413CFD8A0BA5C462F16BCD4F339F9F5A690823F4D0916478CAB5CAE81A3D5B03A8A196E17A716B06AFEE3F92DEC3102E3BBC674774F2
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........R.m.R.m.R.m.[...@.m.0.l.P.m.0.h.^.m.0.i.Z.m.0.n.V.m.R.l..m..l.Y.m...n.O.m...i.+.m...m.S.m....S.m...o.S.m.RichR.m.........................PE..d...`.0b.........." ......$...................................................5......4...`..........................................x/..h...:4.@....p4.\|....p2.8....\4.......4..O....,.8...........................`.,.@............04..............................text.....$.......$................. ..`.rdata........$.......$.............@..@.data...!z....1..,....1.............@....pdata.......p2.......1.............@..@.idata..^#...04..$....3.............@..@.00cfg..u....`4.......3.............@..@.rsrc...\|....p4.......3.............@..@.reloc...y....4..z....3.............@..B................................................................................................................................................

C:\wga\Scripts\RestartApp\libffi-7.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	32792
Entropy (8bit):	6.3566777719925565
Encrypted:	false
SSDEEP:	384:2nypDwZH1XYEMXvdQOsNFYzsQDELCvURDa7qscTHstU0NsICwHLZxXYIoBneEAR8:2l0Vn5Q28J8qsqMttktDxOpWDG4yKRF
MD5:	EEF7981412BE8EA459064D3090F4B3AA
SHA1:	C60DA4830CE27AFC234B3C3014C583F7F0A5A925
SHA-256:	F60DD9F2FCBD495674DFC1555EFFB710EB081FC7D4CAE5FA58C438AB50405081
SHA-512:	DC9FF4202F74A13CA9949A123DFF4C0223DA969F49E9348FEAF93DA4470F7BE82CFA1D392566EAAA836D77DDE7193FED15A8395509F72A0E9F97C66C0A096016
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......6.3.r}]Ar}]Ar}]A{..Ap}]A .\@p}]A..\@q}]Ar}\AU}]A .X@~}]A .Y@z}]A .^@q}]A..Y@t}]A..^@s}]A..]@s}]A.._@s}]ARichr}]A........................PE..d......].........." .....F...$.......I....................................................`..........................................j.......m..P....................f...............b...............................b...............`.. ............................text....D.......F.................. ..`.rdata..H....`.......J..............@..@.data................^..............@....pdata...............`..............@..@.reloc...............d..............@..B................................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\libssl-1_1.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	698784
Entropy (8bit):	5.533720236597082
Encrypted:	false
SSDEEP:	12288:waXWJ978LddzAPcWTWxYx2OCf2QmAr39Zu+DIpEpXKWRq0qwMUxQU2lvz:dddzAjKnD/QGXKzpwMUCU2lvz
MD5:	DE72697933D7673279FB85FD48D1A4DD
SHA1:	085FD4C6FB6D89FFCC9B2741947B74F0766FC383
SHA-256:	ED1C8769F5096AFD000FC730A37B11177FCF90890345071AB7FBCEAC684D571F
SHA-512:	0FD4678C65DA181D7C27B19056D5AB0E5DD0E9714E9606E524CDAD9E46EC4D0B35FE22D594282309F718B30E065F6896674D3EDCE6B3B0C8EB637A3680715C2C
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......{.T.?.:.?.:.?.:.6f..3.:.]f;.=.:..l;.=.:.]f?.3.:.]f>.7.:.]f9.;.:..g;.<.:.?.;...:..g>...:..g:.>.:..g.>.:..g8.>.:.Rich?.:.........PE..d.....0b.........." .....<...T......<................................................[....`.........................................00...N..HE..........s.......\|M..............h... ...8...............................@............0..H............................text....:.......<.................. ..`.rdata..:....P...0...@..............@..@.data...AM.......D...p..............@....pdata..dV.......X..................@..@.idata..PW...0...X..................@..@.00cfg..u............d..............@..@.rsrc...s............f..............@..@.reloc..a............n..............@..B................................................................................................................................................................

C:\wga\Scripts\RestartApp\psutil\_psutil_windows.cp310-win_amd64.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	68608
Entropy (8bit):	5.961109352783955
Encrypted:	false
SSDEEP:	1536:0wy3Ddmq9owPqaeMIBKwYx4cae5gFW8T:iNeMIBKwYx4cae5gFW
MD5:	6E04A1D41B0897878583702D398BDC88
SHA1:	33F396728C57505B0B897B547C692A9CF8959A36
SHA-256:	BE9701A1C3E48599D8C22C2C371D5493E9A97FA5063022C110842ECB886214E3
SHA-512:	F9FC5D2C480FB7EDCAD9490925B75007523ADECDD0400ADAAAB888D12F1E67ABFD614A142E38A93BA3B42DE2E466F1AA0F48625E76BBE3868B9C308B0BDF4D66
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........~-...C...C...C..g....C.jB...C.jF...C.jG...C.j@...C.mjB...C..mB...C...B.u.C.ajK...C.ajC...C.aj....C.ajA...C.Rich..C.........................PE..d......a.........." .........p...............................................P............`.............................................p...@...@....0....... ...............@..........................................8............................................text............................... ..`.rdata..0P.......R..................@..@.data...8...........................@....pdata....... ......................@..@.rsrc........0......................@..@.reloc.......@......................@..B................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\pyexpat.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	194000
Entropy (8bit):	6.329514930714924
Encrypted:	false
SSDEEP:	3072:7nQ4xikRdMcLkEI0YULfRVCAdfaYXySx2aQzMad42xy+YqNgrKqNrEqNTqNkypFd:7Q4b3MokE9VRUAdfaYXHQzM+Dy+UrZMj
MD5:	8B9855E1B442B22984DC07A8C6D9D2ED
SHA1:	2E708FBF1344731BCA3C603763E409190C019D7F
SHA-256:	4D0F50757A4D9ABE249BD7EBEA35243D4897911A72DE213DDB6C6945FEF49E06
SHA-512:	59CA1CBC51A0B9857E921E769587B021BC3F157D8680BB8F7D7F99DEB90405DB92051E9BE8891399379D918AFC5D8CB36123297D748C5265AE0855613B277809
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........#...B.J.B.J.B.J.::J.B.J.7.K.B.J.7.K.B.J.7.K.B.J.7.K.B.J`7.K.B.J.0.K.B.J.B.J.B.J`7.K.B.J`7.K.B.J`7VJ.B.J`7.K.B.JRich.B.J........PE..d...T.;b.........." ......................................................................`.........................................p...P............................................4..T...........................P5..8............ ...............................text............................... ..`.rdata...... ......................@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\python310.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	4445648
Entropy (8bit):	6.4546320595851725
Encrypted:	false
SSDEEP:	49152:kAz5zjppNAQdRnpoFPN7RhvPSUrRBthux243ahuxZplZTJycg7gpP7Bz5AIu35H8:9NPNE1NJpGgk7J3uJHsMraSSFP+4j
MD5:	A1185BEF38FDBA5E3FE6A71F93A9D142
SHA1:	E2B40F5E518AD000002B239A84C153FDC35DF4EB
SHA-256:	8D0BEC69554317CCF1796C505D749D5C9F3BE74CCBFCE1D9E4D5FE64A536AE9E
SHA-512:	CB9BAEA9B483B9153EFE2F453D6AC0F0846B140E465D07244F651C946900BFCD768A6B4C0C335ECEBB45810BF08B7324501EA22B40CC7061B2F2BB98ED7897F4
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........U...4...4...4...A...4...[n..4...A...4...A...4...A...4...L...4..mF...4...4...5...A..~4...A...4...Al..4...A...4..Rich.4..................PE..d...8.;b.........." .....J#..\!...............................................D.......D...`..........................................<......g=.\|....PD......0B.......C......`D..t..@.$.T.............................$.8............`#.(............................text....H#......J#................. ..`.rdata...*...`#..,...N#.............@..@.data.........=......z=.............@....pdata.......0B......&A.............@..@PyRuntim`....@D......2C.............@....rsrc........PD......6C.............@..@.reloc...t...`D..v...@C.............@..B................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\select.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	26064
Entropy (8bit):	6.3375169098613195
Encrypted:	false
SSDEEP:	384:dPjk/7e12hwheCnHqJYBsVRXFIM7Gh+IYiSy1pCQyvUhD:NUC2hwhjHqWYVFIM7GdYiSyvdhD
MD5:	63EDE3C60EE921074647EC0278E6AA45
SHA1:	A02C42D3849AD8C03CE60F2FD1797B1901441F26
SHA-256:	CB643556C2DCDB957137B25C8A33855067E0D07547E547587C9886238253BFE5
SHA-512:	D0BABC48B0E470ABDAFAD6205CC0824EEC66DBB5BFF771CEE6D99A0577373A2DE2FFAB93E86C42C7642E49999A03546F94E7630D3C58DB2CFF8F26DEBC67FCAD
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......... ...N...N...N.......N...O...N...K...N...J...N...M...N.O.O...N...O...N.!.O...N.O.C...N.O.N...N.O.....N.O.L...N.Rich..N.........................PE..d...P.;b.........." .........0......................................................#{....`.........................................`@..L....@..x....p.......`.......F..........H....2..T............................2..8............0...............................text............................... ..`.rdata.......0......................@..@.data........P.......4..............@....pdata.......`.......6..............@..@.rsrc........p.......:..............@..@.reloc..H............D..............@..B................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\ucrtbase.dll

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1016584
Entropy (8bit):	6.669319438805479
Encrypted:	false
SSDEEP:	24576:VkmZDEMHhp9v1Ikbn3ND0TNVOsIut8P4zmxvSZX0yplkA:mmZFHhp9v1Io3h0TN3pvkA
MD5:	0E0BAC3D1DCC1833EAE4E3E4CF83C4EF
SHA1:	4189F4459C54E69C6D3155A82524BDA7549A75A6
SHA-256:	8A91052EF261B5FBF3223AE9CE789AF73DFE1E9B0BA5BDBC4D564870A24F2BAE
SHA-512:	A45946E3971816F66DD7EA3788AACC384A9E95011500B458212DC104741315B85659E0D56A41570731D338BDF182141C093D3CED222C007038583CEB808E26FD
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........W..l9F.l9F.l9F...F.l9F.l8F.l9F...F.l9F..9G.l9F..:G.l9F..<G.l9F..7G.n9F..=G.l9F...F.l9F..;G.l9FRich.l9F........PE..d.....}X.........." .........`............................................................`A................................................p......................F...=......p...PX..T............................'...............O...............................text............................... ..`.rdata..<u.......v..................@..@.data....$...........r..............@....pdata.............................@..@.rsrc................4..............@..@.reloc..p............:..............@..B................................................................................................................................................................................................................................................................

C:\wga\Scripts\RestartApp\unicodedata.pyd

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1118672
Entropy (8bit):	5.37577736945913
Encrypted:	false
SSDEEP:	12288:ZrlBMmuZ63N5QCb5Pfhnzr0ql8L8kdM7IRG5eeme6VZyrIBHdQLhfFE+uOK4:JlBueZV0m81MMREtV6Vo4uYOK4
MD5:	D67AC58DA9E60E5B7EF3745FDDA74F7D
SHA1:	092FAA0A13F99FD05C63395EE8EE9AA2BB1CA478
SHA-256:	09E1D1E9190160959696AEDDB0324667FEF39F338EDC28F49B5F518B92F27F5F
SHA-512:	9D510135E4106FEF0640565E73D438B4398F7AA65A36E3EA21D8241F07FEC7A23E721E8696B3605147E5CE5365684E84E8145001201A19D7537E8F61B20CF32C
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......,.$zhOJ)hOJ)hOJ)a7.)nOJ)::K(jOJ)::O(dOJ)::N(`OJ)::I(kOJ).:K(kOJ).=K(jOJ)hOK)9OJ).:G(iOJ).:J(iOJ).:.)iOJ).:H(iOJ)RichhOJ)................PE..d...Q.;b.........." .....B..........`*.......................................@......Pv....`.............................................X...(........ .......................0......0L..T............................L..8............`..x............................text....A.......B.................. ..`.rdata......`.......F..............@..@.data...............................@....pdata..............................@..@.rsrc........ ......................@..@.reloc.......0......................@..B........................................................................................................................................................................................................................................

C:\wga\Scripts\ScrollBarWidth255.bat

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	253
Entropy (8bit):	5.3944083418125945
Encrypted:	false
SSDEEP:	6:hPxv4Bi5/4Af0wHpxTPzmwLlRya6Gg5idlKRtgV+EVTHcov:MBs6wKsEG+idl4KV+EVT8ov
MD5:	A368910CCB53CBED745423DF89D2C454
SHA1:	E20CAE7041A1E4C400EA0BAE3AE7C51175E2B7D7
SHA-256:	783D5EFA1DF7CA6A2DEDBB06CB35F0F5B0D954CC95E6AC1D9DE185E22F0D2407
SHA-512:	F899ED92577C2DB669E5F776B87D1062EFD6D54A65E9A3E606D75179094764AAE63F46A4AF46EFE4200A7D336F3314F4270769267DFAD3CE245994DD1D271BEA
Malicious:	false
Reputation:	low
Preview:	@echo off....if not "%1"=="am_admin" (powershell start -verb runas '%0' am_admin & exit /b)....reg add "HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics" /v ScrollWidth /t REG_SZ /d -255 /f..RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters....

C:\wga\Scripts\ScrollBarWidth650.bat

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.406309460258511
Encrypted:	false
SSDEEP:	6:hPxv4Bi5/4Af0wHpxTPzmwLlRya6Gg5idrtgV+EVTHcn:MBs6wKsEG+idrKV+EVT8n
MD5:	2B201871794EC684B28A702C46A02154
SHA1:	FDD5262D9429C366398857E72B443D4E1D7CB697
SHA-256:	3E8780667217F6FFFECF1F12BD3EA3851836E8E84EC234E3DD7926CF3B52712E
SHA-512:	C5F97C83062DD8117A7D6914AA021833FEE5E620FE1B116A085DA52AB550B1C06CEEF9FC1863B9B3BBEB9678ED853FAA92B8B552C637071052A6B95B8E53688A
Malicious:	false
Reputation:	low
Preview:	@echo off....if not "%1"=="am_admin" (powershell start -verb runas '%0' am_admin & exit /b)....reg add "HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics" /v ScrollWidth /t REG_SZ /d -650 /f..RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters..

C:\wga\Scripts\socketcropscan\socketcropscan.exe

Download File

Process:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	7983674
Entropy (8bit):	7.990945796118317
Encrypted:	true
SSDEEP:	196608:TsUgGsQA1HeT39IigFeE9TFa0Z8DOjCdylVSEomQVyeoD:Qp1+TtIiRY9Z8D8CclsPt4D
MD5:	DDADE153328ADEDD5585312BF0BAE05A
SHA1:	C7049CF33A811374D1931C57A779D4A5E2F840C9
SHA-256:	6A8F9F20371F4577313B83A55C7A41C06EF8F8D7514D0483BF55DBAC6CE3C309
SHA-512:	AFFFFB98B78390CAEDB3741067F5181078C8DE1EE28431D54130BF53BFEB99EC64B343DA8E1C6D3C4F7028541BAD582B7D30E96E1F4F43AC3098C620F5BBFC1A
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........]..G<.G<.G<..D..O<..D..<..D.M<.G<.F<.A.>.C<.A..o<.A..V<.A...V<..D.@<.G<.><.(..R<.(...F<.RichG<.........PE..d.....`f.........."....&.....Z................@....................................Eaz...`.....................................................P............@..d#...........p..\...p...............................0...@............................................text...P........................... ..`.rdata..&,..........................@..@.data....3..........................@....pdata..d#...@...$..................@..@_RDATA.......p......................@..@.rsrc...............................@..@.reloc..\....p......................@..B........................................................................................................................................................................................................

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	downloaded
Size (bytes):	23300125
Entropy (8bit):	7.9999555114811765
Encrypted:	true
SSDEEP:	393216:ROqbVlqkYwRMD3v5RaWt4SBDDEOAp9en8a5tsLvf+xJhQPAyGdoJnf4EP:ROMX43XaWaSBD69a5EihQ++rP
MD5:	29043DC66D7FBA46B72777D0608BDF71
SHA1:	9D38A7A1BB85AA6A58B267C2F5AACEF515F7FB9F
SHA-256:	505E38486D4796E8D4436289B4094755B479BF329A675CDD562CC5BBFB662E81
SHA-512:	720AB16A8A4B36752C2D9CD388916E9E3FA61852624A2C4229AB48169250AE88D59A8C114DE5028364082730207F7CE6D7BE124F1787C3893DB0D9FCC17D4198
Malicious:	true
Reputation:	low
URL:	https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....Oa.................h...*......@6............@.......................................@..........................................................................................................................................................text...vf.......h.................. ..`.rdata...............l..............@..@.data...x...........................@....ndata...@...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 23:40:45.554239035 CET	49673	443	192.168.2.16	204.79.197.203
Oct 28, 2024 23:40:45.585696936 CET	49698	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:45.585778952 CET	443	49698	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:45.585861921 CET	49698	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:45.586143017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:45.586174011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:45.586246014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:45.586437941 CET	49698	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:45.586473942 CET	443	49698	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:45.586673975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:45.586687088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:45.865267038 CET	49673	443	192.168.2.16	204.79.197.203
Oct 28, 2024 23:40:46.303134918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.313225031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.313234091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.314383984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.314469099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.326174021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.326447010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.327819109 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.327827930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.334045887 CET	443	49698	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.335005045 CET	49698	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.335026026 CET	443	49698	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.336530924 CET	443	49698	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.336663961 CET	49698	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.339222908 CET	49698	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.339330912 CET	443	49698	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.377978086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.393291950 CET	49698	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.393301964 CET	443	49698	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.441289902 CET	49698	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.473449945 CET	49673	443	192.168.2.16	204.79.197.203
Oct 28, 2024 23:40:46.623197079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.624320984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.624346972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.624382019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.624459982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.624478102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.624553919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.665306091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.739527941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.739542961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.739588976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.739612103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.739629984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.739645958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.739670992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.739679098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.739706039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.739758015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.740894079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.740916967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.740950108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.740993977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.740998983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.741103888 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.793293953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.855581999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.855598927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.855654955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.855693102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.855727911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.855727911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.855737925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.855748892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.856302023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.856328011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.856363058 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.856378078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.856436014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.857639074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.857657909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.857770920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.857770920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.857784033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.903331995 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.971597910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.972032070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.972075939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.972096920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.972145081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.972145081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.972157001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.973001003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.973052025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.973074913 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.973081112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.973129988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.973129988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:46.973139048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:46.973203897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.087820053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.087869883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.087943077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.087950945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.087981939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.088009119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.088012934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.088771105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.088825941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.088861942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.088867903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.088937998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.143306971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.143321991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.191338062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.203335047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.203357935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.203397989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.203453064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.203493118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.203541040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.203541040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.203552961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.203614950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.204333067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.204384089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.204421997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.204428911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.204497099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.247823954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.247876883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.247919083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.247935057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.247944117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.247976065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.247976065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.319869995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.319931030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.320035934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.320084095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.320084095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.320084095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.320096970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.320787907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.320849895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.320879936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.320885897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.320918083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.366326094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.366338015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.414256096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.435431004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.435456991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.435496092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.435506105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.435530901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.435559034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.435565948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.435621977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.435621977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.435628891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.435940027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.435965061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.436011076 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.436016083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.436059952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.437834024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.437895060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.437915087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.437923908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.437969923 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.490266085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.490283012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.536268950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.551342010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.551352978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.551403046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.551414967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.551435947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.551451921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.551460981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.551485062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.551496029 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.552074909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.552100897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.552135944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.552143097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.552150965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.552187920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.552187920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.552198887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.552314043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.553957939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.553977966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.554022074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.554039955 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.554047108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.554078102 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.599271059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.667366028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.667388916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.667431116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.667484999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.667484999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.667493105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.667547941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.667552948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.668189049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.668236971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.668288946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.668298960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.668317080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.670087099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.670135021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.670156956 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.670166016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.670247078 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.677315950 CET	49673	443	192.168.2.16	204.79.197.203
Oct 28, 2024 23:40:47.725281000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.725292921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.773386955 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.783549070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.783572912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.783613920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.783632994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.783668041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.783677101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.783770084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.783776999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.784063101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.784106016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.784138918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.784162998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.784162998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.784240007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.784269094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.784349918 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.785975933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.786031008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.786087990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.786094904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.786115885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.837305069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.837312937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.885438919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.899372101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.899391890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.899414062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.899424076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.899494886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.899499893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.899549007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.899609089 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.899611950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.899941921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.899952888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.899971962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.899981976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.900079012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.900079012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.900087118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.901633978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.901684046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.901717901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.901719093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.901732922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.901797056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.901797056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.945550919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.945585012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.945667028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:47.945672035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:47.945743084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.015537977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.015903950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.015948057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.015990973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.015996933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.016094923 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.016125917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.016233921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.016715050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.016761065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.016809940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.016814947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.016872883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.016872883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.016880035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.018156052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.018208027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.018326998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.018332958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.018376112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.061310053 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.131479025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.131526947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.131628036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.131674051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.131680012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.131740093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.132055998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.132103920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.132168055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.132168055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.132174015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.133553982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.133635044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.133691072 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.133697987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.133728981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.133785963 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.178085089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.178133965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.178220987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.178390026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.178390026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.178395987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.220412016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.247632027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.247653961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.247705936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.247941017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.247941017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.247946978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.248277903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.248302937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.248359919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.248364925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.248411894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.249634027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.249658108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.249726057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.249731064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.249746084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.300354958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.343436003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.343455076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.343647003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.343653917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.343879938 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.362699032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.363614082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.363632917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.363720894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.363728046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.364449024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.364474058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.364535093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.364541054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.364607096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.365427971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.365446091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.365494967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.365523100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.365530014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.365583897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.449848890 CET	49689	80	192.168.2.16	192.229.211.108
Oct 28, 2024 23:40:48.459476948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.459500074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.459542036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.459615946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.459624052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.459723949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.479686975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.479734898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.479806900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.479813099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.479850054 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.480628967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.480678082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.480714083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.480719090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.480786085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.481070042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.481148005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.484957933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.484999895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.485080957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.485085964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.485111952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.485156059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.485160112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.525547028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.525594950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.525657892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.525665045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.525758028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.525764942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.525846004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.595515013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.595585108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.595649958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.595654964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.595705986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.595736980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.595741034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.596535921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.596584082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.596671104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.596671104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.596678019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.603202105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.603257895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.603332996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.603353024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.603372097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.603482962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.603538990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.603552103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.603566885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.603641033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.659327984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.659334898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.711206913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.711251974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.711303949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.711311102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.711409092 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.711415052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.711487055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.712388992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.712408066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.712449074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.712501049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.712506056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.712563992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.712601900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.712605000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.712733030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.712800026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.712805986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.712831020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.712886095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.712943077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.712999105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.718503952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.718549013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.718640089 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.718640089 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.718646049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.718693018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.718697071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.759267092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.759290934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.759366989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.759377003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.809437037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.828902006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.828923941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.828969955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.828995943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.829024076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.829090118 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.829097033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.829173088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.829186916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.829493999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.829541922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.829579115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.829585075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.829679012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.829982042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.830023050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.830079079 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.830084085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.830110073 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.834798098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.834846020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.834893942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.834898949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.834947109 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.875514984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.875561953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.875607967 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.875616074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.875711918 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.875716925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.875763893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.944611073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.944632053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.944675922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.944736004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.944746971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.944816113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.945056915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.945080996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.945146084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.945156097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.945172071 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.945458889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.945478916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.945540905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.945544958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.945581913 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.950375080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.950400114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.950442076 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.950447083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.950536966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.991100073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.991172075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.991219997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.991280079 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.991288900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:48.991343021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:48.991441011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.060354948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.060385942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.060451031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.060559034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.060569048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.060764074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.060890913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.060911894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.060969114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.061336994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.061347961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.061352968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.061379910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.061423063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.061439991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.061445951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.061475039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.061517954 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.065851927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.065876007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.065974951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.066020012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.066025972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.066056967 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.106581926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.106611967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.106697083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.106709957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.106825113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.176002026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.176031113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.176098108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.176141977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.176148891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.176326036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.177252054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.177304983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.177376986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.177376986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.177382946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.177577972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.177632093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.177695036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.177695036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.177701950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.177861929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.177901983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.177967072 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.177972078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.178010941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.182356119 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.182440042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.182528973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.182528973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.182534933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.222877979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.222909927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.222979069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.223088026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.223088026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.223093987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.270540953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.292511940 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.292598009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.292789936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.292809010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.292809010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.292817116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.292892933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.292907000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.292913914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.292944908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.292998075 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.292999029 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.293004990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.293436050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.293478012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.293515921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.293521881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.293601036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.293606043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.294660091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.296205997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.296252966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.296339989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.296344995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.296654940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.296828032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.297602892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.298259020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.298300028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.298393965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.298393965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.298399925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.338789940 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.338829994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.338859081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.339015007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.339015961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.339023113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.339725971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.408245087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.408297062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.408360004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.408365965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.408438921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.408438921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.408447027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.408998966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.409064054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.409151077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.409151077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.409157038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.409332037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.409373045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.409415007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.409420013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.409624100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.409630060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.409986019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.412142038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.412209034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.412307024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.412307024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.412308931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.412339926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.412403107 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.413995028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.414042950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.414139032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.414139032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.414145947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.454752922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.454811096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.454840899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.454854965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.454900980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.507298946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.507308960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.517589092 CET	49705	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:40:49.517601013 CET	443	49705	142.250.185.228	192.168.2.16
Oct 28, 2024 23:40:49.517678022 CET	49705	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:40:49.517931938 CET	49705	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:40:49.517945051 CET	443	49705	142.250.185.228	192.168.2.16
Oct 28, 2024 23:40:49.523989916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.524035931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.524077892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.524091959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.524209976 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.524749994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.524808884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.524838924 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.524847031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.524904013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.525038958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.525082111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.525116920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.525124073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.525168896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.525604010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.525682926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.525690079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.525736094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.525799990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.525799990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.525815964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.525895119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.525902033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.529650927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.529740095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.529746056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.529793024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.529866934 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.529879093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.530251026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.530308962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.530376911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.530389071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.530399084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.585302114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.585309982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.633292913 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.806788921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.806804895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.806859970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.806888103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.806896925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.806969881 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.806987047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.807560921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.807573080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.807595015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.807602882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.807708025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.807708025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.807729959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.807811975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.807831049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.807933092 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.807941914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.808227062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.808248997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.808360100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.808367014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.808651924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.808670044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.808738947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.808746099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.808773041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.809226990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.809250116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.809302092 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.809324026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.809357882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.809392929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.809428930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.809470892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.809474945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.809489965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.809555054 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.809570074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.810497046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.810539007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.810575962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.810581923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.810636997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.810657024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.810657978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.810672045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.810693026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.810745001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.810789108 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.810789108 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.810797930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.810993910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.811160088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.811180115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.811235905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.811243057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.811299086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.811305046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.811336994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.811358929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.811376095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.811409950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.811427116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.811434031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.811480999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.812067032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.812088966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.812182903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.812192917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.812201023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.812244892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.812263012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.812268019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.812446117 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.812455893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.813000917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.813019037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.813081026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.813093901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.843606949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.843653917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.843715906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.843724966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.843811035 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.843820095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.843877077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.875348091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.875370979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.875433922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.875442982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.875449896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.875571012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.875871897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.875895023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.875945091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.875967979 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.875974894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.876024961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.876344919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.876365900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.876425028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.876426935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.876436949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.876473904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.876497984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.876516104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.876564980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.876585960 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.876595020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.876636982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.877568007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.877585888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.877635002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.877641916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.877650023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.877690077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.878360987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.878391027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.878441095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.878449917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.878501892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.878509045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.878556967 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.918668985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.918689013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.918745995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.918761015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.918783903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.918847084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.967174053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.967204094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.967297077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.967307091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.987763882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.987792969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.987859011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.987878084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.987924099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.988415003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.988432884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.988483906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.988492012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.988529921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.988799095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.988821983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.988869905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.988876104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.988909960 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.989357948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.989377022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.989435911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.989444971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.992971897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.993000984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.993046045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.993056059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.993100882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.994074106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.994096994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.994152069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:49.994158983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:49.994214058 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:50.034303904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:50.034333944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:50.034420013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:50.034431934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:50.079293966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:50.079320908 CET	49673	443	192.168.2.16	204.79.197.203
Oct 28, 2024 23:40:50.082773924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:50.082799911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:50.082906008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:50.082915068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:50.082989931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.140270948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.140290022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.140368938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.140445948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.140469074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.140516996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.140623093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.140634060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.140964031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.140983105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.141048908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.141057968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.141222954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.141246080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.141475916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.141488075 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.141496897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.141516924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.141555071 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.141562939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.141932011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.142132044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.142153978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.142232895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.142240047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.142251968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.142273903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.142999887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.143008947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.143029928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.143048048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.143086910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.143095016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.143126965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.143224001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.143990993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.144010067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.144094944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.144100904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.144212961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.144237995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.144330978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.144340992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.144896984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.144948959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.144968033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.145040035 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.145046949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.145091057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.145112991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.145304918 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.145311117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.145767927 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.145905972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.145924091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.145976067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.145993948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.146003962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.146083117 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.146083117 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.146090031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.146106005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.146125078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.146187067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.146187067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.146193027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.146887064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.146912098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.146998882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.147007942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.147039890 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.147370100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.147387981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.147489071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.147511005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.147542953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.147542953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.147550106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.147591114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.147619963 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.149274111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149302006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149384975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149385929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.149385929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.149398088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149446011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149480104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.149487972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149503946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149523973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149533987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.149533987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.149545908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149564981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149589062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149600983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.149656057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.149661064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.149682045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.149804115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.153692007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.153714895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.153803110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.153811932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.153894901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.154047966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.154067039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.154113054 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.154119968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.154161930 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.154308081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.154346943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.154407978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.154459000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.154465914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.154535055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.154756069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.154773951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.154856920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.154864073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.155113935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.155141115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.155153990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.155164003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.155271053 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.155416012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.155435085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.155509949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.155509949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.155517101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.155607939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.155690908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.155711889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.155775070 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.155783892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.155813932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.155924082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.156091928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.156115055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.156153917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.156172037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.156213045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.156213045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.156475067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.156501055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.156533957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.156550884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.156604052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.156604052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.156719923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.156739950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.156771898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.156786919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.156815052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.156843901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.157007933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.157027006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.157064915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.157071114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.157120943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.157121897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.157327890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.157356024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.157418966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.157426119 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.157449007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.157468081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.157794952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.157814026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.157877922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.157888889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.157949924 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.157968998 CET	443	49705	142.250.185.228	192.168.2.16
Oct 28, 2024 23:40:51.158221006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.158241034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.158299923 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.158304930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.158320904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.158356905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.158387899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.158396006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.158449888 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.158464909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.158616066 CET	49705	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:40:51.158627987 CET	443	49705	142.250.185.228	192.168.2.16
Oct 28, 2024 23:40:51.158796072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.158813953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.158884048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.158895016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.158917904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.159023046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.159056902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.159075975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.159154892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.159154892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.159162045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.159228086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.159375906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.159394026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.159444094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.159451008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.159581900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.159653902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.159674883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.159765959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.159782887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.159789085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160036087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160058022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160125017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.160125017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.160134077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160214901 CET	443	49705	142.250.185.228	192.168.2.16
Oct 28, 2024 23:40:51.160288095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.160289049 CET	49705	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:40:51.160345078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160362959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160458088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.160458088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.160464048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160531044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.160599947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160625935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160700083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.160700083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.160706043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160932064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.160955906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.161027908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.161027908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.161036968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.161079884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.161509991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.161529064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.161581039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.161592960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.161648035 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.161648035 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.161860943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.161879063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.162125111 CET	49705	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:40:51.162127972 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.162134886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.162146091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.162168980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.162203074 CET	443	49705	142.250.185.228	192.168.2.16
Oct 28, 2024 23:40:51.162208080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.162215948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.162270069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.162334919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.162544012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.162563086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.162647963 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.162647963 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.162655115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.162731886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.162900925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.162919044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.162997961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.162997961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.163005114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.163052082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.163295984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.163327932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.163412094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.163412094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.163419962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.163664103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.163686991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.163717031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.163717031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.163722992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.163887024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.163903952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.163908005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.163922071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.163988113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.163988113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.164309025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.164329052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.164417028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.164417028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.164422989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.164721012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.164738894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.164745092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.164758921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.164818048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.164942980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.164957047 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.164963961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.164977074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.165035009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.165035009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.165210962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.165229082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.165788889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.165806055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.165813923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.165880919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.166070938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.166088104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.166089058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.166100979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.166178942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.166178942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.166399002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.166416883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.166456938 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.166464090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.166527033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.166538000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.166559935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167098999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167119026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167155981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.167155981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.167165041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167217970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.167217970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.167526007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167545080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167629957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.167629957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.167639017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167649031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167674065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167730093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.167730093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.167737007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167851925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167869091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.167949915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.167949915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.167959929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168112993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168133974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168165922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.168176889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168260098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.168260098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.168385029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168404102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168468952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.168468952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.168474913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168610096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168632030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168667078 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.168672085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168726921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.168726921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.168729067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168744087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168772936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168813944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.168813944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.168822050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.168993950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169013977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169078112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.169078112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.169084072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169307947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169327021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169406891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.169406891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.169419050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169574022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169595003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169670105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.169670105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.169676065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169780970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.169820070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169836998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169883013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.169889927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169905901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.169934034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.169934988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169946909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.169967890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170027971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170027971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170034885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170171976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170176029 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170188904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170207024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170281887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170281887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170289993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170378923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170408964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170433044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170433044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170439005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170505047 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170505047 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170628071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170650005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170710087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170710087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170716047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170789957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170813084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170847893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170854092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.170902014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.170943022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.171174049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171191931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171241999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.171251059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171260118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171283007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171331882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.171338081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171374083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.171374083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.171415091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171436071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171473980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.171478987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171489954 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.171513081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171515942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.171524048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171544075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171591043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.171597004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.171637058 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.171637058 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172056913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172077894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172126055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172132969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172146082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172163963 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172169924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172224998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172224998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172230959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172276974 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172292948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172312975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172385931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172385931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172394037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172621965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172621965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172633886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172655106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172715902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172727108 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172727108 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172734976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172745943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172785044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172785044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172795057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.172836065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.172836065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173021078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173042059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173120975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173120975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173130989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173226118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173248053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173275948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173275948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173283100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173314095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173321009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173331976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173357964 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173367023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173401117 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173501968 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173702002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173722029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173770905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173775911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173810005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173810959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173810959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173830986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173851013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173908949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173908949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.173916101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173955917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.173971891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174030066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174030066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174038887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174329042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174417973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174453974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174500942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174505949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174526930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174546957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174546957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174556017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174571037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174628973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174628973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174724102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174741030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174808979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174813986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174813986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174823046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174844027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.174856901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174902916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.174907923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.175265074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.175283909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.175334930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.175357103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.175364971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.175374985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.175832033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.194387913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.194411993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.194675922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.194751024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.194751978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.194761992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.194801092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.194850922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.194850922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.195029974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.195050001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.195126057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.195126057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.195132971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.195329905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.212332964 CET	49705	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:40:51.212352991 CET	443	49705	142.250.185.228	192.168.2.16
Oct 28, 2024 23:40:51.234992981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.235019922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.235121012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.235133886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.235236883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.235430956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.235450029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.235501051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.235506058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.235553026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.235553026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.236728907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.236748934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.236799955 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.236805916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.236864090 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.236864090 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.237358093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.237377882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.237494946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.237499952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.237926006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.237948895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.237991095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.237997055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.238024950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.238053083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.260353088 CET	49705	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:40:51.263566017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.263588905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.263672113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.263685942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.264008045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.264031887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.264066935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.264074087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.264137983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.264137983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.269388914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.269409895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.269479036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.269485950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.269536018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.269649982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.269817114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.269838095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.269906998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.269915104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.270221949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.270246029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.270389080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.270396948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.274420977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.310174942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.310231924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.310318947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.310333967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.310353994 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.311199903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.311248064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.311331987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.311331987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.311341047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.311430931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.311436892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.311470985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.311501980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.311508894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.311546087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.311552048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.311610937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.311610937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.311635971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.311680079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.311744928 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.311752081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.311798096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.311798096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.351083040 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.351113081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.351272106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.351301908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.351353884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.351371050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.351592064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.352711916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.352735043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.352813959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.352828026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.353157997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.353188992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.353225946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.353234053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.353601933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.353698969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.353718996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.353967905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.353971958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.353982925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.354015112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.354049921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.354057074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.354187965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.379802942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.379833937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.380012989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.380028009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.380795002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.380825996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.380901098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.380908012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.381140947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.385698080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.385720015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.385817051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.385817051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.385827065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.386126041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.386153936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.386198997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.386209965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.386226892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.386245012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.386250019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.386317015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.386324883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.426307917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.426342010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.426467896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.426467896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.426480055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.426789045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.426806927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.426884890 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.426892996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.427068949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.427090883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.427107096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.427124023 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.427128077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.427330971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.427371979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.427391052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.427469015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.427476883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.466918945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.466948986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.467067003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.467067003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.467080116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.467220068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.467237949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.467348099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.467355967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.469145060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.469170094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.469227076 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.469238997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.469482899 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.469501972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.469533920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.469533920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.469542980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.470078945 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.470130920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.470155001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.470225096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.470225096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.470232010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.470338106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.470355988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.470424891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.470424891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.470432043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.495558977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.495587111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.495723009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.495732069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.496503115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.496520996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.496570110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.496577024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.496800900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.501461029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.501486063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.501565933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.501565933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.501574039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.501751900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.501770973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.501815081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.501821995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.502362967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.502393961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.502429008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.502434015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.503051043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.541984081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.542009115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.542093039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.542104959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.542329073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.542354107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.542428970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.542428970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.542442083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.542881012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.542898893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.543006897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.543006897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.543015003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.543225050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.543247938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.543282986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.543289900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.543329954 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.583195925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.583250999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.583302975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.583318949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.583352089 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.583394051 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.583447933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.583457947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.583476067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.583504915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.584419966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.584456921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.584527016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.584527016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.584537983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.585824013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.585867882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.585952044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.585952044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.585959911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.586086988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.586126089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.586182117 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.586190939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.586201906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.586307049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.586353064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.586415052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.586415052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.586421967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.611502886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.611531019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.611728907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.611761093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.611886024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.611886024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.611886024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.611902952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.612247944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.612504005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.612533092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.612616062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.612616062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.612623930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.612747908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.617386103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.617408991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.617485046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.617496967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.617850065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.617872953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.617960930 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.617960930 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.617969036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.618033886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.618230104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.618248940 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.618324041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.618324041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.618331909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.619337082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.657897949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.657957077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.658094883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.658094883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.658102989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.658154011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.658427954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.658473015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.658538103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.658538103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.658545971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.658587933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.658896923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.658938885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.658997059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.658997059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.659004927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.659051895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.659300089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.659368992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.659374952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.659398079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.659429073 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.659450054 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.699604034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.699670076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.699793100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.699815989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.699815989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.699829102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.699856997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.699889898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.699889898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.699901104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.699949026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.699949026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.700345039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.700396061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.700475931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.700475931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.700484991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.700599909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.701155901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.701195955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.701267004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.701273918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.701296091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.701459885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.702085018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.702125072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.702183008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.702183008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.702189922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.702239037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.702271938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.702334881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.702374935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.702380896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.702409983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.702433109 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.702780962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.702822924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.702867031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.702873945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.702929020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.702929020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.727451086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.727480888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.727596998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.727605104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.727727890 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.727961063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.728013039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.728055954 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.728063107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.728110075 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.728132010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.733447075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.733500957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.733557940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.733566046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.733609915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.733656883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.733875990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.733916998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.733989000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.733995914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.734046936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.734046936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.734105110 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.734147072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.734198093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.734198093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.734205008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.734304905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.734307051 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.734345913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.734395981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.734404087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.734404087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.734420061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.734482050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.734482050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.761918068 CET	49707	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:51.761943102 CET	443	49707	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:51.762077093 CET	49707	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:51.763741970 CET	49707	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:51.763753891 CET	443	49707	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:51.774132013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.774183989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.774282932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.774291039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.774322987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.774343014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.774434090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.774475098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.774513006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.774518967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.774549961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.774549961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.775507927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.775547028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.775592089 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.775598049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.775643110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.775643110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.776026011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.776066065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.776115894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.776122093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.776145935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.776218891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.815120935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.815144062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.815336943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.815337896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.815351963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.815370083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.815464973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.815464973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.815476894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.815608978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.816740036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.816755056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.817034006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.817040920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.817095995 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.831159115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831183910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831332922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.831347942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831402063 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.831423044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831442118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831526041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.831532001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831572056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.831722021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831737995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831837893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.831844091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831871033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831883907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.831892967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831902981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.831919909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.831974983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.843724012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.843745947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.843867064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.843880892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.843935966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.844290018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.844307899 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.844403028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.844409943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.844455957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.844674110 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.844687939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.844748974 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.844755888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.844804049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.850895882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.850913048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.851021051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.851031065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.851070881 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.852103949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.852118015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.852183104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.852190018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.852227926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.853034973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.853049994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.853144884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.853151083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.853204966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.889455080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.889473915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.889586926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.889599085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.889740944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.890002966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.890017033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.890110970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.890117884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.890167952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.891011000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.891026974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.891093016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.891098976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.891146898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.891732931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.891748905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.891815901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.891822100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.891865015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.892368078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.892383099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.892448902 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.892453909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.892498970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.930967093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.930990934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.931097984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.931109905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.931162119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.931333065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.931348085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.931444883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.931452990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.931499958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.932459116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.932473898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.932542086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.932547092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.932589054 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.948168039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.948184967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.948281050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.948293924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.948416948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.948561907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.948579073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.948636055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.948642015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.948684931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.948934078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.948949099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.949006081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.949012041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.949058056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.949317932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.949331999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.949395895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.949402094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.949457884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.949649096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.949665070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.949748993 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.949754953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.949803114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.960207939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.960232019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.960333109 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.960344076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.960393906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.960570097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.960586071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.960659027 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.960666895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.960711002 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.966669083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.966685057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.966738939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.966747046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.966775894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.966804981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.967925072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.967971087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.968009949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.968017101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.968050957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.968070030 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.969048977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.969089985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.969127893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.969134092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.969161987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.969182968 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.969520092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.969562054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.969588041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.969594002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:51.969620943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:51.969634056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.005747080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.005789995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.005934000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.005947113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.006088972 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.007363081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.007406950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.007571936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.007608891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.007625103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.007654905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.007777929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.007833958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.007872105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.007894039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.007901907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.007930994 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.008074999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.008124113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.008138895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.008152962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.008193970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.047482967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.047503948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.047638893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.047652006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.048762083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.048789024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.048827887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.048835039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.048854113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.048896074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.048922062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.048971891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.048978090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.049000978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.064817905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.064845085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.064893007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.064910889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.064939022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.065090895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.065105915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.065174103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.065181017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.065386057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.065404892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.065433025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.065438986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.065460920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.065742970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.065758944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.065792084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.065798998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.065824986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.066426039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.066447020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.066483021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.066488981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.066514969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.076098919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.076112986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.076175928 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.076181889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.076209068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.076777935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.076795101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.076867104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.076873064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.076895952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.082186937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.082201004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.082262993 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.082268000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.082293034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.083838940 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.083858013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.083935022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.083935022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.083941936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.084784031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.084796906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.084845066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.084851980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.085877895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.085900068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.085951090 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.085958958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.085967064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.121653080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.121761084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.121798038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.121808052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.121834993 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.122558117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.122606993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.122654915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.122663021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.122673035 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.123819113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.123861074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.123891115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.123898029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.123919964 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.123938084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.124557018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.124598980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.124624014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.124629974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.124644041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.124667883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.125282049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.125339031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.125355005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.125361919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.125401974 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.126617908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.126667976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.126693010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.126699924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.126727104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.163922071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.163961887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.164062977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.164072990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.164155006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.164450884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.164495945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.164570093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.164580107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.164598942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.165107012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.165154934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.165169001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.165178061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.165229082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.181685925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.181726933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.181761980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.181771994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.181811094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.182512999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.182578087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.182581902 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.182610035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.182657003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.183676004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.183736086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.183746099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.183758020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.183794975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.184940100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.184984922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.185010910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.185019970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.185030937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.186079979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.186117887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.186151981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.186158895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.186177015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.193100929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.193152905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.193192959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.193200111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.193233013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.194119930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.194159985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.194199085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.194205999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.194232941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.198579073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.198625088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.198648930 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.198656082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.198674917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.199462891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.199501991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.199527979 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.199534893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.199546099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.200469971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.200515985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.200534105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.200551033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.200572014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.201646090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.201687098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.201724052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.201731920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.201741934 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.203823090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.203886032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.203911066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.203917980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.203931093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.238912106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.238950968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.239084005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.239097118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.240326881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.240376949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.240420103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.240428925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.240458965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.242142916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.242180109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.242214918 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.242223024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.242237091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.244066954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.244136095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.244144917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.244183064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.244235039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.245873928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.245913982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.245946884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.245953083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.245966911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.279468060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.279516935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.279612064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.279620886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.279707909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.279859066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.279901981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.279941082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.279947042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.279980898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.280596018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.280641079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.280663013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.280669928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.280694008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.281414986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.281451941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.281482935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.281491041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.281511068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.297792912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.297842026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.297884941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.297894955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.297924995 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.298763990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.298804045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.298842907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.298851013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.298897028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.299626112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.299701929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.299702883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.299729109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.299773932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.300842047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.300880909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.300906897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.300914049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.300941944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.301935911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.301985979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.302011013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.302017927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.302031994 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.308662891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.308703899 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.308782101 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.308789968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.308845997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.309788942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.309835911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.309858084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.309864998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.309900045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.310883999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.310921907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.310947895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.310955048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.310976982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.315284967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.315354109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.315357924 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.315380096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.315416098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.316195965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.316235065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.316282988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.316289902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.316313028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.317126989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.317177057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.317203045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.317209959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.317224026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.317264080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.318495035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.318541050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.318572998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.318593979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.318605900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.354218006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.354278088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.354361057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.354386091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.354468107 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.356158972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.356201887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.356252909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.356264114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.356317043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.357192993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.357213974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.357280970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.357289076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.357319117 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.358733892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.358748913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.358815908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.358825922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.360238075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.360259056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.360331059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.360338926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.361745119 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.361763000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.361833096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.361841917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.395451069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.395479918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.395633936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.395642996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.395649910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.395663977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.395735979 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.396711111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.396730900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.396840096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.396850109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.396895885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.397119999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.397134066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.397191048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.397197008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.397238970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.413655043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.413675070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.413749933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.413758039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.413815975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.414576054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.414596081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.414654970 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.414660931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.414705992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.415757895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.415772915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.415838003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.415843964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.415888071 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.416515112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.416534901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.416593075 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.416599035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.416657925 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.417362928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.417378902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.417427063 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.417433977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.417459011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.417483091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.424609900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.424637079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.424680948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.424689054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.424715042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.424737930 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.425549030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.425569057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.425612926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.425618887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.425638914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.425677061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.426537037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.426561117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.426611900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.426618099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.426644087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.426661968 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.430860043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.430891991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.430943012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.430954933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.430986881 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.431013107 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.431456089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.431497097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.431535006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.431541920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.431557894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.431591034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.432636976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.432673931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.432713032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.432718992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.432744980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.432764053 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.433764935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.433811903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.433831930 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.433837891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.433862925 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.433891058 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.435786963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.435831070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.435864925 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.435870886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.435899019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.435914040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.471113920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.471158981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.471190929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.471203089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.471235037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.471268892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.472677946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.472719908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.472748995 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.472754955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.472779989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.472796917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.473937035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.474005938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.474014044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.474035978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.474069118 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.474087954 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.475303888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.475366116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.475378990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.475397110 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.475425005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.475444078 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.477225065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.477273941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.477313042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.477339029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.477368116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.477377892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.478138924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.478180885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.478223085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.478234053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.478275061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.511214972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.511233091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.511302948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.511321068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.511437893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.511563063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.511575937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.511632919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.511645079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.511698008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.512737036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.512752056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.512801886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.512815952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.512844086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.512861013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.512991905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.513006926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.513046026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.513053894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.513096094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.529583931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.529601097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.529668093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.529680014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.529732943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.530505896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.530522108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.530580044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.530591965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.530934095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.531363964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.531378984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.531438112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.531445026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.531497002 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.532332897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.532361031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.532433987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.532440901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.532483101 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.533389091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.533404112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.533476114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.533483982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.533535004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.540337086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.540354013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.540414095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.540426016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.540484905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.541054010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.541069031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.541131973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.541140079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.541198015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.542299986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.542318106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.542375088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.542382002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.542428017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.546454906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.546472073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.546521902 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.546531916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.546564102 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.546587944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.547157049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.547172070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.547224045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.547233105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.547277927 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.547945023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.547965050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.548021078 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.548029900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.548062086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.548083067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.548815966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.548832893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.548885107 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.548894882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.548962116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.550618887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.550633907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.550718069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.550734043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.550784111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.586154938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.586169958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.586237907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.586251020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.586299896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.587089062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.587102890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.587157965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.587166071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.587577105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.588653088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.588669062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.588722944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.588730097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.588777065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.590202093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.590217113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.590276003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.590282917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.590337992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.591423988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.591439009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.591490030 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.591496944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.591541052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.593024969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.593039989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.593096018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.593103886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.593163013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.593698978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.593712091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.593764067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.593770981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.593817949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.612950087 CET	443	49707	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:52.613023996 CET	49707	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:52.618346930 CET	49707	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:52.618355989 CET	443	49707	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:52.618566990 CET	443	49707	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:52.627377987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.627396107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.627459049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.627473116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.627535105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.627576113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.627593040 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.627639055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.627646923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.627662897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.627680063 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.628504038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.628520012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.628559113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.628567934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.628659964 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.629045010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.629062891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.629120111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.629127979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.629178047 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.645494938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.645518064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.645585060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.645601988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.645657063 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.645982981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.645999908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.646048069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.646055937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.646085024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.646104097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.647222996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.647241116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.647293091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.647304058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.647341967 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.647941113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.647955894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.648017883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.648030996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.648073912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.648968935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.648983002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.649020910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.649030924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.649056911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.649070024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.656158924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.656172037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.656220913 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.656234026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.656287909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.656934023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.656949043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.657006979 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.657016993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.657057047 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.657413006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.657429934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.657479048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.657488108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.657530069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.658854961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.658869982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.658926964 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.658937931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.658979893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.662296057 CET	49707	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:52.662493944 CET	49707	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:52.662538052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.662553072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.662602901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.662614107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.662652016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.663347960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.663362980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.663413048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.663420916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.663464069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.664554119 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.664568901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.664611101 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.664623976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.664635897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.664664984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.664959908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.664974928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.665021896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.665030003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.665071964 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.667336941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.667351007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.667396069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.667407990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.667423964 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.667463064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.702200890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.702219009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.702291965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.702306032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.702351093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.703581095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.703603983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.703646898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.703656912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.703680992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.703694105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.704466105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.704485893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.704543114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.704552889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.704602957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.706701994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.706728935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.706794024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.706801891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.706846952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.707014084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.707030058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.707083941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.707091093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.707130909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.707333088 CET	443	49707	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:52.708972931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.708996058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.709033012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.709044933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.709068060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.709091902 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.709498882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.709516048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.709580898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.709593058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.709635973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.743515015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.743537903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.743594885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.743609905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.743638039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.743659019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.743872881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.743890047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.743932009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.743940115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.743987083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.744252920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.744268894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.744318962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.744326115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.744364977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.744921923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.744935036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.744992971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.745001078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.745044947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.761132956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.761157990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.761221886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.761238098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.761287928 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.761831999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.761847973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.761913061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.761920929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.761976957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.762753963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.762770891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.762830019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.762837887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.762901068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.763864994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.763883114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.763927937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.763936996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.763993025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.763993025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.764682055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.764697075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.764750957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.764756918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.764802933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.765542030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.765563965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.765610933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.765618086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.765640974 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.765671015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.772752047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.772769928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.772825003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.772834063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.772880077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.773016930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.773034096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.773077965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.773087025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.773128986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.773657084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.773673058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.773730040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.773741961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.773791075 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.778323889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.778340101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.778404951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.778413057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.778451920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.778858900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.778875113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.778935909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.778942108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.778996944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.779732943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.779746056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.779794931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.779807091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.779830933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.779850960 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.780560970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.780575991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.780616999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.780622959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.780667067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.780667067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.780874968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.780893087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.780942917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.780951023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.780991077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.783284903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.783299923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.783359051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.783365965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.783411980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.828937054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.828952074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829014063 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.829026937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829092026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.829191923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829205990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829282045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.829288960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829343081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.829399109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829413891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829587936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829622030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829629898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.829638004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829662085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.829680920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.829758883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829772949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829814911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.829821110 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.829835892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.829988003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.830013990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.830054045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.830060959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.830105066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.830161095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.830174923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.830216885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.830224037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.830235958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.859522104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.859544992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.859613895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.859627962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.859643936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.859788895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.859802008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.859836102 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.859843969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.859858990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.859915018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.859931946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.859966040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.859973907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.859982014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.860676050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.860690117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.860730886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.860738993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.860759020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.861385107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.861401081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.861443043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.861449957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.861479044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.877490997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.877502918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.877568007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.877585888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.877796888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.877815962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.877839088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.877855062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.877897978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.879633904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.879647017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.879719019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.879726887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.879940987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.879968882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.880008936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.880017042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.880053043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.880575895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.880589962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.880662918 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.880671978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.880688906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.881361961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.881377935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.881412983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.881422043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.881463051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.888786077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.888799906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.888875008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.888875008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.888883114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.888950109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.888967037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.889008045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.889014959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.889039040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.889612913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.889632940 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.889698982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.889712095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.894109011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.894125938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.894164085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.894172907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.894234896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.894459009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.894471884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.894541025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.894547939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.895535946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.895553112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.895605087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.895612955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.895626068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.896480083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.896492958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.896559954 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.896568060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.896883965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.896903038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.896974087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.896974087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.896981001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.898540974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.898560047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.898616076 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.898622990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.898709059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.906325102 CET	443	49707	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:52.906383038 CET	443	49707	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:52.906445026 CET	49707	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:52.906580925 CET	49707	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:52.906580925 CET	49707	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:52.906591892 CET	443	49707	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:52.906599998 CET	443	49707	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:52.934082985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.934112072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.934160948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.934184074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.934216022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.941832066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.941844940 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.941907883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.941921949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.942039013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.942056894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.942121983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.942121983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.942130089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.942378998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.942392111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.942441940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.942447901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.942670107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.942687035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.942751884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.942751884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.942759037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.943023920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.943037987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.943082094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.943090916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.943105936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.943337917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.943356991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.943429947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.943429947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.943444967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.943480015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.943492889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.943528891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.943536043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.943686962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.952358007 CET	49708	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:52.952394962 CET	443	49708	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:52.952488899 CET	49708	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:52.952819109 CET	49708	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:52.952836037 CET	443	49708	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:52.975435019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.975464106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.975560904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.975560904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.975572109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.975725889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.975739956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.975898981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.975902081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.975919962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.975938082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.975965977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.975975037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.976017952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.976017952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.976579905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.976596117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.976651907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.976691961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.976697922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.976758957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.977267981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.977286100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.977406025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.977412939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.977482080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.993402004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.993422031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.993474960 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.993488073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.993529081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.993529081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.993737936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.993755102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.993819952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.993827105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.993877888 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.995284081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.995300055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.995357037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.995364904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.995408058 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.995688915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.995712042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.995774031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.995780945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.995845079 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.996532917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.996548891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.996618032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.996624947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.996691942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.997307062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.997324944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.997416019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.997416019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:52.997423887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:52.997474909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.004322052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.004337072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.004407883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.004416943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.004508972 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.004878998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.004894972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.005073071 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.005079985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.005142927 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.005163908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.005177021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.005296946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.005306959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.005393982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.006444931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.006458044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.006529093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.006536007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.006628036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.010266066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.010289907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.010337114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.010344982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.010384083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.010432959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.011353016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.011368990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.011411905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.011419058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.011464119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.011528969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.011672974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.011687040 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.011758089 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.011775017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.011784077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.011828899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.013709068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.013725042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.013792992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.013802052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.013818026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.013838053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.013854027 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.013860941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.013875008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.013942003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.015103102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.015116930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.015177011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.015183926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.015237093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.057931900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.057956934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.058037996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.058049917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.058120012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.058146000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.058171034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.058180094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.058187962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.058219910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.058279037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.058537006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.058552980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.058614969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.058620930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.058645010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.058669090 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.059077024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.059092999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.059153080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.059159040 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.059207916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.059892893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.059909105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.059979916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.059987068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.060041904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.060184002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.060199022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.060281992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.060287952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.060369015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.060399055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.060415030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.060467958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.060475111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.060523033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.060703039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.060718060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.060789108 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.060795069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.060858011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.091496944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.091521025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.091598034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.091614008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.091685057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.091922045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.091943979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.092009068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.092015982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.092077971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.092406034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.092421055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.092596054 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.092602968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.092660904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.093168974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.093183994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.093286991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.093293905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.093405008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.093549967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.093564987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.093625069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.093641043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.093653917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.093708038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.109669924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.109687090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.109760046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.109767914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.109873056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.110001087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.110014915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.110065937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.110081911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.110132933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.110730886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.110744953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.110814095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.110820055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.110915899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.111413956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.111429930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.111493111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.111500978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.111597061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.112000942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.112015009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.112111092 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.112117052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.112163067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.112610102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.112623930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.112704039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.112710953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.112760067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.120029926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.120044947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.120131016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.120137930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.120193958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.120431900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.120446920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.120512009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.120520115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.120615005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.120830059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.120843887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.120899916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.120906115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.120964050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.121478081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.121493101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.121593952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.121599913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.121654987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.126039982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.126054049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.126116037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.126121998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.126189947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.126312971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.126336098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.126466990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.126472950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.126538038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.127335072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.127351046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.127428055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.127434015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.127516031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.128298044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.128312111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.128382921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.128390074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.128452063 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.129699945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.129715919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.129776001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.129781961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.129827976 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.129827976 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.130090952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.130105972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.130250931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.130256891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.130337954 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.131159067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.131175041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.131241083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.131247044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.131299973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.174127102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174146891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174241066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.174247980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174314022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.174412966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174427986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174498081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174498081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.174498081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.174510002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174526930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174580097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.174581051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.174587011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174654961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.174889088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174904108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.174998999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.175004959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.175057888 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.177628994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.177644968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.177746058 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.177755117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.177813053 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.177916050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.177931070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.177973032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.177978992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178033113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.178033113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.178112984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178126097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178247929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.178253889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178301096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.178323984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178339005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178409100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.178415060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178492069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178493977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.178504944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178523064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178586006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.178586006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.178592920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.178658009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.207617998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.207648039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.207715988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.207725048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.207781076 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.207781076 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.207818031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.207834005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.207894087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.207901001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.207990885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.208322048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.208345890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.208424091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.208425045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.208431005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.208532095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.209391117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.209405899 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.209484100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.209491014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.209538937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.225467920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.225486040 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.225579023 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.225588083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.225630999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.226104975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.226120949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.226207972 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.226213932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.226315022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.226454020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.226469994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.226536989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.226541996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.226629972 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.226707935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.226722956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.226777077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.226783037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.226831913 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.227646112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.227660894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.227735043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.227741957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.227760077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.227818966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.228084087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.228097916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.228147984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.228153944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.228230000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.228674889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.228688955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.228761911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.228768110 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.228806973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.236082077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.236104012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.236181021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.236187935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.236243010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.236372948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.236390114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.236450911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.236457109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.236517906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.236814976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.236833096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.236988068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.236994028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.237078905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.237116098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.237132072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.237236977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.237242937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.237397909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.238781929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.238806009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.238864899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.238871098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.238934040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.238934040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.242268085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.242285967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.242413044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.242419004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.242551088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.242782116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.242798090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.242928028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.242934942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.243036032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.243654966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.243669987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.243714094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.243720055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.243757010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.243757010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.244973898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.244988918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.245124102 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.245131016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.245187998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.246695042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.246711969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.246773005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.246778965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.246845961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.246867895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.246877909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.246882915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.246900082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.246982098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.259028912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.281873941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.281892061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.281974077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.281980991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.282026052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.282051086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.290230036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290252924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290405989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.290412903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290467024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.290477991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290493965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290561914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.290568113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290585041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290606022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290627956 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.290632963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290642977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.290739059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.290899038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290913105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.290977001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.290982962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.291047096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293143034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293159962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293246984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293252945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293262959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293322086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293338060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293343067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293354988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293425083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293426037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293426037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293436050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293473959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293504000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293510914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293555021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293555021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293661118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293682098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293771029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293800116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293801069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293814898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.293833971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.293878078 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.298609018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.324331999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.324351072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.324573040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.324579954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.324629068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.324647903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.324724913 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.324724913 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.324731112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.325294018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.325306892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.325432062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.325440884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.326145887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.326164961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.326219082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.326226950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.326235056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.326625109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.326637983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.326761961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.326769114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.342401028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.342427015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.342528105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.342528105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.342535973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.342941046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.342956066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.343018055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.343025923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.343533039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.343552113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.343602896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.343611002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.343619108 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.343744993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.343759060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.343837976 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.343837976 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.343846083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.343867064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.343883991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.343914032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.343921900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.344027042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.344443083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.344455957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.344667912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.344674110 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.344811916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.344831944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.344885111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.344885111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.344892979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.351969957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.351989031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.352087975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.352096081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.352402925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.352426052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.352474928 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.352480888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.352494001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.352722883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.352736950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.352781057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.352787018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.352799892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.353235006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.353254080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.353291988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.353300095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.353344917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.359323978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.359352112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.359416962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.359436989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.359555960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.359559059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.359559059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.359559059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.359559059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.359569073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.359584093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.359636068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.359643936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.359692097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.359692097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.360444069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.360460997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.360605001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.360613108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.360666990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.361927986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.361943960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.362030983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.362039089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.362131119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.363068104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.363092899 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.363154888 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.363161087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.363217115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.363699913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.363720894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.363775015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.363782883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.363838911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.364397049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.364417076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.364507914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.364522934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.364583015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407160997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.407217026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.407303095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407320976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.407361031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407368898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.407382965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407398939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.407429934 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407450914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.407485962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407490969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.407531023 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407537937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407632113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.407677889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.407701969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407706976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.407764912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407764912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.407995939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.408039093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.408090115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.408093929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.408134937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.408154011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.409713984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.409768105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.409811020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.409816027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.409866095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.410094976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.410140038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.410182953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.410187960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.410197973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.410232067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.410415888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.410463095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.410482883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.410489082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.410537958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.410538912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.410779953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.410825968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.410852909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.410857916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.410911083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.410942078 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.411407948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.411448956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.411485910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.411492109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.411545038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.411545038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.439982891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.440026045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.440079927 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.440084934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.440140009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.440603971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.440649033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.440679073 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.440684080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.440737963 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.440738916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.441077948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.441134930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.441157103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.441162109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.441199064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.441255093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.441560030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.441607952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.441643000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.441648006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.441696882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.441696882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.442545891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.442588091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.442627907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.442632914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.442686081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.442686081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.459758997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.459800959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.459846973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.459851980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.459913015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.459913015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.460527897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.460568905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.460635900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.460635900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.460643053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.460707903 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.461231947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.461275101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.461308002 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.461313963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.461391926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.461393118 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.461688995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.461729050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.461765051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.461770058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.461802006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.461872101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.461885929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.461893082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.461920023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.461966038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.461971045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.461987972 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.462027073 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.462261915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.462312937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.462368011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.462373018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.462399006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.462419033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.462863922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.462912083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.462950945 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.462955952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.463013887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.463013887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.463521957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.463563919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.463599920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.463607073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.463664055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.463664055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.469583035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.469644070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.469677925 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.469686031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.469702005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.469749928 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.469918966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.469961882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.470007896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.470012903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.470050097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.470051050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.470357895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.470400095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.470470905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.470470905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.470475912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.470566988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.470587015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.470633984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.470658064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.470664024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.470715046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.470715046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.471704960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.471748114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.471786022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.471791029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.471848011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.471848011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.474291086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.474329948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.474375010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.474380016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.474431992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.474431992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.474742889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.474783897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.474828005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.474833012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.474874973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.474874973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.475384951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.475426912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.475461960 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.475466967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.475516081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.475516081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.475667000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.475708961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.475744009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.475749016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.475781918 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.475801945 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.477778912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.477823019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.477869034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.477876902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.477893114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.477955103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.477986097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.478028059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.478054047 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.478059053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.478115082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.478115082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.478996992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.479038954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.479085922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.479091883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.479140043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.479140043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.706619024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.706708908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.706805944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.706805944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.706816912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.706873894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.706962109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707005978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707048893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707055092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707103014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707112074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707195044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707235098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707334995 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707340002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707459927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707509041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707539082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707545042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707576036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707618952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707676888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707716942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707787037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707787037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707792997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707875967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707918882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707921028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707952023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.707957029 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.707984924 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708048105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708128929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708168030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708206892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708210945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708283901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708283901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708327055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708370924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708416939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708421946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708448887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708514929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708530903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708570004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708632946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708637953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708652020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708684921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708729029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708770037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708806038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708811045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708842039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708873034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708908081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708920956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708944082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.708995104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.708995104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709135056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709192038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709233999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709280014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709285975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709332943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709332943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709367990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709410906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709454060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709459066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709497929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709563971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709566116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709588051 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709626913 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709631920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709659100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709664106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709731102 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709731102 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709781885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709822893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709849119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709853888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.709925890 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.709925890 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710012913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710064888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710100889 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710105896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710165024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710165024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710263014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710305929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710340023 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710345030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710396051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710396051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710462093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710501909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710541010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710546017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710580111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710649967 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710659981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710700989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710730076 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710733891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710800886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710860014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710900068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.710946083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.710949898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711003065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711040020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711061001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711103916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711141109 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711146116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711234093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711258888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711301088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711335897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711340904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711364985 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711483002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711504936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711509943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711532116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711558104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711594105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711597919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711673021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711685896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711725950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711752892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711766005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711817026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711817026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.711878061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.711916924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712001085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712001085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712007046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712068081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712081909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712095976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712115049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712120056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712169886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712174892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712228060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712228060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712327957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712368965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712399006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712403059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712457895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712529898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712574959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712578058 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712600946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712629080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712666988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712675095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712754011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712793112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712830067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712833881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.712876081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712876081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.712977886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713016987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713090897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.713090897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.713095903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713135004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.713211060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713263035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713361025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.713366985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713414907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.713430882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713469982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713510990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.713515997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713562012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.713562012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.713602066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713644981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713670969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.713675976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713737965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.713927984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.713970900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714036942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714036942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714041948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714096069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714133978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714174986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714205027 CET	49678	443	192.168.2.16	20.189.173.10
Oct 28, 2024 23:40:53.714241982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714241982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714247942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714312077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714318037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714340925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714385033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714416981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714416981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714422941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714483023 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714483023 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714484930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714509964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714550018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714616060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714616060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.714624882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.714696884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715058088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715100050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715190887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715190887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715197086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715231895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715279102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715332985 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715332985 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715339899 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715405941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715500116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715538025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715562105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715565920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715615988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715634108 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715701103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715740919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715810061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715810061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715816021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715871096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715890884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715934992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.715960979 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.715965986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716028929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716028929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716048002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716089010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716140985 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716145992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716207027 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716391087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716440916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716469049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716474056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716506004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716543913 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716594934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716634035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716681957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716681957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716686964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716727972 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716789961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716841936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716908932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716908932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716913939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716947079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716976881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.716981888 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.716989994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.717015028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.717062950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.717297077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.717312098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.717422009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.717427015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.717478037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.717549086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.717564106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.717632055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.717637062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.717643976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.717660904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.717717886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.717725039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.717744112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.717864037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718027115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718040943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718153000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718158960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718225002 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718276978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718291998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718384981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718389034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718396902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718414068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718483925 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718483925 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718489885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718564987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718576908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718760014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718765974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718786955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718803883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718820095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718822956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718839884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718874931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718899012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718911886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.718966007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.718971968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.719016075 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.719072104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.719085932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.719163895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.719168901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.719223976 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.719436884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.719454050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.719511032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.719516993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.719549894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.719614029 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720024109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720036983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720118046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720123053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720130920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720148087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720181942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720187902 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720200062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720208883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720297098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720297098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720326900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720347881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720419884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720424891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720504999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720527887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720560074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720565081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720613956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720627069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720659971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720659971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720664978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720675945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720693111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720707893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720731974 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.720736980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.720810890 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.721137047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721149921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721285105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721302032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721313953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.721322060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721376896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.721384048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.721400976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721414089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721460104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.721474886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721508980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.721549034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.721569061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721586943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721651077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.721656084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721683025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.721772909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.721952915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.721968889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722035885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.722039938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722069025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.722105980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722117901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.722124100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722134113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722171068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.722227097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722233057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.722238064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722276926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722301960 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.722309113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722341061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.722376108 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.722667933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722722054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722769976 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.722776890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722907066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722927094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.722928047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.722938061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.723002911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.723016024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.723016024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.723016977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.723026037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.723082066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.723082066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.745681047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.745739937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.745867014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.745867014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.745873928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.745946884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.754524946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.754568100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.754632950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.754637957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.754762888 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.754784107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.754827023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.754895926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.754895926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.754903078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.755002022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.755049944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.755069017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.755074024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.755165100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.755333900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.755374908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.755430937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.755430937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.755435944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.755470037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.755517006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.755536079 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.755541086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.755590916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.756604910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.756643057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.756724119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.756728888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.756750107 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.756771088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.756844997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.756890059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.756928921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.756933928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.756984949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.756984949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.757148981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.757189989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.757268906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.757272959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.757323980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.757323980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.758022070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.758063078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.758105040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.758109093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.758147001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.758197069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.758228064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.758272886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.758333921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.758333921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.758341074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.758404016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.759017944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.759063005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.759104013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.759109020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.759229898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.787966967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.788012981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.788173914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.788180113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.788227081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.788227081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.788233995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.788260937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.788305998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.788306952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.788347960 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.788352966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.788394928 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.788414955 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.788552046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.788592100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.788635969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.788640976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.788681984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.788701057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.789349079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.789405107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.789454937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.789459944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.789499998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.789597988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.789614916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.789655924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.789696932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.789700985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.789732933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.789773941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.791898966 CET	443	49708	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:53.791990995 CET	49708	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:53.793381929 CET	49708	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:53.793404102 CET	443	49708	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:53.793611050 CET	443	49708	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:53.797082901 CET	49708	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:53.808552980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.808598042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.808706045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.808712006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.808818102 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.808979988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.809021950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.809060097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.809063911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.809123993 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.809123993 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.809854031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.809896946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.810015917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.810015917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.810022116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.810111046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.810621023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.810666084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.810749054 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.810754061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.810762882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.810838938 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.811393976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.811484098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.811515093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.811594009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.811867952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.811913013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.812015057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.812020063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.812063932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.812283993 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.812388897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.812459946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.812504053 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.812509060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.812587023 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.812657118 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.813121080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.813163996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.813203096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.813206911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.813293934 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.813293934 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.813340902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.813384056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.813426971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.813431025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.813460112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.813519955 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.830657959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.830702066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.830797911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.830806017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.830823898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.830903053 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.831000090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831041098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831082106 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.831085920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831145048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.831279039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831338882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831367016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.831371069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831427097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.831449032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.831505060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831545115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831602097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.831605911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831643105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.831711054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831758022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831823111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.831836939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831947088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.831986904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832010984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832010984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832017899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832031965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832061052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832083941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832104921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832264900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832346916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832389116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832393885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832432032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832495928 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832505941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832546949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832644939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832644939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832649946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832691908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832716942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832721949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832748890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832797050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832797050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832812071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832842112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832899094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.832914114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.832954884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833030939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833031893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833036900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833195925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833199024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833236933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833304882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833318949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833323956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833375931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833503008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833543062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833599091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833604097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833616018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833678961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833700895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833705902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833724976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833796978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833796978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833810091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833842039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833879948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833894014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833899975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.833925009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.833972931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.842480898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.842526913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.842573881 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.842578888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.842624903 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.843341112 CET	443	49708	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:53.870529890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.870573997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.870675087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.870680094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.870728970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.870753050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.870758057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.870793104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.870829105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.870829105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.870835066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.870863914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.870907068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.870985985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.871023893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.871114016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.871114016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.871119976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.871191978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.871195078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.871218920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.871262074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.871292114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.871306896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.871310949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.871359110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.871402979 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.871663094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.871705055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.871757984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.871762991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.871794939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.872237921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.872386932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.872430086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.872487068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.872490883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.872534990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.872553110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.872714996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.872754097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.872801065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.872806072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.872848988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.872926950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.872967005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.873073101 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.873073101 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.873079062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.873188972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.873236895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.873251915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.873279095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.873308897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.873308897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.873366117 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.873884916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.873924971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.873976946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.873981953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.874022961 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.874038935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.874274969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.874314070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.874368906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.874372959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.874427080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.874427080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.903209925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.903253078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.903552055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.903558016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.903835058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.903881073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.903933048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.903938055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.903964996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.904002905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.904182911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.904222965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.904278994 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.904284000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.904342890 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.904342890 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.904345989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.904370070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.904413939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.904479980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.904479980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.904485941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.905160904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.905200958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.905240059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.905246019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.905359030 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.905703068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.905757904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.905811071 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.905814886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.905833960 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.905863047 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.923006058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.923064947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.923125029 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.923130035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.923155069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.923177004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.923180103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.923198938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.923244953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.923269033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.923350096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.927381039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.927455902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.927510977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.927515030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.927565098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.927565098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.927862883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.927905083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.927973032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.927973032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.927979946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928025007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928061962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928102016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928128004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928132057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928164005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928177118 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928255081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928294897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928340912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928345919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928383112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928383112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928448915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928519011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928520918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928543091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928580046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928622007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928672075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928765059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928811073 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.928816080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.928852081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.929356098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.929485083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.929526091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.929563046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.929568052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.929673910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.929675102 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.931006908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.931062937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.931097031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.931102037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.931119919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.931222916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.935679913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.935722113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.935770988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.935776949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.935811996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.935825109 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.936582088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.936621904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.936748028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.936755896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.936757088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.936770916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.936814070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.936831951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.936836958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.936871052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.936893940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.937565088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.937621117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.937735081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.937735081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.937743902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.937866926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.937937021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.937979937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.938076973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.938076973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.938082933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.938182116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.940547943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.940618038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.940654993 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.940660000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.940684080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.940778017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.941025972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.941068888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.941097975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.941111088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.941164017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.941164017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.941293001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.941334009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.941379070 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.941384077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.941406965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.941481113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.948086977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.948128939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.948199034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.948204041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.948241949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.948271036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.948296070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.948338032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.948391914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.948391914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.948396921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.948437929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.949568987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.949609041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.949673891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.949677944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.949696064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.949733019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.949840069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.949918032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.949937105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.949943066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.950000048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.950000048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.950206995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.950247049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.950308084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.950314045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.950339079 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.950396061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.950439930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.950479031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.950550079 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.950550079 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.950555086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.950623035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.950670004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.950695038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.950700045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.950790882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.950790882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.986392975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.986479044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.986529112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.986541986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.986555099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.986929893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.986955881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.987035990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.987035990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.987046957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.987113953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.987124920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.987215042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.987221003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.987426996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.987462044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.987477064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.987549067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.987554073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.987588882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.987588882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.988360882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.988378048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.988430023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.988447905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.988452911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.988492966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.988588095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.988909960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.988929987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.988990068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.988995075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.989078999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.989097118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.989145994 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.989151001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.989186049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.989609957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.989626884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.989761114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.989768028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.989854097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.989872932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.989954948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.989960909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.990494967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.990514994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.990583897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.990603924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.990623951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.990629911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:53.990639925 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.990755081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:53.990755081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.016307116 CET	49678	443	192.168.2.16	20.189.173.10
Oct 28, 2024 23:40:54.020302057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.020324945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.020404100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.020411968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.021048069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.021367073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.021384954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.021440983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.021445990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.021487951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.021487951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.021583080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.021603107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.021790981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.021795034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.022016048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.022037029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.022156000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.022161961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.022233009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.022834063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.022854090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.023133993 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.023139000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.023377895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.023713112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.023732901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.023792028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.023792028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.023797035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.023840904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.040925980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.040950060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.041003942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.041016102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.041065931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.041280031 CET	443	49708	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:54.041331053 CET	443	49708	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:54.041389942 CET	49708	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:54.041574955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.041594982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.041644096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.041649103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.041688919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.041688919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.041877031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.041897058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.041961908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.041961908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.041966915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.042395115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.042418003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.042438984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.042490005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.042490005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.042494059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.042572975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.043103933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.043123007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.043184996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.043190002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.043306112 CET	49708	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:54.043307066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.043307066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.043332100 CET	443	49708	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:54.043346882 CET	49708	443	192.168.2.16	184.28.90.27
Oct 28, 2024 23:40:54.043353081 CET	443	49708	184.28.90.27	192.168.2.16
Oct 28, 2024 23:40:54.044550896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.044575930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.044670105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.044673920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.044991016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.045064926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.045080900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.045150042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.045156002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.045223951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.046093941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.046112061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.046256065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.046264887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.046384096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.046761036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.046782017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.046957016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.046961069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.047285080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.047369957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.047394037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.047451019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.047455072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.047482967 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.047576904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.051423073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.051445007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.051536083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.051536083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.051546097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.051598072 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.052418947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.052438021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.052498102 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.052510977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.052572966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.052572966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.052761078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.052779913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.052844048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.052844048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.052850962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.053397894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.053416967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.053479910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.053479910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.053488016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.053549051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.053741932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.053755999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.053790092 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.053793907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.053862095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.053862095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.054083109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.054099083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.054146051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.054151058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.054192066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.054192066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.056521893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.056540966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.056596041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.056607962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.056832075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.056850910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.056890965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.056896925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.056966066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.057009935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.057511091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.057528019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.057601929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.057601929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.057610035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.057687044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.064482927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.064505100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.064569950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.064580917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.064657927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.064677954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.064734936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.064739943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.064800978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.065375090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.065393925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.065485001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.065490007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.065768003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.065788984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.065840006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.065851927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.065885067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.065902948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.066056013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.066071987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.066167116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.066171885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.066519976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.066539049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.066622019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.066622019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.066627026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.066880941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.066895008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.066967964 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.066973925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.067078114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.067078114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.094016075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.094038010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.094091892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.094104052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.094270945 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.094502926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.104697943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.104723930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.104816914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.104827881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.105001926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.105021000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.105093956 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.105103970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.105115891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.105173111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.105528116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.105546951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.105635881 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.105644941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.105736017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.105912924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.105930090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.105983973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.105992079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.106195927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.106214046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.106275082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.106281996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.106338024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.106338024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.107064009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107084036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107180119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.107184887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107270002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107290030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107290983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.107309103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107333899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.107357025 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.107631922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107650042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107733011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.107741117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107872963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107892036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.107974052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.107975006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.107980967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.108280897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.108721018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.108743906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.108839989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.108839989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.108855963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.109014034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.109256983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.109275103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.109409094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.109416008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.109472036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.109985113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.110007048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.110109091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.110114098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.110369921 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.136250973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.136276007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.136399031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.136399031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.136413097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.136475086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.136910915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.136928082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137001991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.137006998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137048006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137065887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137120962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.137125969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137146950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.137185097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.137192011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137204885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137319088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.137322903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137331963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137348890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137387037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.137391090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137439013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.137439013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.137532949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137547016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.137609005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.137614965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.138405085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.152466059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.152489901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.152578115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.152578115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.152597904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.152838945 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.156641006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.156665087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.156745911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.156763077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.156836987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.157510042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.157532930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.157577991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.157596111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.157638073 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.157644987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.158152103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.158174038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.158272982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.158272982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.158293962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.158426046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.158797026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.158813000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.158924103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.158931971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.159956932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.159977913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.160154104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.160154104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.160171032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.160280943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.161169052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.161200047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.161273003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.161278963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.161371946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.161371946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.161643982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.161659956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.161776066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.161782026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.162429094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.162689924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.162709951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.162789106 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.162794113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.163352966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.163373947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.163503885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.163503885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.163510084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.163746119 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.163759947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.163847923 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.163853884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.166222095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.167870045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.167895079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.167975903 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.167975903 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.167987108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.168137074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.168375015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.168395042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.168483019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.168488979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.168674946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.168906927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.168925047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.169039011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.169044971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.169284105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.169523954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.169542074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.169595957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.169600964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.169935942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.169955969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.170002937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.170008898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.170041084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.170160055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.170324087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.170340061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.170408964 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.170413017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.171442986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.172688007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.172707081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.172797918 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.172807932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.173093081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.173113108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.173187971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.173187971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.173198938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.173604012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.173652887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.173667908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.173736095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.173742056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.173913956 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.179909945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.179929018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.180008888 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.180021048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.180063963 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.180505037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.180520058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.180630922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.180639982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.181029081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.181047916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.181081057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.181088924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.181134939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.181134939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.181618929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.181634903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.181689978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.181700945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.182053089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.182070017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.182123899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.182131052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.182167053 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.182499886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.182513952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.182568073 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.182573080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.182627916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.182627916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.182753086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.182765961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.182934999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.182940960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.186439991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.189721107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.189738035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.189897060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.189907074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.190455914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.220083952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.220140934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.220299006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.220299006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.220308065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.220479965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.220716000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.220788956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.220817089 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.220820904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.220837116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.220861912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.220886946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.221259117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.221317053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.221363068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.221369982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.221385956 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.221776962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.221818924 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.221836090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.221868038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.221903086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.221903086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.221940041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.222115993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.222160101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.222198963 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.222203970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.222225904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.222255945 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.222592115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.222646952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.222716093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.222716093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.222722054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.222759962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.223184109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.223229885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.223277092 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.223282099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.223318100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.223335981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.223496914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.223542929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.223587990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.223592997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.223685980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.223685980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.223848104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.223895073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.223983049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.223983049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.223989010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.224067926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.224842072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.224888086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.225086927 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.225086927 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.225091934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.225177050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.226607084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.226658106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.226727009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.226731062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.226789951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.226789951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.226820946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.226875067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.226928949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.226928949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.226933956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.227135897 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.227149963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.227211952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.227335930 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.227335930 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.227341890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.227472067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.233170033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.233230114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.233279943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.233284950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.233371019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.233371019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.253927946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.253978014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.254123926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.254131079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.254338026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.254338026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.254594088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.254640102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.254663944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.254669905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.254704952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.254733086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.254962921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.255016088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.255083084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.255083084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.255089045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.255232096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.255424976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.255469084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.255505085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.255508900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.255532026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.255568027 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.255826950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.255872965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.255947113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.255947113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.255951881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.255970955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.256021976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.256025076 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.256025076 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.256056070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.256109953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.256109953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.271496058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.271554947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.271672010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.271677971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.271733046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.272097111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.272145987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.272186041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.272191048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.272212982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.272226095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.272866964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.272933006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.272972107 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.272975922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.272991896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.273061991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.273541927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.273586988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.273746014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.273746014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.273751020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.273869038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.273904085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.273948908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.274035931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.274035931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.274040937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.274148941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.274416924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.274461031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.274554014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.274554014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.274559021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.274612904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.274996042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.275043964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.275119066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.275119066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.275124073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.275182962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.275748968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.275799990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.275840044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.275845051 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.275856018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.275904894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.276452065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.276493073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.276539087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.276542902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.276599884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.276599884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.277091980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.277139902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.277178049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.277182102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.277199984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.277230024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.277303934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.277348995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.277415991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.277415991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.277420998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.277486086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.282356024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.282413960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.282588005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.282588005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.282596111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.282627106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.282675028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.282722950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.282722950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.282722950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.282730103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.282820940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.283080101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.283121109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.283163071 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.283168077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.283206940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.283225060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.284030914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.284081936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.284151077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.284151077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.284156084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.284188986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.284308910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.284358025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.284404039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.284409046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.284442902 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.284442902 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.284564972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.284605980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.284703016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.284703016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.284708023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.284781933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.286391973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.286443949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.286494017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.286499023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.286528111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.286550999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.286760092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.286787987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.286849022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.286853075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.286868095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.286894083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.286917925 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.286922932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.286969900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.286969900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.292357922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.292376995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.292475939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.292481899 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.292526007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.292733908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.294672966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.294692039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.294759035 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.294764996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.294939041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.294958115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.295005083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.295011044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.295037031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.295085907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.295432091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.295447111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.295552969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.295557022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.295692921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.295711994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.295758009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.295763016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.295808077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.295808077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.295962095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.295978069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.296037912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.296042919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.296323061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.296343088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.296389103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.296395063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.296428919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.296529055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.296613932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.296633005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.296710014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.296715021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.298393965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.309195995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.309258938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.309359074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.309362888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.309514046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.309514046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.334563017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.334618092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.334670067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.334675074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.334688902 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.334724903 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.335273981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.335338116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.335347891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.335376024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.335417032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.335479975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.335724115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.335767031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.335807085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.335812092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.335846901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.335927010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.335941076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.336002111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.336060047 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.336060047 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.336065054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.336174011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.336699009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.336750984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.336786985 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.336791039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.336826086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.336916924 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337007046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337054968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337097883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337101936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337116957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337227106 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337289095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337332964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337366104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337371111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337421894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337421894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337555885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337619066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337678909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337678909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337683916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337755919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337784052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337826014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337852001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337856054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.337902069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.337902069 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.338996887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.339046955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.339138985 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.339138985 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.339144945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.339185953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.339276075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.339349985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.339363098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.339376926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.339493990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.339493990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.340145111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.340188980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.340238094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.340243101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.340300083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.340300083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.340529919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.340579987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.340609074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.340614080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.340682030 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.340682030 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.340781927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.340822935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.340878010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.340878010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.340883017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.340925932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.367647886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.367708921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.367773056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.367779016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.367813110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.367865086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.367876053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.367904902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.367948055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.367957115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.368014097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.368014097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.368021011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.368149996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.368169069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.368208885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.368240118 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.368244886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.368299007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.368469000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.368513107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.368561983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.368567944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.368577957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.368727922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.368858099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.368899107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.368952990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.368952990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.368958950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.369015932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.369455099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.369494915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.369535923 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.369540930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.369678020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.370452881 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.374574900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.374631882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.374774933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.374774933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.374782085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.374969959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.386882067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.386903048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.386976957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.386982918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.387168884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.387320042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.387332916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.387439966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.387445927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.387500048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.388293982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.388307095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.388417006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.388422966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.388648033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.388668060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.388669968 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.388679028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.388700962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.388752937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.389194965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.389208078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.389329910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.389336109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.389431000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.390409946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.390422106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.390530109 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.390535116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.390888929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.390906096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.390986919 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.390993118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.391669989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.391680956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.391767979 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.391773939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.392239094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.392256021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.392414093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.392414093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.392420053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.392498016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.392746925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.392759085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.392826080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.392829895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.393071890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.393089056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.393152952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.393157959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.393182993 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.393209934 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.397800922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.397836924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.397922039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.397922039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.397928953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.398005962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.398355007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.398370981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.398463011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.398468971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399090052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399108887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399169922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399182081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.399182081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.399183035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399195910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399275064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.399614096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399629116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399715900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.399723053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399862051 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399883032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.399945021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.399945021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.399952888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.400233984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.400249004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.400537014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.400537968 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.400547981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.402210951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.402230024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.402343035 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.402352095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.402595043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.402626991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.402668953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.402676105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.402695894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.402831078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.402848959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.402889013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.402895927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.402930021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.410341024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.410365105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.410403013 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.410414934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.410445929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.410566092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.410588980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.410659075 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.410667896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.410676003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.411065102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411093950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411156893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.411156893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.411166906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411444902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411468983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411545992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411552906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.411552906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.411560059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411597013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411607027 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.411613941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411693096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.411693096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.411879063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411895037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.411959887 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.411967993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.412077904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.412100077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.412187099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.412194967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.412518978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.412533045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.412631989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.412631989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.412640095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.413408041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.425117970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.425141096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.425249100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.425261021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.425390959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.441907883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.441940069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.442020893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.442029953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.442087889 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.442087889 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.450975895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.451005936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.451088905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.451097965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.451216936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.451278925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.451302052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.451354027 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.451359987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.451508045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.451638937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.451672077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.451721907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.451729059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.451827049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.452157021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.452177048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.452255964 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.452274084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.452291012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.452404022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.452564001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.452579975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.452660084 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.452666044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.452709913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.452724934 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.452733994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.452752113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.452789068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.452879906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.452945948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.452975035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.453039885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.453047037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.453082085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.453135967 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.453185081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.453207016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.453262091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.453269005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.453311920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.453311920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.453509092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.453527927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.453624964 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.453632116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.454174042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.454328060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.454350948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.454422951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.454422951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.454431057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.454531908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.455643892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.455666065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.455758095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.455765009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.455775023 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.455954075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.455976963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.456027031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.456033945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.456041098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.456064939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.456083059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.456101894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.456108093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.456156969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.456156969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.456300020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.456317902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.456387997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.456393957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.456665993 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.482831955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.482857943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.483001947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.483012915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.483064890 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.483623028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.483644009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.483819008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.483828068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.483938932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.483962059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.483968973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.484006882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.484018087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.484061956 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.484061956 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.484358072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.484375954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.484445095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.484458923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.484510899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.484510899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.484745026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.484764099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.484846115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.484846115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.484853983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.485028982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.485053062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.485057116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.485069036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.485084057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.485126972 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.485384941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.485403061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.485503912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.485508919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.485574007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.498891115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.498913050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.499006033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.499017000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.499072075 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.503084898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.503103971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.503201962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.503213882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.504089117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.504101992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.504110098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.504127979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.504276991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.504276991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.504282951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.504452944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.504484892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.504501104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.504667997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.504667997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.504673958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.505230904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.505251884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.505314112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.505314112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.505321026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.505532026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.507396936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.507412910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.507472992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.507478952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.507781029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.507802963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.507864952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.507870913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.507893085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.507908106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.507946014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.507946014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.507953882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.507981062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.508066893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.508090973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.508172989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.508172989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.508179903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.508358002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.508373022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.508418083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.508418083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.508424044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.508896112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.508918047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.508961916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.508966923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.509008884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.509047031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.510559082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.510587931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.511068106 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.511074066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.511256933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.514302015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.514326096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.514457941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.514458895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.514467001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.514569044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.515244007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.515260935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.515305042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.515374899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.515386105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.515515089 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.515769958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.515788078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.515856981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.515856981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.515865088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.515959024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.516407013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.516428947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.516500950 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.516506910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.516541958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.516541958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.516696930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.516714096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.516798973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.516798973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.516807079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.516917944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.517097950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.517117977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.517163992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.517174959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.517215967 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.517215967 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.517786026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.517802954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.517895937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.517901897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.518323898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.518553019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.518572092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.518786907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.518795013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.518934011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.518970013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.518987894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.519043922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.519049883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.519133091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.519324064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.519352913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.519443989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.519450903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.519519091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.524761915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.524780035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.524895906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.524902105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.525017977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.527440071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.527456999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.527554035 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.527560949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.528049946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.528073072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.528094053 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.528105021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.528167009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.528167009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.528167009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.528645992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.528671026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.528752089 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.528758049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.528889894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.528930902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.528959036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.528997898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.529002905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.529170036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.529170036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.529207945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.529227972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.529356956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.529396057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.529436111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.529437065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.529443026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.529469967 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.533725977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.533761024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.533791065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.533798933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.533864975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.535882950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.535914898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.535955906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.535962105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.536004066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.545696020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.545722961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.545800924 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.545811892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.567581892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.567610025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.567693949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.567709923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.567760944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.568687916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.568708897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.568761110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.568768978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.568783998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.568964958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.568983078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569061995 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569061995 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569070101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569251060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569266081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569314003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569320917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569370985 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569386005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569403887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569479942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569479942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569488049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569538116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569552898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569610119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569617033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569699049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569716930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569746971 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569766045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569777012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569793940 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569808006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569864988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569864988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.569871902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569977045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.569997072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570065975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.570065975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.570072889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570125103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570154905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570194006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.570199966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570209026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.570226908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570244074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570321083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.570329905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570574045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570588112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570626020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.570633888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.570691109 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.587083101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.587100983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.587167978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.587189913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.587261915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.588416100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.588430882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.588582039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.588593960 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.589687109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.589720964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.589761019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.589770079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.589824915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.592408895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.592426062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.592572927 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.592582941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.599586964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.599606991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.599663973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.599672079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.599703074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.599800110 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.599817038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.599863052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.599877119 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.599914074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.600536108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.600555897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.600608110 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.600619078 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.600620985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.600631952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.600698948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.600698948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.613126040 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.613141060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.613240004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.613240004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.613254070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.613370895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.613389015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.613399029 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.613404989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.613437891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.613464117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.613498926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.613523006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.613523006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.613532066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.613543987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.613632917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.613632917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.618943930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.618977070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.619016886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.619024038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.619059086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.619059086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.619473934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.619491100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.619563103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.619570017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.619592905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.619621038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.620415926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.620431900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.620562077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.620568037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.620609999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.620629072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.620655060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.620655060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.620663881 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.620727062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.620727062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.621468067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.621488094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.621546030 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.621551991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.621567965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.621598005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.622306108 CET	49678	443	192.168.2.16	20.189.173.10
Oct 28, 2024 23:40:54.643644094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.643660069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.643721104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.643729925 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.643788099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.643788099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.643990040 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.644005060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.644100904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.644109011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.644171000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.646853924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.646872044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.646930933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.646946907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.647033930 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.647300005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.647327900 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.647357941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.647363901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.647403955 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.647456884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.647476912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.647535086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.647535086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.647542953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.647598982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.647742033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.647906065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.647919893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.647960901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.647969961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.647978067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.648036957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.648055077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.648071051 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.648152113 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.648159027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.648287058 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.668100119 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.668118954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.668220043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.668226957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.668287039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.668559074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.668576002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.668646097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.668653011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.668693066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.668910980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.668926001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.669059038 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.669066906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.669125080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.669877052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.669893026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.669970036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.669975996 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670074940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.670103073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670126915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670165062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.670171976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670196056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.670217037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.670346975 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670362949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670417070 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.670423985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670452118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670469999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670547962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.670547962 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.670559883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670711994 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.670831919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670846939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.670943975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.670952082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.671035051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.698863983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.698883057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.698981047 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.698992968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.699059010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.699667931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.699685097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.699763060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.699770927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.699827909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.700839043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.700855970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.700998068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.701005936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.701086998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.702614069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.702630997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.702716112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.702723980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.702785015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.703049898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.703067064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.703126907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.703133106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.703243017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.703715086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.703733921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.703793049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.703798056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.703838110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.703838110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.703903913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.703921080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.704091072 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.704106092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.704133034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.704150915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.704189062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.704195976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.704236031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.704236031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.724785089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.724812031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.724915028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.724926949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725013018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.725094080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725136042 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725181103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.725188017 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725198984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.725281000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.725414038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725465059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725481033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.725486994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725529909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.725529909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.725642920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725668907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725734949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.725734949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.725743055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725929022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725944996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.725951910 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725966930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.725989103 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.726052999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.726058006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.726151943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.726273060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.726308107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.726347923 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.726352930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.726371050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.726378918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.726398945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.726419926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.726424932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.726435900 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.726490974 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.726490974 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.754349947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.754383087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.754462957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.754475117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.754501104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.754540920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.754683971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.754703999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.754741907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.754748106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.754777908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.754803896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.755296946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.755322933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.755410910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.755419016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.755429983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.755477905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.756378889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.756405115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.756483078 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.756491899 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.756782055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.758198977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.758223057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.758310080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.758322954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.758429050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.758728981 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.758748055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.758804083 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.758811951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.758852959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.758863926 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.758869886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.758876085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.758913994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.758928061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.758934021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.758996010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.758996010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.759186029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.759202957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.759330988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.759339094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.759540081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.778918982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.778938055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.779035091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.779047012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.779109001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.780261993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.780277967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.780397892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.780411005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.780550957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.780551910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.780563116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.780579090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.780607939 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.780626059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.780669928 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.780792952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.781011105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.781028032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.781106949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.781106949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.781116009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.781212091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.781620026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.781636000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.781728983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.781738043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.781853914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.782032013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.782047033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.782140017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.782145977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.782232046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.782440901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.782457113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.782486916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.782495022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.782536030 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.782536030 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.782808065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.782824039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.782875061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.782882929 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.783193111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.809997082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.810014009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.810101032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.810115099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.810193062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.810230970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.810252905 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.810259104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.810283899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.810308933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.811028004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.811057091 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.811114073 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.811120033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.811150074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.811160088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.813184977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.813200951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.813287973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.813294888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.813352108 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.813839912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.813857079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.813976049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.813983917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.814110994 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.814313889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.814332008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.814419031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.814424992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.814455986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.814477921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.814537048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.814537048 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.814543962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.814619064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.814910889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.814927101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.815032005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.815037012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.815253019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.838388920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.838408947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.838455915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.838469028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.838480949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.838529110 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.838562012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.838710070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.838726997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.838777065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.838785887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.838813066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.838874102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.838892937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.838932991 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.838938951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.838994980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.839131117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839144945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839178085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.839195013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839240074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.839261055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839281082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839334965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.839344025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839360952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.839425087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839440107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839562893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.839562893 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.839570999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839592934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839617968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839643955 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.839649916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.839673996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.865089893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.865107059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.865187883 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.865195990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.866396904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.866415977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.866494894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.866494894 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.866503000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.866784096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.866802931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.866858959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.866864920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.866878986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.868828058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.868846893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.868901014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.868907928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.868918896 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.869513988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.869529963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.869622946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.869631052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.869919062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.869937897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.869976044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.869982004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.870050907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.870230913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.870246887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.870299101 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.870305061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.870321989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.870521069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.870541096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.870652914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.870660067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.890826941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.890846014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.890906096 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.890913010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.890950918 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.891066074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.891088009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.891109943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.891115904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.891194105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.891530037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.891546965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.891597033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.891602993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.892095089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.892115116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.892168045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.892173052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.892210960 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.892564058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.892579079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.892625093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.892632008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.892693996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.892914057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.892935038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.893013954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.893014908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.893014908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.893027067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.893058062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.893084049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.893090963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.893131018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.893131018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.893141031 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.893157959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.893215895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.893215895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.893223047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.893305063 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.893345118 CET	49673	443	192.168.2.16	204.79.197.203
Oct 28, 2024 23:40:54.920589924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.920614004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.920689106 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.920696020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.920757055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.920757055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.921860933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.921876907 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.921945095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.921951056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.922049999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.922804117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.922818899 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.922936916 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.922944069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.923011065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.924498081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.924514055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.924597979 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.924597979 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.924606085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.924670935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.924993038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.925026894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.925117016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.925117016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.925124884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.925317049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.925606012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.925621986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.925710917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.925718069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.925744057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.925765991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.925816059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.925816059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.925822973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.925895929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.945285082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.945305109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.945415020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.945415020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.945422888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.945502043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.946317911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.946335077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.946466923 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.946474075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.946527004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.946686983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.946702003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.946763992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.946779966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.946993113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.947014093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.947096109 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.947102070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.947211981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.947652102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.947668076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.947885036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.947894096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.948055983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.948297977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.948319912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.948404074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.948410988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.948510885 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.948559999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.948576927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.948635101 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.948642015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.948653936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.948729992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.948760033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.948776007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.948812008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.948817015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.948868990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.948868990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.975991964 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.976017952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.976104021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.976104021 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.976114035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.976357937 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.976896048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.976912022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.976979017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.976985931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.977054119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.977466106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.977484941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.977559090 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.977559090 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.977565050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.977653980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.978354931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.978375912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.978441954 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.978449106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.978517056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.978517056 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.980186939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.980211020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.980356932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.980365038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.980679989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.980997086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.981018066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.981194019 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.981200933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.981230974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.981251955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.981257915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.981275082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.981281996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.981323957 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.981513023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.981534958 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.981594086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.981601000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:54.981618881 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:54.981671095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.001290083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.001317024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.001370907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.001378059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.001420975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.001466990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.002012014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.002031088 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.002093077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.002098083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.002266884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.002404928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.002425909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.002506018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.002506018 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.002512932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.002784014 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.003062963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.003087997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.003154039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.003154039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.003154039 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.003166914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.003185987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.003241062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.003242016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.003257036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.003396988 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.003907919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.003926039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.004018068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.004023075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.004051924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.004074097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.004110098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.004116058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.004128933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.004160881 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.004407883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.004425049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.004477024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.004492998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.004537106 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.004537106 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.031622887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.031645060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.031718016 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.031730890 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.031888008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.031922102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.031940937 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.031994104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.032001019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.032200098 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.033349991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.033375025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.033446074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.033446074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.033469915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.033576012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.035067081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.035089016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.035152912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.035172939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.035268068 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.035837889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.035857916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.035990953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.036000967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.036051989 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.036726952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.036747932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.036859035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.036869049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.036869049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.036884069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.036945105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.036953926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.037040949 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.037056923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.037130117 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.037137032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.057044983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.057090998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.057123899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.057142019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.057229042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.057755947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.057775021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.057849884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.057849884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.057858944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.058465004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.058487892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.058554888 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.058562994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.058571100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.059678078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.059699059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.059794903 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.059803963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.061232090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.061271906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.061331987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.061331987 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.061340094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.061554909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.061570883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.061621904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.061629057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.061645985 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.062130928 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.062150955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.062191010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.062202930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.062227011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.062231064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.062247038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.062339067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.062355995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.087507010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.087532997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.087605953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.087620974 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.087687969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.088027954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.088044882 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.088144064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.088152885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.090029955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.090064049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.090188026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.090188026 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.090197086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.090732098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.090748072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.090818882 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.090826988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.091402054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.091423988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.091497898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.091507912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.091516972 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.092386961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.092403889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.092467070 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.092473984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.092488050 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.092597961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.092617989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.092689037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.092689037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.092696905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.092850924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.092865944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.092902899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.092909098 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.092932940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.112920046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.112947941 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.113019943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.113028049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.113044024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.113234997 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.113250971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.113305092 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.113312006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.113365889 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.114531994 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.114552021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.114639997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.114639997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.114649057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.115288019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.115303993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.115377903 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.115386963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.116763115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.116786957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.116866112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.116866112 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.116883993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.117347002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.117362976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.117418051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.117425919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.117445946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.117564917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.117585897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.117660999 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.117661953 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.117674112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.142843008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.142880917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.142920017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.142927885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.142955065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.142965078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.142985106 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.143027067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.143033028 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.143069983 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.143846989 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.143863916 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.143966913 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.143976927 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.145605087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.145623922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.145680904 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.145688057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.145720005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.146411896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.146429062 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.146527052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.146533012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.147062063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.147083998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.147125959 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.147133112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.147207975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.148360014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.148375034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.148447990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.148457050 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.148648024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.148658991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.148679018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.148787022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.148787022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.148796082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.148874044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.148906946 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.148978949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.148978949 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.148988008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.168320894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.168342113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.168416977 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.168437004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.168672085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.168685913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.168739080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.168747902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.170140982 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.170159101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.170229912 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.170243025 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.171350002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.171366930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.171427011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.171439886 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.171474934 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.172270060 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.172308922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.172399044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.172399044 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.172414064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.173321009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.173336029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.173423052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.173434973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.173568010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.173584938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.173613071 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.173620939 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.173691034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.198301077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.198314905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.198422909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.198422909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.198446035 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.198585987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.198601961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.198668003 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.198678970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.198698997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.199537039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.199564934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.199605942 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.199618101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.199662924 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.201246023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.201283932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.201342106 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.201342106 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.201354980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.201873064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.201888084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.201957941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.201967955 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.201987982 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.202521086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.202541113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.202605009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.202605009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.202619076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.203874111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.203888893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.203948975 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.203968048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.204180956 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.204200029 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.204250097 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.204258919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.204291105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.204741001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.204756021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.204890966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.204890966 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.204905033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.224534988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.224569082 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.224636078 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.224659920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.224669933 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.224829912 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.224843979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.224909067 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.224916935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.225821018 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.225841045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.225876093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.225883007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.225929976 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.226844072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.226860046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.226901054 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.226908922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.226958036 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.228280067 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.228307962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.228343010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.228349924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.228379965 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.228785992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.228801012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.228853941 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.228862047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.228893995 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.229456902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.229475021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.229552984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.229552984 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.229562044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.253788948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.253806114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.253910065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.253923893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.254070044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.254086971 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.254138947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.254146099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.254159927 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.256793022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.256808043 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.256912947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.256922007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.257020950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.257044077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.257078886 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.257085085 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.257158995 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.257401943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.257417917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.257548094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.257548094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.257560968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.258023024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.258043051 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.258167028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.258167028 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.258174896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.259433985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.259449959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.259510994 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.259519100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.259532928 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.259821892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.259855986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.259903908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.259903908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.259912968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.261404991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.261419058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.261544943 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.261553049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.280101061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.280119896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.280335903 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.280335903 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.280354977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.280471087 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.280486107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.280576944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.280576944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.280584097 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.281286001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.281328917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.281394005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.281394005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.281403065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.282191038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.282206059 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.282282114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.282291889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.284672022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.284691095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.284738064 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.284745932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.284759045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.284996986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.285012007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.285129070 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.285135984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.285800934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.285820007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.285904884 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.285912991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.309402943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.309417963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.309489012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.309514046 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.309544086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.309572935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.309600115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.309600115 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.309654951 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.311983109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.311999083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.312134981 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.312144041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.312272072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.312293053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.312329054 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.312335014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.312386990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.312386990 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.312860966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.312875986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.313030005 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.313043118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.313249111 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.313532114 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.313545942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.313612938 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.313618898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.313834906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.315107107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.315123081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.315198898 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.315207005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.315484047 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.315514088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.315520048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.315534115 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.315570116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.315570116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.315577984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.315619946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.315619946 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.333789110 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.333806038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.333906889 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.333924055 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.334383011 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.335532904 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.335550070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.335628033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.335634947 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.335931063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.335948944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.335954905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.335994005 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.336005926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.336023092 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.336030006 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.336044073 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.336112022 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.336746931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.336761951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.336863041 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.336870909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.337228060 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.338035107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.338049889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.338150978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.338157892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.338473082 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.340404987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.340420961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.340522051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.340522051 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.340531111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.340588093 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.340729952 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.340747118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.340820074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.340827942 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.341187000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.342245102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.342261076 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.342365980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.342372894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.342819929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.365001917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.365020990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.365087986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.365139961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.365236998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.365236998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.365236998 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.365246058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.367468119 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.367484093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.367609024 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.367619038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.368472099 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.368489027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.368571997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.368571997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.368581057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.368705034 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.368721962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.368803978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.368810892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.369152069 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.369213104 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.369266033 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.369275093 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.369283915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.370570898 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.370584965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.370707035 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.370716095 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.370935917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.370954037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.371062994 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.371071100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.389539003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.389555931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.389720917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.389729977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.391391993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.391412973 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.391573906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.391591072 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.391598940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.391598940 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.391608953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.391684055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.391684055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.393126965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.393146038 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.393224001 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.393230915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.393409967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.393446922 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.393470049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.393476963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.393578053 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.393578053 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.396112919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.396128893 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.396212101 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.396218061 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.396421909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.396440983 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.396543980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.396543980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.396553040 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.396816015 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.397777081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.397790909 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.397886992 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.397893906 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.398139954 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.420778036 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.420795918 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.420866013 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.420885086 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.420892954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.420931101 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.421031952 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.422975063 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.422991991 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.423150063 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.423156023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.423538923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.423561096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.423666000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.423666000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.423674107 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.423826933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.423841000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.423916101 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.423917055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.423924923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.424783945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.424803019 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.424848080 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.424865007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.424951077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.426152945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.426167965 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.426299095 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.426306009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.426747084 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.426772118 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.426806927 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.426814079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.426883936 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.444844007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.444861889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.444983006 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.444992065 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.445009947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.447370052 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.447390079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.447453022 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.447465897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.447479010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.447488070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.447536945 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.447596073 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.447961092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.447976112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.448077917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.448085070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.448179007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.448795080 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.448811054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.448895931 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.448904037 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.449090004 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.451307058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.451334953 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.451375008 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.451380014 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.451414108 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.451467037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.452615023 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.452631950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.452733994 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.452742100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.452990055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.453273058 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.453288078 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.453372955 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.453380108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.453476906 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.476160049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.476181984 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.476337910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.476344109 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.476468086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.476485968 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.476488113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.476499081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.476573944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.478909016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.478924990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.478991032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.478996992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.479011059 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.479185104 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.479300976 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.479321003 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.479371071 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.479377985 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.479458094 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.480155945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.480173111 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.480247974 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.480254889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.480400085 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.480671883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.480686903 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.480777979 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.480787039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.480866909 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.482027054 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.482044935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.482135057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.482141972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.482245922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.482498884 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.482513905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.482650042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.482650042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.482659101 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.482769012 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.500408888 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.500427008 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.500488997 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.500497103 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.500544071 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.502629995 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.502645969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.502752066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.502758980 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.502938986 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.502974033 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.503017902 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.503031969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.503037930 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.503082037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.503082037 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.503637075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.503653049 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.503739119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.503746986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.503815889 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.504384041 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.504400015 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.504507065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.504514933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.504590034 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.507597923 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.507615089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.507754087 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.507761002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.507848978 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.507885933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.507914066 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.507921934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.507992029 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.507992029 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.510220051 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.510251045 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.510334969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.510334969 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.510341883 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.510422945 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.531737089 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.531758070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.531826973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.531840086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.531894922 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.532618999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.532655954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.532713890 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.532725096 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.532736063 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.532773972 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.534008026 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.534044027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.534102917 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.534111977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.534122944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.534162045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.534878016 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.534894943 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.534979105 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.534992933 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.535129070 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.535590887 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.535609961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.535685062 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.535691977 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.535741091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.536902905 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.536920071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.537107944 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.537117004 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.537184000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.537386894 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.537401915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.537472963 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.537481070 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.537615061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.537873030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.537906885 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.537934065 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.537940979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.537971973 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.537998915 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.555871010 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.555887938 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.556006908 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.556027889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.556133032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.558342934 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.558358908 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.558434010 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.558451891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.558590889 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.558614969 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.558653116 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.558662891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.558792114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.558792114 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.559351921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.559367895 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.559504032 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.559519053 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.559591055 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.559978962 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.559994936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.560055017 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.560072899 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.560305119 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.563072920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.563091040 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.563333988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.563344002 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.563358068 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.563420057 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.563436031 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.565848112 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.565864086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.565937042 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.565948009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.587542057 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.587564945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.587636948 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.587647915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.587888956 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.588200092 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.588216066 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.588304996 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.588314056 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.589684963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.589705944 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.589745045 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.589754105 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.589802980 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.590876102 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.590889931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.590971947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.590971947 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.590981007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.591242075 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.591264963 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.591335058 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.591346979 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.592948914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.592962027 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.593051910 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.593060970 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.593277931 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.593313932 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.593349934 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.593364000 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.593388081 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.593590021 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.593602896 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.593699932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.593699932 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.593708992 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.611438990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.611464024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.611555099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.611562967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.611597061 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.613718987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.613734007 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.613936901 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.613945961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.614003897 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.614023924 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.614077091 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.614084959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.614095926 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.615221024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.615235090 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.615328074 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.615334988 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.615436077 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.615453959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.615710020 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.615720987 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.619344950 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.619362116 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.619473934 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.619483948 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.620024920 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.620043039 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.620114088 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.620121002 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.620438099 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.621007919 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.621026993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.621120930 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.621129990 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.642627954 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.642651081 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.642802000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.642817020 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.643893957 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.643908024 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.643971920 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.643984079 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.644117117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.644134998 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.644201040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.644201040 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.644210100 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.646342993 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.646359921 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.646450043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.646450043 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.646457911 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.646883011 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.646904945 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.646984100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.646984100 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.646991968 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.647272110 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.647286892 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.647337914 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.647350073 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.648757935 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.648778915 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.648865938 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.648865938 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.648874044 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.649377108 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.649390936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.649427891 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.649436951 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.649463892 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.650309086 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.650329113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.650387049 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.650393009 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.650425911 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.669286966 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.669302940 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.669435978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.669435978 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.669461012 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.669668913 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.669687986 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.669725895 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.669734001 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.669825077 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.670212030 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.670237064 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.670294046 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.670295000 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.670301914 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.671224117 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.671241999 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.671283007 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.671288967 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.671330929 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.672899961 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.672913074 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.673002958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.673002958 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.673012972 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.674318075 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.674938917 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.674956083 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.675036907 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.675048113 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.676373959 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.676393032 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.676461935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.676475048 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.676575899 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.698419094 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.698442936 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.698507071 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.698592901 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.698617935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.698617935 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.698739052 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.699445009 CET	49699	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:40:55.699462891 CET	443	49699	52.218.247.225	192.168.2.16
Oct 28, 2024 23:40:55.826405048 CET	49678	443	192.168.2.16	20.189.173.10
Oct 28, 2024 23:40:56.892003059 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:56.892025948 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:56.892122984 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:56.893081903 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:56.893094063 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:57.686928988 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:57.687032938 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:57.689491034 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:57.689498901 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:57.689752102 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:57.738282919 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:57.744721889 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:57.791332006 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.006973982 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.006997108 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.007005930 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.007014990 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.007051945 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.007112026 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:58.007128000 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.007147074 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.007158041 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:58.007184982 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:58.007190943 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.007200956 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:58.007236958 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:58.007868052 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.007924080 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.007977009 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:58.018189907 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:58.018209934 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.018219948 CET	49709	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:40:58.018224955 CET	443	49709	172.202.163.200	192.168.2.16
Oct 28, 2024 23:40:58.185059071 CET	49680	80	192.168.2.16	192.229.211.108
Oct 28, 2024 23:40:58.231339931 CET	49678	443	192.168.2.16	20.189.173.10
Oct 28, 2024 23:40:58.487324953 CET	49680	80	192.168.2.16	192.229.211.108
Oct 28, 2024 23:40:59.095300913 CET	49680	80	192.168.2.16	192.229.211.108
Oct 28, 2024 23:41:00.308300972 CET	49680	80	192.168.2.16	192.229.211.108
Oct 28, 2024 23:41:00.383265972 CET	443	49705	142.250.185.228	192.168.2.16
Oct 28, 2024 23:41:00.383333921 CET	443	49705	142.250.185.228	192.168.2.16
Oct 28, 2024 23:41:00.383786917 CET	49705	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:41:00.932157040 CET	49705	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:41:00.932238102 CET	443	49705	142.250.185.228	192.168.2.16
Oct 28, 2024 23:41:02.718377113 CET	49680	80	192.168.2.16	192.229.211.108
Oct 28, 2024 23:41:03.037471056 CET	49678	443	192.168.2.16	20.189.173.10
Oct 28, 2024 23:41:04.503325939 CET	49673	443	192.168.2.16	204.79.197.203
Oct 28, 2024 23:41:07.531379938 CET	49680	80	192.168.2.16	192.229.211.108
Oct 28, 2024 23:41:09.648169041 CET	443	49698	52.218.247.225	192.168.2.16
Oct 28, 2024 23:41:09.648250103 CET	443	49698	52.218.247.225	192.168.2.16
Oct 28, 2024 23:41:09.648324966 CET	49698	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:41:10.927900076 CET	49698	443	192.168.2.16	52.218.247.225
Oct 28, 2024 23:41:10.927933931 CET	443	49698	52.218.247.225	192.168.2.16
Oct 28, 2024 23:41:12.645361900 CET	49678	443	192.168.2.16	20.189.173.10
Oct 28, 2024 23:41:17.149346113 CET	49680	80	192.168.2.16	192.229.211.108
Oct 28, 2024 23:41:34.444897890 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:34.444956064 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:34.445050955 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:34.445394993 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:34.445405960 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.206576109 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.206700087 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:35.208054066 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:35.208065033 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.208285093 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.209449053 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:35.255331039 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.461926937 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.461955070 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.461971998 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.462085009 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:35.462101936 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.462145090 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:35.579447031 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.579499960 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.579559088 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:35.579574108 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.579598904 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:35.579668999 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:35.579679012 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.579689980 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:35.579844952 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.579876900 CET	443	49710	172.202.163.200	192.168.2.16
Oct 28, 2024 23:41:35.579916954 CET	49710	443	192.168.2.16	172.202.163.200
Oct 28, 2024 23:41:49.563613892 CET	49712	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:41:49.563704014 CET	443	49712	142.250.185.228	192.168.2.16
Oct 28, 2024 23:41:49.563822985 CET	49712	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:41:49.564037085 CET	49712	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:41:49.564066887 CET	443	49712	142.250.185.228	192.168.2.16
Oct 28, 2024 23:41:50.436201096 CET	443	49712	142.250.185.228	192.168.2.16
Oct 28, 2024 23:41:50.436697006 CET	49712	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:41:50.436734915 CET	443	49712	142.250.185.228	192.168.2.16
Oct 28, 2024 23:41:50.437200069 CET	443	49712	142.250.185.228	192.168.2.16
Oct 28, 2024 23:41:50.437592983 CET	49712	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:41:50.437674046 CET	443	49712	142.250.185.228	192.168.2.16
Oct 28, 2024 23:41:50.490442038 CET	49712	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:42:00.478178978 CET	443	49712	142.250.185.228	192.168.2.16
Oct 28, 2024 23:42:00.478260994 CET	443	49712	142.250.185.228	192.168.2.16
Oct 28, 2024 23:42:00.478475094 CET	49712	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:42:00.934026003 CET	49712	443	192.168.2.16	142.250.185.228
Oct 28, 2024 23:42:00.934057951 CET	443	49712	142.250.185.228	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 23:40:44.712910891 CET	53	53195	1.1.1.1	192.168.2.16
Oct 28, 2024 23:40:44.760848999 CET	53	54582	1.1.1.1	192.168.2.16
Oct 28, 2024 23:40:45.564563036 CET	58826	53	192.168.2.16	1.1.1.1
Oct 28, 2024 23:40:45.564785957 CET	59413	53	192.168.2.16	1.1.1.1
Oct 28, 2024 23:40:45.583977938 CET	53	58826	1.1.1.1	192.168.2.16
Oct 28, 2024 23:40:45.585141897 CET	53	59413	1.1.1.1	192.168.2.16
Oct 28, 2024 23:40:45.983149052 CET	53	53051	1.1.1.1	192.168.2.16
Oct 28, 2024 23:40:49.508780956 CET	65359	53	192.168.2.16	1.1.1.1
Oct 28, 2024 23:40:49.509048939 CET	62663	53	192.168.2.16	1.1.1.1
Oct 28, 2024 23:40:49.516449928 CET	53	65359	1.1.1.1	192.168.2.16
Oct 28, 2024 23:40:49.516562939 CET	53	62663	1.1.1.1	192.168.2.16
Oct 28, 2024 23:41:03.064357996 CET	53	52252	1.1.1.1	192.168.2.16
Oct 28, 2024 23:41:21.857384920 CET	53	56108	1.1.1.1	192.168.2.16
Oct 28, 2024 23:41:44.651643038 CET	53	64083	1.1.1.1	192.168.2.16
Oct 28, 2024 23:41:44.743819952 CET	53	65335	1.1.1.1	192.168.2.16
Oct 28, 2024 23:41:49.889097929 CET	138	138	192.168.2.16	192.168.2.255
Oct 28, 2024 23:42:13.536947012 CET	53	51968	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 23:40:45.564563036 CET	192.168.2.16	1.1.1.1	0xa044	Standard query (0)	on-combine-data.s3.us-west-2.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:45.564785957 CET	192.168.2.16	1.1.1.1	0x5796	Standard query (0)	on-combine-data.s3.us-west-2.amazonaws.com	65	IN (0x0001)	false
Oct 28, 2024 23:40:49.508780956 CET	192.168.2.16	1.1.1.1	0xe8b9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:49.509048939 CET	192.168.2.16	1.1.1.1	0x4104	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 23:40:45.583977938 CET	1.1.1.1	192.168.2.16	0xa044	No error (0)	on-combine-data.s3.us-west-2.amazonaws.com	s3-r-w.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 23:40:45.583977938 CET	1.1.1.1	192.168.2.16	0xa044	No error (0)	s3-r-w.us-west-2.amazonaws.com		52.218.247.225	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:45.583977938 CET	1.1.1.1	192.168.2.16	0xa044	No error (0)	s3-r-w.us-west-2.amazonaws.com		3.5.81.102	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:45.583977938 CET	1.1.1.1	192.168.2.16	0xa044	No error (0)	s3-r-w.us-west-2.amazonaws.com		52.92.209.34	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:45.583977938 CET	1.1.1.1	192.168.2.16	0xa044	No error (0)	s3-r-w.us-west-2.amazonaws.com		52.92.128.2	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:45.583977938 CET	1.1.1.1	192.168.2.16	0xa044	No error (0)	s3-r-w.us-west-2.amazonaws.com		3.5.83.195	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:45.583977938 CET	1.1.1.1	192.168.2.16	0xa044	No error (0)	s3-r-w.us-west-2.amazonaws.com		52.92.196.234	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:45.583977938 CET	1.1.1.1	192.168.2.16	0xa044	No error (0)	s3-r-w.us-west-2.amazonaws.com		3.5.84.200	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:45.583977938 CET	1.1.1.1	192.168.2.16	0xa044	No error (0)	s3-r-w.us-west-2.amazonaws.com		3.5.83.189	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:45.585141897 CET	1.1.1.1	192.168.2.16	0x5796	No error (0)	on-combine-data.s3.us-west-2.amazonaws.com	s3-r-w.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 23:40:49.516449928 CET	1.1.1.1	192.168.2.16	0xe8b9	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 28, 2024 23:40:49.516562939 CET	1.1.1.1	192.168.2.16	0x4104	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

on-combine-data.s3.us-west-2.amazonaws.com

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49699	52.218.247.225	443	6840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 22:40:46 UTC	762	OUT	GET /dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe HTTP/1.1 Host: on-combine-data.s3.us-west-2.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 22:40:46 UTC	435	IN	HTTP/1.1 200 OK x-amz-id-2: l+GOMyyfxCpfAaJWtqI0WD2qQuUuAjHhnKc1nrg8Og3YpanNLyDdtnlMMufOsSFO3kAfKeS4tXA= x-amz-request-id: 9HMQ8N5SCGWRD4DR Date: Mon, 28 Oct 2024 22:40:47 GMT Last-Modified: Mon, 28 Oct 2024 03:53:28 GMT ETag: "99b6c9e04e4464e8ef3eed27ed4088a5-2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/octet-stream Server: AmazonS3 Content-Length: 23300125 Connection: close
2024-10-28 22:40:46 UTC	8474	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ad 31 08 81 e9 50 66 d2 e9 50 66 d2 e9 50 66 d2 2a 5f 39 d2 eb 50 66 d2 e9 50 67 d2 4c 50 66 d2 2a 5f 3b d2 e6 50 66 d2 bd 73 56 d2 e3 50 66 d2 2e 56 60 d2 e8 50 66 d2 52 69 63 68 e9 50 66 d2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 1f 9b 4f 61 00 00 00 00 00 00 00 00 e0 00 0f 01 0b 01 06 00 00 68 00 00 00 2a 02 00 00 08 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1PfPfPf_9PfPgLPf_;PfsVPf.V`PfRichPfPELOah*
2024-10-28 22:40:46 UTC	16384	IN	Data Raw: 40 00 8f 28 40 00 c4 28 40 00 de 28 40 00 0b 29 40 00 50 29 40 00 5b 2a 40 00 eb 2a 40 00 59 2b 40 00 2a 2c 40 00 05 2c 40 00 3e 26 40 00 ec 26 40 00 e2 1a 40 00 e9 1a 40 00 f0 1a 40 00 f5 1a 40 00 05 1b 40 00 09 1b 40 00 0d 1b 40 00 16 1b 40 00 1f 1b 40 00 2c 1b 40 00 3c 1b 40 00 5a 1b 40 00 61 1b 40 00 68 1b 40 00 8b 44 24 04 8b 0d 54 ce 40 00 56 ff 34 81 6a 00 e8 0c 39 00 00 8b f0 56 e8 27 38 00 00 0f b7 16 5e c3 56 8b 74 24 08 85 f6 57 8b c6 7d 02 f7 d8 8b 15 54 ce 40 00 8b c8 83 e1 0f c1 f8 04 ff 34 8a c1 e0 0b 05 f8 a5 40 00 50 e8 d2 38 00 00 85 f6 8b f8 7d 06 57 e8 10 3b 00 00 8b c7 5f 5e c2 04 00 55 8b ec 8d 45 08 50 8b 45 08 0d 20 00 10 00 50 6a 22 e8 a9 ff ff ff 50 a1 54 ce 40 00 ff 70 04 e8 13 00 00 00 50 e8 c4 36 00 00 f7 d8 1b c0 f7 d0 23 45 Data Ascii: @(@(@(@)@P)@[@@Y+@*,@,@>&@&@@@@@@@@@@,@<@Z@a@h@D$T@V4j9V'8^Vt$W}T@4@P8}W;_^UEPE Pj"PT@pP6#E
2024-10-28 22:40:46 UTC	1024	IN	Data Raw: 90 8b 45 f4 ff 4d 94 0f b6 09 c1 e0 08 0b c1 ff 45 90 89 45 f4 8b 45 b8 ff 4d b8 85 c0 75 d5 8b 45 a0 8b 4d c8 23 45 e4 c7 85 7c ff ff ff 06 00 00 00 c1 e1 04 89 45 b4 03 c8 8b 45 fc 8d 34 48 e9 6c 06 00 00 33 d2 39 55 c0 75 6f 0f b6 45 a4 8b 75 a0 b1 08 2a 4d c4 23 75 e8 d3 e8 8b 4d c4 d3 e6 8b 4d fc 03 c6 8d 04 40 c1 e0 09 83 7d c8 04 8d 84 08 6c 0e 00 00 89 45 a8 7d 05 89 55 c8 eb 10 83 7d c8 0a 7d 06 83 6d c8 03 eb 04 83 6d c8 06 39 55 cc 74 1c 8b 45 ec 2b 45 d4 3b 45 8c 72 03 03 45 8c 8b 4d f8 33 db 43 8a 04 08 88 45 a5 eb 68 33 db 43 e9 cd 01 00 00 8b 45 fc 8b 4d c8 c7 45 cc 01 00 00 00 c7 85 7c ff ff ff 07 00 00 00 8d b4 48 80 01 00 00 e9 d3 05 00 00 83 7d 94 00 0f 84 67 07 00 00 8b 4d 90 8b 45 f4 c1 65 f0 08 0f b6 09 ff 4d 94 c1 e0 08 0b c1 ff 45 Data Ascii: EMEEEMuEM#E\|EE4Hl39UuoEu*M#uMM@}lE}U}}mm9UtE+E;ErEM3CEh3CEME\|H}gMEeME
2024-10-28 22:40:46 UTC	16384	IN	Data Raw: ff ff 83 7d c0 00 75 05 8b 45 d8 eb 36 8b 45 fc 8b 4d c8 c7 85 7c ff ff ff 0b 00 00 00 8d b4 48 c8 01 00 00 e9 88 02 00 00 83 7d c0 00 75 05 8b 45 dc eb 09 8b 4d dc 8b 45 e0 89 4d e0 8b 4d d8 89 4d dc 8b 4d d4 89 45 d4 89 4d d8 8b 45 fc c7 45 80 15 00 00 00 05 68 0a 00 00 89 45 a8 e9 d9 fe ff ff 33 c0 83 7d c8 07 0f 9d c0 48 24 fd 83 c0 0b 89 45 c8 e9 9a 01 00 00 8b 45 d0 83 f8 04 7c 03 6a 03 58 8b 4d fc c7 45 c0 06 00 00 00 c1 e0 07 c7 45 84 19 00 00 00 8d 84 08 60 03 00 00 89 45 a8 e9 ce 02 00 00 83 fb 04 7c 34 8b cb 8b c3 d1 f9 83 e0 01 49 0c 02 d3 e0 83 fb 0e 89 45 d4 7d 14 8b 55 fc 2b c3 89 4d c0 8d 84 42 5e 05 00 00 e9 81 00 00 00 33 db 83 c1 fc 89 4d b8 eb 33 89 5d d4 e9 28 01 00 00 83 7d 94 00 0f 84 98 03 00 00 8b 4d 90 8b 45 f4 c1 65 f0 08 0f b6 Data Ascii: }uE6EM\|H}uEMEMMMMEMEEhE3}H$EE\|jXMEE`E\|4IE}U+MB^3M3](}MEe
2024-10-28 22:40:46 UTC	1024	IN	Data Raw: 61 26 9b 0e b1 43 2e 49 a0 2b d0 34 13 c7 6d 82 33 13 06 8b 5b 99 68 21 27 fe fa 97 88 19 b2 bf c5 cd 5b 16 30 c5 fb 77 a9 05 5f 1e 2e 1d fd 60 c5 57 50 b9 c9 4d a1 25 3f 28 a6 45 61 c3 69 1e d0 55 f2 1f 70 eb f5 de 5d 74 1f 65 d9 ba d3 4a 87 60 16 e8 fb db b4 b7 1f 3b 33 00 81 bb 5d e6 0b a2 1f 4f 06 27 31 71 60 b6 48 e5 e5 51 13 f7 f4 18 6c 79 89 e9 c7 1a 27 2c 30 fb 40 d8 4c cf 18 4b eb 54 b6 19 3d 94 17 42 ae 14 11 a1 0b 50 7e 97 91 b2 00 d3 fa fb 3f 84 6c d3 a4 2e 67 66 63 c0 9e 92 49 f2 e6 eb e2 83 d4 db b5 ad 43 26 c4 3c 0b e3 7e fa 63 a6 16 c8 8c 9d 42 79 c6 5a 5e 65 76 4d 76 2a bd 2f 33 c8 63 42 ee 00 fa 59 d2 67 a3 43 8b 00 06 85 2c 53 87 93 70 65 76 ec 77 8e 5b 5b 27 17 6c 14 ca 7e ea 4e 4a 62 a6 ea d1 af 04 e8 37 fd 34 35 c8 68 fe d5 22 f0 50 Data Ascii: a&C.I+4m3[h!'[0w_.`WPM%?(EaiUp]teJ`;3]O'1q`HQly',0@LKT=BP~?l.gfcIC&<~cByZ^evMv*/3cBYgC,Spevw[['l~NJb745h"P
2024-10-28 22:40:46 UTC	16384	IN	Data Raw: fa 6f d4 d6 36 fb 6c 29 ec 52 a6 f4 8e bf ca c0 9c d4 c6 c4 c5 c4 5a 5f 7e b9 56 14 5c 24 92 e5 9c a1 82 66 a1 62 a0 c7 c4 a7 ff db d8 86 7b 4f 53 10 c3 75 ac 08 fb 12 fc 96 10 30 19 bc 25 46 58 63 3f ba 44 63 da 61 3c 2d 16 83 b4 cc 37 23 39 97 5a 9d 7e 2e ce ea f8 1c e6 76 af 87 44 6f 97 18 5e d7 65 62 6a e3 37 2b 67 e2 dc fc 23 08 d5 ea cd 1a e4 c6 59 ef 2f b3 08 2d a1 61 ff d2 e3 27 b9 b9 44 46 9a e2 ff 63 0e 71 eb ca 55 76 90 43 fe c1 8a 6d df 69 e1 f3 72 ea e8 a7 c8 f0 6c 32 a9 73 90 3c de 9a c6 68 0f 57 6a ed 14 19 16 2c 0b 86 b6 2f 09 26 24 fd 60 8b c6 92 bc 69 e7 e8 3d ec 74 22 8b 1f 83 3d 8b 74 1b 3e 79 24 a3 a7 65 78 31 36 b3 c9 c8 a5 1f 28 23 b8 7f dd 89 ed 8e b2 27 94 2d bd 99 6e 88 d5 d5 ae 31 55 c4 45 8b 10 d1 93 6d 57 f4 5a 09 e4 b6 3b ca Data Ascii: o6l)RZ_~V\$fb{OSu0%FXc?Dca<-7#9Z~.vDo^ebj7+g#Y/-a'DFcqUvCmirl2s<hWj,/&$`i=t"=t>y$ex16(#'-n1UEmWZ;
2024-10-28 22:40:46 UTC	1024	IN	Data Raw: ea af 8d 6b 09 65 d3 ac 9d 20 23 13 be 73 85 4e cb e8 cd 67 ca cd 0d 60 fe bb 98 26 3f da 35 2d 1d 3a 75 be 4e 1f 6d 35 7c 49 e1 10 a3 ce 22 b7 91 8d 74 b4 a8 1f 9b 93 9c e0 0b 61 8a 26 a9 71 c1 b7 8c 28 b1 5a 86 ce 88 de 9a 8f 2a 25 a5 14 0b 37 58 83 e8 b4 65 8e be 51 5f b2 03 5c ee 96 8b 93 e1 4a 40 49 d2 06 61 6f a2 98 1f a8 e3 c1 5d 0c 15 21 c7 f7 eb 87 67 53 c7 29 0f 1a 63 46 c8 12 d8 45 44 58 13 1f 65 d4 e1 d3 bb f9 32 15 8c 7d bb 90 fb 19 d8 83 2a bc 41 45 0e 6c f0 98 12 d9 be 5e 14 e7 d9 77 09 16 cf 87 fe f2 cb d2 00 95 35 32 b9 eb 5f 85 7a cd 4a 1f 46 61 cf d1 7a af 30 32 39 c2 c7 ad 94 9a fb fb 92 39 d7 b7 a4 46 c0 b5 58 cc 10 ee cc ff 0e 72 db 30 60 46 b7 7c bf d8 cf 64 86 a5 8e 8d 73 c4 4f 92 ef 5b 7b 63 77 36 14 be 6c 94 f1 11 1c ea 80 89 d8 Data Ascii: ke #sNg`&?5-:uNm5\|I"ta&q(Z%7XeQ_\J@Iao]!gS)cFEDXe2}AEl^w52_zJFaz0299FXr0`F\|dsO[{cw6l
2024-10-28 22:40:46 UTC	16384	IN	Data Raw: 64 26 c4 6b 17 c9 38 96 ce 21 5c af f6 5b 9b d6 02 09 16 57 64 af f9 70 3d 44 21 61 f9 2e ae c7 cb d9 78 41 e9 64 a7 ff 50 c0 5f f5 2c f4 d7 b6 37 62 64 fe 56 e2 1c be fb 3f a5 87 5e aa 88 0c 4b 42 15 94 6d 6e f1 58 57 a6 62 30 ba a8 13 b9 8e 19 09 3f 13 e6 a9 b6 00 a1 91 76 dd d6 2c 1d 04 c8 3d 1f c9 f0 f9 fb 8a 92 20 f7 94 5f 67 72 58 4a 81 41 a1 35 3d 97 59 1b d9 f4 84 51 57 7e c5 dd 59 ac 71 86 ce 4d 4b 90 fe 04 82 b9 99 ac 4c ee 6c 05 53 20 74 de b8 7c 47 7f 66 63 13 01 9e d4 e1 28 cc 3f 70 17 04 16 72 a2 e6 af 45 16 06 b7 08 af 77 4b d0 1a 9d 59 c6 d2 35 e5 3d 68 48 e2 16 b4 f9 6f 88 2b 97 b5 24 f1 4a 3b c9 0e 12 4a cb e1 dd 61 04 fc c5 bc 61 c8 32 cd 0b 36 c3 b6 5e 92 8b ab 65 ab 50 2e 33 ab a7 24 0c 65 62 07 73 c6 00 1e 0e e6 be ff f4 8c 34 bf 75 Data Ascii: d&k8!\[Wdp=D!a.xAdP_,7bdV?^KBmnXWb0?v,= _grXJA5=YQW~YqMKLlS t\|Gfc(?prEwKY5=hHo+$J;Jaa26^eP.3$ebs4u
2024-10-28 22:40:46 UTC	1024	IN	Data Raw: 87 35 7a b6 68 8e b5 20 23 f7 1e 88 fb 20 c3 b9 55 91 26 fb 08 10 a7 4d ec 45 e8 73 c9 05 93 d1 48 ab 18 45 50 55 50 4d 69 d3 cc 56 14 78 ae 3e e0 f4 df 93 6a f8 77 c7 02 a2 50 61 64 44 31 2f 82 b2 a4 b9 c4 33 9b c6 e7 ed f5 88 bc 1a 0d 3c 13 f6 e2 7b 2e 6e bd c6 b0 25 b4 af 09 71 5f cd 20 02 6c b3 92 49 eb 53 fb dd 7f 24 11 fb b7 50 c6 65 a2 90 7b fe 50 b9 24 94 e6 6b 8e df d0 e3 70 e4 6a d0 fa 27 c9 c9 69 78 98 e9 9f ea 8f 27 74 b4 97 6f ec 25 d2 2c 88 ed b1 3c 1a 96 0e 35 ed b2 3f da 7e d1 80 1a b4 25 88 42 8e 4e 4e a0 16 52 2b 63 0b dc fb bf 14 4f f8 a4 ca 02 ba b0 ef 11 a2 33 38 45 5a 87 8b 40 b2 4e 57 27 02 f6 58 b4 b0 5d 0b 4b 74 7d 0f 62 f4 60 fd 5f 28 7a 00 5a cf 0d 80 57 3e 15 d6 32 7a 5e 63 89 f3 48 ee 21 15 7f e4 50 1e d3 5f 8e 8c df 85 ef 61 Data Ascii: 5zh # U&MEsHEPUPMiVx>jwPadD1/3<{.n%q_ lIS$Pe{P$kpj'ix'to%,<5?~%BNNR+cO38EZ@NW'X]Kt}b`_(zZW>2z^cH!P_a
2024-10-28 22:40:46 UTC	16384	IN	Data Raw: ed 6f a9 a8 eb 55 b8 74 44 8c 44 c2 78 15 c4 45 c3 6b 32 3e f3 78 f0 9e 26 91 11 43 fd af f2 14 f9 82 55 76 6f 21 94 a2 4d c7 18 12 ac 38 17 fb 8c 64 8b 1e 69 38 89 a4 bb 03 99 3f f8 db 6c ca ef 99 50 60 d4 ae 35 0b 40 31 f7 f9 8b 77 25 e8 40 a9 7a 29 82 cf 78 61 6b b3 2c 8c 8a 88 ef 7a 3b ef 65 69 4c 42 7d 23 c4 fb 49 43 1d a3 ea 30 c2 43 7a c4 13 ed bd 36 cb 50 56 b2 7b 7b fd e8 76 fc 3d e3 c7 3c a5 44 74 8e 10 e7 32 64 aa 0c 1d 92 f4 7a b4 0e 10 bf ec e7 84 1c 4f 45 c3 72 bb 05 8f 71 bc 32 f1 9a 08 5c eb f0 c1 2c bd eb 36 ba 03 c4 0a 76 ee 78 dd f2 86 5a 26 b4 74 72 26 cc ac 60 1a 4d b3 63 a7 d7 93 aa 36 31 a7 e6 07 8b 8e d3 5c 93 80 a1 01 e7 1d 37 a6 96 56 bf ec 76 90 8a a2 af 3b cc e1 18 96 15 79 af 12 d6 e8 9c 11 03 88 b3 98 0c 5e 0d a7 f8 17 3b 4c Data Ascii: oUtDDxEk2>x&CUvo!M8di8?lP`5@1w%@z)xak,z;eiLB}#IC0Cz6PV{{v=<Dt2dzOErq2\,6vxZ&tr&`Mc61\7Vv;y^;L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49707	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 22:40:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 22:40:52 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=137636 Date: Mon, 28 Oct 2024 22:40:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49708	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 22:40:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 22:40:54 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=137689 Date: Mon, 28 Oct 2024 22:40:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-28 22:40:54 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49709	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 22:40:57 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KZdzvYaHPw644zO&MD=zyh75GoL HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-28 22:40:58 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 008af3e5-9b7c-4647-bcd5-c382cce620cc MS-RequestId: 44aa893e-b03c-46b4-82ff-f469758107cf MS-CV: a5zGmTZC+UCh3Wp5.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 28 Oct 2024 22:40:57 GMT Connection: close Content-Length: 24490
2024-10-28 22:40:58 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-28 22:40:58 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49710	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 22:41:35 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KZdzvYaHPw644zO&MD=zyh75GoL HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-28 22:41:35 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: b11e6e0b-71ca-416e-9ae9-a8ef20f3d969 MS-RequestId: a549b0f9-6548-46a4-920b-3a855691b5e2 MS-CV: lCopNKN8n0CfR1Er.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 28 Oct 2024 22:41:35 GMT Connection: close Content-Length: 30005
2024-10-28 22:41:35 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-28 22:41:35 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Target ID:	0
Start time:	18:40:43
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	18:40:43
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1936,i,14282950788006197663,4562122908551355024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:40:44
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	18:40:46
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3140 --field-trial-handle=1936,i,14282950788006197663,4562122908551355024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	18:41:05
Start date:	28/10/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Imagebase:	0x7ff6a3330000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	18:41:08
Start date:	28/10/2024
Path:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe"
Imagebase:	0x400000
File size:	23'300'125 bytes
MD5 hash:	29043DC66D7FBA46B72777D0608BDF71
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Analysis Process: NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exePID: 7712, Parent PID: 4380

General

Target ID:	17
Start time:	18:41:08
Start date:	28/10/2024
Path:	C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Downloads\NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe"
Imagebase:	0x400000
File size:	23'300'125 bytes
MD5 hash:	29043DC66D7FBA46B72777D0608BDF71
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	18:41:14
Start date:	28/10/2024
Path:	C:\Windows\System32\bcdedit.exe
Wow64 process (32bit):	false
Commandline:	"bcdedit" /set {current} bootstatuspolicy ignoreallfailures
Imagebase:	0x7ff7090c0000
File size:	491'864 bytes
MD5 hash:	74F7B84B0A547592CA63A00A8C4AD583
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	18:41:14
Start date:	28/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	18:41:14
Start date:	28/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	TaskKill /IM Watchdog.exe /F
Imagebase:	0xc90000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	18:41:14
Start date:	28/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	18:41:15
Start date:	28/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	TaskKill /IM RestartApp.exe /F
Imagebase:	0xc90000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	18:41:15
Start date:	28/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	18:41:15
Start date:	28/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	TaskKill /IM NTAS 3000X /F
Imagebase:	0xc90000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	18:41:15
Start date:	28/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	18:41:15
Start date:	28/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	TaskKill /IM ReadWeight.exe /F
Imagebase:	0xc90000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	18:41:15
Start date:	28/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	18:41:25
Start date:	28/10/2024
Path:	C:\Windows\System32\LogonUI.exe
Wow64 process (32bit):	false
Commandline:	"LogonUI.exe" /flags:0x4 /state0:0xa3ff7055 /state1:0x41c64e6d
Imagebase:	0x7ff6d8150000
File size:	13'824 bytes
MD5 hash:	893144FE49AA16124B5BD3034E79BBC6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	32
Start time:	18:42:26
Start date:	28/10/2024
Path:	C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
Imagebase:	0x7ff69fe00000
File size:	3'596'648 bytes
MD5 hash:	DD4966999D7DB48046CE6D12AF1F70F3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	23.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	72.5%
Total number of Nodes:	80
Total number of Limit Nodes:	7

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 100010A5 Relevance: 54.5, APIs: 25, Strings: 6, Instructions: 239
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetVersionExA.KERNEL32(?), ref: 100010C7

Strings

NtQuerySystemInformation, xrefs: 10001110
KERNEL32.DLL, xrefs: 1000121A
Process32First, xrefs: 10001240
NTDLL.DLL, xrefs: 100010FC
Process32Next, xrefs: 1000124A
CreateToolhelp32Snapshot, xrefs: 10001238

Memory Dump Source

Source File: 00000011.00000002.1599260020.0000000010001000.00000020.00000001.01000000.0000000B.sdmp, Offset: 10000000, based on PE: true

Associated: 00000011.00000002.1599239489.0000000010000000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000011.00000002.1599280910.0000000010002000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000011.00000002.1599310406.0000000010004000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_10000000_NTAS_MS3000X_Installer_v2.jbxd

Similarity

API ID: Version
String ID: CreateToolhelp32Snapshot$KERNEL32.DLL$NTDLL.DLL$NtQuerySystemInformation$Process32First$Process32Next
API String ID: 1889659487-877962304
Opcode ID: d9e4365fb8c8afe39d9e3d6d8414d2dd9f7e6cae65c3221ae497c8af5b502d96
Instruction ID: 10bbd09312e38b93a991429e5430fe91245b4c7dfcd1cbc2fd3fd18c9eb89367
Opcode Fuzzy Hash: d9e4365fb8c8afe39d9e3d6d8414d2dd9f7e6cae65c3221ae497c8af5b502d96
Instruction Fuzzy Hash: 77815871A00369EBFB21DF658C88BDE7BAAEF043C1F21412AFA18D2159D730C945DB90

Function 10001360 Relevance: 2.5, APIs: 2, Instructions: 24
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrcpynA.KERNEL32(?,10003004,?,10003000,1000142B,10003000,00000400), ref: 1000137C
GlobalFree.KERNELBASE(10003000), ref: 1000138D

Memory Dump Source

Source File: 00000011.00000002.1599260020.0000000010001000.00000020.00000001.01000000.0000000B.sdmp, Offset: 10000000, based on PE: true

Associated: 00000011.00000002.1599239489.0000000010000000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000011.00000002.1599280910.0000000010002000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000011.00000002.1599310406.0000000010004000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_10000000_NTAS_MS3000X_Installer_v2.jbxd

Similarity

API ID: FreeGloballstrcpyn
String ID:
API String ID: 1459762280-0
Opcode ID: 12a143fbfd2b4ebc945cd466330a304eae54d9b6740908687ecff9ceb9476935
Instruction ID: 150817daf3d43e49871c9c34078da26298550a9cf614909a23e8e583a6cbbd8e
Opcode Fuzzy Hash: 12a143fbfd2b4ebc945cd466330a304eae54d9b6740908687ecff9ceb9476935
Instruction Fuzzy Hash: 58E01A316262209FE742DF64EC849A67BECFF497987014858F581CB228D330ED01CB80

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.This may deny access to available backups and recovery options.
Tactics:	Impact
Data Sources:	Cloud Storage: Cloud Storage Deletion, Command: Command Execution, File: File Deletion, Process: Process Creation, Service: Service Metadata, Snapshot: Snapshot Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\NIR Technology Analysis Software\NTAS Help.chm

C:\Program Files (x86)\NIR Technology Analysis Software\NTAS MS3000X.exe

C:\Program Files (x86)\NIR Technology Analysis Software\Watchdog.exe

C:\Program Files (x86)\NIR Technology Analysis Software\uninstall.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NIR Technology Analysis Software\NTAS Help.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NIR Technology Analysis Software\NTAS MS3000X.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NIR Technology Analysis Software\Uninstall.lnk

C:\ProgramData\Microsoft\Windows\SystemData\S-1-5-21-2246122658-3693405117-2476756634-1003\ReadOnly\LockScreen_W\LockScreen___1280_1024_notdimmed.jpg (copy)

C:\ProgramData\Microsoft\Windows\SystemData\S-1-5-21-2246122658-3693405117-2476756634-1003\ReadOnly\LockScreen_W\~ockScreen___1280_1024_notdimmed.tmp

C:\Users\Public\Desktop\NTAS MS3000X.lnk

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\InstallOptions.dll

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\System.dll

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\UserInfo.dll

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\ioSpecial.ini

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\modern-wizard.bmp

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\nsExec.dll

C:\Users\user\AppData\Local\Temp\nsl5413.tmp\nsProcess.dll

Windows Analysis Report
https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe